Introduction - Stormshield SN900 Installation Instructions Manual

INTRODUCTION

Thank you for choosing Stormshield Network. Designed to protect networks of all sizes, Stormshield Network -
SN range appliances are pre-configured: no hardware or software installation is needed and no UNIX
knowledge is necessary, just a user-friendly configuration via a graphical interface.
The Stormshield Network (SN) range consists of ten products:
SN150, SN200, SN300, SN500, SN700, SN900, SN910, SN2000, SN3000 and SN6000.
The architecture of the new-generation SN range was specifically designed to maximize the performance of
the Stormshield Network protection engine. Complex application traffic is therefore inspected at high speed at
the heart of the network and without discernible latency (less than 1 millisecond).
Hardware acceleration for data encryption also anticipates the multiplication of high-speed VPN access.
The SN Firewall allows the definition of incoming or outgoing access control rules. Its concept is simple: any
incoming or outgoing transmission passing through the Firewall is monitored, authorized or denied according
to the rules, packet by packet.
The SN Firewall is based on a sophisticated packet filtering mechanism that provides a high level of security.
All Firewalls integrate the ASQ (Active Security Qualification) technology developed by Stormshield Network
Security. This technology allows detecting and blocking hacking attempts in real time illegal packets, denial
of service attempts, anomalies in a connection, port scans, buffer overflows, etc.
In the event of an intrusion attempt, depending on the instructions given in the security policy, the SN Firewall
blocks the transmission, generates an alarm and stores the information linked to the packet which had set off
the alarm. As such, you would be able to analyze the attack and trace its source.
The Firewall not only allows preventing, or restricting to just certain services, incoming connections on your
network, but also allows monitoring the use of the Internet by your internal users (HTTP, FTP, SMTP...). You
may also monitor your users by authenticating them via an internal or external authentication database.
The SN Firewall also manages port and address translation mechanisms. These mechanisms provide security
(by masking your internal address range) and flexibility (by enabling the use of any private internal
addressing range) and reduce costs (by enabling the provision of several servers on the Internet with a single
public IP address).
Page 11 /59
PRESENTATION AND INSTALLATION GUIDE – SN RANGE
snengde_installation-product-SN-range v1.2 - Copyright Netasq 2015
INTRODUCTION