Producto de la serie del sistema de prevención de intrusiones NIP2000-5000
El sistema de Protección Inteligente de Redes (NIP) de Huawei es una nueva generación de productos dedicados de detección y prevención de intrusiones. Está diseñado para resolver problemas de seguridad de redes en entornos IT modernos que utilizan Web2.0 y la era de la nube. El NIP proporciona funciones como instalación de parches virtuales, protección de aplicaciones web, protección de clientes, control de software malicioso, gestión de aplicaciones de red y prevención de ataques DDoS en capa de red y capa de aplicaciones. Implementa la protección de infraestructuras de red, protección de rendimiento de ancho de banda de red y protección de servidor/cliente para empresas grandes y medianas, usuarios industriales y operadoras.
Comprehensive Protection Ranging from System Service to Application Software
The NIP provides traditional intrusion protection system (IPS) functions such as vulnerability attack defense, web application protection, malicious-software control, application management, and network-layer DDoS attack prevention.
The NIP provides comprehensive protection for client systems exposed to the prevalent attacks that target web browsers, media files, and other document file formats.
The NIP provides industry-leading defense against application-layer DDoS attacks that spread through HTTP, DNS, or SIP.
The NIP can detect attacks and upgrade signatures in a timely manner with the global vulnerability trace capability.
Accurate Detection and Intelligent Interception
The NIP detects attacks accurately without false positive errors with the advanced vulnerability feature detection technology.
The NIP automatically learns the traffic baselines to prevent incorrect threshold configurations.
The NIP automatically intercepts major and severe threats without signature modification.
Application Awareness for Accurate Control of User Behavior
The NIP can identify more than 1000 network applications. With precise bandwidth allocation strategies, the NIP restricts the bandwidth used by unauthorized applications and reserves sufficient bandwidth for office applications such as OA and ERP.
The NIP can fully monitor and manage various network behaviors, such as instant messaging (IM), online games, online video, and online stock trading. This enables enterprises to identify and prevent unauthorized network behaviors and better implement security policies.
Automatic Configuration and Easy Management
Zero configuration network access: The device functions properly once it is powered on. No complex signature modification or network parameter adjustment is required.
Rich policy templates: The NIP provides the simplest configuration mode for various special scenarios, facilitating the implementation of customized security policies.
Real-time system monitoring and security trend monitoring: The NIP provides tens of analysis reports to present the security status.
Product Specifications
Hardware Specifications(NIP2000)
| Model | NIP2050 | NIP2100 | NIP2130 | NIP2150 | NIP2200 |
|---|---|---|---|---|---|
| Product performance | Low-end Megabit | Mid-end Megabit | High-end Megabit | Low-end Gigabit | Low-end Gigabit |
| Dedicated management port | 1×GE(RJ45) | 1×GE(RJ45) | 1×GE(RJ45) | 1×GE(RJ45) | 1×GE(RJ45) |
| Fixed interface | 4×GE(RJ45) 4×GE(combo) |
4×GE(RJ45) 4×GE(combo) |
4×GE(RJ45) 4×GE(combo) |
4×GE(RJ45) 4×GE(combo) |
4×GE(RJ45) 4×GE(combo) |
| Extension slot | 2×FIC | 2×FIC | 2×FIC | 3×FIC | 3×FIC |
| Extension network port | BYPASS: 4×GE(RJ45) 2Line(LC/UPC) Interface ： 8×GE(RJ45) 8×GE(SFP) |
BYPASS: 4×GE(RJ45) 2Line(LC/UPC) Interface ： 8×GE(RJ45) 8×GE(SFP) |
BYPASS: 4×GE(RJ45) 2Line(LC/UPC) Interface ： 8×GE(RJ45) 8×GE(SFP) |
BYPASS: 4×GE(RJ45) 2Line(LC/UPC) Interface ： 8×GE(RJ45) 8×GE(SFP) |
BYPASS: 4×GE(RJ45) 2Line(LC/UPC) Interface ： 8×GE(RJ45) 8×GE(SFP) |
Hardware Specifications(NIP5000)
| Model | NIP5100 | NIP5200 | NIP5500 |
|---|---|---|---|
| Product performance | Mid-range Gigabit | High-end Gigabit | 10 Gigabit |
| Dedicated management port | 1×GE(RJ45) | 1×GE(RJ45) | 1×GE(RJ45) |
