Optimize IT staff time and effort - while minimizing total cost of ownership

Benefits:

• Deploy robust security safeguards enterprise-wide.
• Implement large-scale VPN support with high-performance packet processing.
• Streamline firewall deployment, configuration and management.
• Leverage high-availability bandwidth management for consistent service quality.
• Sustain business continuity with carrier-class reliability and availability.
• Keep total ownership costs low

Complete, cost-effective solutions for network security, VPN, service-quality assurance and more

The Lucent VPN Firewall portfolio offers a broad range of enterprise-class security solutions to protect corporate networks and deliver mission-critical IP applications to headquarter employees, branch offices, trading partners, road warriors and customers. VPN Firewall solutions can stretch IT budgets with superb price/performance and low total ownership costs. Leading-edge technology with timesaving, work-saving features help maximize IT staff resources. And ample flexibility, availability and scalability can simplify deployment and management of diverse applications including:

• Advanced security
• Site-to-site and remote access VPN
• Bandwidth management (service quality assurance)
• Mobile data
• Storage network security
• Secure intranets and extranets
• Shared Internet connectivity

• VPN Firewall Brick ® platforms – Security appliances that integrate deep packet inspection firewall functionality with advanced VPN capabilities for small-office through data-center requirements.
• Lucent Security Management Server (LSMS) – Software for robust, tightly synchronized firewall, VPN, service quality, VLAN and virtual firewall policy management.
• Lucent IPSec Client – Software that provides secure remote access VPN services for mobile workforce and telecommuters.

Deploy robust security safeguards enterprise-wide

Unlike many competitive products, VPN Firewall Brick ® platforms are built as security-specific devices. In contrast to traditional router-based systems, they operate as intrinsically secure Ethernet-layer bridges that are virtually invisible to hackers scanning your network. Completely segregated from the routing process, these security appliances are not vulnerable to dynamic routing protocol attacks. In many instances, they are undetectable by any device not on the same network segment, protecting enterprises with a high level of stealth security.

Reinforcing this depth of defense is the platforms' innovative, Bell Labs-developed operating system, a compact real-time kernel with built-in security features. Far less easily compromised than general- purpose operating systems running on server platforms, this exceptionally thin system eliminates most points of vulnerability. As a result, VPN Firewall Brick ® platforms have no security-threatening back doors, no Computer Emergency Response Team (CERT ® ) advisories or reported vulnerabilities.

LSMS software adds exposure-limiting safeguards including strong IP-specific denial-of-service attack protection, premium firewall and VPN authentication services, application-layer defense and content-level security including command blocking, URL blocking and virus scanning.

Implement large-scale VPN support with high-performance packet processing

VPN Firewall Brick® platforms deliver the performance needed to provide vital security and VPN services for thousands of enterprise users. High-capacity packet- processing capabilities help maximize user efficiency and productivity with up to 1 Gbps VPN throughput and a full 3 Gbps firewall throughput. Portfolio-wide scalability helps protect expanding user populations cost effectively. A single VPN Firewall Brick® unit can support up to 4 million simultaneous sessions and over 7,000 VPN tunnels. Its highly efficient operating system contributes to these outstanding processing capabilities by freeing memory for session and policy management.

Streamline firewall deployment, configuration and management

VPN Firewall Brick® platforms can be installed and working at any network location with an IP address. These flexible bridging firewalls work as quickly as a physical connection can be made. There’s no need to re-segment the network, worry about downtime during network conversion to the new topology or wait as hosts are directed to a new gateway. LSMS software delivers:

• Sophisticated IP services management capabilities with low operating costs to manage security, not individual devices - easy security deployment, management and maintenance with centrally controlled VPN Firewall Brick® clients
• Scalability to rapidly provision and manage up to 1,000 VPN Firewall Brick® platforms and 10,000 IPSec Client users from one console - fewer devices to maintain and fewer people to maintain them
• Seamless integration of firewall, VPN, bandwidth management, virtual LAN (VLAN) and virtual firewall policy management – centralized realtime monitoring, robust logging and customized reporting capabilities

Leverage high-availability bandwidth management for consistent service quality

VPN Firewall Brick® platforms can increase both network security and quality of service through uniquely granular bandwidth management. They incorporate – at no extra charge – robust implementation of class-based queuing (CBQ) technology for committed-rate bandwidth control and traffic prioritization. Bandwidth limits to help defend against flood attacks, and bandwidth guarantees to enhance end-user experiences, are enforced at the server and user levels. Traffic can be classified by physical interface, virtual firewall, policy rule and session, enabling simplified yet precisely targeted security implementations.

Sustain business continuity with carrier-class reliability and availability

A high-availability architecture is built into every component of the Lucent VPN firewall portfolio. There is no single point of failure solution-wide. All VPN Firewall Brick® models support native subsecond failover to a standby unit. In an outage, services continue uninterrupted. Out-of-band management capabilities help ensure continued service even if communications are lost due to a network outage. For added reliability, LSMS software - unlike competitive management systems – can be distributed across multiple geographically dispersed operations centers for active/active network redundancy. This enables immediate disaster recovery in the event of a catastrophe at the primary management location.

Keep your total ownership costs low

VPN Firewall solutions efficiently address the need to contain operations outlays, make efficient use of in-house technical expertise and protect network investments. All solution components are built to interoperate smoothly with existing infrastructure elements. Introducing them requires no costly network retrofits.

VPN Firewall Brick® products cut IT staff hours and shortens time-to-service with its full-featured bridging support. And because it doesn’t run on a general-purpose operating system, it eliminates the high costs and time-intensive efforts associated with OS upgrades and patches.

The performance-proven LSMS security management solution offers one simple, economical licensing structure – without costly additional modules or recurring license fees. Its high-capacity processing and high-device-count management capabilities help minimize additional capital-equipment purchases. And its comprehensive security safeguards dramatically reduce network vulnerabilities that consume IT staff time and budget.

Lucent VPN Firewall Portfolio Features

• Full-featured bridging – enables stealthy, depth-of-defense security that conventional router-based firewalls cannot match.
• Advanced security safeguards – denial-of-service attack protection; high-speed content security; premium authentication services; with low occurrences of reported advisories or vulnerabilities and no backdoors.
• High-performance packet processing - supports up to 4 million simultaneous VPN sessions, 1000 virtual firewalls, 7000 VPN tunnels.
• Ultra-thin, highly secure operating system – virtually impenetrable to hacker attacks; frees memory for packet processing, policy management.
• Plug-and-play deployment – implement secure mission-critical applications without costly, time-intensive network reconfiguration.
• Low ownership costs – no ongoing feature-licensing expenses; easy installation, management and upgrades save IT staff time and effort; high-performance, high-capacity features reduce the need to purchase additional equipment.
• Simplified management – unique client/server design; centralized staging, real-time monitoring and no-touch management of all VPN, security and service-quality assurance capabilities via scalable, proven LSMS.
• Virtual firewall and VLAN support – easily assign and enforce security policies for diverse user groups.
• Uniquely granular bandwidth management –- maximize service quality via flexible class-based queuing (CBQ) technology, server-level and user-level limits and guarantees.
• Carrier-grade reliability – native high-availability architecture with no single point of failure