Cisco ASR1004-20G-SEC/K9 - ASR 1004 VPN+FW Bundle Router Manual de usuario descargar pdf (Pagina 71)

140

141

Cisco Security Services Modules continued

SSL Services Module

This module offloads processor-intensive tasks

related to securing traffic with Secure Sockets

Layer (SSL), increases the number of secure

connections supported by a web site, and

reduces the operational complexity of high

performance web server farms

• Ensures high availability when installed in a

redundant Cisco Catalyst 6500 configuration,

maintaining SSL sessions if hardware failures

occur

• Simplifies security management while encrypting

user data to the web servers, providing privacy,

confidentiality, and authentication using a wide

range of certificates, including Netscape and

VeriSign

• An integrated Content Switching Module or

external load-balancing appliance can load

balance secure HTTPS content requests to

multiple Cisco SSL services modules, maximizing

SSL termination performance and providing SSL

scalability

• Provides the best price/performance ratio

of any SSL accelerator on the market Cost of

maintenance is included in the maintenance

contract of the Cisco Catalyst chassis, providing

cost savings on annual service contracts And

by offloading the processing-intensive SSL

termination burden from the web servers, the SSL

Service Module eliminates the need to purchase

additional servers

Network Analysis Module

This module provides traffic monitoring services

for visibility into network and application usage,

helping network managers troubleshoot delivery

issues, improve the utilization of network

resources, and ease the deployment of new

network services The NAM is available in two

hardware versions, NAM-1 and NAM-2, to meet

diverse network analysis needs in scalable

switching environments

• Includes an embedded, web-accessible Traffic

Analyzer interface that presents both configuration

menus and real-time and historical reports

• Provides visibility into what applications

are running on the network and how they’re

performing, tracking response times and

identifying whether issues are server- or network-

related

• Offers web-based captures and decodes for

anytime, anywhere troubleshooting

• Analyzes the performance of IP-based services,

including VoIP, video, and QoS

Firewall Services Module

This module delivers the fastest firewall data

rates in the industry: 5 Gbps throughput, 100,000

CPS, and one million concurrent connections

Up to four modules can be installed in a

single chassis, offering scalability to 20 Gbps

per chassis Based on Cisco PIX

Firewall

technology, it provides large enterprises and

service providers with unmatched security,

reliability, and performance

• Allows any port on Cisco 7600 or Cisco Catalyst

6500 to operate as a firewall port and integrates

firewall security inside the network infrastructure

• Provides unsurpassed performance to meet

future requirements, scaling to up to 20 Gbps per

chassis without requiring a system overhaul

• Offers the best price/performance ratio of any

firewall, utilizing the familiar, time-tested Cisco PIX

Operating System to reduce the cost of training,

and integrating firewall services into the chassis to

reduce management requirements

• An intuitive graphical user interface (GUI) simplifies

management and configuration, and it’s supported

by the Cisco management framework and by Cisco

AVVID partners for configuration and monitoring

• Virtualized FWSM delivers multiple firewalls on

one physical hardware platform, allowing network

administrators to configure, deploy, and manage

functions as if they were separate devices, while

reducing the cost and complexity of managing

network infrastructure