ºô¸ô¦w¥þt¸ü¥¿Å¾¹
¥ø·~Internet³s½u¤Îºô¸ô¦w¥þªº³Ì¨Î¸Ñ¨M¤è®×
·¥P³Ì¨Î¤Æ¡D¦w¥þ¤Æ¥ø·~ºô¸ô
SG¨t¦C²£«~³W®æ¤ñ¸ûªí ¤U¸ü¡G
http://support.aboway.com.tw/products/gateway/2.8/SG.pdf
AboCom ¥þ¤è¦ìºô¸ô¸ê°T¦w¥þ¾ãÅé¸Ñ¨M¤è®×¤â¥U
¤U¸ü¡G
http://support.aboway.com.tw/products/gateway/2.8/Network_Solution_guide_2.8.pdf
¥Ñ©óºô»Úºô¸ôªº¶}©ñ»P½´«kµo®i¡A¥ø·~¹ï©óInternetªº¨Ï¥Î¨Ì¿à«×¶V¨Ó¶V°ª¡A³æ¤@¼s°ì½u¸ô¤w¤£¼Å¨Ï¥Î¡A¥B¦³Â_½u¾ÉP¥ø·~Àç¹B¨ü·lªº§xÂZ¡C¥ø·~¦³§ó¦hªººô»Úºô¸ôISP¥i¨Ñ¿ï¾Ü¡A¨Ï¥Î»ù·Gª«¬üªº¦h½u¸ôADSL¡BCable
©Î©T±µ½u¸ôªºWANt¸ü¥¿Å¾¹¤w½«¬°ÁͶաC¥Ñ©óInternetªº¨Ï¥Î«×´£°ª¡A¾ÉP¥ø·~ºô¸ô¥R¥¸¦UºØ¤£·í¦æ¬°¡A¦pÀb«È§ðÀ»¡B¤j¶q¶Ç¿é¡B¤£·íºô¶ÂsÄý¡BÀW¼e¦û¥Î¡K.µ¥¡AºÞ²zªÌ¥²¶·¥Ht¸ü¥¿Å¾¹¡BÀW¼eºÞ²z¾¹¡B¨¾¤õÀð¡Bºô¯¸¹LÂo¾¹¡Kµ¥ºô¸ô¸ê¦w³]³Æ¨Ó¨¾½d»P§ïµ½¡A¥ø·~¤]»Ýn³z¹LInternet¨Ó»P¦U¦a¤ÀÂI©Î»·ºÝ³s½u¡AÁöµM¤è«K¦ý¨ä¸ê®Æ¦w¥þ©Ê«o¬OµL¥i«O»Ù¡A»Ýn«Ø¸mVPN¦w¥þ³s½uªº¸Ñ¨M¤è®×¡A½T«O¥ø·~©¹¨Ó¸ê°T¦w¥þ¤Æ¡A«O»Ù¥ø·~Àç¹B¥¿±`¡C
ºîÆ[¥H¤W¥ø·~±`¨£ªººô¸ô¸ê¦w¨Ï¥Î°ÝÃD¡A¤Í©ô¬ì§Þ¯S¦a±À¥Xºô¸ô¦w¥þt¸ü¥¿Å¾¹SG¨t¦C²£«~(Multi-Homing
Security
Gateway)¡AAboComªºSG²£«~±Ä¥Î¿W¥ß¥D¾÷µwÅé®r¤J¦¡³]³Æªº¬[ºc¡A´£¨Ñ«~½èéw¤Î°ª®Ä¯àªº±MÄݧ@·~¨t²Î¡A¨Ó¸Ñ¨M¥ø·~ªººô¸ô¨Ï¥Î»P¦w¥þ§xÂZ¡CSG¨t¦C²£«~´£¨Ñ¤F10Óºô¸ô¤¶±(WAN/DMZ/LAN°ð)¡A¥i¥ÑºÞ²zªÌ¨Ì·Ó¥ø·~¸ê¦w¬Fµ¦¡A¦Û¦æ©w¸q»P¤À²ÕºÞ²z¡AÝÅU¼u©Ê»PÂX¥R©Ê¡C¦P®É¤º«Ø¨¾¤õÀð(Firewall)¡Bºô¸ôÀW¼eºÞ±±(QoS)¡B¤T¦X¤@VPN(IPSec/PPTP/SSL
VPN)¡BIn/out-boundt¸ü¥¿Å¡BVPN &
Servert¸ü¥¿Å¡BݨãÀW¼e¦X¨Ö»P¦Û°Ê³Æ´©ªºÂù«¦Ò¶q¡A¤ä´©IPv4¤ÎIPv6ºô¸ô¨ó©w¡Bºô¸ôÀ³¥Î³nÅé(IM/P2P/FTP/Webmail/On-Line
Game...)ªº¹LÂoºÞ±±¡B¤Wºô»{ÃÒ¡Bºô¯¸¹LÂoºÞ¨î¡Bºô¸ô¬y¶q²Îp±Æ¦æ¡Kµ¥¦h¥\¯à©ó¤@¾÷¡A´£¨Ñ¥ø·~Internet³s½u¤Îºô¸ô¦w¥þªº³Ì¨Î¸Ñ¨M¤è®×¡C
SG¨t¦C²£«~¨ú±oIPv6ª÷½è¼Ð³¹»{ÃÒ¸ê°T¡G
https://www.ipv6ready.org/db/index.php/public/logo/02-C-000635/
²£«~¯S¦â(Feature & Benefit)¡G
¡°±Ä¥Î¿W¥ß¥D¾÷ªºµwÅé®r¤J¦¡³]³Æªº¬[ºc¡A´£¨Ñ«~½èéw¤Î°ª®Ä¯àªº±MÄݧ@·~¨t²Î(µLµwºÐ)¡A²Å¦X19^¦T¾÷¬[¦¡¼Ð·Ç³W®æ¡C
