Alcatel-Lucent VPN Firewall - Manual (Page 2)

To learn more about our comprehensive portfolio, contact your
Alcatel-Lucent sales representative or business partner.
You can also visit our web site at www.alcatel-lucent.com.
Alcatel, Lucent, Alcatel-Lucent, and the Alcatel-Lucent logo, are
trademarks of Alcatel-Lucent. VPN Firewall Brick is a registered
trademark of Alcatel-Lucent. All other trademarks are the
property of their respective owners. Alcatel-Lucent assumes no
responsibility for the accuracy of the information presented,
which is subject to change without notice.
Copyright © 2007
Alcatel-Lucent
All rights reserved
LVF v1 0107
Alcatel-Lucent VPN Firewall Portfolio At-A-Glance
• Simplified management – unique
client/server design; centralized
staging, real-time monitoring and
no-touch management of all VPN,
security and service-quality
assurance capabilities via scalable,
proven Alcatel-Lucent SMS
• Full-featured bridging – enables
stealthy, depth-of defense security
that conventional router-based
firewalls cannot match
• Advanced security safeguards –
denial-of-service attack protection;
high-speed content security;
premium authentication services;
with no occurrences of reported
advisories or vulnerabilities and no
backdoors.
• Uniquely granular bandwidth
management
– maximize service
quality via flexible class-based
queuing (CBQ) technology, server-
level and user-level limits and
guarantees
Active/Active
Management
VLAN 100
Extranet Server
VLAN 200
SAP Server
VLAN 300
Mail Server
VLAN 400
Public Server
VLAN 400
Public Server IP Network
Data Center
Services
Network-based
Services
Mobile/IPSec Client
Services Centralized Management
with Alcatel-Lucent SMS
CPE-based
Services
Existing
Router
Existing
Router
Existing
Router
VPN Firewall
Brick ® 50/150
VPN Firewall
Brick ® 350
VPN Firewall
Brick ® 700
Alcatel-Lucent
Security
Management
Server
Alcatel-Lucent
Security
Management
Server EMEA NOC
USA NOC
VPN Firewall
Brick ® 1100 VPN Firewall
Brick ® 1200 HS
IPSec
Client
The Alcatel-Lucent VPN Firewall
portfolio offers flexible deployment
options to suite service provider,
government, and enterprise network
strategies and users’ diverse needs.
• Carrier-grade reliability – native
high-availability architecture with
no single point of failure
• Rules Based Routing – Routes all
packets matching the rule to a
proxy server, router or other
device utilizing third party
software to perform content
filtering functions such as
command blocking, URL filtering
and virus scanning. Allows
transparent interaction with any
third party equipment.
• High-performance packet
processing
– supports up to 4
million simultaneous sessions,
1100 virtual firewalls, 20,000 VPN
tunnels
• Ultra-thin, highly secure operating
system
– virtually impenetrable to
hacker attacks; frees memory for
packet processing, policy
management
• Virtual firewall and VLAN support –
easily assign and enforce security
policies for diverse user groups
• Plug-and-play deployment –
implement secure mission critical
applications without costly, time-
intensive network reconfiguration
• Low ownership costs – no ongoing
feature-licensing expenses; easy
installation, management and
upgrades save IT staff time and
effort; high-performance, high
capacity features reduce the need
to purchase additional equipment
Key Features and Benefits