All in One Secure Access on The MoveBiGuard S100N Sales Kit 　

Presented by Billion MarketingOct. 2008

All in One

Agenda

Business demands and concernsProduct proposition

• Performance and target customer profile• Key features• Hardware specifications• Unique selling points• User benefits

Competition landscapeApplication scenarios Business activities over BiGuard S100NComprehensive BiGuard SSL VPN and IPSec VPN solutions

All in One

Business demands for communications

Business need flexible network and access due to the growth in workforce and footprint, and office space

Always need economical network technology to meet the requirement for high-bandwidth applications over WLAN. For example: video conferencing…etc.

Need to share the centralized information from remote sites without the risk of security

WLAN enhance the overall agility of their business activities

All in One

Data Protection User Authentication Unauthorized Intrusions

Wireless access for visitors, partners, and

employees…

Hackers, worms and virus…

Exposure of their sensitive corporate

information over WLAN network

Despite the enthusiastic demands for WLAN employment, many organizations still remain on the sidelines. The top concerns is that “Security issue” in WLAN.

Cyber Snoops Spy on BusinessesHundreds of workers in North Staffordshire are at risk of having sensitive personal information stolen by cyber-snoops because of poor company network security. Employee names, addresses and bank details information can be accessed by hackers hunting down insecure wireless networks.

Top concerns on wireless LAN

A ban on wireless LAN access points fails to get employees to remove unauthorized APs. In fact, they're adding new ones.

WLAN Wars III; Attack of the RoguesTwo young men sitting in a car in the parking lot of a Lowe's home improvement store in Southfield repeatedly hacked into the company's national computer network over the past two weeks, gaining access to credit card numbers and other information, federal prosecutors said Monday.

War-drivers Hacked Store Files

All in One

Billion’s BiGuard S100N designed to meet the needs of business customers!

4-layer Security

Cable-free Access

802.11n, Gigabit LAN & WAN

Wireless NAC(Network Access Control)

802.11n Gigabit SSL/IPSec VPN Gateway with Portal-based Wireless NAC

All in One

Product Proposition

- BiGuard S100N

All in One

Performance and target customer profile

Ideal for Small Offices, SMB, Departments of SME

with employees from 50 to 200 employees

up to 30, basic 10 SSL VPN tunnels

Concurrent sessions: 25,000

Memory: 256MB

802.11n Gigabit SSL/IPSec VPN Gateway with Portal-based Wireless NAC

BiGuard S100N

All in One

Key featuresBiGuard S100N

Wireless 802.11n and 3G SSL and IPSec VPN

SSL VPN gateway plus solid router and firewall functionsIPSec VPN capabilitiesSSL VPN multi-applicationGigabit for both LAN and WAN connectivityGranular access policy managementPersonalized web portalData encryption, user authentication and access controlEPS* & host security checkingFirewall & QoS

Portal-based wireless NAC802.11n wireless and delivers up to 300Mbps link rate3 times the wireless coverage of an 802.11b/g network device WPS and WPA-PSK/WPA2-PSKWi-Fi WMM prioritizationUSB 2.0 port for plugging a 3G/HSDPA modem*

* Future extension

802.11n Gigabit SSL/IPSec VPN Gateway with Portal-based Wireless NAC

All in One

Application scenarios

Email and Files

Service & Application

Web-based Application

User’s Desktop

Un-authorized

Intruder

Employees’Laptop

Employee at Home

Desktop PC

Business Traveler at

Airport Kiosk

Remote Users

Corporate Resources

SSL

SSL

SSL

IPSec

Internet Access

Firewall

Branch Office with IPSec VPN Client Software installed

Intranet Access

--

Guest’s Laptop

-Authorized Guest Un-authorized AccessEmployee

InternetIntranet Access

All Solutions in One BoxSSL VPN and IPSec VPN Secure AccessPortal-based Wireless NAC (Network Access Control)Firewall plus Router Functions

