《信息安全产品市场分析》由会员分享，可在线阅读，更多相关《信息安全产品市场分析（64页珍藏版）》请在金锄头文库上搜索。
1、CONFIDENTIAL信息安全产品市场分析AmericasSalesConferenceJuly15-16,2016ConfidentialRev 121CONFIDENTIAL提纲美国销售队伍的回馈Fortinet竞争对手网关型防病毒产品Firewall/VPN集成多种功能的设备BackupslidesCONFIDENTIAL在美国我们与谁在竞争？NetScreen?Cisco?CheckPoint?TrendMicro?Symantec?SonicWALL?WatchGuard?TippingPoint?Others?CONFIDENTIAL产业分析师如何对Fortinet进行分析的？“
2、Fortinet”过滤病毒过滤病毒这样对通讯数据包进行这样对通讯数据包进行重组和过滤要求很高的重组和过滤要求很高的网络处理技术，证实其网络处理技术，证实其投资价值。投资价值。CONFIDENTIAL没有对手的安全解决方案基于软件的基于ASIC的 FirewallVPNIDS/IDPContentFilteringAnti-Virus应用层网络层CheckPoint CiscoISSWebSenseMcAfee, Trend, Network AssociatesSymantec(5X00)NetScreen SonicWall, WatchguardIntruvert (NET), Recou
3、rse (SYMC)正在申请十一个专利CONFIDENTIAL防病毒网关产品Fortinet产品:最佳的防病毒网关非常高吞吐量,高性价比CONFIDENTIAL防病毒网关500用户特点特点FortinetFortiGate-300Aladdin eSafeCipher-TrustIronMail 110Deep BlueDefenderFinjan SurfinGatefor EmailMcAfee e500OsitisAV-Stripper价格价格$5,995$13,599$25,075$5,995$20,030$14,696$16,493功能功能FW/VPN/IDSAV/CF/TSAV/C
4、FAV/CFAV/CFAV/CFAV/CFAV/CFInlineYESNoNoNoNoNoYes吞吐量吞吐量HIGHVerylowVerylowVerylowVerylowVerylowLowSMTP/POP3/IMAPHTTP/FTPAV 引擎引擎ProprietaryeSafeSophosRAVMcAfeeMcAfeeTrend内容引擎内容引擎ProprietarySurf-ControlProprietaryProprietaryProprietarySurf-ControlSecure策略策略: User/Group/WorkstationCONFIDENTIALTrendMicroI
5、nterScan功能:AV;有eManager和其他Trend产品,有email内容过滤(基于关键词)and反垃圾邮件一般基于病毒扫描服务器的性价比非常低当扫描HTTP时，低于4Mbps吞吐量(运行在NT/Solaris服务器);价格US$12,000(500用户许可证)+服务器没有整合firewall,VPN,(N)IDS,WEB内容过滤当前销售重点:EnhancedEnterpriseProtectionStrategy(EPS)病毒和蠕虫防御的产品、服务和集中管理涉及web、文件、和信息服务器的防御服务TheFortinetresponse我们FortiResponse升级分布体系提供优
6、秀的服务来保护企业和组织避免危害性很强的病毒。CONFIDENTIALFirewall/VPN竞争对手NetScreenSonicWALLCiscoPIXVPNConcentratorCheckPointWatchGuard/RapidStreamCONFIDENTIALNetScreen介绍NetScreen(Nasdaq:NSCN)成立于1997500个员工firewall/VPN市场的领导者2002年收入:$138.5Mil.03年第一季度收入:$58.32003收入目标:$237Mil.庞大的产品线提供高性能的firewall和VPN一年前购买了IDS公司OneSecure目前有独立I
7、DP产品,没有整合CONFIDENTIAL新消息NetScreen目前已经公布了NetScreen-5GT,其内建了对TrendMicroAV支持(可选).基本上废弃了NS-5XT目前还没有投入到市场NetScreen已经宣布产品线（除了NS-5GT）都通过FIPSlevel2认证和CommonCriteriaEAL4的认证,停产NS-100和NS-1000.CONFIDENTIALNetScreen优点:高性能低端产品价格中等产品系列很大相对友好的用户界面目前发布NetScreen-5GT内置TrendMicroAV有很好的“高端”特点(OSPF,Vsys,Vrouter)CONFIDENT
8、IALNetScreen对比：只支持FW/VPN(没有AV,CF等等.)设计结构没有增加内容过滤(病毒扫描,内容过滤,高效NIDS)的余地高端产品是非常贵(Netscreen-5200=$69k-$209kUSD)FW/VPN产品线攻击防御仅仅涉及了31种攻击购买了OneSecure一年后,整合IDP的FW/VPN还没有发布.CONFIDENTIAL如果要达到FortiGate产品功能需要哪些产品如果要达到如果要达到FortiGate-60功能功能, NetScreen-5XT用户需要用户需要:价格价格:NetScreen-5XTElite$1,195NetScreen-IDP10$7,995
