290 likes | 438 Views
Hamburg Germany. SystoLAN Industrial Security Appliance. SystoLAN. The smallest professionall solution on the market Excelent performance Low price. SystoLAN: Hadware. Based on SystoLAN Gateway Embedded computer Power over PCI
E N D
Hamburg Germany SystoLAN Industrial Security Appliance SystoLAN Security Appliance Systola Mühlenhagen 130 Hamburg Germany
SystoLAN The smallest professionall solution on the market Excelent performance Low price SystoLAN Security Appliance Systola Mühlenhagen 130 Hamburg Germany
SystoLAN: Hadware • Based on SystoLAN Gateway • Embedded computer • Power over PCI • Processor Intel IXP 4xx 266 / 533 MHz XScale with hardware encryption • 2 x Ethernet (10/100 Mbit/s) • 32 / 64 MB RAM • 16 MB Flash • Auto MDIX SystoLAN Security Appliance Systola Mühlenhagen 130 Hamburg Germany
SystoLAN: Firmware • DHCP server and Client • DNS cache • NTP Server and client • SNMP compliance • Dynamic DNS • Syslog client • Systola Secure Linux • Protected File System • Firmware consistency check • Hardware watchdog • Optical display • Firewall • VPN • Modes: Router, PPPoE, PPTP, Stealth • Browser-based administration SystoLAN Security Appliance Systola Mühlenhagen 130 Hamburg Germany
SystoLAN: Firewall • Stateful inspection • NAT • DNAT / SNAT • Configurable rules • Port forwarding • SYN-flood protection • PING-flood protection • Anti-spoofing • Firewall in stealth mode • Firewall for VPN channels SystoLAN Security Appliance Systola Mühlenhagen 130 Hamburg Germany
SystoLAN: VPN • IPsec VPN (DES, 3DES, AES 128,192, 256) • L2TP server (also for MS Windows clients) • Preshared Key or X.509-Certificates • VPN topology: • net to net • net to host • host to host • VPN for dynamic IPs • VPN in Stealth-Mode • NAT-T • Throughput up to 70 Mbit/s (3DES or AES 256) • VPN between overlapping networks SystoLAN Security Appliance Systola Mühlenhagen 130 Hamburg Germany
SystoLAN: Antivirus • Kaspersky Labs Scanning engine • Mail and Web traffic protection • Automatic pattern update • Optional component SystoLAN Security Appliance Systola Mühlenhagen 130 Hamburg Germany
Stealth Mode • Automatic integration in network structures • Automatic configuration • Does not need an IP address • All services continue to run • Firewall • VPN • Antivirus • Impossible to attack SystoLAN Security Appliance Systola Mühlenhagen 130 Hamburg Germany
Firmware: Online Updates • Updates are available through Internet • Integrity check cares for error-free operation • Electronic signature check • Not sensitive to power failures • Update-management over Web-Browser • Direct updates over Internet SystoLAN Security Appliance Systola Mühlenhagen 130 Hamburg Germany
Firmware: Offline Updates • Protected file system • Not sensitive to power failures • Electronic signature check SystoLAN Security Appliance Systola Mühlenhagen 130 Hamburg Germany
Performance for 266 MHz Processor SystoLAN Security Appliance Systola Mühlenhagen 130 Hamburg Germany
Performance for 533 MHz Processor SystoLAN Security Appliance Systola Mühlenhagen 130 Hamburg Germany
Competitor Prices Comparison SystoLAN Security Appliance Systola Mühlenhagen 130 Hamburg Germany
Cisco PIX Prices comparison Comparable to SystoLAN: – Sonicwall Pro 330 (75Mbit/s, 3DES), price 3600 € and Cisco PIX 515 / 525, prices 2800 € and 7380 €, respectively. SystoLAN Security Appliance Systola Mühlenhagen 130 Hamburg Germany
SystoLAN, Application Fields • Industrial network components protection • Remote control and support, ex. automation systems • Branch office connections over VPN • Point-to-Point protection in distributed networks • Common network protection in the Internet SystoLAN Security Appliance Systola Mühlenhagen 130 Hamburg Germany
Application Specials • Security based on an independent hardware system • Specialized hardware solution for special applications • Client-independent • High VPN and Firewall throughput • Automatic configuration in Stealth Mode SystoLAN Security Appliance Systola Mühlenhagen 130 Hamburg Germany
