Installation Manual
H3C SecPath F100-A Firewall
Chapter 1 Product Overview
1-2
II. Data security and reliability
The H3C SecPath F100-A firewall offers:
z
High network security. ACL-based packet filtering detects data packet at the
network and transport layers to prevent illegal intrusion. Application specific
packet filter (ASPF) detects information about the application layer protocols and
monitors traffic at the application layer.
z
NAT. Other than the basic functions, the NAT also can limit the number of
concurrent connections for an individual user. This eliminates the malicious
resource seizures without any negative impact on general network applications. In
addition, its enhanced NAT application layer gateway (ALG) function provides NAT
traversal for H.323, FTP, ICMP, and so on.
z
AAA and RADIUS user authentication
z
VPN (including GRE, L2TP, and MPLS) with the IPsec and IKE technologies to
guarantee the security of private networks over the Internet.
z
OSPF and RIP2 to offer MD5 authentication and guarantee reliable exchange of
routing information.
z
Virtual router redundancy protocol (VRRP) to provide communication line or
equipment backup in case of failure. This effectively enhances network
robustness and reliability.
z
Deeper application recognition (DAR) to recognize and classify packets more
deeply, enhancing the control over data flows.
z
Active/standby switchover to protect current services against interruption,
eliminating the defects of traditional networking solution, for example, VRRP
networking solution.
III. Online software upgrade
You can upgrade the application and Boot ROM programs online to add features and
extend functions.
IV. Network management
The H3C SecPath F100-A firewall supports SNMPv3 network management
(compatible with SNMPv2c and SNMPv1) and provides powerful device management.
V. Regulatory compliance
Designed according to the standards dominant in China, North America, Europe,
Australia, and Japan, the H3C SecPath F100-A firewall complies with the requirements
of these countries and regions for electromagnetic compatibility (EMC), safety standard,
and network access.