Multi-Homing Gateway SeriesNusoft．Internet Security Fighter

Product Features

Full IPv6 Compatibility

A Total VPN Solution

Custom Network Interfaces and Groups

Quality of Service (QoS) / Individual QoS

In- / Outbound Load Balancing & PBR

The device is completely compatible with the mainstreamInternet protocol of the future -- IPv6. There is no budgetrequired for implementing another IPv6-based gatewaysimply for IPv4-ot-IPv6 address translation.

Up to four network interfaces are available for defining asLAN, WAN, DMZ or network groups (isolated from oneanother). Thus, MHG-1000 can serve as an internal firewallphysically separating each subnet with its grouping feature,which undoubtedly boosts your network security.

The QoS mechanisms allow IT administrators to base thebandwidth allocation on the company's network policy,preventing bandwidth being exhausted by minorities.

Most third party firewall products lack advanced VPNconnection management and therefore result in securityrisks. In comparison, MHG-1000 secures highly confidentialbusiness information carried over the VPN with QoS,authentication, etc.

The device can load-balance outbound traffic evenly acrossWAN ports based on various load-balancing algorithms. Itefficaciously makes the most of your bandwidth and ensuresyou with a reliable connection.

Besides outbound load balancing, it is also capable ofinbound load balancing, which helps mitigate multiplewebpage requests directed at your Web server by distributingthem across multiple WAN connections, guaranteeinguninterrupted e-commerce.

Its policy-based routing (PBR) mechanism allows the ITadministrator to assign a specific WAN port for a specificpurpose (or traffic).

Nusoft．Internet Security Fighter Multi-Homing Gateway Series

Multi-Homing Gateway

MHG-1000

Web Filtering Mechanism

The Web Filter employs a cloud-based URL database that has eight categories namely Anti-Social and Illegal,Pornographic and Abusive, Gaming and Gambling, Societyand Commerce, Communication and Technology, Leisure,Information and Education, Other, and up to sixty-four subcategories. Website browsing now can be easily regulatedby specifying simply the category instead of the URL, keyword, etc.

1

In addition to that, IT administrators are also allowed torestrict file transfers, MIME types and browser scripts,and provided with detailed logs and statistics for diagnosis.

Anomaly Traffic Detection

MHG-1000 is able to proactively block packet-floodingattacks and notify related personnel of the event. A coreswitch may be incorporated to perform a co-defense againstthe attack by disabling the switch port containing the sourceof the attack, efficaciously preventing Denial-of-Serviceattacks.

A single WAN connection is risky for enterprises with aheavy reliance on information technology due to theconsequences of disconnections. To avoid profit loss, thebest policy is to deploy a network with a failover mechanism.Accordingly, Nusoft MH G-1000 comes equipped withfirewall, link failover, load balancing, policy-based routing(PBR), total VPN solution (SSL / IPSec / PPTP VPN andtrunking), QoS, Web filtering, AAA server (Authentication,Authorization, and Accounting), application blocking,anomaly traffic detection, and more to not only providemulti-homing capability, but to help manage the bandwidthand users with a reasonable yet cost-effective means.

MHG- 1000’s VP N trunking capability ensures failover andbandwi dth aggregation to IPSec and PPTP tunnels, greatlyincreasing the connection speed and stability. In addition,it adopts hardwar e information (rather than login information)to authenticate an SSL VP N user. Remo te users are nowoffered wi th fast and easy SSL VPN access wi thout the needfor compl ex configurations.

Multi-Homing Gateway SeriesNusoft．Internet Security FighterNusoft．Internet Security Fighter Multi-Homing Gateway Series

2

Remote Accessibility

The Web-based UI, available in English, TraditionalChinese, and Simplified Chinese, allows configurationand management to be made through any Web browser from anywhere and consequently no software installation isrequired.

Internet-Based Application Blocking

Despite the convenience of instant messaging (IM), the use ofIM clients is difficult to manage and thus opens the door for business thefts and viruses. Accordingly, MHG-1000 has thecapability to block the use of IM clients such as MSN, Yahoo!, Skype, ICQ, and QQ for messaging or file transfer.

In addition, the use of other Internet-based applicationsmay as well result in security breach. It could bring alonghigh bandwidth consumption, information asset leakage,and malicious code, etc. In answer to that, to ensure networksecurity, the device allows you to restrain P2P sharing(eMule, BitTorrent, WinMX, eDonkey, Foxy, etc.), multimedia streaming, Web-based email access, online gaming, VPN tunneling, and remote controlling.

AAA Server

Authentication: Identifies users using either internal orexternal (RADIUS / POP3 / LDAP) authentication.

Authorization: Decides what kinds of activities, resources,or services a user is permitted.

Accounting: Provides detailed session statistics and usageinformation for network policy adjustment.

