Hillstone T3860 Intelligent Next-Generation firewall board with firewall hardware

Advanced persistent threats, zero-day exploits, and polymorphic attacks routinely bypass traditional signature-based security. Hillstone’s Intelligent Next-Generation Firewall is an application-aware firewall that continuously monitors the network and exposes elusive malware at every stage of the attack. It provides real-time detection and reporting that provide multiple opportunities to stop an attack. It also provides real-time insight into network operations and overall network health. Hillstone’s Intelligent Next-Generation Firewall is designed for mid to large-sized enterprises. It enhances enterprise security, continuity, and visibility while reducing operational cost.

Product Highlights

Behavior Reputation Index for Proactive Threat Protection
Perimeter security devices are given one imperfect chance to stop an attack. If they fail in that attempt attackers are free to begin their exploits and perimeter defenses will be completely blind to that activity. Consequently, all organizations have infected hosts
inside their networks.

Hillstone’ s T-Series Intelligent Next-Generation Firewall continuously monitors the devices connected to the network. It uses machine learning to establish a baseline of normal network activity and it uses big data analytics and mathematical modeling to detect anomalous behavior that represents attacks at multiple stages in the attack lifecycle. This information is displayed on an intuitive dashboard and provides the user with multiple opportunities to stop the attack.

Hillstone’ s T-Series Intelligent Next-Generation Firewall can identify attacks on all operating systems, applications, devices and browsers. It provides visibility into every stage of an ongoing attack from initial compromise to the exfiltration of data. It prioritizes hosts with the greatest security risks and provides contextual information about the threat. Security administrators can drill-down into the attack, including packet captures, to analyze all threat details. Hillstone’ s reporting provides an audit trail of the progression of attacks over time.

Network Health Index for Security Risk Management

Hillstone’s patented Network Health Index quantifies the health status of your network. It monitors threat information, application
utilization, Internet access, device utilization, network nodes and associated services to calculate the overall health of the network. It provides a multi-dimensional real-time assessment of your network’ s availability, risk factors, and developing threats. An intuitive
dashboard allows IT to make timely security policy adjustments to mitigate threats and maintain network uptime.

Superior User Experience

Hillstone’ s Intelligent Next-Generation Firewall provides visibility and control of: network applications, network traffic, users and groups, bandwidth utilization, network health, malicious activity, abnormal behavior, risk factors, developing threats and many more network and security attributes. It provides extensive tools for monitoring, reporting, logging, provisioning, and operations management.

Intelligent Multi-Vector Processor Architecture (iMVP)

Hillstone’ s Intelligent Multi-Vector Processor Architecture (iMVP) employs multi-dimensional parallel processing via a multi-core
security processor running in parallel with Intel x86 processors. Multi-core processors handle data forwarding, next generation
security and related functions. Intel x86 processors handle data mining and correlation for intelligent analysis and presentation of
Behavior Risk and Network Health indices. The system delivers superior performance for data transfer, threat protection, data
analysis, device management and visibility into security anomalies.

Product Functions

Network

Firewall

Application Identification and User Identification

• Application identification based on signature, behavior and associated information
• Application signature database can be updated online in real-time
• Supports user identification through Local, AD, LDAP and Radius authentication servers
• Application identification enhanced by Hillstone Stone Cloud services
• User visibility and management based on user role and organization
• Single Sign-on

Product Functions

Network Health Index (NHI)

• Actively monitors CPU utilization, memory utilization, storage, chassis temperature, CPU temperature, new session per
• second, concurrent sessions, interface traffic, SNAT port utilization and other resources
• Actively monitor the connectivity and availability of service links and nodes
• Actively monitor key services, e.g., Web, Mail, FTP, LDAP, DNS, etc.

Behavior Reputation Index (BRI)

• Host and sever behavior baseline by machine-learning
• Risky host and sever identification
• Advanced threat detection and alert
• Behavior reputation evaluation for users and servers

Threat Prevention

• Network layer attack prevention
• Application layer attack prevention
• Malware download prevention
• Trojan prevention
• Web attack prevention
• Malicious web site access control

VPN

• Supports standard IPSec VPN protocols
• Supports SSL VPN (Optional USB-key)
• Creative PnP VPN® (plug-and-play VPN)
• Supports L2TP over IPSec VPN
• Supports IOS and Android SSL VPN

Load Balancing

• Supports bidirectional load balancing
• Supports proximity detection and SmartDNS

Intelligent Quality of Service (iQoS)

• Tunnel allocation based on security domain, interface, address, user/user group, service/service group, application/application group, TOS, VLAN
• Supports embedded two layers and eight tunnels
• Supports maximum bandwidth cap and minimum bandwidth guarantee on multi-level tunnels or on a per IP/user basis
• Supports differentiated service according to priority
• Flexible allocation of remaining bandwidth according to priority

Analysis and Diagnostic

• Multi-vector full-scale threat detection based on security domain, interface, service, application, user and timeframe
• Package path detection tool graphically depicts packet flow in every module, based on inline inspection, simulated inspection and import detection
• Supports inline packet capture

Visibility

• Real-time and historical views of CPU, memory, traffic, sessions and other system resources
• Real-time user traffic, concurrent sessions and new sessions displayed in pie chart, histogram or trend line
• Business link connectivity and service availability
• Real-time tunnel traffic in pie chart, histogram or trend line
• Real-time warning information
• Historical data comparison and analysis based on user, application and other dimensions
• Real-time visibility of known and unknown threats
• Supports geographic location of threats
• Real-time monitor and chart visibility for risky host and server
• Host and server behavior baseline monitor

Log Auditing

• Logging and auditing of system events, warnings, network traffic and configuration
• Logs may be exported to the console, log server, email, files or terminals

Reporting

• Report on demand or generate periodic reports by date, week and month
• Supports summarized reports of application, traffic, threat and behavior
• Support HTML and PDF report format
• Upload reports automatically or by email and FTP

Product Specification