Installation Manual
H3C SecPath F100-A Firewall
Chapter 1 Product Overview
1-1
Chapter 1 Product Overview
1.1 Overview
H3C SecPath F100-A Firewall, developed by H3C Technologies, is a new-generation
firewall designed for enterprise users. It can work both as an egress firewall for small
and medium businesses and as an internal firewall for midsize enterprises.
H3C SecPath F100-A firewall provides four 10/100 Mbps autosensing LAN interfaces,
three 10/100 Mbps autosensing WAN interface and one MIM expansion slot which
supports multiple VPN access types and can accommodate the 1FE/2FE/4FE and
HNDE modules.
H3C SecPath F100-A firewall applies ASPF status detection technique to monitor
connection process and malicious commands and works together with access control
lists (ACLs) to implement dynamic packet filtering.
H3C SecPath F100-A firewall supports authentication, authorization, accounting (AAA ),
network address translation (NAT), hybrid mode, object oriented management, and
flow logging to ensure security and guaranteed services to the private networks
constructed on the open Internet.
H3C SecPath F100-A firewall supports multiple virtual private network (VPN) services,
such as layer 2 tunneling protocol (L2TP) VPN, IP security (IPsec) VPN, generic routing
encapsulation (GRE) VPN, and dynamic VPN, and allows users to build various VPNs,
like Internet, Intranet, and remote access VPNs using customized remote-user access
approaches, such as dial-up, leased line, Virtual LAN (VLAN), and tunneling.
H3C SecPath F100-A firewall provides basic routing features, including the routing
information protocol (RIP), open shortest path first (OSPF), routing policy, and policy
routing, as well as abundant QoS (quality of service) features, such as traffic policing,
traffic shaping, and multiple queue scheduling policies.
H3C SecPath F100-A firewall offers these main features:
I. IP VPN solution
Networks benefit enterprises in many ways; company headquarters can send important
information to its branch offices quickly and conveniently. To interconnect the intranets
of a company over the Internet, however, you need VPN technologies. The H3C
SecPath F100-A firewall provides abundant IP VPN services: L2TP and GRE provide
Layer 2 and Layer 3 tunneling respectively; IPsec provides tunnels encapsulated with a
security protocol.