¡°´£¨Ñ10Óºô¸ô¤¶±(WAN/DMZ/LAN°ð)¡A¥i¥ÑºÞ²zªÌ¨Ì·Ó¥ø·~¸ê¦w¬Fµ¦¡A¦Û¦æ©w¸q»P¤À²ÕºÞ²z¡AÝÅU¼u©Ê»PÂX¥R©Ê¡C
¡°¤ä´©IPv4¤ÎIPv6ªººô¸ô¨ó©w¡A¥ø·~¥i¥þ±´£ª@ºô¸ô¾A¥Î©Ê»P«K§Q©Ê¡AµL»Ý¾á¼~IPºô§}µu¯Ê»Pºô¸ô¨ó©wÂà´«ªº°ÝÃD¡C
¡°§¹¾ãªºt¸ü¥¿Å(In/Out-bound¡BVPN¡BServer Load
balance)»Pµ¦²¤¸ô¥Ñ¾÷¨î(RIP/OSPF/BGP)¡A´£¨Ñ¦hÓWAN°ð½u¸ô¦h«©w§}(Multi-Homing)¡Bt¸ü¥¿Å(Load
balance)¤Î®e¿ù³Æ´©¾÷¨î(Auto
Backup)¡A¥ø·~¥i¥Î³Ì§Cªº§ë¸ê¡A¦X¨Öºô¸ôÀW¼e¡AÂ_½u¦Û°Ê³Æ´©¡AÅý¥ø·~¨É¦³¥Ã¤£Â_½uªºInternetªA°È¡C
¡°¥þ¤è¦ìªº¦Û°Ê³Æ´©(Auto
Backup)¾÷¨î¡G¨ã³ÆWAN¦h½u¸ô³Æ´©¡BVPN³Æ´©¡BServer³Æ´©¡BHAÂù¾÷³Æ´©...¥\¯à¡A´£¨Ñ¥ø·~éw¤ÎµLÂ_½u¤§¸·ªººô¸ôÀô¹Ò¡C
¡°3 in 1 VPN¡G´£¨ÑIPSec¡BPPTP¤ÎSSL VPN(Web
VPN)§¹¾ã¤T¦X¤@VPN¸Ñ¨M¤è®×¡A³z¹LInternet«Ø¥ß¤è«Kéw¦w¥þªº¥ø·~ºô¸ô¡C
¡°´£¨Ñ¥þ¤è¦ìµ¦²¤¦¡(Policy-Base)¨¾¤õÀð¤Î¤º³¡(Internal)¨¾¤õÀð¾÷¨î¡A·f°t¥þ¤ÑÔ(24x7)±Æµ{ªíºÞ±±¡A½T«O¥ø·~ºô¡@¸ô¦w¥þ¡C
¡°´£¨ÑQoSºô¸ôÀW¼e±±ºÞ¡BÓ¤H¤ÆÀW¼e±±ºÞ¡BP2P¨Ï¥ÎÀW¼e±±ºÞ¤ÎToP
Nºô¸ô¬y¶q±Æ¦æ²Îp¡AºÞ²zªÌ¥i»´ÃP´x±±¤Î§´µ½¤À°t¥ø·~¹ï¥~ºô¸ôÀW¼eªº¨Ï¥Î¡C
¡°´£¨Ñºô¸ô»{ÃÒ¡B±ÂÅv¡B²Îpªº3AªA°È¡A³z¹L¤º«Øªº±b¸¹±K½X¸ê®Æ®w©Î±q¥~³¡ªºPOP3¶l¥ó±b±K¡BLDAP/AD¡BRADIUS
Server°õ¦æ3A ServiceªººÞ±±¡A¥i»´ÃP´x±±¥ø·~¤º³¡ºô¸ôªº¦w¥þ¡C
¡°´£¨Ñ§¹¾ãªººô¸ôÀ³¥Î³nÅé¹LÂo»P±±ºÞ¡G¥]§tIM(§Y®É³q°T³nÅé)¡BP2P(ÂI¹ïÂI¶Ç¿é³nÅé)¡BFTP¡Bª£ªÑ³nÅé¡B¼vµ³nÅé¡Bºô¶¶l¥ó¡B½u¤W¹CÀ¸¡B»·ºÝ±±¨î¡B¬ïÀð³nÅé¡Kµ¥¡A½T«O¥ø·~ºô¸ô¦w¥þ¤Î¤£¥²nªººô¸ôÀW¼e¯Ó·l¤Î¦û¥Î¡C
¡°¤ä´©ºô¯¸Ãþ§O¶³ºÝ¸ê®Æ®w¹LÂo¾÷¨î(URL Filter)¡B´£¨Ñºô¯¸¶Â/¥Õ¦W³æ(URL
Block)¡BMIME/Script¡B°ÆÀɦW¡BActiceX¡BCookie¡BPopup¡BJava
Applet¡Kµ¥ºô¯¸¹LÂo±±ºÞ¾÷¨î»P²Îp¤ÀªR³øªí¡C
¡°¤ä´©µêÀÀ°Ï°ìºô¸ôIEEE 802.1q VLAN¤ÎVLAN Trunk¡BVirtual Server
Grouping»PSNMP Agent/Trapºô¸ôºÞ²z¥\¯à¡C
¡°´£¨Ñ²§±`¬y¶q¤Î¤º³¡¤¤¬rªÌ°»´úĵ¥Ü¥\¯à¡A·íµo²{¤º³¡ºô¸ô²§±`¶Ç¿é¶q©Î³s½u¼Æ¡A¥ß§Y³qª¾ºÞ²zªÌ¤Î¨Ï¥ÎªÌ¡AÅýºÞ²zªÌ§Y®ÉÁA¸Ñºô¸ô²§ª¬¡A¨Ã¥ß§Y°µ¥X¬ÛÃöÀ³ÅܳB¸m¡C
