SD-Security.

Cloud-native, Multitenant, Big Data

SD-Security

Software-defined security SDS is based on the principle of separating the security data plane from the control plane, decoupling physical and virtual security devices, in the form of access modes, deployment methods, and implementation functions. The bottom layer is abstracted as resources in the security resource pool, and the top layer is Intelligent and automated business orchestration and management are unified through software programming to complete the corresponding security functions, thereby realizing a flexible security protection.

ijSun's Software Defined Security uses a unique NFV platform to virtualize security functions such as stateful firewall, next-generation firewall (NGFW), anti-DOS, intrusion detection, anti-virus, etc., with multi-tenant functions, and a unique built-in service chain. The way to form a complete, subscribed security service. For SD-WAN, SASE is an integral part of the architecture.

Complete Software Defined Features.

Completely decoupled software-defined security based on software, from the basic architecture lays the foundation for programmable, cloud-native, multi-tenant, and good horizontal scalability. It is the foundation for MSPs and large enterprises to lay the operational security architecture.

Cloud Native

The central control platform and all security components can be deployed in any public cloud or private cloud. Each functional component has a multi-tenant function, and can build an operation platform based on public cloud or private cloud.

Rich Features

Rich network security features include: zero trust access (ZTNA), stateful firewall, DDos, next-generation firewall (NGFW), IP filtering, URL classification and filtering, anti-virus, intrusion detection and prevention (IDS/IPS), ZTNA.

Flexible Distributed Architecture.

The core software is based on the X86 architecture, and the hardware and software are completely decoupled. It can be installed and used on any X86 architecture CPE, hardware device, virtual platform, private cloud and public cloud platform.

It can be deployed in the company headquarters, branch, or cloud center, supporting KVM, Openstack, VMWARE, Alibaba Cloud, Tencent Cloud, Tianyi Cloud, Huawei Cloud, China Unicom Cloud, Mobile Cloud, etc.

Context Aware.

The key to software-defined security is context awareness and smart strategies. Understanding of users, devices, sites, links and clouds; support powerful and dynamic strategies to achieve multi-layer security.

Integrated with SD-WAN

The security function and SD-WAN function are fully integrated, and the SD-WAN and SD-Security functions can be configured at the tenant level at the same time.

Multi-dimensional monitoring

Perform DPI on traffic, analyze the performance characteristics of users, devices, URLs, programs, SLAs, etc. in real time, and output LOG.
Apply For Free Trial

SD-Security Features

Anti-Virus

Automatic Signature update with network/stream based protection. Support more than 35 file types, multiple protocol and decompression.

URL Categorization & Filtering

Customer can define URL Category and/or reputation based policy, can define captive portal and response type.

Intrusion Protection/Intrusion Detection

Prevent known and unknown network and application layer vulnerabilities, to avoid damage & destructioncorporate information resources.

File Filtering

Provides protection against virus, vulnerabilities related to file types and blocks potentially risky file transfers, applications, file with specific size, protocols, and traffic direction.

Access Control

Integrate with AD through LDAP and Kerberos to obtain user & group info, and apply security and access permisisons.

DOS

Identify and provide protection against L3& L4 floods, spoofing, scanning and packet anomaly detection.

SSL/TLS decryption

use RBAC to manage private/public keys, to ensure secure decryption key management.

Device ID and Fingerprint

Identify and record device activities with device fingerprints and use big data for preliminary analysis and warnings.

Lateral Movement

Identify vulnerabilities and warn. IPS and AV signature provide enhanced protection.

Software Defined - Full Protection.

Cloud-native security architecture provides central control and big data analysis. Help carries and enterprises to prevent problems before they happen, and enable real-time and convenient security features at every risky site.

Apply For Free Trial