§Q°òºô¸ô(L7
Networks)¦¨¥ß©ó2002/9/31¡A¦¨û±M§ðºô¸ô²Ä¤C¼h(layer-7)§Þ³N¦h¦~¡A¬°¤@¦w¥þ¹h¹D¾¹´O¤J¦¡³nÅé¼t°Ó¡C©ó2003/2¸g¤Í°T¡B¦X¶Ô¡B¬ãµØ§ë¸ê¡A¥N¤u¦X¶Ô¡B¤Í°T¨¾¬r¨¾¤õÀ𲣫~¡C¦Û2004°_¡AL7
Networks¶}©l¸gÀç«~µP¡A¥H¹LÂoºô¸ô¤º®e¬°ºn¥Ø¼Ð¡C
¤@¯ë¤H¥´¶}¹q¸£¡A¤j³¡¤À§@ªººô¸ôÀ³¥Î´N¬OWeb¡BEmail¡BMSN¡A¤×¨ä¥H¥[±KªºWeb / Email / Skype³ÌÃø±±ºÞ¡A®e©ö¦¨¬°¥ø·~¡Bx¤è¡BÀËĵ½Õ¬d³æ¦ìµLªk¬d½rªººô¸ô¬y¶q¡C2004¦~¥þ²y¨Ï¥ÎMSN¡BYahoo!¡BICQ¡BQQ¡BSkypeµ¥§Y®É³q°T¤H¤f¼Æ¬°1.3»õ¤H¡A¹wp2007¦~·|¼W¥[¦Ü2.5»õ¤H¡CY¨S¦³±Ä¨ú¨¬°÷ªº¦w¥þ±¹¬I¡A³z¹L§Y®É³q°T¶Ç¼½ªº¤j¶q¯f¬r¡BįÂΡB¶¡¿Ò¥ó¡B²V¦X§ðÀ»³£¥i¯à¦M®`ºô¸ô¦w¥þ¡A¥ø·~/x¤èn¥I¥Xªº¦¨¥»¬Æ¬°¥iÆ[¡CL7ªº¾ãÅé¸Ñ¨M¤è®×¬°¡G
¡@
- InstantScan¤º®eºÞ²z¨¾¤õÀð¡G¯à°w¹ï§Y®É³q°T(IM)¡B¹q¤l¶l¥ó(Email)¡Bºô¶(Web)µ¥ºô¸ôÀ³¥Î¡Aµ¹¤©¨¾¬r¡B¨¾Àb¡B¤º®e¹LÂo¡B°¼¿ý¡BÀW¼eºÞ²zµ¥¥\¯à¡C¥ô¦ó°°¸ËªºIM³s½u³£·|³Q¶e¦í¡A¨Ã¥H®É¶¡±±ºÞ¨CÓû¤uªº²á¤Ñ¹ï¶H¡B¨Ï¥Î¦æ¬°¡B¶ÇÀɩβá¤Ñ¤º®e¡B¨Ï¥ÎÀW¼e¡B¶ÇÀɱ½¬r¡BįÂ䲧Gµ¥¡AÁÙ¨ã³Æ±j¤jIM/P2P³øªí¨t²Î¡C°£¯à°lÂÜû¤u¬ª±K¦æ¬°/¤u§@ÁZ®Ä/°¼¿ý±ÄÃÒ¥~¡A¹ï¥Ø«eNetFlow¤wµLªk¤ÏÀ³¹ê»Ú¬y¶qÀW¼e¤U¡A§ó´£¨Ñ¤Fµ´¨ÎªºÀW¼eºÞ²z»P³øªí¨t²Î¡C®Ö¤ß§Þ³N¬°¡uµLIP¤¬°Ê¦¡°ÎÂܤº®e¹LÂo¡v¡A¯à»´©ö¦w¸Ë©ó¥ô¦óºô¸ô¡AÁô§Î±±ºÞºô¸ô¤º®e¡C
-
InstantBlockÀ³¥Î¨¾¤õÀð¡G¯à°w¹ï50ºØ¥H¤W¶¡¿Ò°°¸Ë³nÅé¡B¦UºØSSL¥[±K¬y¶q¡B2000ºØ¥H¤Wºô¸ô§ðÀ»¡B30000ºØ¥H¤W¯f¬r¡A§@§Y®É±½ºË¡C°£Â²©öIMºÞ²z¥~¡A¨ã³Æ©Ò¦³¤@¯ëFirewall
