GRIDtoday Logo IBM

DAILY NEWS AND INFORMATION FOR THE GLOBAL GRID COMMUNITY / APRIL 21, 2003: VOL. 2 NO. 16

( Previous Article )   ( Table of Contents )   ( Next Article )

Breaking News - Security:

WatchGuard Deploys Firebox V200 Firewall Appliance

WatchGuard Technologies, Inc., a leading provider of Internet security solutions, announced the Firebox V200, which delivers a combination of performance, functionality and value superior to other multi-gigabit integrated firewall and VPN concentrator solutions available today. The Firebox V200 extends WatchGuard's line of high-performance Firebox Vclass security solutions, and is designed to eliminate the need for multiple appliances in environments requiring multi-gigabit throughput, providing a cost-effective, easy-to-implement security solution for distributed enterprises and service providers.

Based on WatchGuard's intelligent custom security ASIC architecture, the Firebox V200 delivers 2 Gbps firewall throughput and 1.1 Gbps 3DES VPN throughput, supports up to 40,000 VPN tunnels and manages 500,000 sessions concurrently.

The Firebox V200 features High Availability Active/Active load sharing, which effectively doubles network throughput by allowing two like-model systems to pass traffic simultaneously, as well as High Availability Active/Passive stateful failover capability, which provides transparent transition to another system in the event of a failure. With its multi-tenant capability, the Firebox V200 provides greater flexibility by enabling enterprises to set up virtual firewalls for individual departments, business partners or employees.

"There's a clear market need for a multi-gigabit firewall/VPN solution in the distributed enterprise space," said Eric Ogren, senior analyst at Yankee Group. "By leveraging its intelligent ASIC technology to extend the Firebox Vclass product line, WatchGuard is well-positioned to capitalize on this need and provide enterprise customers with a high-performance system that can replace the traditional multiple-appliance solution."

"Other security appliance vendors talk about the benefits of ASIC architecture, but we're delivering those benefits now in the Firebox V200," said Jean Nassar, senior vice president of marketing for WatchGuard. "There's nothing else available that delivers the reliable performance, security, features and VPN scalability of the Firebox V200 at this price point. Our intelligent ASIC architecture enables us to provide a solution that sets new standards today and to quickly meet future market requirements on a multi- function security appliance platform."

Intelligent Custom Security ASIC and Cut-Through Architecture

The Firebox V200, like the entire Firebox Vclass line, is based on WatchGuard's intelligent security ASIC architecture that is designed to eliminate system bottlenecks, increase performance and scalability, improve network security and control, and adapt quickly to the changing needs of a rapidly-evolving market. Most firewall and VPN solutions today -- even those using traditional first generation security ASIC technology -- use the host CPU and system bus for operations such as firewall policy enforcement, Network Address Translation (NAT), load balancing, packet classification and look ups, which can have a significant impact on performance in real-world environments. WatchGuard's Vclass products employ a "cut-through architecture" that bypasses the system bus by using embedded RISC processors built into the ASIC to provide:

  • Up to 2 Gbps of firewall throughput
  • 40,000 VPN tunnels
  • 500,000 simultaneous sessions
  • Multi-tenant support for advance VLAN tagging and user domains
  • Advanced routing protocols such as OSPF
  • Server load balancing with six different algorithms for up to 16 servers
  • Advanced load sharing and fail over/redundancy

The four embedded RISC processors in the intelligent security ASIC can be programmed with additional functions such as packet classification, load balancing and routing, adapting to emerging business requirements while a first-generation ASIC must be designed from the ground up to address the same needs.

In addition to the Firebox V200, WatchGuard's Firebox Vclass product line includes the Firebox V100, V80, V60, V60L and V10 models.

( Top of Page )

( Previous Article )   ( Table of Contents )   ( Next Article )