¡°´£¨Ñ¤º³¡ºô¸ô°Ï°ìÁp¦X¨¾¿m¾÷¨î¡G¥i»P¨ã³ÆACL«ü¥Oªººô¸ô¥æ´«¾¹(Switch)Áp¦X¨¾¿m¤º³¡ºô¸ôªº²§±`¬y¶q©Î¤¤¬r°ÝÃD¡C
¡°´£¨Ñ©Ò¦³ºô¸ô¤¶±¨Ï¥Îª¬ºA¡B¨t²Î®Ä¯àªí¡B¨t²Î³s½uªí¡B¨t²Î»{ÃÒªí¡BARPªí¤ÎDHCP¥Î¤á¨Ï¥Îªí¡A©Ò¦³ªº¨t²Î¨Ï¥Îª¬ºA¤@¥Ø¤FµM¡C
¡°¤º«Ø^¤å¡BÁc/²¤¤¤åWeb
UIºô¶¦¡³]©wºÞ²z¤¶±¡AºÞ²zªÌ¥iÀH®ÉÀH¦a³z¹LInternet»·ºÝ´x±±¥ø·~ºô¸ô¤Î¨t²Î³]©w»PºÞ²z¡C
¡°SG¨t¦C²£«~µL¨Ï¥Î¤H¼Æªº±ÂÅv»P¨î¡C
²£«~³W®æ»P¥\¯à (Specification &
Function)¡G
¡·´£¨Ñºô¸ô¤¶±(WAN/DMZ/LAN°ð)¥i¦Û¦æ©w¸q»P¤À²ÕºÞ²z
SG²£«~´£¨Ñ10Óºô¸ô¤¶±(WAN/DMZ/LAN°ð)¡A¥i¥ÑºÞ²zªÌ¨Ì·Ó¥ø·~¸ê¦w¬Fµ¦¡A¦Û¦æ©w¸q»P¤À²ÕºÞ²z¡A¤£¦P²Õ§Oªººô¸ô¤¶±µLªk¤¬³s¡Aº¡¨¬¥ø·~»Ýn¦hÓWAN/DMZ/LAN°ðªº»Ý¨D¨ÃÝÅU¼u©Ê»PÂX¥R©Ê¡C¦pªG±N©Ò¦³ªººô¸ô¤¶±³£³]¬°LAN°ð¡A¥i±NSG²£«~·í°µInternal
Firewall(¤º³¡¨¾¤õÀð)¬[³]©ó¥ø·~¤º³¡ºô¸ô¡A±N¥ø·~¤ººô¤À¹j¬°¦hÓ°Ï°ì¡A´£¨Ñ°Ï°ì¶¡ºô¸ô¶Ç¿éªº¦h«¦w¥þ¨¾Å@»P¹LÂo±±ºÞ¡A¦³®ÄÁקK¬YÓ°Ï°ìµo¥Íºô¸ô¦w¥þ¨Æ¥ó(¤º³¡¤¤¬r¡B²§±`¬y¶q§ðÀ»¡K)¡A½¯©µ¼vÅT¨ì¾ãÓ¥ø·~ºô¸ô¡A¨Ã¨ã³ÆIn-Lin(Gateway)¤ÎTransparentªº¹B§@¼Ò¦¡¡C
¡·¤ä´©IPv4»PIPv6ªººô¸ô¨ó©w
SG²£«~°£¤F¤ä´©¶Ç²ÎªºIPv4ºô¸ô¨ó©w¡A¦P®É¤]¤ä´©³Ì·sªºªºIPv6ºô¸ô¨ó©w¡A´£¨Ñ¨âªÌ¨Ã¦æ¨Ï¥Îªººô¸ôÀô¹Ò¡A¥ø·~¥i¥þ±´£ª@ºô¸ô¾A¥Î©Ê»P«K§Q©Ê¡AµL»Ý¾á¼~IPºô§}µu¯Ê»Pºô¸ô¨ó©wÂà´«ªº°ÝÃD
¡·§¹¾ãªºt¸ü¥¿Å¾÷¨î»Pµ¦²¤¸ô¥ÑIn-bound /
Out-bound Load balance
SG²£«~´£¨Ñ¦hÓWAN°ð(ºÞ²zªÌ¥i¦Û¦æ©w¸q)¡A¥i³s±µ¹ï¥~¤£¦PªºISP½u¸ô(ADSL¡BCable¡BE1¡BT1¡BT3)¨Ã´£¨ÑIn-bound¤ÎOut-Boundªºt¸ü¥¿Å¾÷¨î¡C
Out-bound load
balance³z¹Lt¸ü¥¿Åºtºâªk«h¡A¦Û°Ê¤À°t¬y¶q©ó¦UÓ½u¸ô¡A¨ã³Æ¦X¨Ö½u¸ôÀW¼e¤ÎÂ_½u¦Û°Ê³Æ´©¾÷¨î¡A¤]¥i¿ï¾Ü¤â°Ê¥\¯à¡A´£¨Ñ´`Àô¤À°t¡BÅv«¤À°t¡B¨Ì¬y¶q/³s½u¼Æ/«Ê¥]¼Æ/½u¤W¹CÀ¸/¨Ï¥ÎªÌ/ªA°È°ð/¥Øªº¦ì§}¡Kµ¥¤â°Ê³]©w¼Ò¦¡¡AÅý¥ø·~¹B¥Îºô»Úºô¸ôµo´§³Ì¤jªº¨Ï¥Î®Ä¯q¨ÃµLÂ_½u¤§¸·¡C
¦P®ÉSG²£«~¤]´£¨ÑIn-bound load balance¡AIn-boundt¸ü¥¿Åºtºâªk«h¥]¬A¡GRound
Robin / Weight & Priority / Auto Backup / by Source