/ VPNªº¥\¯à¡A¨Ã¤w¤j¶q¥N¤u¤©¤Í°T¬ì§Þ¡B´¶µÜ¼w¬ì§Þµ¥¤½¥q¡C®Ö¤ß§Þ³N¬°¡u¥[±K¤º®e¹LÂo¡v¡A¯àµ²¦XSafeNet¥[¸Ñ±K´¹¤ù¡A»´ÃP¸ÑŪ¥[±K¸ê®Æ¡A¹LÂoºô¸ô¤º®e¡C
- InstantDefense¤J«IÁp¦X¨¾¿m¨t²Î¡G¤@¯ë¤J«I¨¾¿m¨t²Î¤w¦¨¼ô¡A¯Ê¥Fªº¬OÁa²`Áp¦X¨¾¿m¡A¥H»P²{¦³³]³Æ§@¸ê¦wªº°Ï°ìÁp¨¾¡CL7
Networks¬O°ê¤º°ß¤@¯à»P°ê»Úºô¸ô¤j¼tCisco¡BFoundry¡BExtremeµ¥¤½¥q¡A¦X§@¶}µo¡u°Ï°ìÁp¨¾¨t²Î¡v¡A¨¾½d¤º¸éÅõºÈºô¸ô¨Ñ¥~¸é¶X¾÷¶i¤J§@¶Ã¡C®Ö¤ß§Þ³N¬°¡u¶W°ª³tºô¸ô¯f¬r§PÂ_¡A§Y®É³qª¾¥æ´«¾¹±Ò°ÊACL¡A¥H·f°_°Ï°ìÁp¨¾¡v¡C
¡@
§Q°òºô¸ô¦b¥þ²yHOME / SOHO¥«¥e²v²Ä¤@¦Wªº¤Í°T°Æ¸³¨Æªø§õ¤¤©ô±a»â¤U¡A±N§Ö³t·m¦ûSMB /
ENTERPRISEªº¥«³õ¡A¨Ã¬°¥ø·~Äm¤W³Ì§¹¾ãªº¸Ñ¨M¤è®×¡C
IS-5000 ¤º®eºÞ²z¾¹
µwÅé³W®æ
|
IS-5000 ¬° 19 ¦T 2U ¼Ð·Ç¾÷½c¨Ãªþ¤@RS-232 ¥D±±¥x¤¶±¡A¨ã4°ð 10/10/1000Base-TX
¤Î MiniGBIC ¤§ºô¸ô¤¶±¡C |
|
¤º«ØµwÅé®Ç¸ô³]p¡A¥B¤£»Ý¥ô¦óIP Address ªºÁô½ª¼Ò¦¡¡C ¨ã¹w³]¤º³¡ / ¥~³¡ (INT/EXT)10/100/1000Base-TX
(¦³µwÅé®Ç¸ô³]p)¤Î¥iÂà´«¤§MiniGBICºô¸ô¤¶± (µLµwÅé®Ç¸ô³]p)¡C |
|
|
|
§Q¥Î¿W¥ßªººÞ²z°ð (MGT) 10/100/1000Base-TX ¤¶±¡A±µ¦¬³]©wÈ¡B¶Ç°e¨Æ¥ó°O¿ý¨ìºÞ²z¦øªA¾¹¾ã²z¦¨³øªí¡C |
|
¨ã³Æ10/100/1000Base-TX ¤¶±°ª¥i¥Î©Ê¥\¯à (HA)¡A¥i¥ô·N½Õ«×Active-Active (AA)©Î
Active-Standby (AS)¼Ò¦¡¡C |