9、病毒网关解决方案，比如TrendMicrosInterScanVirusWall(50users)$1,500内容过滤，比如说WebSense(50用户)$1,000to$1,500综合方案价格综合方案价格:$11,500FortiGate-60 (不限用户数不限用户数)$1,495CONFIDENTIAL如果要达到FortiGate产品功能需要哪些产品如果要达到如果要达到FortiGate-300功能功能 , NetScreen-50用户需要用户需要:价格价格:NetScreen-50$6,995NetScreen-IDP100$16,495病毒网关，比如说McAfeese250$5,995
10、内容过滤，比如说WebSense(300-400用户)$3,000to$4,000综合方案价格综合方案价格:$32,000FortiGate-300$5,995CONFIDENTIAL如果要达到FortiGate产品功能需要哪些产品达到达到FortiGate-3600功能功能, NetScreen-5200用户需要用户需要:价格价格:NetScreen-5200$69,000NetScreen-IDP500$34,995病毒网关解决方案，比如说McAfeese1000$20,000内容过滤解决方案，比如说WebSense(1000users)$5,000to$7,000综合方案价格综合方案价格
11、:$130,000FortiGate-3600$29,995CONFIDENTIAL如何针对NetScreen进行销售和NetScreen的Firewall-VPN相比，Fortinet病毒防火墙提供更多、更强的功能，构成了一个完整的网络安全解决方案整个产品线的价格、功能和性能综合起来要明显地要好超级系统架构即支持网络层安全又支持病毒和内容超级系统架构即支持网络层安全又支持病毒和内容过滤这样的应用层安全，过滤这样的应用层安全，它很好支持了内容层的扫描。而NetScreen的架构已经为其他厂家所模仿。CONFIDENTIALNetScreenFirewall/VPN产品型号型号NS-5XPNS-
12、5GTNS-5XTNS-25NS-50NS-204NS-208目标市场目标市场Tele-CommuterSOHOSOHOSmallEnterpriseMediumEnterpriseMedium-LargeEnterpriseMulti-zoneEnvironment端口端口210/100510/100510/100410/100410/100410/100810/100FW/3DESMbps20/1375/2070/20100/20170/50400/200550/200价格价格 $495-995$595-1,095$695-$1,195$3,495$5,995$9,995$14,995NS
13、-500ES/SPNS-5200NS-5400LargeEnterpriseCarrier,DataCenterCarrier,DataCenter810/100,or8miniGBIC,or4GBIC8mini-GBIC,or2MiniGBIC,2410/10024Mini-GBICor6Mini-GBIC,7210/100700/2504G/2G12G/6G$25-40k/$60-65k$69k-209k$99k-239kModelTargetMarketInterfacesFW/3DESMbpsPrice $CONFIDENTIALSonicWALL介绍SonicWALL(Nasdaq:
14、SNWL)于1991成立.制造和生产一系列网络安全产品生产firewall/VPN,目标市场主要是SOHO/SMBQ1/03收入下降28%，为$20.3MilCONFIDENTIAL新消息?SonicWALLsFirmware6.5包括与Cerberian内容过滤整合一起.SonicWALL内置了12种分类SonicWALL整合的Cerberian是不能扩展的。产品仅仅提供5,10,25,50和不限用户(估计低于100).价格非常低，$15-$7perseatCONFIDENTIALSonicWALL产品线GX 250GX 650largeenterprisedatacenter200/192
15、1.67G/285$5,995$9,995型号型号SOHO3TELE3TELE TZ/TZXTELE SPPRO 100PRO 230PRO 330目标市场目标市场10,25,50userversionstele-commuterTelewithaDMZ,“X”mean4portswitchIntegratedfailoveranalogmodem,POSmarketsmallbusiness/branchofficemediumenterprisemedium-largeenterpriseFW/3DES Mbps75/2075/2075/2075/2075/20190/25190/45Pr
16、ice $495-$1,330$495$545/$595$645$1,695$1,995$2,795Model目标市场目标市场FW/3DES MbpsPrice 基本上以这两种产基本上以这两种产品为主，他们折扣品为主，他们折扣在在60%左右左右.CONFIDENTIALSonicWALL前景:典型的低价解决方案非常好的SOHO/TelecommuterFirewall/VPN解决方案内置了基本CerberianURLfilteringGUI比较容易使用硬件加速的加密体系CONFIDENTIALSonicWALL对比:配置的图形界面功能非常有限即使努力提高吞吐量，SonicWALL性能也是很低的