| Fixed interface | 4×GE(RJ45) 4×GE(combo) |
4×GE(RJ45) 4×GE(combo) |
4×GE(RJ45) 4×GE(combo) 2×10GE(SFP) |
| Extension slot | 3×FIC | 3×FIC | 2×FIC |
| Extension network port | BYPASS: 4×GE(RJ45) 2Line(LC/UPC) Interface ： 8×GE(RJ45) 8×GE(SFP) 2×10GE 2×10GE+8GE |
BYPASS: 4×GE(RJ45) 2Line(LC/UPC) Interface ： 8×GE(RJ45) 8×GE(SFP) 2×10GE 2×10GE+8GE |
BYPASS: 4×GE(RJ45) 2Line(LC/UPC) Interface ： 8×GE(RJ45) 8×GE(SFP) 2×10GE |
Functions and Features Specifications
| Model | NIP2000-NIP5000 |
|---|---|
| Server protection | All-round server protection, addressing problems including system and service vulnerability exploits, brute force, SQL injection, and cross site scripting |
| Client protection | Security protection for web browsers and plug-ins (Java and ActiveX)
Protection for files with common formats: PDF, Word, Flash, and AVI Defense against operating system vulnerabilities, detection of infected systems, and detection of spyware and adware |
| Infrastructure protection | Malformed packet attack prevention, special packet control, scanning attack prevention, TCP/UDP flooding attack prevention Application-layer DDoS attack prevention: HTTP, HTTPs, DNS, SIP, and so on Traffic model self-learning: setting the threshold of traffic attacks based on normal traffic statistics |
| Network application management | ² Identification and management of more than 1200 application protocols, covering mainstream application protocols including P2P, IM, online games, stock software, voice application, online video, streaming media, Web mail, mobile terminals, and remote login |
| Device management | GUI-based configuration, hierarchical management, permission-based access control, and centralized device management Periodic upgrade of engine repository, rollback of engine repository, and Intranet upgrade |
| Log | Device status monitoring, event information record backup, log querying and filtering, real-time monitoring of network status, and specialized reports |
| Deployment | Specialized management port: In-line IPS deployment, off-line IDS deployment, and hybrid deployment Hardware bypass and HA |
| Item | description |
|---|---|
| NIP2050-AC-01 | NIP2050 Standard AC Host(4GE(RJ45)+4GE Combo,4G Memory,2 AC Power),with HW NIP Network Intelligent Protection System Software, with 12 Months Knowledge Base Update Service |
| NIP2100-AC-01 | NIP2100 Standard AC Host(4GE(RJ45)+4GE Combo,4G Memory,2 AC Power),with HS NIP Network Intelligent Protection System Software, with 12 Months Knowledge Base Update Service |
| NIP2130-AC-01 | NIP2130 Standard AC Host(4GE(RJ45)+4GE Combo,4G Memory,2 AC Power),with HW NIP Network Intelligent Protection System Software, with 12 Months Knowledge Base Update Service |
| NIP2150-AC-01 | NIP2150 Standard AC Host(4GE(RJ45)+4GE Combo,4G Memory,2 AC Power),with HW NIP Network Intelligent Protection System Software, with 12 Months Knowledge Base Update Service |
| NIP2200-AC-01 | NIP2200 Standard AC Host(4GE(RJ45)+4GE Combo,4G Memory,2 AC Power),with HS NIP Network Intelligent Protection System Software, with 12 Months Knowledge Base Update Service |
| NIP5100-AC-01 | NIP5100 Standard AC Host(4GE(RJ45)+4GE Combo,4G Memory,2 AC Power),with HS NIP Network Intelligent Protection System Software, with 12 Months Knowledge Base Update Service |
| NIP5200-AC-01 | NIP5200 Standard AC Host(4GE(RJ45)+4GE Combo,4G Memory,2 AC Power),with HS NIP Network Intelligent Protection System Software, with 12 Months Knowledge Base Update Service |
| NIP5200-DC-01 | NIP5200 Standard DC Host(4GE(RJ45)+4GE Combo,4G Memory,2 DC Power),with HS NIP Network Intelligent Protection System Software, with 12 Months Knowledge Base Update Service |
| NIP5500-AC-01 | NIP5500 Standard AC Host(4GE(RJ45)+4GE Combo+2*10GE SFP,4G Memory,2 AC Power),with HW NIP Network Intelligent Protection System Software, with 12 Months HW Knowledge Base Update Service |
| NIP5500-DC-01 | NIP5500 Standard DC Host(4GE(RJ45)+4GE Combo+2*10GE SFP,4G Memory,2 DC Power),with HW NIP Network Intelligent Protection System Software, with 12 Months HW Knowledge Base Update Service |
| LIC-IPS-12-NIP2050 | Knowledge Base Update Service Subscribe 12 Months ,with HW NIP Network Intelligent Protection System Software |
