Enterprise campus networks are facing increasing security issues in applications and services, such as malicious intrusions, Trojan horses, viruses, phishing, overuse of P2P applications, and threats from internal users. These issues impact campus network efficiency and service security. Enterprise networks must provide very high bandwidth for applications such as streaming video. . Increasingly enterprises are using gigabit switches as desktop switches and 10G routers or switches as backbone devices, and many switches and routers provide 10G ports. As more services are deployed on large-scale enterprise networks and the network capacity keeps expanding, traditional security systems have become vulnerability on campus networks and cannot guarantee enterprises' information security.

Security and availability issues can impact an enterprise’s business but traditional desktop security management solutions cannot force users to install an authentication client to effectively prevent attacks. This leaves the enterprise vulnerable to interruption of services and device crashes caused by issues such as information leakage and unauthorized access.

Huawei has a world-leading security capability center and experienced security solution teams. They use carrier-grade security hardware products and versatile software products to provide a user-friendly security solution with the following advantages:

Secures the campus networks while retaining the original user network topologies and devices, and without degrading network performance and reliability.

Provides a better user experience through refined solutions that are easy to deploy and manage.

Supports flexible configuration of security policies and reports and updates them using a cloud knowledge base.

Ensures secure and reliable network operation using a service continuity design, a patented file network fast forwarding technique, and a real-time intelligent security monitoring platform.

The Huawei campus network security solution consists of the following components.

Advantages

Campus Edge Security Solution

• High performance and reliability
• Industry-leading UTM features
• A network integrating routing, switching, Wi-Fi, 3G, and security functions, reducing network construction costs
• Support for flexible expansion and smooth upgrades
• An open Encapsulation Security Protocol (ESP) platform, supporting multi-service expansion

Terminal Security Management Solution

• Terminal security management solution establishes a comprehensive terminal security system by integrating user identification, network access control, terminal security hardening, desktop management, information leakage prevention, asset management, software deployment, remote assistance, and bulletin publish.
• The solution integrates document security and mobile storage device management, providing a comprehensive and end-to-end security solution.

Remote Access Security Solution

• The remote access security solution deploys IPSec VPN and SSL VPN through the Internet to provide secure access for small and medium branches and traveling users.
• The remote access security solution deploys enterprise VPNs on private networks to provide secure interconnection with vertical industries or medium and large branches, implementing secure isolation of services.
• The remote access security solution uses various VPN technologies, such as MPLS VPN, L2TP VPN, SSL VPN, and IPSec VPN, to provide an all-in-one solution that is secure, efficient, easy-to-use, cost-effective, salable, and easy to manage.

Traffic Cleaning Solution

• The traffic cleaning solution is deployed on the enterprise network edge to defend against various DDOS attacks from Internet. This solution involves a detecting center, cleaning center, and management center.
• The traffic cleaning solution offers up to160 Gbit/s attack defense capacity, DPI-based inspection technology, and quick response to attacks in seconds, to ensure secure network operation.

DPI-based Fine-grained Management Solution

• The DPI-based Fine-grained management solution realizes visualized services management by identifying users and applications of campus network.
• The DPI-based Fine-grained management solution offers network traffic analysis and controls applications and user traffic, to reduce network congestions.

iCache Solution

• The iCache devices can work with Huawei DPI devices to combine traffic control and traffic caching. This innovative design prevents low-value traffic from occupying bandwidth of egress link, improving user experience.
• The iCache system platform can identify various protocols and cache traffic of services such as web browsing, HTTP downloading, P2P downloading, and online video.

Huawei campus network security solutions, comprehensive, selective and flexible configuration, work together to reduce enterprises' overall investment on security devices.

Huawei provides customers with integrated services, including security consulting, planning, deploying, and technical support, giving customers an enhanced experience.