GRIDtoday Logo Crosswalk

DAILY NEWS AND INFORMATION FOR THE GLOBAL GRID COMMUNITY /

   ( Table of Contents )   

Breaking News - Security:

NetScreen Raises Bar With Next-Generation Security Platform

Continuing its consistent track record of introducing ground-breaking security solutions, NetScreen Technologies Inc announced availability of the NetScreen-ISG 2000, the industry's first integrated security gateway uniquely designed to provide best-of-breed perimeter security functionality protecting against network- and application-level threats, while optimizing performance and decreasing complexity of enterprise and carrier networks.

Unlike other security solution developers' integration approaches that can force customers to make performance and network compromises, NetScreen's new purpose-built system with a modular design and a unique processing architecture -- including NetScreen's new fourth-generation Application Specific Integrated Circuit (ASIC) -- integrates firewall and virtual private network (VPN) technologies and will be able to support integrated intrusion detection and prevention (IDP) functionality. As a result, the NetScreen-ISG 2000 provides exceptional performance as well as flexibility and scalability to combat today's and tomorrow's sophisticated threats.


Web services, utility computing, .NET, CPU harvesting and distributed computing are just a few of the technologies that fall under the Grid computing umbrella. Gt04 -- a premiere enterprise Grid computing conference targeting industrial and commercial users -- will gather experts, and outline strategies and road maps for Grid deployment. For more information, visit www.gt04.com.

Grid computing is here!


The NetScreen-ISG 2000 is ideal for enterprises, carriers and data center operators struggling to efficiently address the increasing volume and sophistication of attacks that are threatening their networks while maintaining performance and balancing limited IT resources and budgets.

"There is an overriding trend to integrate many security functions into fewer devices; however, without the right design and combination of functionality, there can be serious network performance and management drawbacks," said Jeff Wilson, principal analyst at Infonetics Research. "When Netscreen approached this problem, they were very conscious of the integration pitfalls; NetScreen-ISG 2000 is a great example of the successful marriage of management, performance and feature integration."

Unique Processing Architecture

The NetScreen-ISG 2000, capable of 2 Gb per second firewall and 1 Gb per second 3DES/AES IPSec VPN performance, supports up to 8 Gigabit Ethernet interfaces, 28 Fast Ethernet interfaces or a combination of both. It also can support up to 10,000 VPN tunnels, 512,000 concurrent sessions and 30,000 new sessions per second. This performance acceleration is achieved by leveraging a unique combination of flexible processing power that includes dual GHz Central Processing Units (CPUs), field programmable gate arrays (FPGAs) and NetScreen's next-generation ASIC, the GigaScreen3 -- the industry's first programmable ASIC to perform Gigabit-speed, hardware-accelerated AES and 3DES encryption and multi-Gigabit firewall inspection for any packet size.

Doubling the performance from its previous generation ASIC, NetScreen's newest ASIC delivers up to 3 million packets per second (pps) for firewall processing and 1.5 million pps encryption processing with low latency throughput at any packet size, which is critical for complex applications like Voice over IP (VoIP). Additionally, multiple embedded processors accelerate features such as Denial of Service protection and encryption fragmentation, while providing a means of integrating additional features through future software updates.

Further, the NetScreen-ISG 2000 system architecture is uniquely designed to provide wirespeed firewall and VPN packet processing while simultaneously performing policy-based redirection of selected sessions to specific security modules for additional security processing. The GigaScreen3 ASIC can balance sessions across up to three security modules, each with dual GHz CPUs, an FPGA and memory to run the security applications, such as intrusion detection and prevention.

In addition to the unique design of the system, NetScreen-ISG 2000 customers can benefit from the security and networking capabilities built into NetScreen's operating software, ScreenOS, including Deep Inspection firewall technology, dynamic route-based VPN and virtualization capabilities, as well as support for BGP, RIPv2 and OSPF routing protocols that can ease deployment in many complex environments. Also, active/active and active/passive High Availability (HA) options can eliminate a single point of failure and maximize network connectivity and productivity.

"The new, highly scalable NetScreen-ISG 2000 platform represents a new class of product designed to address sophisticated network- and application-level attacks while enabling optimal network performance and minimizing operational overhead," said David Flynn, vice president of marketing for NetScreen. "Its unique processing architecture and modular design are critical to achieving scalable performance and security functionality that can help protect networks now and into the future."

( Top of Page )

   ( Table of Contents )