|
¨ãÂù¹q·½³Æ·½¡A¥H¹F³Ì¤j¥i¾a«×¡C |
|
Dual CPU pipelined for extreme layer-7 content inspection. |
®Ä¯à³W®æ
|
¦P¤@®É¶¡¥i³B²z 1,600,000 ±ø³s½u¼Æ¤§¯à¤O¡C |
|
¬y¶qt¸ü¯à¤O¹F 2 Gbps (³æ¦V1 Gbps)¡C |
|
¨Ï¥ÎªÌ¤H¼Æ¡GµL¤W¡C ¨ÃµL¬Fµ¦¤Î¥Î¤á¼Æ¶q¨î¡A«Øij¾A¥Î©ó¤d¤H¥H¤Wªº¤½¥q³W¼Ò¡C |
³nÅé³W®æ
¡@
ºÞ²z¦øªA¾¹³W®æ
|
¨ã³Æ¤¤¥¡ºÞ²z¤¶±¡A±o¥H¦P®É±±¨î¦h¥x³]³Æ |
|
¦b¨Ï¥ÎªÌ¹H¤Ï¬Fµ¦®É¡A¥ß§Y¥Îemail´£¿ô¨Ï¥ÎªÌ/ºÞ²zªÌ |
|
©w´Á¥Hemail¬£°eHTML/PDF²Îp³øªí |
|
³]©w®É¡A³s½u¨ã³Æ¦w¥þ¥B¥[±Kªº¥\¯à |
|
¤ä´©¦h°ê»y¨¥ªº¨Ï¥ÎªÌ¤¶±»P°¼¿ý |
²`«×ºÞ²z/°¼¿ýû¤uªºIM/P2P/Web*/Email*
¡@
û¤u¤Wºô³£¦b§@¤°»ò?
¡@
û¤u¤Wºô¤£¥~¥G¥ÎOutlook¦¬«H¡B¥ÎExplorerÂsÄýºô¶¡B¥ÎMSN/Skypeµ¥§Y®É³q°T¡]IM¡^¸òªB¤Í¶¢²á¡B¥ÎKaZaA/Kuro/ezPeerµ¥ÂI¹ïÂI¶Ç¿é¡]P2P¡^¤U¸ü«Dªk¸ê°T¡C¨ä¤¤¡AEmail»PIM¬O¬ª±K»P¯f¬r¤J«IªººÞ¹D¡A¦ÓP2P§ó¬OÀW¼eªº±þ¤â»P¶¡¿Ò³nÅ骺·Å§É¡C¤£¦ý¦p¦¹¡AIM®ö¶O¤W¯Z¤H¤O¦b²á¤Ñ¡A¤u§@¤£Â_³Q¥~¬ÉªB¤Í¥´Â_¡A¯Ó·lªº¥Í²£¤O§óÃø¥H¦ôp¡CµM¦ÓIM¥i¥H¸`¬Ù³q«H¦¨¥»¡A¬Æ¦Ü¼W¥[·¾³q®Ä²v¡A³\¦h¥ø·~¤w¤£±o¤£¶}©ñ¡C
ÃøÄñªºIM»PP2P¡GÆp¯}¨¾¤õÀð
¡@
«µø¸ê¦wªº¤½¥q©Î³\¤w±Ä¥ÎEmail/Webªº°¼¿ý/½]®Ö¨t²Î¡C¬Û¸û¤§¤U¡AIM»PP2Pªº°¼¿ý / ½]®Ö / ¦æ¬°±±ºÞ / ¤º®eºÞ²z /
ÀW¼e±±ºÞ¡A«o¦]¨ä±M¬°¬ï¶V¨¾¤õÀð³]p¦ÓÃø¥H±±ºÞ¡CMSN / Yahoo / ICQ / AOL / Skype / Google