17、只是强制执行病毒升级策略(不是网关扫描)攻击防护非常有限(攻击特征值非常有限)仅仅是过滤URL(不支持关键字)不支持多个安全区以“低性能防火墙”出名，就是价格便宜CONFIDENTIAL如何针对SonicWALL销售VPN性能低下3DES吞吐量:20Mbps285Mbps70%产品架构是相同的,有许可证需要购买，不能扩展.我们有非常强劲的功能，比如说，AV,IDS/IDP和内容过滤.生意伙伴和终端用户认为其防病毒机制是很差的(通常是即使病毒库已经升级，仍不让访问internet)对于低端市场,FG-50和FG-100性能好，而且界面容易使用(参考PC Magazinearticle)CONFI
18、DENTIALCisco介绍Cisco(Nasdaq:CSCO)于1984成立员工:34,500Cisco是网络界全球领导者Q3/03收入:$4.6BillionCiscos主要的安全产品是支持firewall/VPNs的PIX系列.CONFIDENTIALCisco安全产品线ModelPIX 501PIX 506EPIX 515EPIX 525PIX 535 目标市场目标市场Tele-CommuterRemoteOffice/BranchOfficeSmall-MediumBusinessEnterprise/ServiceProviderEnterprise/ServiceProvider
19、FW/3DES Mbps10/3*20/16*188/63*360/70*1G/100*Price $1,295*$1,695$7,995*$18,495*$45,000*VPN Concentrator 3000 seriesVPN Concentrator 5000 seriesLargeOrganizationVPNsolutionCarrierClassVPN/upto100/upto760$1,995-$75,000$50,000+* Bundle Price UR software, 3DES, FE ports, US powerCONFIDENTIALCisco前景:完全的网络
20、解决方案在路由,交换和安全方面是市场领导者通过接口模块可以扩充通过收购，Cisco能够提供最好的解决方案例如CiscoVPNConcentrator(Altiga):非常容易使用，功能很多，易于调整。CONFIDENTIALCisco对比:性价比非常差(PIX)CLI界面很难用，而且定位故障比较难。高性能的FW/VPN解决方案需要多个系统,PIX+VPNConcentrator(管理和维护都比较困难，而且费用比较高)整个产品线的性能比较低(基于CPU，不附加3DES加速卡)需要为3DES加速卡另外加钱CONFIDENTIAL如何针对Cisco销售VPN吞吐量FortiGate病毒防火墙的3DE
21、S性能要比带加速卡的CiscoPIX系列快三倍以上(PIX用户必须购买加速卡提高其VPN吞吐量).Fortinet在高端产品上性价比比CiscoPIX要高3-5倍如果需要的话FortiGate和PIXorVPNConcentrator协同工作透明模式FortiGate作为远程vpn网关没有AV解决方案没有内容过滤解决方案CONFIDENTIALCheckPoint介绍CheckPoint(Nasdaq:CHKP)于1993成立员工超过1,100人firewall/VPN市场的领导者由于硬件加速firewall/VPNs(比如说NetScreen)争夺了市场份额，导致收入下降。Q1/03收入:$
22、104.8Mil.2002年收入:下降了19%，为$427Mil.净收入下降21%，为$221.5mil.CONFIDENTIAL新消息CheckPoints应用层安全产品将于2003年5月发布，它能检测和阻止应用层的攻击。CheckPoint仍旧没有计划涉足病毒攻击该产品类似于入侵检测和防御产品，主要针对bufferoverflowattacks,malformedpacketattacks，man-in-the-middleattacks,SQLslammer,Codered,Nimda和其他蠕虫.白皮书和其他资料对攻击响应时间以及特征库升级没有涉及到没有攻击响应服务队伍在性能上没有给出数
23、据CONFIDENTIALCheckPoint/Nokia产品Nokia产品从$895到$30,000+要求一个CheckPoint许可证，加上硬件和软件的支持FW-1不限用户的模块$6,995VPN-1不限用户的模块$9,495(包含FW-1)企业管理平台$11,995报告模块$1,995peror$19,995Floodgate-1模块$6,995HA模块$9,995CONFIDENTIALCheckPointCheckPointNG(新产品)前景:企业级安全的市场领导Firewall图形界面的先锋,功能强大和灵活性强OPSEC联盟的合作伙伴，提供在安全各个领域的解决方案可以在20多个第三
24、方平台上运行(服务器和硬件环境)CONFIDENTIALCheckPoint对比:价格中仅仅包括软件，不包括平台GUI非常复杂，通常需要培训每个附加的FW模块,VPN模块等等都需要另外加钱的要得到一个完全的解决方案，需要把多个安全设备组合在一起(FW-1,VPN-1,IDS,AV,etc)性能是非常低的CONFIDENTIAL如何针对CheckPoint销售初始和运行费用非常高性能非常差需要多个厂家组合的AV,IDS,CF等等方案维护困难需要支付费用培训管理员需要支付太多的零散费用服务器维护,软件许可证,硬件平台，管理员培训等等需要每年单独支付更新费用CONFIDENTIALWatchGuar