Ip¡Kµ¥¡A¤º«ØDNS¦øªA¾¹ªA°È¡A¥i¥HºûÅ@¦hÓºô°ì(Zone / Domain)¡A¨CÓºô°ì¤S¥i¥H·s¼W¦hµ§¬ö¿ý(A /
CNAME / MX)¡A¹F¨ìIn-bound Load
Sharingªº¥\¯à¡AÅý¥ø·~¹ï¥~´£¨ÑInternetªA°È¯à¦³®Ä¹B§@¡A§´µ½¤À°t¥~³¡¨Ï¥ÎªÌ³X°Ý¥ø·~ºô¯¸¤§¬y¶q©ó¦UÓWAN°ð½u¸ô¡A°§C¦U±ø½u¸ôªºt¸ü¶q¡A½T«Oºô¸ô³s½u«~½è¡A§Y¨Ï¨ä¤¤¬Y±ø¹ï¥~½u¸ô²§±`©Î¤¤Â_¡A¤]¤£·|¼vÅT¥ø·~ªº¥¿±`Àç¹B¡A½T«O¨Ñ¥ø·~ºô¸ô§Ö³téw¤£Â_½uªºªA°È«~½è¡C
Server Load balance
SG²£«~°£¤F´£¨Ñ½u¸ôªºIn/Out-boundt¸ü¥¿Å¡A¤]´£¨Ñ¤F¥ø·~¤º³¡¦h¥D¾÷ªºServer Load
balance¡A¨ã³Æ´`Àô¤À°t/³Æ´©¼Ò¦¡/¨Ì¨Ó·½¦ì§}¡Kµ¥¡A´£¨Ñ¦h¶µ¤º³¡¦øªA¾¹ªºt¸ü¥¿Å»P³Æ´©¾÷¨î¡A±j¤Æ¥ø·~ªºÀç¹B¶¶ºZ»PÄvª§¤O¡C
VPN Load balance
SG²£«~°w¹ïIPSec/PPTP´£¨ÑVPN
TrunkªºVPNt¸ü¥¿Å¾÷¨î¡A´£¨ÑVPN¨Ï¥ÎWAN¦h½u¸ôªº¦X¨ÖÀW¼e»PÂ_½u¦Û°Ê³Æ´©¥\¯à¡A¤j´T´£°ªVPN³s½u³t«×»P«~½èéw©Ê¡C
µ¦²¤¸ô¥Ñ
¥ø·~¦p»Ý§óºë½T´x´¤¹ï¥~½u¸ôªº¨Ï¥Î¡A¥i³z¹LSG²£«~¤º«Øªºµ¦²¤¸ô¥Ñ(RIP/OSPF/BGP¡K)¾÷¨î¡A³z¹L¦h«¸ô¥Ñ(Multiple
Subnet Routing)¥\¯à¡A¥iÅý¤£¦Pºô°ì(Subnet)ªº¥Î¤áª½±µ¸ô¥Ñ¥X¥h¡F¨Ã¤ä´©Transparent /
Routing / NAT /
PAT¦hºØ¼Ò¦¡¡A¨Ã¥B¥i¥H¦P®É¹B§@¡C°t¦X¥ø·~ºô¸ô¬Fµ¦¡A½Õ¾ã±±ºÞ¹ï¥~½u¸ôªº¹B§@¡Aµo´§¥ø·~ºô¸ô³Ì¤jªº¨Ï¥Î®Ä¯q¡C
¡·µ¦²¤¦¡¨¾¤õÀð¤Î¤º³¡¨¾¤õÀð¡@(Policy-base
Firewall & Internal Firewall)
SG²£«~´£¨Ñµ¦²¤¦¡¨¾¤õÀð¥\¯à¡A¤º«Ø¦hºØ±`¨£ªºÀb«È§ðÀ»¨¾¿m¼Ò¦¡¡A¥i¥D°ÊÄdºI¦hºØºô¸ô§ðÀ»Ãþ«¬»P¦Ûqºô¸ô¦s¨ú³W«h¡A°t¦X24x7¥þ¤ÑԱƵ{ªíºÞ²z¡A§Y®É¹wĵ(Alarm)¤Î¤é»x¬ö¿ý(Log)¡Aµo²{²§±`¥i¶Ç°eE-mail§Y®É³qª¾ºÞ²zªÌ¡A¥[±j²Õ´¤º³¡ºô¸ô¦w¥þªº¨¾Å@¡C§¹¾ãÀb«È¨¾¿m¥\¯à(Anti-Hacker)»Pºô¶¤º®e¹LÂo(Content
Filtering)¡A°t¦X¥ø·~¸ê¦w¬Fµ¦¡A¥i±N¨ä®M¥Î¨ìSG²£«~ªººÞ¨î±ø¨Ò¡A¨Ã¥i°w¹ï¯S©wIP/MAC/Group°µ½d³ò±±ºÞ¡C°w¹ïÅõºÈºô¸ô«¬§ðÀ»©ÎįÂδ£¨Ñ¤J«I°»´ú¡B¨¾¿m»Pĵ§i³qª¾¡A¨ã³Æ¤J«I§ðÀ»°»´ú(IDS)¨Ã¥i°O¿ý¤J«I¤è¦¡¤Î®É¶¡©MIP¨Ó·½¡A«OÅ@¥ø·~ºô¸ôªº¦w¥þ©Ê¡C
¡·ºô¸ôÀ³¥Î³nÅé¹LÂoºÞ¨î¡@(Block
IM¡BP2P¡BTunnel¡BOn-line Game¡K)
SG²£«~´£¨Ñ³ÌÅýMIS¤Hû§xÂZªºIM§Y®É³q°T(Skype¡BICQ¡BQQ¡BMSN¡BYahoo
