信息安全产品市场分析讲述.ppt

CONFIDENTIAL 针对中等企业产品对比 Features FortiGate-300 Cisco PIX 515E NetScreen-50 SonicWALL PRO 330 WatchGuard Firebox 1000 Users Unrestricted Unrestricted Unrestricted Unrestricted Unrestricted Target Functionality FW VPN IDP AV CF TS FW VPN IDP FW VPN TS FW VPN CF FW VPN IDP CF Hardware Interfaces 3 10/100-BaseT Ethernet 2 10/100-BaseT Ethernet 4 10/100-BaseT Ethernet 3 10/100 Ethernet 3 10/100 Ethernet Concurrent sessions 400,000 130,000 32,000 128,000 Not Available VPN tunnels 1,500 2,000 500 1,000 1300 IPSec 3DES Performance 65 Mbps 140 Mbps * 50 Mbps 45 Mbps 60 Mbps Firewall Performance 200 Mbps 188 Mbps 170 Mbps 190 Mbps 200 Mbps ASIC based performance (FW/VPN/AV) Yes/Yes/Yes No/No/No Yes/Yes/No No/Yes/No No/Yes/No * With optional 3DES accelerator card CONFIDENTIAL 针对服务商产品对比 Appliance Features FortiGate-3600 NetScreen-5200 Intrusion PDS 7330 Users Unrestricted Unrestricted Unrestricted Target Functionality FW VPN IDP AV CF TS FW VPN IDP Check Point FW-1 VSX VPN-1 Hardware Interfaces 1 10/100-BaseT Ethernet 2 Copper Gigabit Ports 4 Fiber Gigabit Ports 8 mini-GBIC Ports 2 Gigabit Ethernet 2 10/100 Ethernet. Concurrent sessions 1,000,000 1,000,000 Not Available VPN tunnels 8,000 25,000 Not Available IPSec 3DES Performance 600 Mbps 2 Gbps 700 Mbps Firewall Performance 4 Gbps 4 Gbps 3 Gbps ASIC based performance (FW/VPN/AV) Yes/Yes/Yes Yes/Yes/No No/No/No * * The FortiGate systems are the first and only solution with ASIC-based application-level (content) security as well as network-level security. No other systems can match Fortinet for completeness of coverage, raw throughput, or price/performance. CONFIDENTIAL 新消息 Check Point’s 应用层安全产品将于2003年5月发布，它能检测和阻止应用层的攻击。 Check Point仍旧没有计划涉足病毒攻击 该产品类似于入侵检测和防御产品，主要针对buffer overflow attacks, malformed packet attacks， man-in-the-middle attacks, SQL slammer, Code red, Nimda和其他蠕虫. 白皮书和其他资料对攻击响应时间以及特征库升级没有涉及到 没有攻击响应服务队伍 在性能上没有给出数据 CONFIDENTIAL Check Point/Nokia 产品 Nokia产品从$895 到 $30,000+ 要求一个Check Point许可证，加上硬件和软件的支持 FW