25、d介绍WatchGuard(Nasdaq:WGRD)于1996成立.员工超过300Q1/03收入:$21.8Mil.2003的收入目标:$82Mil.WatchGuard至到2002年4月RapidStream问世前，还是没有ASIC加速的。WatchGuard可以提供SOHO/BranchOffice到运营商级的产品.CONFIDENTIAL新消息WatchGuard最近将在Vclass和Firebox产品系列里加入入侵检测与防御.WatchGuard宣布在2003年六月发布SOHO6和6tc无线产品CONFIDENTIALWatchGuard产品线型号型号Firebox SOHOFireb
26、ox 700Firebox 1000Firebox 2500Firebox 4500Rapidstream 2100Rapidstream 6100Rapidstream 8100Rapidstream 11000目标市场目标市场Tele-commuterSmallOffice/RemoteOfficeMid-sizeBusinessMediumBusiness/WebBusinessCentralOffice/VPNofficeSmallBusinessMediumBusinessLargeEnterpriseServiceProviderFW/3DES Mbps9/1.3150/5200/
27、60200/75200/100240/70270/160600/3002G/1.2价格价格$-$2,490$3,775$7,490$9.990$5,000$15,000$35,000$95,000型号型号Firebox V10Firebox V60Firebox V80Firebox V100目标市目标市场场Tele-commuterMid/LargeEnterpriseLargeEnterpriseLargeEnterprise,ServiceProviderFW/3DES Mbps75/20200/100270/150600/300价格价格$599$5,990$9,990$23,690CO
28、NFIDENTIALWatchGuard前景:性能一般产品线长新增入侵防御管理软件非常好(Reporting,Mgmt,etc.)内置CyberPatrol作为URL过滤RapidStream是一个对CheckPoint加速的设备CONFIDENTIAL如何针对WatchGuard销售对比:与SonicWALL类似的特点Firebox性能不是很高AV强制升级策略Firebox产品线仅仅有三个端口没有提到有攻击响应和攻击特征库升级RapidStream也有CheckPoints问题软件需要许可证功能局限于FW-1andVPN-1不支持多个分区CONFIDENTIAL捆绑多个应用安全的系统Syma
29、ntecGatewaySecurityTippingPointServGateCONFIDENTIALSymantec网关安全产品功能:FW,VPN,AV,IDS,CF5110,5200,53105110and5200已经不再销售了，也许是因为性价比比较低网关产品有60,000种病毒库99%是没有用的Symantec100,200,and200R作为FW/VPN产品，只是用于40个员工左右的小办公室。SMTP,HTTP,FTP病毒扫描不支持IMAPorPOP3Web过滤不支持关键词过滤IDS非常有限，仅仅支持80种vs.FortiGate支持1300多种FW/VPN-ICSAcertified
30、性能很差(1240Mbps防火墙吞吐量)性价比非常抵不支持多个区域CONFIDENTIALTippingPointUnityOne600,2000功能:FW,IDSHardwareplatform使用ASICs把IDP吞吐量提高到2GbpsFirewall和IDP没有VPN,AV,contentfiltering多个WAN接口产品非常贵,仅仅适用于服务供应商产品系列非常少,产品定位非常窄UnityOne600-$19,995UnityOne2000-$39,995CONFIDENTIALServGateEdgeForce,EdgeForcePlus,SG100功能:FW,VPN,CF,AV没有
31、IDSandAV是可选的McAfee模块扫描SMTP,POP3和FTP流量不扫描HTTP和IMAP整合的URLBlocking和与WebSense兼容DOSattack防御非常有限最近从产品线中去掉了SG2000基于Linux的系统使用的是Squid防火墙和FreeSwanVPN,这都是免费软件3products产品线小，发展慢，公司比Fortinet老产品测试中，产品表现比较差CONFIDENTIALFortinet竞争对手资料Fortinet竞争对手资料放在:http:/.以下是我们有的对比资料:Fortinetvs.Symanteccompetitivesheet(Jun03)Forti
32、netvs.NetScreencompetitivesheet(May03)CompetitionReviewv120CompetitiveReviewv121(willbeupthereshortlyfollowingthispresentation)Fortinetvs.Cisco(Nov02)FortiGate-1000competitivespreadsheetFortiGate-60competitivespreadsheetCONFIDENTIALThank you!CONFIDENTIALBackupSlidesCONFIDENTIALFortinet-50与NetScreen5
