Allied Telesis AT-AR441S Datasheet

Datasheet |

Operating System

AlliedWare ®
Operating System
AlliedWare Layer 3 Fully Featured
Operating System
AlliedWare is Allied Telesis' feature-rich first
generation operating system. It serves as the
foundation for Allied Telesis' original Layer 3
switches and routers. AlliedWare includes the
functionality, management capabilities and
performance that today's networks demand. As a
standards-based implementation, it also assures full
interoperability with other major network
equipment.
Security
SIF - Stateful Inspection Firewall
Allied Telesis' state-of-the-art Stateful Inspection
Firewall delivers the highest level of security
possible by providing full application-layer
awareness without breaking the client/server
model. Stateful Inspection extracts the state-
related information required for security decisions
from all application layers and maintains this
information in dynamic state tables for evaluating
subsequent connection attempts. It protects
against a wide range of Denial of Service (DoS)
attacks including Ping of Death, SYN/FIN flooding,
Smurf attacks, port scans, fragment attacks and IP
spoofing. E-mail alerts are automatically triggered
when such attacks are detected.This provides a
solution that is highly secure and offers maximum
performance, scalability, and extensibility.
Application Gateways - SMTP Proxy, HTTP
Proxy
The mail proxy inspects SMTP sessions as they pass
through the firewall. By accepting or rejecting
sessions based on source and destination address
rules, abuse of e-mail servers is limited.Typical
forms of e-mail abuse include receipt of unwanted
advertisements, spam, and unauthorized forwarding
of mail.The Web proxy inspects and filters
outbound HTTP sessions as they pass through the
firewall.The proxy can inspect URLs and restrict
cookie activity.
Allied Telesis
Encryption
Advanced Encryption Standard (AES) is an
algorithm that replaces the Data Encryption
Standard (DES) as the Federal Information
Processing Standard for encrypting data.
AES is different from DES and 3DES because it
supports a longer key length and uses different
routines to encrypt and decrypt data. Encryption
algorithms with a long key length are more secure
than those with a short key length.
802.1x
The IEEE 802.1x standard manages port-based
network access. It provides authentication to
devices attached to a LAN port, by initiating a
connection or preventing access from that port if
authentication fails.Valuable for authenticating and
controlling user traffic to a protected network,
802.1x is also effective for dynamically varying
encryption keys. 802.1x attaches the Extensible
Authentication Protocol (EAP) to both wired and
wireless LAN media, and supports multiple
authentication methods, such as token cards,
Kerberos, one-time passwords, certificates, and
public key authentication.
Routing
IPv6
IPv6 is the next generation of the Internet
Protocol (IP). It has primarily been developed to
solve the problem of the eventual exhaustion of
the IPv4 address space, but also offers other
enhancements:
• Addresses are 16 Bytes long in contrast to
IPv4's 4 Byte addresses.
• Globally unique addresses with more levels of
addressing hierarchy, to reduce the size of
routing tables.
• Auto-configuration of addresses by hosts.
• Improved scalability of multicast routing, by
adding a 'scope' field to multicast addresses.
• A new type of address, the 'anycast address, '
which is used to send a packet to any one of a
group of devices.
Standard Features
• - Internet Protocol
IP
• TCP - Transmission Control Protocol
• NTP - Network Time Protocol
•
Trigger Facility
•
Logging Facility
• Scripting
• Web (HTTP) Server and client
• - Simple Mail Transfer Protocol
SMTP
• - Trivial File Transfer Protocol
TFTP Client
• CLI - Command Line Interface
• DHCP - Dynamic Host Configuration
Protocol
• - Simple Network Management
SNMPv3
Protocol
• - Internet Group Management Protocol
IGMP
•
Static Routing
• - Routing Information Protocol
RIP v1,v2
• OSPF - Open Shortest Path First
www.alliedtelesis.com