The Eudemon 300/500/1000 launched by Huawei is a NP-based high-speed hardware firewall. Adopting the advanced ASPF technology, the Eudemon 300/500/1000 features high performance and high reliability, and thus consistently protects customer networks. In addition, the Eudemon 300/500/1000 supports powerful VPN functions, NAT functions, P2P service control, and bandwidth management. 

Eudemon 300/500/1000  Features

Powerful capability of defending against DoS and DDoS attacks

Adopting the high-speed NP, the Eudemon 300/500/1000 features the powerful capability of anti-DDoS attack. As the leading anti-DDoS device in the industry, the Eudemon 300/500/1000 can efficiently defend against various DDoS attacks at the Mpps level such as SYN flood, UDP flood, ICMP flood, and DNS flood, and detect and defend against CC attacks and worm viruses. Using the Huawei-proprietary Intelligent Connection Algorithm (ICA), the Eudemon 300/500/1000 can accurately identify DDoS attacks without affecting normal access of users. The consistent protection can be implemented in complicated network environment.

Extensive security services and flexible networking

The Eudemon 300/500/1000 supports a maximum of 100 virtual firewalls. Each firewall can be configured and managed according to an independent policy. By providing convenient security services and helping reduce cost, the Eudemon 300/500/1000 is suitable for protecting carrier-level access to IDCs.
The Eudemon 300/500/1000 supports three working modes: routed mode, transparent mode, and mixed mode, which makes flexible networking possible. Working in routed mode and transparent mode, the Eudemon 300/500/1000 supports two-node cluster hot backup. Based on the powerful VRP software platform, the Eudemon 300/500/1000 supports dynamic routing protocols such as RIP, BGP, and OSPF to provide high-reliable networking in complicated environment.

High-performance VPN gateway

The Eudemon 100E/200/200S provides various VPN networking modes such as L2TP, GRE, and IPSec. Relying on its high-performance network processor and high-speed hardware encryption module, the Eudemon 300/500/1000 provides 1 Gbps 3DES encryption, and supports algorithms such as Data Encryption Standard (DES), 3DES, and Advanced Encryption Standard (AES) algorithms. The Eudemon 300/500/1000 supports high-performance LNS services to ensure the secured access of a large number of concurrent remote users. 

Powerful NAT capability

The Eudemon 300/500/1000 supports multiple NAT applications, including NAT with overlapped private IP addresses, bi-directional NAT, internal NAT, mapping of one public IP address to multiple private IP addresses, and mapping of one private IP address to multiple public IP addresses. As the leading NAT device in the industry, the Eudemon 300/500/1000 uses the NP processor to implement high-speed NAT.

The Eudemon 300/500/1000 provides a maximum of 256 address pools, and thus can provide the NAT function for a large-scale Internet café or data center with hundreds of devices. The Eudemon 300/500/1000 uses the NP processor together with dedicated log server software to process binary logs, which can avoid the loss of NAT logs and ensure the normal process of services.

The Eudemon 300/500/1000 supports multiple ISPs. If there are lines of multiple ISPs at the egress, when one line fails, the traffic can be automatically switched to other lines.

The Eudemon 300/500/1000 adopts the mature and stable protocol stacks of Huawei, such as the Session Initiation Protocol (SIP), H.323, and the Media Gateway Control Protocol (MGCP), and updates these protocols to the latest versions in time. The Eudemon 300/500/1000 is an ideal NAT device for multimedia applications such as voice and video applications. Adopting the state-of-the-art NP processor, the Eudemon 300/500/1000 ensures the high-speed resolution capability of the Application Level Gateway (ALG). 

High-reliable firewall products

The Eudemon 300/500/1000 features excellent processing capability, flexible services and routing features, comprehensive configuration management, and high reliability. The Eudemon 300/500/1000 supports dual-host hot backup, and its power supply and fans are hot swappable. In transparent mode, the Eudemon 300/500/1000 provides the bypass card, which ensures that the services of current networks are not affected by device failure, power failure, and version update. 

Comprehensive cooperation solution

The Eudemon 300/500/1000 provides standard security cooperation interfaces that can cooperate with the Huawei NIP and Intrusion Detection System (IDS) devices to defend against network intrusion and hacker invasion.

The Eudemon 300/500/1000 can cooperate with the Huawei Service Inspection Gateway (SIG) to defend against abnormal traffic such as P2P and VoIP traffic. The SIG identifies abnormal traffic and the Eudemon 300/500/1000 controls the abnormal traffic to provide high-efficient solution of in-depth service inspection.
By cooperating with the Huawei terminal security management system Secospace TSM, the Eudemon 300/500/1000 can ensure that only legal users are allowed to access customers' network, isolate the terminal that is a potential attack target, and guide users to make patches and kill viruses to guarantee network security. 

Eudemon 300/500/1000 Specifications