Talkµ¥³£·|¦Û°Ê°°¸Ë¦¨Web/Emailµ¥¬y¶q¡A©Î³z¹LProxy·È¥X¥h¡A¬Æ¦Ü¥[±KÁôÂæۤv¡AÅý¦U¤½¥qªºMIS¨¾¤£³Ó¨¾¡C
²Ä¤C¼h¸Ñ¨M¤è®×¡GInstantScan¤º®eºÞ²z¾¹
¡@
L7 NetworksªºInstantScan¤º®eºÞ²z¾¹¡A¬OµLÄߥô¦ó°°¸Ë³s½uªº²Ä¤C¼h±±ºÞ³]³Æ¡C¯à¥H®É¶¡°Ï¬q±±ºÞ¡B°¼¿ý¨CÓû¤uIM/P2Pªº²Ó³¡¨Ï¥Î¦æ¬°¡B²á¤Ñ¹ï¶H¡B¶ÇÀÉÀɮ׫¬§O¡B²á¤Ñ¤º®eÃöÁä¦r¡B¨Ï¥ÎÀW¼e¡B¶ÇÀɱ½¬r¡BįÂ䲧Gµ¥¡A¨Ã¨ã³Æ±j¤jIM/P2P³øªí¨t²Î¡C°£¯à°lÂÜû¤u¬ª±K¦æ¬°/¤u§@ÁZ®Ä/°¼¿ý±ÄÃÒ¥~¡A§ó¹ï¥Ø«eLayer-4
°ð¸¹¤wµLªk¤ÏÀ³¹ê»Ú¬y¶qÀW¼eªº±¡ªp¡A´£¨Ñ¤Fµ´¨ÎªºÀW¼eºÞ²z»P³øªí¨t²Î¡C¶i¶¥ª©§ó¤ä´©Email/WebºÞ²z»P°¼¿ý*¡C
¿W¨B¥þ²yªº¬[ºc¡GÀH´¡§Y¥ÎInline¼Ò¦¡
¡@
InstantScan
¥H¤T¼h¦¡¬[ºc±±ºÞ¡A§Q¥Î¿W¥ßªººÞ²z°ð±µ¦¬³]©w¡B¶Ç°e°O¿ý¨ìºÞ²z¦øªA¾¹¾ã²z¦¨³øªí¡CºÞ²zªÌ¥i¦b¥ô¤@³B¶}±ÒÂsÄý¾¹³s¨ìºÞ²z¦øªA¾¹¤W¡A³]©w/Æ[¬Ý¦UºØ±Æ¦æ²Îp³øªí¡C·íû¤u¹H¤Ï¬Fµ¦®É¡A¨Ò¦p¬Y±b¸¹¤£±o¶ÇÀɮɡA¦Ûqªº¬Fµ¦«Å§i/ĵ§i·|ª½±µÅã¥Ü¦b¸Óû¤uIMµøµ¡¤º¡A¨Ã¦A¦¸¥HEmail³qª¾¡C²á¤Ñªº°T®§¥i³Q°¼¿ý¡A¦¨¬°¥ô¦ó¬ª±K©Î¬O¥Í²£¤O¤£¨ÎªºÃÒ¾Ú¡C
¥þ²y»â¥ýªºInline¬[ºc¡GSniffer v.s Proxy v.s Inline
¡@
(1) ±Mªù°¼¿ýIM/Email/Webªº°¼¿ý¾¹¡A¥Hport
mirror¶i¨Ó«á¨Ï¥Îsniffer¤è¦¡°¼¿ý¡AÃø¥H§¹¾ã°¼¿ý¦æ¬°¤NÆp¡B°ð¸¹¶Ã¸õªºIM¡Cªp¥B¡A¥u¯àºÊ¬Ý«oµLªk±±ºÞ¡A¬Æ¬°¿ò¾Ñ¡C
(2) ±MªùºÞ²zIMªº¥N²z¦øªA¾¹¡A±NIM¬y¶q¾É¨ìProxy±±ºÞ¡CµM¦ÓIM±M¯}¨¾¤õÀð¡A¨Ï¥ÎªÌ¥i»´©ö³WÁ×±±ºÞ¡Aì¦]¦bport 80 µLªk³QIMªºProxyºÊ±±¡C