Messanger..)¤ÎP2PÂI¹ïÂI¶Ç¿é³nÅé(eDonkey¡B¡Be-Mule¡BBT¡BWinMX..)ªº¦æ¬°¼Ò¦¡¹LÂo¡A¦³§O©ó¤@¯ë¶Ç²Îªý¾×Port¤è¦¡¹LÂo¡AÅý¥Î¤á¦A¤]µLªk³z¹L§ó§ïPort(°ð¸¹)¤è¦¡¨Ó¨Ï¥ÎIM©ÎP2P³nÅé¡A¥i¦³®Ä¹LÂo±±ºÞIM§Y®É³q°Tªº¥æ½Í»P¶ÇÀɦ欰¤ÎP2P³nÅéªý¾×¾÷¨î¡C¨Ã´£¨Ñ¯S¼x¸ê®Æ®w(Signature
Database)¡A¨Ã¥i³z¹LInternetºô¸ô¦Û°Ê½u¤W§ó·s¡A¤£»Ý³z¹L¶´Åé§ó·s¤è¦¡¡A³z¹LInternetºô¸ôª½±µ¤U¸ü³Ì·sªºIM§Y®É³q°T©ÎP2PÂI¹ïÂI¤U¸ü³nÅ骺¯S¼x¸ê®Æ®w¡C°£¤F¤WzªºIM¡BP2Pªººô¸ôÀ³¥Î³nÅé¥~¡ASG²£«~¥ç¥i¹LÂoºÞ¨îºô¶¶l¥ó(Web
mail)¡B½u¤W¹CÀ¸(On-line
Game)¡B¬ïÀð³nÅé(Tunnel)¡B¼vµ³nÅé(PPLive¡BezPeer..)¡B»·ºÝ±±¨î(VNC¡BTeamViewer..)¡Bª£ªÑ³nÅé¡K.µ¥¡A½T«O¥ø·~ºô¸ô¦w¥þ¤ÎÁקKºô¸ôÀW¼e¤£·í¦û¥Îµ¥°ÝÃD¡C
¡·ºô¯¸¹LÂoºÞ¨î(URL Filter & URL Block)
¤ä´©³Ì¥ý¶iªººô¯¸Ãþ§O¶³ºÝ¸ê®Æ®w¹LÂo¾÷¨î(URL Filter)¡B´£¨Ñºô¯¸¶Â/¥Õ¦W³æ(URL
Block)¡BMIME/Script¡B°ÆÀɦW¡B¸s²Õ¡BActiceX¡BCookie¡BPopup¡BJava
Applet¡Kµ¥ºô¯¸¹LÂo±±ºÞ¾÷¨î»P²Îp¤ÀªR³øªí¡A´£¨Ñ¹d²ÓÃû¿òªº°O¿ý¡A¨ó§UºÞ²zªÌ«áÄòºÊ±±ºÞ²z»P¸ê®Æ¦s¬d¡AÂÇ¥H½Õ¾ãºô¸ô¸ê¦w¨Ï¥Î¬Fµ¦¡C
³z¹Lºô¯¸Ãþ§O¶³ºÝ¸ê®Æ®w¹LÂo(URL
Filter)ªº¾÷¨î¡A±NInternetªº©Ò¦³ºô¶¤À¬°8¤jÃþ(«Dªkºô¯¸¡B¦â±¡ºô¯¸¡B³Õ«³/¹CÀ¸¡BªÀ·|/¸gÀÙ¡B¤¬°Ê/ªA°È¡B¥ð¶¢/¶Ý¦n¡B±Ð¨|/·sª¾¡B¨ä¥LÃþ§O)¦@p64Ó¤l¶µ¥Ø¡C¥un¤Ä¿ï»Ýn¹LÂo©Î©ñ¦æªººô¯¸Ãþ§O¡A®M¥Î¨ìµ¦²¤ºÞ¨î±ø¨Ò¤º¡A«K¥i»´ÃP°õ¦æ¥ø·~¥Î¤á©Î³¡ªù/¸s²Õªººô¯¸(¶)ÂsÄýªº
¹LÂoºÞ¨î¡C
³z¹Lºô¯¸¹LÂo(URL Block)ªº¾÷¨î¡A¥i¥H¥Î¸U¥Î¦r¤¸(Wildcard: *, ?)¡A©Î¬O¥ÎÃöÁä¦r(Key
Word)«Ø¥ß¶Â/¥Õ¦W³æ¡A¥Î¨Ó¨î¨Ï¥ÎªÌµLªkÂsÄý¤£¶®©Î¦â±¡¤º®eªººô¯¸(¶)©Î¥u¯à¤¹³\ÂsÄý«ü©wªººô¯¸(¶)¡C¤@¯ëºÞ¨î(Script
Blocking)¥\¯à¡G¥i¥Hªý¾×ºô¯¸¨Ï¥ÎMIME Type¡BPopup¡BActiveX¡BJava
Applet¡BCookie...¤ÎÀɮפW¶Ç¤U¸üªººÞ¨î¡G¥i¥H¨î¨Ï¥ÎªÌ§Q¥Î HTTP ©Î
FTP¤W¶Ç¤U¸ü¥ô¦óÀÉ®×¥~¡A¥ç¥i¨î¯S©wÀÉ®×(¨Ò¦p¡Gexe¡Bzip¡Brar¡Bpdf¡Bbin...)ªº¶Ç¿é¡C
¡·3 in 1 VPN (IPSec/PPTP/SSL
VPN)
IPSec/PPTP VPN Gateway & VPN Trunk¡@¡@¡@¡@¡@¡@¡@¡@¡@¡@¡@¡@¡@¡@¡@
SG²£«~¤º«ØIPSec / PPTPªºVPN§¹¾ã¥\¯à(¥]§tSite to side¡BClient to
