3com Switch 8800 Firewall Module 3C17546 Datenbogen

INTEGRATED SECURITY
Enterprise network infrastructure is evolving dramatically from the core
to the edge of the network, with greater demands being placed on the
entire network system to deliver comprehensive security for network
access control and protection of corporate resources.

The Switch 8800 Firewall Module helps companies achieve superior
protection with seamless integration into the core. The module includes
a number of technologies that allow it to protect both the exterior and
interior of the network:

Application Specific Packet filter (ASPF) technology aims at packets 
at the application layer and works with ordinary static firewalls to
implement security strategies for the internal network. ASPF achieves
packet filtering in conjunction with the Access Control Lists (ACL).
Its stateful detection technology enables the Firewall Module to 
monitor the connection process and detect harmful commands. 

Attack defending technology detects multiple types of network attacks
and takes measures to prevent the internal network from disruption. 

Protection against Address Resolution Protocol (ARP) attacks maintains
the integrity of addresses in the internal network.

Network Address Translation (NAT) and Network Address Port
Translation (NAPT) enable internal hosts to access the external 
network resources with their privacy protected.

The Firewall Module also provides a number of real-time network
monitoring methods that help administrators with security management.
These include automatic network attack alerts, and immediate notifica-
tions about unusual traffic streams generated by attacks and worm
viruses. In addition, the module enables administrators to analyze and
manage log information to detect security leaks, attack types and
ongoing intrusions.

RESILIENT ARCHITECTURE FOR BUSINESS CONTINUITY
The Firewall Module takes advantage of the built-in redundancy and
innate mission-critical capabilities available in the Switch 8800 Family.
All critical system components in the Switch 8800 Family are redundant
and hot-swappable, minimizing any impact to the enterprise in the event
a single component should fail.

Each Switch 8800 chassis model supports the option for dual switch
fabrics providing high resiliency and rapid failover to deliver the high-
est possible availability of network resources. With dual switch fabrics
installed, both fabrics are active and load-sharing, ensuring resiliency
as well as doubling effective system performance. 

Using Virtual Router Redundancy Protocol (VRRP), companies can 
utilize two Firewall Modules in the same system or in separate systems,
enabling an active with hot stand-by deployment (with preempt and
non-preempt mode capabilities) to be established for mission critical
environments. In the event the primary Firewall Module fails or is
unavailable, the secondary module automatically and immediately
becomes the primary. This enables business continuity under even 
the most serious failure circumstances.

INTEGRATED DESIGN
Integrating the firewall within the chassis switch decreases the need
for additional external appliances in the core. As a result, fewer
resources are required to manage, service and support the multiple net-
work elements that are provided by various suppliers. The integrated
design also cuts down on rack space requirements, power provisioning
and cable complexity.

3COM

®

SWITCH 8800 FIREWALL MODULE

2