33、XP对比FortiGate-50RFortiGate-50NetScreen-5XPNetScreen-5XP ElitePrice (US MSRP)$495(10user)$695(Unlimitedusers)$495(10user)$995(Unlimitedusers)AV, worm, content attack protection, automatic updatesYESNORequiresoptional3rdpartysolutionContent filteringYESNOURL blockYESNOIntrusion detectionOver1300attack
34、detectionsignatures,withover30withprevention31attacksincludingDDoS,DOS,etc.ForfullfeaturesproductFirewall Throughput30Mbps20MbpsPrice for a comprehensive solution$495/$695$12,500CONFIDENTIALFortinet-60与NetScreen-5GT对比FortiGate-60RFortiGate-60NetScreen-5GTNetScreen-5GT PlusPrice (US MSRP)$995(10user)
35、$1,495(Unlimitedusers)$595(10user)$1,095(Unlimitedusers)AV, worm, content attack protection, automatic updatesYESNO-RequiresTrendMicrosolutionatanaddedcostContent filteringYESNORequires3rdpartysolutionURL blockYESNOIntrusion detectionOver1300attackdetectionsignatures,withover30withprevention31attack
36、sincludingDDoS,DOS,etc.ForfullfeaturesproductFirewall Throughput70Mbps75MbpsPrice for a comprehensive solution$995/$1,495$11,500CONFIDENTIALFortinet-60v与NetScreen-5XT对比5XT和5XTElite基本上与5GT和5GTPlus相同,区别如下：不能升级加入TrendMicroAV软件.5GT没有FIPS和CommonCriteria5GT和5GT产品没有5XT和5XTElite贵Impact:The5XT系列和5GT系列是冲突的。Ne
37、tScreen可能等到5GT系列获得FIPS和CC认证后，抛弃5XT系列CONFIDENTIALFortinet-100和NetScreen-25对比FortiGate-100RFortiGate-100NetScreen-25Price (US MSRP)$1,395(10user)$1,995(Unlimitedusers)$3,495(Unlimitedusers)AV, worm, content attack protection, automatic updatesYESNO-RequiresTrendMicrosolutionatanaddedcostContent filter
38、ingYESNORequires3rdpartysolutionURL blockYESNOIntrusion detectionOver1300attackdetectionsignatures,withover30withprevention31attacksincludingDDoS,DOS,etc.ForfullfeaturesproductFirewall Throughput95Mbps100MbpsPrice for a comprehensive solution$1,395/$1,995$15,000CONFIDENTIALFortinet-200v和NetScreen-50
39、对比FortiGate-200NetScreen-50Price (US MSRP)$2,995(Unlimitedusers)$6,995(Unlimitedusers)AV, worm, content attack protection, automatic updatesYESNO-RequiresTrendMicrosolutionatanaddedcostContent filteringYESNORequires3rdpartysolutionURL blockYESNOIntrusion detectionOver1300attackdetectionsignatures,wi
40、thover30withprevention31attacksincludingDDoS,DOS,etc.ForfullfeaturesproductFirewall Throughput120Mbps170MbpsPrice for a comprehensive solution$2,995$27,000CONFIDENTIALFortinet-300v和NetScreen-50对比FortiGate-300NetScreen-50Price (US MSRP)$5,995(Unlimitedusers)$6,995(Unlimitedusers)AV, worm, content att
