1 www.namviettelecom.com

SO SÁNH SWITCH BẢO MẬT CỦA HanDreamnet(HDN) VÀ

SWITCH CỦA CISCO

Namviet Telecom Ltd Song Tran

+84 903212322.

2

SG2024G Catalyst 2960S-24TS

Hardware &Interface

Power Internal power redundancy External RPS

10/100/1000Base-T 24 24

1000 Base-X 4 4

Performance

Capacity/Forwarding Rate 48 Gbps / 71.4 Mpps 176 Gbps / 42 Mpps

Flash / DRAM 64M / 256M 64M / 128M

MAC address 32k 8k

Layer 2

STP/RSTP/MSTP/PVST+ / PVRST+ Yes Yes

Port Redundancy Smart Port Redundancy Flexbile Link

Voice VLAN Yes Yes

Ring Protocol Yes No

UDLD, Cable diagnostic (TDR) Yes Yes

QoS Queue per port 8 4

Security

L2/L3/L4 ACL , ACL, Time based ACL, VLAN ACL Yes Yes

DHCP Snooping, IPSG Yes Yes

802.1x (Multi user, MAC bypass…) Yes Yes

Management

Stacking No Yes

CDP, DHCP Server, SNMPv1/2/3, TACACS+, RADIUS, IPv6 management, LLDP, LLDP-MED

Yes Yes

Flow Monitoring sFlow No

Spec comparison – Cisco(excluding security)

3

SG2024G Catalyst 2960S-24TS

Securityfeatures

DoS, DDoS, Flooding, Scan Attack OK N.A.

Set up/Release security policy automati-cally OK N.A.

Real time report while Drop Attack traf-fic OK N.A.

Real time log & history for dropping at-tack on CLI OK N.A.

IP Spoofing attack OK N.A.

ARP Spoofing attack OK N.A.

NetBios flooding attack OK N.A.

Worm_port_Attack attack OK N.A.

TCP/UDP/ICMP DoS/DDoS_Attack OK N.A.

TCP SCAN_Attack OK N.A.

TCP/UDP/ICMP Flood_Attack OK N.A.

TCP Syn Flood Attack OK N.A.

Loop detection OK N.A.

Security features comparison – Cisco

4

Comparison - features

5

Detectable Attack List by Security SwitchNo. Attack Type Protocol Description Attack Name

1 DoS Attack

TCPUDPICMP

Attacker kept sends bunch traffic to a specific target based on well known port

DoS Attack

IGMPAttacker kept sends multicast traffic to the pier fast.

2IP Spoofing At-tack

- Attacker sends packet after falsifying SRC IP. DDoS(IP Spoofing)

3IP Spoofing At-tack

ARPAttacker sends ARP Packets with reliable IP and attacker MAC.

ARP Spoofing

4Host scan attack (IP Scanning)

TCPUDPICMP

Attacker sends TCP, UDP, ICMP request to all reachable Host on the network.

Scan AttackScan Flooding

5 Port Scan AttackTCPUDP

Sending port scan packet to the target host. Port Scan

6Host Random Flooding Attack

TCPUDPICMP

Sending packets with any IP address to the tar-get UDP, TCP ports.

Random Attack

Flooding packets which are abnormal value on destination port / source port of TCP or UDP.

Random Flooding

7ICMP Redirect At-tack

ICMP Sending ICMP redirect packet to the target host ICMP Redirect Attack

8 ARP Attack ARPAttacker kept sending ARP Packet to the destina-tion fast.

ARP Attack

9 Broadcast Attack IPSending Broadcast packet fast to all host on the network

Broadcast Attack

10 MAC Flooding -Sending random source MAC Address to run out ARP table

MAC Flooding

11 Self-Loop - Packet Loop Self_Loop

12 HOST Drop - An attacker kept making 10 different attack HOST Drop

6

CSA SecuritySwitch

Run at the access level

Block un-authorized user etc.

Common

Cisco CSA Solution

Zero Update Protection

Dynamic protection for unknown

threat

Reduce downtime through applying

the urgent patch

Behavior based protection

Need company policy in-advance

Check all application’s behavior

Block the user access who is not

complied to company policy

Others

Protect from malicious code

through Signature-Based Antivirus

HDN Solution

Switch features

L2/L3 Switch

PoE/PoE+

Looping detection

Detect/Drop harmful traffic

DoS/DDoS attack

ARP Spoofing attack

Scanning / Flooding attack

Smart Protection

VNM(Visual Node Manager) –

total management tool

HDN Security Switch vs Cisco NAC

7

Please enter username:

devicesecurity

networksecurity

identity

SiSi SiSi

NAC

Network Admission Control (NAC) is a solution that uses the network infrastructure to ensure all devices seeking network access comply with an organization’s security policy

• Cxx Clean Access ServerServes as an in-band or out-of-band device for net-work access control

• Cxx Clean Access ManagerCentralizes management for administrators, support personnel, and operators

• Cxx Clean Access AgentOptional lightweight client for device-based registry scans in unmanaged environments

CSACS-1121-K9

ACS 1121 Appliance With 5.x SW And Base li-cense

$14,995

NAC3315-100-K9

NAC Appliance 3315 Server -max 100 users

$8,990

NACMGR-LTE-K9

NAC Appliance 3315 Manager -max 3 Servers

$8,990

HDN Security Switch vs Cisco NAC

8

Comparison Summary

Cisco Switch HDN Switch

Cisco SwitchCSA

Cisco Prim LMSHDN Switch

1. Switch

2. Security

:

:

Cisco HDN VNM3. Mgmt :

9

TẠI SAO NÊN CHỌN SWITCH CỦA HDN?

Là giải pháp bảo mật cứng cho Access Layer sử dụng công nghệ

xử lý tiên tiến nhất hiện nay MDS Security ASIC (Multi-Dimension

Security engine)

Tự động phát hiện và chặn các gói tin chứa mã độc -> không

chặn Port

Tự động phát cảnh báo khi phát hiện sự cố bất thường

Ghi log và hỗ trợ giám sát qua VNM

Hiệu suất tuyệt vời với tính năng bảo mật giúp mạng LAN ổn

định 24/7

Dễ dàng quản lý và giám sát tình trạng mạng LAN theo thời gian

thực.

Chi phí hợp lý (không đắt hơn Switch thường của Cisco)

Ngoài việc bảo vệ thông tin an toàn, chống xâm nhập và đánh

cắp thông tin bởi Attacker/Hacker thiết bị còn tự động cảnh báo

và cô lập khi cáp bị loop.

Nếu mạng máy tính của Công ty bạn thường xuyên gặp tình

trạng khi vào mạng rất chậm, ứng dụng mạng chạy cứ đơ đơ… thì

là lúc bạn nên quan tâm tới giải pháp của HDN. Need more ?

Please contact songk38@gmail.com