Installation Manual
H3C SecPath F1000-S Firewall
Chapter 1 Product Overview
1-1
Chapter 1 Product Overview
1.1 Brief Introduction
H3C SecPath F1000-S Firewall is a new-generation firewall intended for enterprise
users. It can act as the egress firewall for small and medium businesses and internal
firewall for large and medium enterprises.
H3C SecPath F1000-S Firewall provides four fixed 10/100/1000 Mbps auto-sensing
interfaces (with two electrical interfaces and two applicable to both optical and electrical
modes). It provides two multifunctional interface module (MIM) expansion slots, which
currently can accommodate 1FE/2FE/4FE/1GBE/2GBE/1GEF/2GEF/SSL module. It
adopts power redundancy solutions (AC+AC), provides inside-chassis temperature
detection, and supports network management and Web configuration to meet the
carrier-class reliability requirements.
It supports multiple attack prevention approaches, TCP proxy, internal network security,
traffic policing, URL filtering, Web page filtering, and email filtering, to effectively
safeguard your network.
It adopts the application specific packet filtering (ASPF) technology to monitor
connection process and malicious commands and works together with access control
lists (ACLs) to implement dynamic packet filtering.
It provides various intelligent analysis and management methods, supports email
alarming and multiple sorts of logs, and provides network management monitoring to
help network administrators perform network security management.
It supports authentication, authorization, accounting (AAA), network address
translation (NAT) , hybrid mode, and object oriented management to ensure security
and guaranteed services for the private networks constructed on the open Internet.
It supports multiple virtual private network (VPN) services, such as Layer 2 tunneling
protocol (L2TP) VPN, IP security (IPsec) VPN, generic routing encapsulation (GRE)
VPN, dynamic VPN, and multi-protocol label switching (MPLS) VPN, as well as
hardware encryption, and allows users to build various VPNs, like Internet, Intranet,
and remote access VPNs using customized remote-user access approaches, such as
ADSL dial-up, virtual LAN (VLAN), and tunneling.
It provides basic routing features, including routing information protocol (RIP), open
shortest path first (OSPF), border gateway protocol (BGP), routing policy and policy
routing, and also provides abundant QoS (quality of service) features, such as traffic
policing, traffic shaping and queue scheduling.
It supports deeper application recognition (DAR) to recognize and classify packets
more deeply, enhancing the control over data flows.