¼Ò¦¡ |
Sniffer ¼Ò¦¡ |
Proxy ¼Ò¦¡ |
Inline ¼Ò¦¡ |
¥\¯à |
±±ºÞ |
°¼¿ý |
±±ºÞ |
°¼¿ý |
±±ºÞ |
°¼¿ý |
IM°°¸Ë¦¨HTTPµ¥À³¥Î |
N |
N |
N |
N |
Y (¥i¨¾°ô) |
N |
§Q¥ÎWeb IM¨Ï¥Î¥\¯à |
N |
N |
N |
N |
Y (¥i¨¾°ô) |
N |
IM¨Ï¥Î¥¿±`port |
N |
Y (·|º|¿ý) |
Y (·|º|ÀÉ / »~¾×) |
Y |
Y |
Y |
Skype / QQªý¾× |
N |
N |
N |
N |
Y |
N |
Skype File TransferºÞ²z |
N |
N |
N |
N |
Y |
N |
¥þ²y¿W®a²Ä¤C¼h¡uµLIP¤¬°Ê¦¡¡v±±ºÞ§Þ³N¡G¾É¤J®e©ö¡B¥\¯à±j¤j¡B³øªí¸ÔºÉ
¡@
(1) µLIP¼Ò¦¡¤U¡A¥H¤H¬°³æ¦ì±±ºÞIM¦æ¬°/¤º®e¡B30¾lºØP2P¤U¸ü³nÅ骺ÀW¼e
(2) µLIP¼Ò¦¡¤U¡A§Y®É©óIMµøµ¡¤º¦^À³°T®§¡A¦Vû¤uÄÄz¤½¥q¬Fµ¦¡C
(3) µLIP¼Ò¦¡¤U¡A¹ïMSN¶ÇÀɱ½¬r¡A¨Ã§Y®É¦^À³¯f¬r¦WºÙ¡C
¼Ò¦¡ |
Sniffer ¼Ò¦¡ |
Proxy ¼Ò¦¡ |
Inline ¼Ò¦¡ |
Step 1.
ÀH´¡§Y¥Î |
¦w¸ËµwÅé®É¶¡ |
< 2¤ÀÄÁ |
> 10¤ÀÄÁ (»Ý§ó§ï Client ºÝ³]©w) |
< 2¤ÀÄÁ |
Ãö¾÷ by pass |
«ùÄò¹B§@¤£Â_ºô |
Â_ºô |
«ùÄò¹B§@¤£Â_ºô |
§Y®ÉºÊ±±³s½u |
N |
Y (¶È³]©w¨ì Proxy ªº Client
) |
Y (¥]§t©Ò¦³ IM / P2P ³s½u) |
°»´ú°°¸Ë IM ³s½u |
N |
N |
Y |
Step 2.
ªì¨B±±ºÞ |
²Ä¤C¼hÀ³¥Îµ{¦¡±±ºÞ |
N |
N |
Y |
ªý¾×¥¿±` MSN ³s½u |
N |
Y |
Y |
ªý¾× MSN ©x¤è WebIM |
N |
N |
Y |
ªý¾× IM °°¸Ë¦¨ HTTP |
N |
N |
Y |
ºÞ²z P2P ÀW¼e |
N |
N |
¥iªý¾×¡B¥iºÞÀW¼e |
Skype µn¤J / ¶ÇÀɱ±ºÞ |
N |
N |
Y |
Step 3.
