|
| ||||||||||
| Home | Products | Comparison | Support | About | Contact | Press | |||||
|
|
| ||||||||||
| Home | Products | Comparison | Support | About | Contact | Press | |||||
| Vigor 2950 High Performance Firewall | Enterprise | |||
 |
|
|||
|
The Vigor 2950 Security Firewall combines Internet security, high throghput and high capacity VPN capabilities. For remote teleworkers and inter-office links, the Vigor 2950 can support up to 200 simultaneous VPN tunnels. Encryption and authentication is all handled by a dedicated VPN co-processor, thus maintaining maximum router performance. The Vigor 2950 also provides high-security firewall options with both IP-layer and content based protection. |
 Two Megabit WAN Ports & Five Gigabit LAN Ports |
| For Internet connectivity protection, the Vigor 2950 has two Ethernet WAN ports which can be used in failover mode (secondary ISP used if the primary ISP fails) or in load-balancing mode, where the two ISPs can share the Internet loading. Specific rules can be set for routing traffic via specific WAN connections, or automatic balancing will make best use of resources |  |
With a Vigor 2950 and a pair of Vigor 100 modems, you can have a complete
load balancing or failover solution using multiple ADSL lines.
DrayTek routers' traditional VPN methods (for example IPSEC) provide reliable and secure access between branches, head offices or teleworkers. A remote client can connect using a computer's software VPN client or another VPN capable router. This uses IPSec, PPTP, 3DES, AES etc. This works well for site locations which you operate, or homes/offices where you can choose the hardware, but cannot be used on public computers (e.g. Internet Cafes) where you cannot install additional hardware/clients or the configuration has been firewalled/locked down.
SSL (Secure Socket Layer) is the encryption system used for Secure web sites; the method which makes the padlock symbol appear on web sites. As secure web sites are so commonly used by all users, they are always allowed (not blocked) by web cafes, wireless hotspots, hotels or other public access points. Therefore, SSL can be used where regular VPN methods are blocked and doesn't require any client configuration or hardware changes.
In its simplest implementation, DrayTek's SSL VPN lets you open your web browser at your remote location and enter the IP address, URL or DDNS name or your head office (where the Vigor2950 is installed). The padlock symbol appears in your browser to show that the page and communication will be encrypted. You enter your username and password which has been set up for you on the Vigor. Once you have been verified, the Vigor will display to the remote user a list of permitted web-based services (e.g. your company Intranet, internal webmail etc). This type of connection is very easy to set up and is called a 'clientless' connection as no VPN client software is needed; it's just using your web browser to access web services on your remote network.
SSL TunnelSSL Web Proxy (above) works really well for web based services (those you view normally in your web browser), but more commonly your remote access will be used for remote desktop, directory shares, mail server access or other IP based applications. For this, the Vigor provides a full SSL tunnel at the 'sockets' layer. This is an ActiveX component, automatically downloaded by your web browser from the Vigor. Once downloaded, your PC creates a full tunnel between your PC and the remote (host) network. Across this you can run all of your normal IP services. It's still using SSL (SSL 3.0 128 bit encryption), so should pass through all public firewalls, NAT systems or other impediments. |
|
To help understand the difference between SSL Web Proxy and SSL Tunnel, imagine that you have an internal web server running on your head office LAN. This is a private web server for staff use only (an Intranet, not for general public access). Clients within the HQ can access the Intranet locally. Regular VPN (PPTP/IPSec) users can access the web server through their VPN.
The remote user (say, in a web cafe) can access the web server securely using SSL Web Proxy. He would do so within his web browser, using a URL in the form https://myoffice.com/webproxy/192.168.1.10. That isn't an actual working example as the actual URL is generated by the web proxy system automatically after you log in, however note that the actual secure site address is the WAN IP address or URL of your head office (myoffice.com in this example).
You can also use the SSL tunnel method to access the same internal web server at your head office. The difference is that with a full SSL tunnel your browser automatically downloads and installs the Vigor ActiveX client which creates a SSL layer tunnel. Once done, you can access remote resources at your head office by their actual IP address, not a proxy. If its the same web server as above, this means you can now browse directly to http://192.168.1.10.
The above comparison chart is provided for approximate guidance; please refer to the full specification of each model for the exact product capabilities. E&OE. ©2008