* Related Products *
SonicWALL Security Appliance
Cisco Routers
Ease of Use and Deployment Superior Redundancy for Fault Backup Integrated CISCO IOS Software Features for Bandwidth Optimization Advanced QoS Granular Rate Limiting Port-based ACLs for Layer 2 interfaces allow application of security policies on individual switch ports. Unicast MAC filtering prevents the forwarding of any type of packet with a matching MAC address. Unknown unicast and multicast port blocking allows tight control by filtering packets that the switch has not already learned how to forward. SSHv2 and SNMPv3 provide network security by encrypting administrator traffic during Telnet and SNMP sessions. SSHv2 and the cryptographic version of SNMPv3 require a special cryptographic software image because of U.S. export restrictions. Bidirectional data support on the Switched Port Analyzer (SPAN) port allows the CISCO Secure intrusion detection system (IDS) to take action when an intruder is detected. TACACS+ and RADIUS authentication enable centralized control of the switch and restrict unauthorized users from altering the configuration. MAC address notification allows administrators to be notified of users added to or removed from the network. DHCP snooping allows administrators to ensure consistent mapping of IP to MAC addresses. This can be used to prevent attacks that attempt to poison the DHCP binding database, and to rate-limit the amount of DHCP traffic that enters a switch port. DHCP Interface Tracker (Option 82) feature augments a host IP address request with the switch port ID. Port security secures the access to an access or trunk port based on MAC address. After a specific timeframe, the aging feature removes the MAC address from the switch to allow another device to connect to the same port.
NetXG, Inc. Copyright © 2010 All rights reserved.