41、ack protection, automatic updatesYESNO-RequiresTrendMicrosolutionatanaddedcostContent filteringYESNORequires3rdpartysolutionURL blockYESNOIntrusion detectionOver1300attackdetectionsignatures,withover30withprevention31attacksincludingDDoS,DOS,etc.ForfullfeaturesproductFirewall Throughput200Mbps170Mbp
42、sPrice for a comprehensive solution$5,995$32,000CONFIDENTIALFortinet-400v和NetScreen-204对比FortiGate-400NetScreen-204Price (US MSRP)$7,995(Unlimitedusers)$10,995(Unlimitedusers)AV, worm, content attack protection, automatic updatesYESNO-RequiresTrendMicrosolutionatanaddedcostContent filteringYESNORequ
43、ires3rdpartysolutionURL blockYESNOIntrusion detectionOver1300attackdetectionsignatures,withover30withprevention31attacksincludingDDoS,DOS,etc.ForfullfeaturesproductFirewall Throughput280Mbps400MbpsPrice for a comprehensive solution$7,995$45,000CONFIDENTIALFortinet-500v和NetScreen-208对比FortiGate-500Ne
44、tScreen-208Price (US MSRP)$9,995(Unlimitedusers)$15,995(Unlimitedusers)AV, worm, content attack protection, automatic updatesYESNO-RequiresTrendMicrosolutionatanaddedcostContent filteringYESNORequires3rdpartysolutionURL blockYESNOIntrusion detectionOver1300attackdetectionsignatures,withover30withpre
45、vention31attacksincludingDDoS,DOS,etc.ForfullfeaturesproductFirewall Throughput280Mbps550MbpsPrice for a comprehensive solution$9,995$50,000CONFIDENTIALFortinet-1000v和NetScreen-500ES对比FortiGate-1000NetScreen-500ESPrice (US MSRP)$12,995(Unlimitedusers)$32,495(Unlimitedusers)AV, worm, content attack p
46、rotection, automatic updatesYESNO-RequiresTrendMicrosolutionatanaddedcostContent filteringYESNORequires3rdpartysolutionURL blockYESNOIntrusion detectionOver1300attackdetectionsignatures,withover30withprevention31attacksincludingDDoS,DOS,etc.ForfullfeaturesproductFirewall Throughput1Gbps700MbpsPrice
47、for a comprehensive solution$12,995$85,000CONFIDENTIALFortinet-3000v和NetScreen-500SP对比FortiGate-3000NetScreen-500SPPrice (US MSRP)$19,995(Unlimitedusers)$61,995(Unlimitedusers)AV, worm, content attack protection, automatic updatesYESNO-RequiresTrendMicrosolutionatanaddedcostContent filteringYESNOReq
48、uires3rdpartysolutionURL blockYESNOIntrusion detectionOver1300attackdetectionsignatures,withover30withprevention31attacksincludingDDoS,DOS,etc.ForfullfeaturesproductFirewall Throughput2.25Gbps700MbpsPrice for a comprehensive solution$19,995$120,000CONFIDENTIALFortinet-3600和NetScreen-5200对比FortiGate-