All in One

Physical Interface• 1 x 10/100/1000Mbps Gigabit WAN ports• 4 x 10/100/1000Mbps Gigabit LAN ports • (1 port can be configured as DMZ)• 1 x USB 2.0 hosts (Future extension)• Antenna SMA jacks• WPS button• Power switch• Reset buttonPhysical Specifications• Dimensions (W,D,H): 9.8" x 6.93" x 1.38"

250 x 176 x 35mmPower Requirements• Input: 15V DC, 1.6AAvailable Product Package• 2dbi antenna x 3、Ethernet Cable x 1、QSG、CD、Power Adapter、Warranty Card

Hardware specificationsBiGuard S100N

All in One

Feature and Firmware Upgrades

BiGuard SSL VPN Tunnel Upgrades

BiGuard Central Management System*

BiGuard One-Time Password

Options for business growth

* Future extension

All in One

Highly secured managementEase-of-useGrouping device managementAutomatic management with time scheduleFlexible upgradesReal time monitoring and alertsHistorical reports for analysisSupports software platforms: MS Windows XP, and later MS Windows 2000 and Linux

Official BiGuard CMS Lite and BiGuard CMS Pro versions

BiGuard CMS series

BiGuard OTP

Central Management System

Two-Factor Authentication with One-Time Password

BiGuard CMS and BiGuard OTP

Dynamic One-Time Password Event-based Algorithm Token Strong Two-factor Authentication Easy installation and management Car key-sized for extreme mobility One-click easy-to-use system Compatible with BiGuard SSL VPN series equipment

All in One

Increases more SSL VPN tunnels by upgrading existing devicesLowers initial cost for SSL VPN implementationFlexibility and wide range of tunnel upgradesGreat scalability for future expansionEasy and efficient activation with a license keyFaster delivery and simplified order process

Features and Benefits

BiGuard SSL VPN Tunnel Upgrades

The SSL VPN Tunnel Upgrades is dedicated to facilitate BiGuard SSL VPN gateway users to increase extra SSL VPN tunnels by purchasing “Upgrades License”.

Product Part Number Description

BiGuard S100N-Up-10SSL-20SSL-01 10 SSL VPN Tunnels Upgrade License for BiGuard S100N - from 10 SSL VPN tunnels to 20 SSL VPN tunnels

BiGuard S100N-Up-10SSL-30SSL-01 20 SSL VPN Tunnels Upgrade License for BiGuard S100N - from 10 SSL VPN tunnels to 30 SSL VPN tunnels

BiGuard S100N-Up-20SSL-30SSL-01 10 SSL VPN Tunnels Upgrade License for BiGuard S100N - from 20 SSL VPN tunnels to 30 SSL VPN tunnels

All in One

Why Billion’s BiGuard S100N?

All in One

4-layer Security

Unique Selling Points I

» Portal-based wireless NAC

» Wireless Guest Access Control» Multiple SSIDs (up to 4 SSID)» Guest account auto-generating» Guest account duration control » SSL VPN over WLAN

SSL VPN Security» End-point Security checking» Host security checking» Granular access policy» Data encryption and user

authentication

Standard Wireless Security

» WPS (Wi-Fi Protected Setup) » 64/128 bits WEP supported for

encryption» Wireless security with WPA-

PSK/WPA2-PSK support

Optional with One-Time Password

» Dynamic One-Time Password » Event-based Algorithm Token » Strong Two-factor Authentication

All in One

Seamless Everywhere!Wider range of comprehensive SSL VPNapplications, feel if never left the office…

- Network Extender- Application Proxy- Network Places

Wide range of supported browsers, OS, and platforms

- IE, Netscape, Firefox, Mozilla, Opera, Safari, Sun - Microsoft Windows, Linux, Macintosh- Mobile devices supported

(Microsoft Windows Mobile 5.0/6.0 compatible)