¶i¶¥±±ºÞ |
IM ¦æ¬°±±ºÞ |
N |
Y (¶È³]©w¨ì Proxy ªº
Client) |
Y (¥]§t©Ò¦³ IM / P2P ³s½u) |
¨Ï¥ÎªÌ¦Û¦æµn¤J±b¸¹ |
N |
Y (¶È³]©w¨ì Proxy ªº
Client) |
Y |
¶ÇÀÉ / ²á¤Ñ / ¹CÀ¸
...... |
N |
Y (¤u¬ã°|´ú¸Õ¡G·|»~¾× / º|¾×) |
Y (¤u¬ã°|´ú¸Õ¡G0 »~¾× / 0 º|¾×) |
IM ¤º®e±±ºÞ |
N |
Y (¶È³]©w¨ì Proxy ªº
Client) |
Y |
²á¤ÑÃöÁä¦r / ÀɦW / ¹ï¶H |
N |
Y (¤¤¡B^) |
Y (¦h°ê»y¨¥¬Ò¥i) |
¦Ûq§Y®É¦^À³°T®§ |
N |
Y |
Y |
¦h°ê»y¨¥°¼¿ý |
Y (¶È¼Ð·Ç³s½u) |
Y (¶È³]©w¨ì Proxy ªº
Client) |
Y (¥iªý¾×«D¼Ð·Ç³s½u) |
Step 4.
²Îp³øªí |
IM / P2P ¤é / ¶g / ¤ë / ¦~
ÀW¼e |
N |
N |
Y |
IM ¦æ¬°¨Ï¥Î¶q±Æ¦W |
N |
Y |
Y |
¸s²ÕÅã¥Ü IM °¼¿ý |
N |
Y |
Y |
©w´Á¬£°e³øªí |
N |
Y |
Y |
ÃB¥~±ÂÅv |
N |
Y (»ÝÁʶR Windows ±ÂÅv) |
N |
§ó·s¨³³t¡A¥þ²yªA°È
¡@
L7
Networks³Æ¦³±M·~ºô¸ô¦w¥þªA°È¹Î¶¤¡A»PIM¼t°Óµ¦²¤¦X§@¡A¨Ã¥Î¥þ²y§ó·s¾÷¨î¡A§Y®É§ó·s¯f¬r½X¡A©óIM§ïª©®É¥H³Ì§Ö³t«×§ó·sÀ³¥Îµ{¦¡¤ñ¹ï¯S¼x/¤ÞÀº¡A´£¨Ñ«áÄòªA°È¡C
AWARDS
¡@
Àò¤u¬ã°|ºô¸ô´ú¸Õ¤¤¤ß¤½¶}µû¤ñ´ú¸Õ±À±R¡A±±ºÞºë½T«×»·³Ó©ó¬ü°ÓFacetime»PAkonix¡Aºaµn§Y®É³q°TºÞ²zEditors Choice¡C
IS-5000 Content Manager
Hardware Specifications
|
Standard 19" 2U chassis with RS-232 console, four
10/100/1000Base-TX interfaces, and two miniGBIC interfaces.
|
|
Built-in hardware-bypass internal/external (INT/EXT) bridged
10/100/1000Base-TX interfaces without binding any IP address for
stealth-mode inline installation. The INT/EXT interfaces are
10/100/1000Base-TX (with hardware bypass) by default, and can be
switched to miniGBIC INT/EXT interfaces (without hardware
bypass). |
|
¡@
|
|
Standalone management (MGT) 10/100/1000Base-TX interface for
accepting configurations from the management server and for sending out
event logs to the management server. |
|
Standalone high-availability (HA) 10/100/1000Base-TX interface for
active-active (AA) or active-standby (AS) deployment. |
|
Dual hot-swap power supply to achieve the max availability. |
|
Dual CPU pipelined for extreme layer-7 content inspection. |
Performance Specifications
|
Concurrent sessions: up to 1,600,000 concurrent sessions. |
|
Throughput: up to 2 Gbps (1 Gbps for each direction) |
|
Number of users: unlimited. No limit on the number of policies or
the number of active users. But recommend for organizations under
100,000 users. |