Deployment

ADSL / CableModem

Internet

LAN 1 DMZ 1

WAN 2WAN 1

Multi-Homing Gateway SeriesNusoft．Internet Security FighterNusoft．Internet Security Fighter Multi-Homing Gateway Series

3

VPNInternetIPv6

IPv4LAN 2

18

Product HighlightsHighlights Benefits Third-Party Products

Full IPv6 compatibilitySaves the budget for the implementation of anIPv4-to-IPv6 gateway.

Either incompatible or with limited support.

Either fixed to factory default or incapable of load balancing.

No protection against packet flooding.

Lacks flexibility and adaptability in individualbandwidth management.

Equips user only with PPTP and IPSec VPN, lacking security and manageability.

Requires login information to establish anSSL VPN connection.

Only comes in outbound PBR capability and isnot configurable at all.

Less effectively blocks the use of Internet-based applications by port number.

Less effectively filters Website access by basiccriteria such as IP, domain, keyword, etc.

Fails to meet the needs of all sizes of businesses with just outbound load balancing.

No solution available for service disruptionduring online banking and gaming sessions.

A basic firewall with a few security featuresadded on to provide a rough protection.

Provides an effortless operation experiencethrough a single Web-based UI.

Secures your LAN network with anomaly flowdetection and co-defensive switch system.

Adds flexibility to bandwidth management byQoS and P2P bandwidth limits.

Allows in- / outbound traffic to be load balancedbased on network polices.

Restrains the use of Internet-based applicationssuch IM client, P2P software, etc.

Effortlessly regulates Website access by eightcategories and sixty-four subcategories.

Avoids service disruption during an IP-orientedconnection such as online banking and gamingdue to IP change.

Ensures access stability to both the LAN users( outbound traffic ) and website visitors( inbound traffic ).

Securely tunnels your private connections usingPPTP/IPSec/SSL VPN along with trunkingcapability and policy-based management.

Uses hardware information such as the detailsof CPU and hard disk size to authenticate anSSL VPN user without the risk of passwordcompromise.

Enables you to define networks as needed andoffers a physical internal firewall due to itsgrouping feature.

Integrated policyconfiguration

LAN security

QoS management

Total VPN solution

Application blocking

Web category filtering

Bi-directional load balancing

IP-oriented connectionsolution ( i. e., onlinebanking / gaming )

Policy-based routing (PBR)

SSL hardware authentication

Custom network interfacesand groups

IPv4/IPv6Compatibility

Policy-OrientedManagement

User Authentication Event Logging Web-Based UI PBR Web Filtering

User-DefinableNetworks

SPI Firewall Link FailoverTotal VPN Solution Multi-WANLoad Balancing

Up- / DownloadBlocking

AAA Server QoS Anomaly TrafficDetection

Co-Defense System Application Blocking

60

最高

限速

LIMITSPEED

1 Mbit/sec

Multi-Homing Gateway SeriesNusoft．Internet Security FighterNusoft．Internet Security Fighter Multi-Homing Gateway Series

4

Model Name

Power Redundancy

QoS

Individual QoS

Up- / Download Blocking

Application Blocking

VLAN / VLAN Trunking

High Availability

Max. Concurrent Users

CPU Cores / Threads

Max. Concurrent Sessions

CPU Consumption (The lower, the better.)

Outbound

Inbound

Authentication

Authorization

Accounting

Policy-Based Routing

Form Factor

Networking

LoadBalancing

AAA Server

VPNVPN Trunking

SSL Web VPN

SSL Application

Port Density

User-Definable

Hardware Specifications

Performance Statistics

IPv6 Compatibility

Interface Grouping

SPI Firewall

Internal Firewall

Web Filtering

Product Features

MHG-1000

X

X

X X

X

4 GbE (RJ45)

Unlimited Unlimited Unlimited Unlimited Unlimited

1 / 1 2 / 2 2 / 2 8 / 8 8 / 16

1.6 Gbps 2.5 Gbps 3.3 Gbps 3.4 Gbps 5.0 Gbps

75 % 40 % 37 % 11 % 3 %

582,000 1,000,000 1,000,000 2,000,000 2,000,000

MHG-1500 MHG-2000 MHG-3000 MHG-5000

6 GbE (RJ45) 7 GbE (RJ45)

1U Rack-Mountable

1U Rack-Mountable

1U Rack-Mountable

2U Rack-Mountable

2U Rack-Mountable

12 GbE(RJ45/Mini-GBIC)

12 GbE(RJ45/Mini-GBIC)

Firewall Throughput

Model Comparison

IPSec / PPTP VPN

Nusoft CorporationTel: +886-2-8226-6789 Fax: +886-2-8226-6488Address:

http://www.nusoft.com.twSales Department : sales@nusoft.com.twTechnical Support: support@nusoft.com.tw

3F.-1, No. 880, Zhongzheng Rd., Zhonghe Dist., New Taipei City 235-86, Taiwan (R.O.C.)