Unique Selling Points II

All in One

All in One

Unique Selling Points III

World’s first wireless 802.11n SSL VPN gateway with integrated router and firewall functions

Deployment diversity for remote Intranet access, Internet access, file sharing, and data protection

Great network flexibility, fit into any network environment

All in One

User Benefits

All in One

User benefits IComprehensive security

Comprehensive Security

• Wireless NAC (Network Access Control)

• SSL VPN and IPSec VPN

• EPS and Host Security Checking

• WPA-PSK/WPA2-PSK and WEP

• Robust Firewall Security

• Two-factor authentication with

BiGuard OTP (Optional)

All in One

User benefits IIPowerful Internet connections with 11n & Gigabit

Optimal Wireless Speeds and Coverage

Gigabit LAN and WAN Connectivity

• 802.11n Wireless Access Point• Delivers up to 6 times the speed• 3 times the wireless coverage of an

802.11b/g network device.

• Gigabit capability for LAN, WAN and DMZ ports• Faster transmission speeds, no matter for

remote access, internal connections or outbound networking.

Link rate

All in One

Communication Flexibility via 3G/HSDPA*

1. To be available2. The 3G/HSDPA data rate is dependent on your local service provider and your 3G/HSDPA modem.

Note:

User benefits III3G mobility and always-on connection

- Allows you to connect a 3G USB modem to its built-in USB port, enabling you to use a 3G/HSDPA, UMTS, EDGE, GPRS, or GSM Internet connection, makes downstream rates of up to 14.4Mbps*possible.

- With the increasing popularity of the 3G standard, communications via the BiGuard S100N are becoming more convenient and widely available

Accessing e-mail no matter where you areSharing your Internet connection with others, no matter if you're in a meeting, or speeding across the country on a train

All in One

Smart Power Saving Technology

User benefits IVSimple ways to go green

• No need to configure – auto detect the link status and cable length for power saving

• Reduce the power consumption and TCO (Total Cost of Ownership)

• Create less heat and increase the lifetime of equipments• Reduce wasting resources and reduce air pollution and

global warming

• Remotely shut down or wake up any devices from anywhere • Reduce the energy usage and operating cost

Wake on LAN (WOL)

EU’s RoHS Directive and WEEE regulation• Protect our environment from harmful substances.

All in One

Competition Landscape

All in One

BiGuard S100N:

BiGuard S100N vs. UTM Gateways

Most UTM gateways with SSL VPN :

X Limited SSL VPN applications

X No access policy and management

X Hardware performance is drag down

by additional UTM features

X No Wireless access control

YES Rich in SSL VPN applications

YES Various access policy, group

accounts and management

YES Reliable performance

Yes Wireless NAC

Unlike most UTM gateways with SSL VPN features, BiGuard S100N offers rich and professional SSL VPN applications addressing SME’s concern on secure remote access and security issues over WLAN.

All in One

BiGuard S100N:

BiGuard S100N vs. Pure SSL VPN device

Most Pure SSL VPN devices:

X SSL VPN concentrator only

X Need extra firewall and router devices

X Need extra management efforts for multi

devices in SMB’s environment

X No wireless control

Comparing with pure SSL appliances, BiGuard S100N integrates SSL VPN, IPSec VPN, firewall and router functions in one single box. It allows IT managers to eliminate the extra efforts for network management and to reduce the investment of network devices.

YES Dual SSL/IPSec VPN mode

YES Policy firewall and router

functions

YES All in one device for SMB

Yes Wireless NAC

Yes Wireless AP build-in

All in One

BiGuard S100N :

BiGuard S100N vs. Pure NAC solution

Most NAC solutions :

X No VPN capability

X Need extra firewall and router devices

X Need extra management effort for multi

devices in SMB’s environment

X Need extra server (Software base solution)

YES Dual SSL/IPSec VPN mode

YES Policy firewall and router

functions

YES All in one device for SMB

Yes Wireless NAC

Yes Wireless AP build-in

BiGuard S100N and pure NAC solutions are both designed to allow the administrator to have fully control over the corporate network. The key items that differentiate BiGuard S100N from NAC offerings are in its hardware based solutions and SSL security features for advanced wireless access control.