Side)¡A´£¨ÑNetwork¤ÎCPEªºVPN¥\¯à¡A¤ä´©DES/3DES»P256Bit AES¥[±K¥\¯à¡A´£¨ÑVPN
QoS¡BScheduler¡BHUB¡B»{µý¥\¯à¡A¦P®É¤ä´©IKE¡BSHA-1¡BMD5»{ÃÒ»PIKE¡BISAKMP¦Û°Ê©Î¤â°ÊKEY¥æ´«¥\¯à¡APPTP¤ä´©Server»PClient¼Ò¦¡¡A¨Ã´£¨ÑVPN
Trunk ¦h¸ôt¸ü¥¿Å»PÂ_½u¦Û°Ê³Æ´©¥\¯à¡C
SSL VPN (Web VPN)
¬°¤Fº¡¨¬¦æ°Ê¨Ï¥ÎªÌ»Ý¨D¡AÅý¥ø·~û¤u¦b¥ô¦ó¦³Internetªº¦a¤è¬Ò¥i¦w¥þªº¦s¨ú¥ø·~¤º³¡ºô¸ô¡ASSL
VPNµLºÃ¬O³Ì«K§Q¡B³Ì¸gÀÙªº¦w¥þ¦s¨ú¤è¦¡¡A³z¹LSSL VPN»·ºÝ¦w¥þ¦s¨úªA°È¡A¥ø·~¶È»Ý³z¹L³Ì¼ô±xªººô¸ôÂsÄý¾¹¤¶±(Web
Browser)¡A§Y¥i»´ÃP³s½u¦Ü¥ø·~¤º³¡ºô¸ô¡C¤£½×¬O¥ø·~°ª¶¥¥DºÞ¶i¦æ°Ó°È®È¦æ©Î¥~³¡·|ij¡A»Ýn³s½u¦^¤½¥q¶i¦æ¸ê®Æ·j´M©Î¤½¤åñ¼f¡F·~°È¤Hû¦b¥~±µ¬¢«È¤á¡A¥²¶·³s¶i¤½¥q¤º³¡¨t²Î¸ß»ù©Î³ø»ù©Î³s½u¦Ü¤º³¡ºô¸ô§@·~¡F©Î¦³¤W
¤U´å¦X§@¼t°Ó±ý³sµ²¥ø·~¤º³¡ERP¨t²Î¬d¸ß¬ÛÃö§@·~¡Kµ¥¡A»·ºÝ¦æ°Ê¨Ï¥ÎªÌ³£¥i¨É¦³¦w¥þ¦s¨úªºªA°È¡C§ó¤è«Kªº¬O¡A§Y¨Ï¦æ°Ê¨Ï¥ÎªÌ¥¼Äâ±a¨ü¥ø·~ºÞ±±ªºµ§°O«¬¹q¸£¡A§Q¥Î®a¥Î¹q¸£¡B¤½¥Î¹q¸£¡BPDAµ¥¡A¬Æ¦Ü¬O³z¹LµL½u°Ï°ìºô¸ô³£¤£¼vÅT¦w¥þ³s½uªº«Ø¥ß¡CSG²£«~§ó¤ä´©¡¨SSL
VPNµwÅé»{µý¡¨¾÷¨î¡A³z¹L¨Ï¥ÎªÌÓ¤H¹q¸£ªº¦U¶µµwÅé¾÷½X»{ÃÒ¡A¤£»Ý·ÐÂø³]©w«K¥i§¹¦¨SSL VPN
³s½u¡C¦P®ÉSG²£«~¥i°w¹ï¹B¦æ©óVPNªº¦U¶µºô¸ô¶Ç¿é¦A¥[¥HºÞ±±¡A¥]§tVPNÀW¼eºÞ²z¡B³s½uÅv¡B¦A»{ÃÒ¡Kµ¥¶µ¥Ø¡A¦³®Ä´£ª@VPN³s½u¤§¦w¥þ©Ê»P«~½è¡C
¡·ºô¸ôÀW¼e±±ºÞ/Ó¤H¤ÆÀW¼e±±ºÞ/P2P¨Ï¥ÎÀW¼e±±ºÞ
SG²£«~¥i°w¹ï¤£¦Pªººô¸ô¨Ï¥ÎªÌ»PÀ³¥ÎªA°È¡A´£¨Ñ³Ì¤j¥i¨Ï¥ÎÀW¼e(Max.
Bandwidth)¤Î³Ì§C«OÃÒÀW¼e(Guaranty
Bandwidth)¡A¨Ã¥i³]©wÀu¥ý¶¶§Ç(Priority)¤Î¦w±Æ24x7¥þ¤ÑԱƵ{ªíªºÀW¼e±±ºÞ¾÷¨î¡A¥H«KÅý¨CÓConnection¯à±o¨ì³Ì¨ÎªA°È¡A¦³®Ä±±ºÞºô¸ôÀW¼e(Global
QoS)¡C
´£¨ÑÓ¤H¤ÆÀW¼eºÞ²z(Personal
QoS)³]p¡C¥i°w¹ïÓ§O¥Î¤á°µÀW¼e¤À°t¤§³]¡A²¤Æ¦bÀW¼e¤À°t¤Wªº³W¹º¡A¨Ã½T«OÀW¼e¤£·|³Q¥L¤H©Ò¦û¥Î¡C±NÀW¼eºÞ²z·f°tÓ¤H¤ÆÀW¼eºÞ²z¨Ï¥Î®É¡A¥i±NÀW¼eºÞ²z¥\¯à©Ò¹w¯dªºÀW¼e¡A¦A¤À°tµ¹¤º³¡¨CӨϥΪ̡A¨Ì·Ó¥ø·~ºô¸ô¬Fµ¦¡A§´µ½¤À°tºô¸ôÀW¼eµ¹©Ò¦³¨Ï¥ÎªÌ¡A¨Ã¥i°w¹ï¥~°e(Out-Bound)»P¤º°e(In-bound)¬y¶q¤À§O³]©wÀW¼e±±ºÞ¬Fµ¦¡A¥i¦³®Ä¨¾¤î¤º³¡¥Î¤á¿W¥eÀW¼e¤§°ÝÃDµo¥Í¡AÁקK¥ø·~µLªk¥¿±`¹B§@¡A¨t²Î´£¨Ñ¸Ô²Óªººô¸ôÀW¼eºÞ²z°O¿ý¸ê°T¤ÎToP