Hardware Solution Advantages vs. Software Solutions • Does not need to integrate into OS – no version problems • VPN for “exotic“ Systems (MSDOS, OS2, Windows NT etc.) • No drivers needed: black-box principle • Optional drivers for Windows and Linux • Security is not bound to a single system • Common security standard also when using different OSes in an Enterprise SystoLAN Security Appliance Systola Mühlenhagen 130 Hamburg Germany
Typical Fields of Usage • Internet-Providers and Communication-Providers • VPN services • Hosting-Providers • Rack-security • Industry • Area security for separate segments • Commercial and governmental companies • Internal / external or distributed network security • System-Integrators • Remote access for technicians and support • Health-care • Connecting medical practitioners to the clinics • POS, lottery, etc. SystoLAN Security Appliance Systola Mühlenhagen 130 Hamburg Germany
GSM/GPRS/UMTS Encryption GPRS / UMTSnetwork Leased Line VPN gateway /Firewall Bank ATM SystoLAN Security Appliance Systola Mühlenhagen 130 Hamburg Germany
WLAN Encryption IPSec VPN tunnles WiFi LAN Internet SystoLAN Security Appliance Systola Mühlenhagen 130 Hamburg Germany
Security in Industrial Fields • Car industry • Machine building • Suppliers • Printing Companies • etc. SystoLAN Security Appliance Systola Mühlenhagen 130 Hamburg Germany
POS Terminal POS Terminal will soon be complex multimedia devices with such interfaces as xDSL, WLAN, etc. POS – Important object with respect to security, often with access to / from a bank. This object needs to be protected. • Requirements • Easy integration • Secure data transfer • High encryption standard • SystoLAN solution • Very small • Hardened design • Low cost SystoLAN Security Appliance Systola Mühlenhagen 130 Hamburg Germany
SystoLAN: Industrial Firewall • Problems • Not enough security • Windows-security problem • Viruses, hackers, espionage, etc. • Industry uses TCP/IP • Common Standard • Uses Windows CE • Connecting Back Office and Production • Industrial Firewall Requirements • Cheap • Industrial standards • Real-Time processing • High security standard • Industrial control systems utilization • SystoLAN Solution • Very small size • System-independent • High performance • SNMP • High reliability SystoLAN Security Appliance Systola Mühlenhagen 130 Hamburg Germany
OEM Solutions • Development of special solutions • Special function integration • Your own corporate design Special Applications SystoLAN Security Appliance Systola Mühlenhagen 130 Hamburg Germany
Integration in other systems Robots ATMs Ecological systems Machinery Integration into non-secured systems WLAN and UMTS – surrounded computers VPN over GPRS / UMTS: wireless connections for ATMs Credit Card Terminals SystoLAN as add-in Module SystoLAN Security Appliance Systola Mühlenhagen 130 Hamburg Germany
SystoLAN PCI • 2 modes: Power over PCI and Ethernet adapter • Power over PCI • In Stealth Mode connects to another Ethernet adapter • Automatic configuration • OS-independent – PCI is only used for powering • Can be used as a router • Ethernet Adapter • PCI is used to transfer data • Drivers for MS Windows, Linux • All SystoLAN functions are accessible SystoLAN Security Appliance Systola Mühlenhagen 130 Hamburg Germany
Future Peek • New features (in development) • Certificate Management • Radius-Authentication • WLAN and GPRS support • Central management console • Traffic management (QoS) • POE (Power over Ethernet), for new Processors SystoLAN Security Appliance Systola Mühlenhagen 130 Hamburg Germany
Conclusion • External connection security with firewall, VPN, Antivirus • Remote Access via VPN • Certificate-based Authentication • High encryption performance • Compatible with Cisco, Checkpoint, Netscreen etc. • Easy management • Excellent price/performance value • High ROI • Innovative technology • Hardware mobile firewall – power over USB • Stealth Mode • Dynamic DNS support SystoLAN Security Appliance Systola Mühlenhagen 130 Hamburg Germany
Hamburg Germany SystoLAN Industrial Security Appliance SystoLAN Security Appliance Systola Mühlenhagen 130 Hamburg Germany