All in One

Billion Zyxel Sonicwall Sonicwall Juniper Extreme

BiGuard S100N ZyWALL USG1000 SSL VPN 2000 Aventail EX-750 SA2500 SENTRIANT

AG200Product Product type Intelligent Appliance UTM Appliance SSL VPN Appliance SSL VPN Appliance SSL VPN Appliance NAC Appliance

Simultaneous IPSecVPN connection 10 1000 - - - -

Simultaneous SSL VPNconnection

10(Option to 30) 50 50 20 10

(Option to 100) -

Interface Ports4 x Gigabit LAN

(1 DMZ)1 x Gigabit WAN

5 Gigabit ports 2 x 10/100M ports 2 x 10/100M ports 2 Gigabit ports 2 Gigabit ports

NAT Router Functions V V - - - -

Firewall V V - - - -

Multi-language support V V - - - -

Wireless 802.11n - - - - -

Portal-based NAC V - - - - V

SSL over wirelessconnection V - - - - -

Dynamic accountgeneration V - - - - -

Terminal Services,VNC, SSH, Telnet,HTTP/HTTPS Proxy

V V V V V -

Ciriix Support V - V V V -PDA Support V - - Option V -

SSL Security End Point Security(EPS) Future Release - - Option V -

ConnectionAvailability 3G Auto Backup Future Release - - - - -

Brand & Model

VPN

ApplicationSupport

Gatewayfunction

Wireless

Billion’s BiGuard S100N vs. Main Competitors

All in One

Promotion Program for BiGuard S100N

All in One

Distributors will receive a BiGuard S100N bundled package for end-user promotion. Every BiGuardS100N will include 2 free BiPAC 3010N dongles.

The promotion is valid until Feb. 28, 2009.

Special Bundle Promotion

• Supports WEP, WPA, WPA2, 802.1x & 802.11i for WAN security

• USB 2.0 Interface

2 x BiPAC 3010N802.11n Wireless USB

Adapter

FREE!

All in One

Application Scenarios

All in One

Remote Intranet access over SSL VPN tunnels from anywhere at anytime

Email and Files

Terminal Service Remote Desktop

Web-based Application

Network PlacesService &

Application

BiGuard S100N

BusinessUser’s

Laptop PC

Employee at Home

Desktop PC

Business Traveler at

Airport kiosk

Customer from Office Desktop

PC

Internet

Remote UsersCompany Network

SSL VPNSSL VPN

SSL VPN

SSL VPN

SSL

VPN

Business Partner from Internet Cafe

Application scenarios - SSL VPN

All in One

Application scenarios - Wireless 802.11n

Wireless 802.11n: Embedded with Wireless 802.11n, BiGuard S100N delivers optimal wireless speed and coverage with no more dead zones.

Link rate

All in One

(without BiGuard S100N)

With general wireless AP, security issues will occur:

Exposure of corporate IntranetUn-authorized accessVirus or hacker’s attacks to the WLAN

Physical line

Guest data traffic

Employee data traffic

General Wireless AP

Guests

Employees

Intranet

Internet

Only One SSID

Intranet Access

Intranet Access

Confidential Information

Hacker

Intern

et Acc

ess

Application scenarios - wireless NAC I

All in One

BiGuard S100N to address security issues with Wireless NACMultiple SSIDs (up to 4 SSID) to separate the traffic of guests and employeesSecure wireless Intranet access over SSL VPN and WLAN

Guests

Employees

Intranet

Internet

Physical line

Guest data traffic

Employee data traffic

Employee SSID

SSL VPN tunnel

Guest SSID

(with BiGuard S100N)Application scenarios - wireless NAC I

All in One

General Customers/Visitors

VIP customers

BiGuard S100N can set up three different types of WLAN access privilege1. Bypass: temporally Internet access without authenticated SSL web portal2. Authentication: authenticated Internet access via SSL web portal3. Authentication + SSL VPN: authenticated Internet access plus secure Intranet access via SSL

Employees

By setting up different WLAN access privilege, hackers or intruders are blocked outside of authentication web portal even when they successfully crack the wireless encryption.

