Key Features * Site-to-site packet filtering for access control and limiting network exposure by hosts, subnets, and applications. * Mesh VPN Network deploymet ensures ceaseless connectivity. * Eliminates firewall and NAT traversal issues for minimal changes to the existing network topology. * Use HTTPS service to build up the site-to-site connection without changing the firewall policy. * VPN Concentrator enables BiGuard appliances in a spoke–and-hub architecture to build up the minimum number of VPN tunnels and reduce deployment costs. * Ideal for branches, business partners, suppliers requiring secure site-to-site connectivity. Benefits Higher Levels of Security and Flexibility You can set up a packet filter policy by defining the source and destination IP addresses, or services for each SSL VPN tunnel. Packets will be transmitted or denied according to the access policy, thus providing a more flexible and secure connection for your network management.Central Management and Cost Saving BiGuard EZSiteConnect allows BiGuard SSL routers to be used as a SSL VPN concentrator for several remote gateways, providing centralized management for all VPN tunnels. It also can eliminate the extra costs and administration associated with SSL tunnels. In addition, the Tunnel-All Mode feature allows organizations to redirect all Internet traffic from client to server through a VPN connection. It enables the administrator to set up a network policy for centralized management.Ease of Use and Deployment The BiGuard SSL VPN device can be successfully added to any well-established network and firewall infrastructure to provide a secure remote access solution to the organization with minimal changes to their existing network topology. Since all traffic is routed over HTTPS (TCP port 443), a site-to-site VPN tunnel can transparently pass through the firewall, avoiding NAT traversal problems. BiGuard EZSiteConnect is especially suited for organizations with dynamic site-to-site access environments and eliminates the need to change or configure complex NAT rules on firewalls and routers, and reduces administrative burden and cost of ownership.Reliable Backup Solution Billion BiGuard EZSiteConnect offers a reliable backup solution with mesh VPN by using redundant connections to link all networks to each other. Thus multiple routes are available between any two sites. If the main VPN connection is unavailable, BiGuard EZSiteConnect will automatically turn to another route to assure a constant VPN connection. Hash Algorithms • MD5 • SHA Encryption • AES • DES • 3DES • TLS VPN • One SSL tunnel between any 2-peer sites. • Integrated-operable with BiGuard S remote access user connections Site-to-site Packet Filter • Name and group by network object • Host by IP address • Subnet range • Application by service • Transparent mode Tunnel Connection Type • Persistent tunnel by always-on mode • Manual mode Routing • Static routing VPN Concentrator • Spoke and hub support Device Authentication • Digital certificate • Client self-signed certificate VPN Network Topology • Star • Ring • Mesh Device Firewall Features • Stateful Packet Inspection (SPI) • Denial of Service (DoS) prevention • Packet Filter • Intrusion Detection • URL Filter • Java Applet / Active X / Cookie Blocking High Availability (HA) • Primary and secondary (S3000 / S6000) • Device Redundancy System Management • SNMP / Get only • Easy-to-use web based UI • Local and remote management through HTTP and HTTPS • Multi-language web interface • Remote dial-in configuration (S3000/S6000) • CLI for RS-232 port (S3000/S6000) Logging / Monitoring • Alarm / trap • Web Trend • Status / counters • Tunnel / link status monitoring • Session monitoring • Traffic management & log • E-mail alerts and Intrusion logs • Centralized logs • System log Performance & Capacity • License controlled capacity • Platform dependent performance System Requirements • Available on all BiGuard S series platforms • Requires BiGuard S OS version 3.23a or higher