Stonesoft解决方案.运营商.ppt

* * * * * * * * * * Inline Serial Cluster One of the sensor nodes in IPS serial cluster inspects a connection, while others are in “soft-bypass” mode for the same connection. Load balancing decision is based on IP addresses and there is no state synchronization between the nodes available. It is important to note that inline serial cluster is not a network HA solution but designed for boosting inline IPS inspection performance. If a node fails it switches to bypass state and load balancing filter is recalculated on rest of the nodes (bypass NICs mandatory!). * * * * * This picture is an attempt to map different StoneGate Platform components into a picture easy to understand/comment since it is mapped to different areas / needs of Information Flow Security * * * IPS-6100 Targeted for: Internal networks, server segments, backbones Available as: Sensor, Combined Sensor-Analyzer Throughput: Max 4 Gbps (latency 150 microseconds) Full copper version 16 x bypass interfaces 10/100/1000 copper, 2 x standard interfaces 10/100/1000 copper 8 x bypass interfaces 10/100/1000 copper, 2 x standard interfaces 10/100/1000 copper  Full fiber version 8 x bypass interfaces 1000Base-SX/LX fiber, connector type is LC2 x standard interfaces 10/100/1000 copper  Mixed version 4 x bypass interfaces 1000Base-SX/LX fiber, connector type is LC4 x bypass interfaces 10/100/1000 copper2 x standard interfaces 10/100/1000 copper ? ? 10Gbit NIC model 2 x bypass interfaces 10GBase-SR fiber, connector type is LC 2 x standard interfaces 10/100/1000 copper ? IPS-6000Targeted for: Internal networks, server segments Available as: Sensor, Combined Sensor-Analyzer Throughput: Max 2 Gbps (latency 150 microseconds) Full copper version 8 x bypass interfaces 10/100/1000 copper, 2 x standard interfaces 10/100/1000 copper  Full fiber version 8 x bypass interfaces 1000Base-SX/LX fiber, connector type is LC2 x standard interfaces 10/100/1000 copper  Mixed version 4 x bypass interfaces 10