Intranet

Bypass

Internet

SSL Web Portal

Authentication

Authentication + SSL VPN

SSL VPN tunnel

Application scenarios - wireless NAC II

All in One

Auto generation of guest accounts: even office receptionists can create new accounts for visitors simply via SSL portal page. Guest accounts duration control: easy to set up how long the guest accounts will be used, like 30 minutes, 1 hours for guests and visitors, or even 3 months for short-term contractors.

Customers

Internet

Visitors

ContingentWorkers

Receptionists

Information Desk

Easy management on guest accounts with Portal-based Wireless NAC (Network Access Control)

Guests 1, 2, 3….(30 minutes)

(1 hrs)

(3 months)

Application scenarios - wireless NAC III

All in One

Application scenarios - wireless NAC III

Guest Accounts GenerateGuest

Accounts Duration

Receptionists

Information Desk

All in One

Smart Power Saving Technology

Automatically detect the link status of device and reduces powerusage of ports that are idle

2 PCs active

Adjust the power usage according to the length of Ethernet cable

Ethernet cable

Note: above % of power consumptions are only for your reference.

Application scenarios - Smart Power Saving

45%Up to

Ethernet cable

Ethernet cable

All in One

WOL (Wake On LAN) Technology

WOL over SSL encryption allows the administrator to remotely power up servers or computers or even a group of devices from anywhere at any time.

• Make maintenance convenient and easy for IT managers• Reduce the power consumption and create less heat• Reduce operating cost

InternetWake up !!

Wake up !!

Static ARP

Remote Administrators

SSL VPN Tunnel

SSLover

Application scenarios - Wake On LAN

All in One

Business activities over BiGuard S100N

General CorporationsManufacturersHealthcare Service CentersHotelsAirportsEducation/Training InstitutionsExhibition/Conference/Business CentersDepartment Stores

Examples of companies that can take advantage of WLAN and SSL VPN technology by deploying BiGuardS100N to their corporate network.

All in One

Business activities over WLANGeneral Corporations

General Corporations

• Secure Intranet access The employees are able to roam securely and seamlessly between subnets in an office building without compromising security.

• Authorized Internet access Receptionists can easily generate guest accounts via web portal for visitors and contingent contractors.

• Secure remote access Business travelers outside the company can remotely access to the corporate network via SSL VPN tunnels.

All in One

Business activities over SSL VPNManufactures

Manufactures

• Authorized Internet access Manufacturers can give visiting buyers authorized Internet access over WLAN anywhere in office buildings.

• Secure Intranet access Employees in the warehouse, in the factories, or in the office can make immediate and securely access to the Intranet on the move.

All in One

Business activities over WLANHealthcare Service Center

Healthcare Service Center

Healthcare service center can dramatically improve the outcomes for patients as well as boost the workers’ efficiency by deploying Billion BiGuard S100N.

• Secure Intranet access Doctors and nurses can provide the highest level of patient care by making immediate and securely access to the confidential medical records on the move.

• Authorized Internet access Patients can access the Internet during their hospitalization periods from anywhere in the hospital.

All in One

Business activities over WLANHotels

Hotels

• Authorized Internet access With BiGuard S100N’s 802.11n Wireless Access Point, the visitors can enjoy high-speed wireless connection from their room, a lobby, or even on the move.