Nºô¸ô¬y¶q±Æ¦æ²Îp¡AºÞ²zªÌ¥i»´ÃP´x±±¤Î§´µ½¤À°t¥ø·~¹ï¥~ÀW¼eªº¨Ï¥Î¡A¦P®É°w¹ïÂZ¤HªºP2P¦hÂI¶Ç¼½³nÅé¡A´£¨Ñ¦³®ÄªºÀW¼e±±ºÞ¾÷¨î(P2P
QoS)¡C
¡·¤Wºô»{ÃÒ/±ÂÅv/²Îp3A Service
µL½uºô¸ô²±¦æªº®É¥N¡A¦p¦ó½T»{¤º³¡¨Ï¥ÎªÌªº¨¥÷¨Ã¤¹³\¤Wºô?¤Wºô»{ÃÒ¥\¯à´£¨ÑºÞ²zªÌ¥i¥H¨î¥Î¤á»Ý°µ±b±Kµn¤J½T»{«á¤è¥i¨Ï¥Î
Internet
ºô»Úºô¸ô¡AºÞ²zªÌ¥i©óSG²£«~ªº¡u¤º³¡Database¡v«Ø¥ß¥Î¤á¤Wºô»{ÃÒªº±b¸¹»P±K½X¡A·í¨Ï¥ÎªÌn³z¹LSG²£«~¤Wºô©Î¦s¨ú¸ê®Æ¡A¥²»Ý¿é¤J±b¸¹¤Î±K½X¡A¤è¯à±ÂÅv¨Ï¥Î¥~³¡ºô»Úºô¸ô¡C°£¤F¤º³¡±b¸¹¥~¡ASG²£«~¦P®ÉÁÙ´£¨Ñ§Q¥Îºô¸ô²{¦³ªº¦øªA¾¹¦pPOP3(¶l¥ó±b±K)¡BLDAP/AD¤ÎRADIUSµ¥¤w¦s¦b±b¸¹°µ¬°¤Wºô»{ÃÒ¡A§K°£ºÞ²z¤Hû¥t«Ø±b¸¹¡A¨Ã´£¨Ñ³æ¯Âªº±b¸¹ºÞ²z¡C
SG²£«~´£¨Ñ¤Wºô»{ÃÒ/±ÂÅv/²Îpªº3A Service¡GAAA¡@
¡@¡@¡@¡@¡@¡@¡@¡@¡@¡@
Authentication¡G¤º«Ø»{ÃÒ¸ê®Æ®w¡An¨D¨Ï¥ÎªÌ³q¹L±b±K»{ÃÒ«á¤~¥i¤Wºô¡A¨Ã¤ä´©¥~³¡RADIUS¡BPOP3(¶l¥ó±b±K)¡BLDAP/AD
²Î¤@ºÞ²z»{ÃÒ±b±K¡C
Authorization¡G¤º§tPolicyµ¦²¤ºÞ¨î¥\¯à¡A¥iÄY®æ±±ºÞ©Ò¦³¶i¥Xªº³s½u¡A»´ÃP¹F¦¨¥ø·~ºô¸ô¬Fµ¦¡C
Accounting¡GºÞ²z¤Hû¥i±q¹d²ÓÃû¿òªº³s½u²Îp³ø§i¡AÀò±o¬ÛÃö¸ê°TÂÇ¥H½Õ¾ã¥ø·~ºô¸ô¬Fµ¦¡C
¡·ºô¸ô¬y¶q±Æ¦æ²Îp¤ÀªR(GUI Statistics &
ToP-N Account Report)
´£¨Ñ§Y®É¤Î¾ú¥v¹Ï§Î¤Æ²Îp¤ÀªR³øªí¡A©Ò¦³ºô¸ô«Ê¥]ªº¶i¥X¬y¶q¬ö¿ý¡A¨Ã°µºô¸ô¨Ï¥ÎºÊ±±½]®Ö¤Î²Îp°O¿ý¡C§ó´£¨ÑSNMPºôºÞ¥\¯à¤Îºô¸ô¬y¶q±Æ¦æº](TOP-N)
ªº²Îp»P¬d¸ß¡A¤è«KMIS¤uµ{®v²Î¤@ºÞ±±ºô¸ô³]³Æ¨t²Î®Ä¯à¡A´£¨Ñ¨Æ¥óĵ°T(Event Alert)¤Î¤é»x°O¿ý(Event
Log)ºÞ²z¥\¯à¡C
¡·²§±`¬y¶q°»´ú»Pĵ¥Ü(Anomaly Flow IP)
´£¨Ñ²§±`¬y¶q¤Î¤º³¡¤¤¬rªÌ°»´úĵ¥Ü¥\¯à¡A·íµo²{¤º³¡ºô¸ô²§±`ªº¶Ç¿é¶q©Î³s½u¼Æ¡A¤j¶qµo°e«Ê¥]¥ø¹ÏÅõºÈ¥ø·~ºô¸ô®É¡ASG²£«~·|±N§ðÀ»¥[¥Hªý¾×¨Ã¥ß§Y¥Üĵ³qª¾ºÞ²zªÌ¤Î¨Ï¥ÎªÌ¡AÅýºÞ²zªÌ§Y®ÉÁA¸Ñºô¸ô²§ª¬¡A¨Ã¥ß§Y°µ¥X¬ÛÃöÀ³ÅܳB¸m¡C
¡·°Ï°ìÁp¦X¨¾¿m°»´ú»Pĵ¥Ü(Zone Defence)
¥ø·~¤º³¡Y¦³¬[³]ºô¸ô®Ö¤ß¥æ´«¾¹¡ASG²£«~´£¨Ñ¤º³¡ºô¸ô°Ï°ìÁp¦X¨¾¿m¾÷¨î¡G
