HP JG372A Scheda Tecnica
3
Data sheet | HP 10500/11900/7500 20Gbps
VPN Firewall Module
VPN Firewall Module
•
Remote Network Monitoring (RMON): Uses standard SNMP to monitor essential network
functions; supports events, alarm, history, and statistics group plus a private alarm
extension group.
functions; supports events, alarm, history, and statistics group plus a private alarm
extension group.
•
FTP, TFTP, and SFTP support: Offers different mechanisms for configuration updates; FTP
allows bidirectional transfers over a TCP/IP network; trivial FTP (TFTP) is a simpler method using
UDP; secure File Transfer Protocol (SFTP) runs over an SSH tunnel to provide additional security.
allows bidirectional transfers over a TCP/IP network; trivial FTP (TFTP) is a simpler method using
UDP; secure File Transfer Protocol (SFTP) runs over an SSH tunnel to provide additional security.
Layer 3 routing
•
•
Static IP routing: Provides manually configured routing; includes equal-cost multi-path
routing (ECMP) capability.
routing (ECMP) capability.
•
Routing Information Protocol (RIP): Provides RIPv1 and RIPv2 routing.
•
Open shortest path first (OSPF): Includes host-based ECMP to provide link redundancy or
scalable bandwidth and not so stubby area (NSSA).
scalable bandwidth and not so stubby area (NSSA).
•
Border Gateway Protocol 4 (BGP-4): Delivers an implementation of the Exterior Gateway
Protocol (EGP) utilizing path vectors; uses TCP for enhanced reliability for the route discovery
process; reduces bandwidth consumption by advertising only incremental updates; supports
extensive policies for increased flexibility; scales to very large networks.
Protocol (EGP) utilizing path vectors; uses TCP for enhanced reliability for the route discovery
process; reduces bandwidth consumption by advertising only incremental updates; supports
extensive policies for increased flexibility; scales to very large networks.
•
Dual IP stack: Maintains separate stacks for IPv4 and IPv6 to ease the transition from an
IPv4-only network to an IPv6-only network design.
IPv4-only network to an IPv6-only network design.
•
Policy routing: Allows custom filters for increased performance and security; supports
access control lists (ACLs), IP prefix, autonomous system (AS) paths, community lists, and
aggregate policies.
access control lists (ACLs), IP prefix, autonomous system (AS) paths, community lists, and
aggregate policies.
•
Layer 3 IPv6 routing: Provides routing of IPv6 at media speed; supports static routes, RIPng,
OSPFv3, BGP+, policy route, and Protocol Independent Multicast-Sparse Mode or Dense Mode
(PIM-SM/DM).
OSPFv3, BGP+, policy route, and Protocol Independent Multicast-Sparse Mode or Dense Mode
(PIM-SM/DM).
Security
•
•
Defense against attacks: Firewall provides defense against various attacks, such as
denial-of-service (DoS) or distributed denial-of-service (DDoS), Address Resolution Protocol
(ARP) spoofing, large Internet Control Message Protocol (ICMP) packet, address or port
scanning, Tracert, IP packets with the Record Route option, and static and dynamic blacklists.
It also supports binding of medium access control (MAC) address and IP address, and supports
intelligent defense of worm viruses.
denial-of-service (DoS) or distributed denial-of-service (DDoS), Address Resolution Protocol
(ARP) spoofing, large Internet Control Message Protocol (ICMP) packet, address or port
scanning, Tracert, IP packets with the Record Route option, and static and dynamic blacklists.
It also supports binding of medium access control (MAC) address and IP address, and supports
intelligent defense of worm viruses.
•
Application layer content filtering: Firewall supports mail filtering, based on SMTP mail
address, titles, attachments, and contents; supports webpage filtering including HTTP URL
and content filtering.
address, titles, attachments, and contents; supports webpage filtering including HTTP URL
and content filtering.
•
Multiple security authentication services: Firewall supports Remote Authentication
Dial-In User Service protocol (RADIUS) and HW Terminal Access Controller Access Control
System (HWTACACS) authentications, supports certificate-based (X.509 format) public
key infrastructure (PKI)/certification authority (CA) authentication, supports user identity
management (different users own different rights to execute commands), and supports levels
of user views (users of different levels have different management rights).
Dial-In User Service protocol (RADIUS) and HW Terminal Access Controller Access Control
System (HWTACACS) authentications, supports certificate-based (X.509 format) public
key infrastructure (PKI)/certification authority (CA) authentication, supports user identity
management (different users own different rights to execute commands), and supports levels
of user views (users of different levels have different management rights).
•
Centralized management and auditing: Firewall provides logging, traffic statistics and
analysis, events monitoring and statistics, and mail notification of alarms.
analysis, events monitoring and statistics, and mail notification of alarms.
Warranty and support
•
•
Electronic and telephone support: Limited electronic and business-hours telephone support
is available from HP for the entire warranty period. To reach our support centers, refer to
hp.com/networking/contact-support. For details on the duration of support provided with
your product purchase, refer to hp.com/networking/warrantysummary.
is available from HP for the entire warranty period. To reach our support centers, refer to
hp.com/networking/contact-support. For details on the duration of support provided with
your product purchase, refer to hp.com/networking/warrantysummary.
•
Software releases: To find software for your product, refer to hp.com/networking/support.
For details on the software releases available with your product purchase, refer to
hp.com/networking/warrantysummary.
For details on the software releases available with your product purchase, refer to
hp.com/networking/warrantysummary.
•
1-year warranty: Advance hardware replacement with 10-calendar-day delivery (available in
most countries).
most countries).