BiGuard S100N opens new possibilities for new services and outcomes of the hotels. It provides the hotels with unique selling points compared to their competitors.• Secure Intranet access Hotel managers and workers can securely access the confidential information via SSL VPN tunnel and provide the immediate room services to their customer seamlessly from any locations in the hotel.

All in One

Business activities over WLANAirports

Airports

Airports can provide different levels of wireless access to travelers and employees to connect to the Internet or corporate network and improve overall agility of their business. • Secure Intranet access Customs officers can make secure wireless connections to the office central servers from any corner of the airport in order to improve their efficiency.

• Authorized Internet access Travelers can request a set of guest accounts from the reception desk and enjoy high-speed, cable-free Internet access with their notebook or mobile device throughout the airport.

All in One

Business activities over WLANEducation/Training Institution

Education/Training Institution

• Secure Intranet access Professors or trainers can access confidential research from the office server anywhere in the college buildings.

• Authorized Internet access Students or trainees can be authorized with guest access services and enjoy high-speed Internet connection over WLAN from any corners of the school buildings.

Billion’s BiGuard S100N provides the training/education center with advanced technology tools that enable them to create a quality-learning environment for their students and staffs.

All in One

Business activities over WLANExhibition/Conference/Business Center

Exhibition/Conference/Business Center

• Secure Intranet access Exhibition managers can securely access confidential data on the move.

• Authorized Internet access The visitors, attendants, or exhibitors can connect wirelessly anywhere in the exhibition hall.

With BiGuard S100N, exhibition center can improve interaction and communication with their exhibitors, visitors and organizer and leverage the value of their exhibition services.

All in One

Business activities over WLANDepartment Stores

Department Stores

• Secure Intranet access The customer services managers or staff are able to securely access the customers’ purchase history and provide personalized customer services from anywhere in the store.

• Authorized Internet access The shoppers can freely access Internet while shopping or moving inside the mall buildings.

Department stores can significantly increase the productivity of workers and provide the customers with an enjoyable shopping experience and improve customer loyalty.

All in One

Comprehensive BiGuard SSL VPN and IPSec VPN Solutions

All in One

• Dual-WAN• 20 SSL VPN tunnels• 30 IPSec VPN tunnels

• Single-WAN• 10~20 SSL VPN tunnels• 10 IPSec VPN tunnels

• Single-WAN• 5~20 SSL VPN

tunnels

• Single-WAN, 802.11N• Gigabit WAN and LAN• 10 ~ 30 SSL VPN tunnels• 10 IPSec VPN tunnels

• Dual-WAN• Gigabit WAN and LAN• 50 ~ 200 SSL VPN tunnels• 30 IPSec VPN tunnels

BiGuard SSL VPN portfolio & segmentation

• Dual-WAN• Gigabit WAN and LAN• 10 ~ 50 SSL VPN tunnels• 30 IPSec VPN tunnels

SMB and SME(150 - 1000 Employees)

Small Offices, SMB, Departments of SME(50 – 200 Employees)

SOHO UsersSmall Offices

(1 – 50 Employees)

New

SSL

VPN

Sol

utio

ns

All in One

For SMB main officesDual WAN load balancing and auto-failover 30 IPSec VPN connections4 PPTP VPN connectionsQoS and FirewallLoad balancing and auto fail-over

For small offices 10 IPSec VPN connections4 PPTP VPN connectionsQoS and FirewallSupports IPTV applications8-port switch

For home offices/mobile users 2 IPSec VPN connections4 PPTP VPN connectionsQoS and firewall

Supports IPTV applications8-port switch

For SMB main officesDual WAN ports 50 IPSec VPN tunnels802.11g with WPA-PSK/ WPA2-PSK Support32 PPTP VPN connectionsLoad balancing and auto fail-overQoS and Firewall

802.11g Dual-WAN Security Gateway SMB

iBusiness Security Gateway SMB

iBusiness Security Gateway Small-office

iBusiness Security Gateway Home-office

BiGuard IPSec VPN security appliances

All in One

Thank You !