Network
|
- Supports IPv4 / IPv6 Hybrid function
- Supports IPv4 / IPv6 static routing
- Supports RIP,OSPF,BGP+ dynamic routing
- Supports PIM-SM/SSM, RIPng and multi routing
- Supports Max VLAN (4K), 802.1Q, Ingress/Egress tagging, and Hybrid/Private VLAN
- Supports Port-based/Protocol/MAC/ Voice/Subnet VLAN
- Supports Spanning Tree - STP, RSTP, MSTP, PVST+, RPVST+
- Supports DHCP server/relay
- LACP - Link trunking / Load balancing
- Supports Trunk group(8), Members per group(8)
- Supports 1:1 , N:1 Port Mirroring
|
Firewall
|
- Stateful Inspection
- 1:1, 1:N, N:M NAT
- IP/Port/Protocol Filtering
- Supports Group and Schedule
- Policy-specific use frequency monitoring
- Supports Active-Active / Active-Standby
- Supports VRRP, auto link detection (LLCF)
- Supports policy and session synchronization
|
VPN
|
- Supports IKE V1/2
- Uses National Intelligence Service certified cryptographic module
- Supports DDNS inter-operation
- Multi-core IKE loadsharing
- Supports X-Auth
- Clustering type expansion
- Multi-core IPSec loadsharing
- Multi-line multi-tunnel
- Supports OSPF inter-operation (RRI)
- Supports DPD/NAT Traversal
- Supports packet compression
|
IPS
|
- Pattern-based filtering
- Flooding control
- Supports over 3,000 patterns
- Supports commercial patterns
- Supports PCRE pattern
- Supports user-defined patterns
|
Web-Filtering
|
- User-defined URL filter
- Korea Communications Standards Commission database filter
- Block page generation and redirection
- Supports HTTPS blocking
- Supports bypass access blocking
|
DDoS Probe
|
- Excessive traffic detection and ISP network inter-operation
- Supports departure/destination IP-specific excessive traffic detection/blocking
|
Anti Virus/spam
|
- Supports signature-based virus detection/blocking
- Supports signature-based virus detection/blocking
|
QoS
|
- Provides L2, L3 and L4 header-based classification function
- Ingress rate-limiting(per port/per flow)
- Engress rate-limiting(per port)
|
L2 Security
|
- One-to-One, Random, MAC flooding
- IP scanning, Port scanning
- IP, ARP, Neighbor spoofing
- 802.1X, MAC auth, Web auth, Fall-back certified
- Radius, TACACS+ inter-operation
- IP Source Guard, Dynamic ARP Inspection,
- Self loop detection/blocking function
- Unauthorized router detection function
- Terminal detection function
- DHCP, NetBIOS filtering
- System Access security
- DAD, Land, Teardrop attack
- TCP, ICMP fragments
- Abnormal L4 source port range, same port(sPort/dPort)
- Abnormal TCP flag, Smurf
- Join/Leave, IGMP v1/v2/v3
- Multicast group (1K)
|
Management
|
- Supports SNMP v1, v2, v3 / Syslog
- Supports Syslog
- Real-time monitoring of system traffic and sessions
- Supports log search
- Supports backup/restore settings
- Interface state, sFlow, routing, ARP, RMON
- Central management (with Neomanager)
|