49、3600NetScreen-5200Price (US MSRP)$29,995(Unlimitedusers)$69,000(Unlimitedusers)AV, worm, content attack protection, automatic updatesYESNO-RequiresTrendMicrosolutionatanaddedcostContent filteringYESNORequires3rdpartysolutionURL blockYESNOIntrusion detectionOver1300attackdetectionsignatures,withover3
50、0withprevention31attacksincludingDDoS,DOS,etc.ForfullfeaturesproductFirewall Throughput4Gbps4GbpsPrice for a comprehensive solution$29,995$130,000CONFIDENTIAL入侵检测与防御对比表格NetScreenIDP系列CONFIDENTIAL入侵检测与防御对比CONFIDENTIALNetScreenIDP(OneSecure)入侵检测与防御(IDP)NetScreen-IDP10,100,and500.价格为$7995,$16,495,$34,9
51、95目前没有整合，仍然是独立的产品管理成本是很高内置设备依赖于协议和流量异常检测，以发现攻击作为防御措施，可以将会话抛弃和关闭。CONFIDENTIAL针对SOHO/HomeOffice产品对比FeaturesFortiGate-60Cisco 501NetScreen-5XTEliteSonicWALL TELE3WatchGuardFirebox SOHO6Nokia IP51Users10/Unrestricted10Unrestricted51050Target FunctionalityFWVPNIDPAVCFTSFWVPNIDSFWVPNIDPTSFWVPNCFFWVPNIDPCh
52、eckPointFW-1VPN-1Hardware Interfaces710-BaseTEthernet210-BaseTEthernet210-BaseTEthernet210/100Ethernet610/100Ethernet410/100EthernetConcurrent sessions50,000750020006144NotAvailableNotAvailableVPN tunnels401010510NotAvailableIPSec 3DES Performance20Mbps3Mbps20Mbps20Mbps20MbpsNotAvailableFirewall Per
53、formance70Mbps60Mbps70Mbps75Mbps75Mbps8MbpsASIC based performance (FW/VPN/AV)Yes/Yes/YesNo/No/NoYes/Yes/NoNo/Yes/NoNo/Yes/NoNo/No/No* With optional 3DES accelerator cardCONFIDENTIAL针对中等企业产品对比FeaturesFortiGate-300Cisco PIX 515ENetScreen-50SonicWALL PRO 330WatchGuardFirebox 1000UsersUnrestrictedUnrest
54、rictedUnrestrictedUnrestrictedUnrestrictedTarget FunctionalityFWVPNIDPAVCFTSFWVPNIDPFWVPNTSFWVPNCFFWVPNIDPCFHardware Interfaces310/100-BaseTEthernet210/100-BaseTEthernet410/100-BaseTEthernet310/100Ethernet310/100EthernetConcurrent sessions400,000130,00032,000128,000NotAvailableVPN tunnels1,5002,0005
55、001,0001300IPSec 3DES Performance65Mbps140Mbps*50Mbps45Mbps60MbpsFirewall Performance200Mbps188Mbps170Mbps190Mbps200MbpsASIC based performance (FW/VPN/AV)Yes/Yes/YesNo/No/NoYes/Yes/NoNo/Yes/NoNo/Yes/No* With optional 3DES accelerator cardCONFIDENTIAL针对服务商产品对比Appliance FeaturesFortiGate-3600NetScreen
56、-5200Intrusion PDS 7330UsersUnrestrictedUnrestrictedUnrestrictedTarget FunctionalityFWVPNIDPAVCFTSFWVPNIDPCheckPointFW-1VSXVPN-1Hardware Interfaces110/100-BaseTEthernet2CopperGigabitPorts4FiberGigabitPorts8mini-GBICPorts2GigabitEthernet210/100Ethernet.Concurrent sessions1,000,0001,000,000NotAvailableVPN tunnels8,00025,000NotAvailableIPSec 3DES Performance600Mbps2Gbps700MbpsFirewall Performance4Gbps4Gbps3GbpsASIC based performance (FW/VPN/AV)Yes/Yes/YesYes/Yes/NoNo/No/No