¥i»P¨ã³ÆACL«ü¥Oªººô¸ô¥æ´«¾¹(Switch)Áp¦X¨¾Å@¤º³¡ºô¸ôªº²§±`¬y¶q©Î¤¤¬r°ÝÃD¡A·íµo²{¹¡©M¦¡¤Î²§±`¬y¶qªº§ðÀ»®É¡A¥i«ÊÂê§ðÀ»¨Ó·½ªºIP¦ì§}¡A¨Ã´£¥Xĵ¥Ü³qª¾ºÞ²zªÌ¤Î¨Ï¥ÎªÌ¡AÅýºÞ²zªÌ§Y®ÉÁA¸Ñºô¸ô²§ª¬¡AÁקK¨a±¡«ùÄòÂX¤j¡C
¡·¤ä´©VLAN / VLAN Trunk¤ÎSNMP Agent
/ Trap
¤ä´©µêÀÀ°Ï°ìºô¸ôVLAN¤ÎVLAN Trunk¡BµêÀÀ¦øªA¾¹¸s²Õ(Virtual Server
Grouping)»PSNMP Agent/Trapºô¸ôºÞ²z¥\¯à¡C
¡·HA (High
Availability)°ª¥i¥Î©ÊÂù¾÷§Y®É³Æ´©
¨Ï¥ÎHA¥\¯à¡A¥²¶·¨Ï¥Î2¥x¬Û¦P«¬¸¹ªºSG²£«~¡A¥i±N¤@¥xSG²£«~³]¬°Master(¥Dn)¡A¥t¤@¥xSG²£«~³]¬°Standby(³Æ´©)¡C
MasterªºSG²£«~·|§Y®É³z¹Lºô¸ô±N³]©wÀɽƻs¨ìStandbyªºSG²£«~¡A¥BMaster©MStandby¤§¶¡·|¤£Â_°»´ú©¼¦¹ªº¹B§@ª¬ªp¡C¦pªGMaster³]³Æ¬G»Ù¡AStandby·|¨Ì·Ó쥻¥ÑMaster¼g¤J¤§³]©w¨Ó«O«ùºô¸ô¥¿±`¹B§@¡A¦¹®É¥¿¦b¶Ç¿é¤¤ªº¸ê®Æ¥ç¤£·|¦]¦¹¦Ó¤¤Â_¡A³z¹L2¥xSG²£«~ªºHAÂù¾÷§Y®É³Æ´©¾÷¨î¡A¥i´£¨Ñ¾ãÅéºô¸ôªº°ª¥i¥Î©Ê¤Î³Ì¨Î§Y®É¦Û°Ê³Æ´©¡A½T«OSG²£«~¤£·|¦]¬G¤¤Â_¹B§@¡C
¡·Web UI & »·ºÝºÞ²z
¤º«ØÁc¡B²Å餤¤å¤Î^¤åWeb UIºô¶¦¡³]©wºÞ²z¤¶±¡A´£¨Ñ½u¤W»¡©ú(On-Line
Help)¡AµL»Ý¦w¸Ë¥ô¦ó³nÅé¡AºÞ²zªÌÀH®ÉÀH¦a¥i³z¹Lºô¸ô¶i¤JºÞ²z¤¶±³]©w»PºÞ²zSG²£«~¡A¤ä´©HTTPS(SSL)³s½u¥[±K¡A¥ç¥i³]©w«ü©w¤Hû(IP¦ì§})¤¹³\»·ºÝµn¤J³]©w»PºÞ²z³]³Æ¡C
¡·¨t²ÎºÞ²z»P¨Ï¥Îª¬ºA
SG²£«~´£¨Ñ©Ò¦³ºô¸ô¤¶±¨Ï¥Îª¬ºA¡B³nµwÅé¨t²Î®Ä¯àªí¡B¨t²Î³s½uªí¡B¨t²Î»{ÃÒªí¡BARPªí¤ÎDHCP¥Î¤á¨Ï¥Îªí¡A©Ò¦³¨t²Î¨Ï¥Îª¬ºA¤@¥Ø¤FµM¡C¨t²Î¨ã³ÆEvent
Log¡BSys
Log¤é»x°O¿ýºÞ²z¥\¯à¡AYµo¥Í²§±`¨Æ¥ó·|¥D°Ê°O¿ý¤Îĵ¥Ü¡A¨t²Î·|¥HE-mailµoµ¹ºÞ²zªÌ¡CSG²£«~´£¨Ñ³]©w²ÕºA²§°Ê¥\¯à¡A´£¨Ñ³]©wÀɶפJ»P¶×¥X¥\¯à¡A¥i³z¹LWeb
UIª½±µ°µ¤É¯Å¶´Åé(Firmware)¹F¨ì¨t²Î§ó·s¥\¯à¡C¨t²ÎºÞ²zªÌ¥i¥Îºô¸ôÂsÄý¾¹¡B²×ºÝ¾÷©ÎTelnet¡Bºô¸ô¥D¾÷©Îºô¸ôºÞ²z¤u§@¯¸»P³]³Æ³s½u¡A¨Ã¯à³]©w¦UºØ°Ñ¼Æ¤ÎºÊ±±§@·~¡C¨t²ÎºÞ²zªÌ¥i¤À¼h±ÂÅv³]©wºÞ²zªÌ¤Î¨Ï¥ÎªÌ±K½X¡C
¡·µL¨Ï¥Î¤H¼Æ±ÂÅv¤Î¨î
SG¨t¦C²£«~µL¨Ï¥Î¤H¼Æªº±ÂÅv»P¨î¡F¤]µL³nÅé©Î¯S¼x¸ê®Æ®wªº±ÂÅv¨Ï¥Î¶O¥Î¡A´À¥ø·~¤j´T¸`¬Ù§ë¸ê¦¨¥»»P°§C°â«áºû¹B¶O¥Î¡C(URL
Filterºô¯¸Ãþ§O¶³ºÝ¸ê®Æ®w¹LÂo¾÷¨î¡A¥i´£¨Ñ§K¶O¸Õ¥Î©Î¿ïÁʱÂÅv¨Ï¥ÎªA°È)