| LIC-IPS-36-NIP2050 | Knowledge Base Update Service Subscribe 36 Months ,with HW NIP Network Intelligent Protection System Software |
| LIC-AV-12-NIP2050 | Anti-Virus Update Service Subscribe 12 Months ,with HW NIP Network Intelligent Protection System Software |
| LIC-AV-36-NIP2050 | Anti-Virus Update Service Subscribe 36 Months ,with HW NIP Network Intelligent Protection System Software |
| LIC-IPS-12-NIP2100 | Knowledge Base Update Service Subscribe 12 Months ,with HW NIP Network Intelligent Protection System Software |
| LIC-IPS-36-NIP2100 | Knowledge Base Update Service Subscribe 36Months ,with HW NIP Network Intelligent Protection System Software |
| LIC-AV-12-NIP2100 | Anti-Virus Update Service Subscribe 12 Months ,with HW NIP Network Intelligent Protection System Software |
| LIC-AV-36-NIP2100 | Anti-Virus Update Service Subscribe 36 Months with HW NIP Network Intelligent Protection System Software |
| LIC-IPS-12-NIP2130 | Knowledge Base Update Service Subscribe 12 Months ,with HW NIP Network Intelligent Protection System Software |
| LIC-IPS-36-NIP2130 | Knowledge Base Update Service Subscribe 36 Months ,with HW NIP Network Intelligent Protection System Software |
| LIC-AV-12-NIP2130 | Anti-Virus Update Service Subscribe 12 Months ,with HW NIP Network Intelligent Protection System Software |
| LIC-AV-36-NIP2130 | Anti-Virus Update Service Subscribe 36 Months ,with HW NIP Network Intelligent Protection System Software |
| LIC-IPS-12-NIP2150 | Knowledge Base Update Service Subscribe 12 Months ,with HW NIP Network Intelligent Protection System Software |
| LIC-IPS-36-NIP2150 | Knowledge Base Update Service Subscribe 36Months ,with HW NIP Network Intelligent Protection System Software |
| LIC-AV-12-NIP2150 | Anti-Virus Update Service Subscribe 12 Months ,with HW NIP Network Intelligent Protection System Software |
| LIC-AV-36-NIP2150 | Anti-Virus Update Service Subscribe 36 Months ,with HW NIP Network Intelligent Protection System Software |
| LIC-IPS-12-NIP2200 | Knowledge Base Update Service Subscribe 12 Months ,with HW NIP Network Intelligent Protection System Software |
| LIC-IPS-36-NIP2200 | Knowledge Base Update Service Subscribe 36Months ,with HW NIP Network Intelligent Protection System Software |
| LIC-AV-12-NIP2200 | Anti-Virus Update Service Subscribe 12 Months ,with HW NIP Network Intelligent Protection System Software |
| LIC-AV-36-NIP2200 | Anti-Virus Update Service Subscribe 36 Months ,with HW NIP Network Intelligent Protection System Software |
| LIC-IPS-12-NIP5100 | Knowledge Base Update Service Subscribe 12 Months ,with HW NIP Network Intelligent Protection System Software |
| LIC-IPS-36-NIP5100 | Knowledge Base Update Service Subscribe 36Months ,with HW NIP Network Intelligent Protection System Software |
| LIC-AV-12-NIP5100 | Anti-Virus Update Service Subscribe 12 Months ,with HW NIP Network Intelligent Protection System Software |
| LIC-AV-36-NIP5100 | Anti-Virus Update Service Subscribe 36 Months ,with HW NIP Network Intelligent Protection System Software |
| LIC-IPS-12-NIP5200 | Knowledge Base Update Service Subscribe 12 Months ,with HW NIP Network Intelligent Protection System Software |
| LIC-IPS-36-NIP5200 | Knowledge Base Update Service Subscribe 36Months ,with HW NIP Network Intelligent Protection System Software |
| LIC-AV-12-NIP5200 | Anti-Virus Update Service Subscribe 12 Months ,with HW NIP Network Intelligent Protection System Software |
| LIC-AV-36-NIP5200 | Anti-Virus Update Service Subscribe 36 Months ,with HW NIP Network Intelligent Protection System Software |
| LIC-IPS-12-NIP5500 | Knowledge Base Update Service Subscribe 12 Months ,with HW NIP Network Intelligent Protection System Software |
| LIC-IPS-36-NIP5500 | Knowledge Base Update Service Subscribe 36Months ,with HW NIP Network Intelligent Protection System Software |
| LIC-AV-12-NIP5500 | Anti-Virus Update Service Subscribe 12 Months ,with HW NIP Network Intelligent Protection System Software |
| LIC-AV-36-NIP5500 | Anti-Virus Update Service Subscribe 36 Months ,with HW NIP Network Intelligent Protection System Software |