Kanzen International


...........................................................................................................................................................................................


Manage both Upstream and Downstream Bandwidth
Policy Based Firewall with Scheduling
Messenger and Skype blocking
IPsec/PPTP VPN Servers
NAT, Content Filtering, Syslog, Accounting Report, SPI, Hostname Table, Authentication, Multiple subnets


Are you still using a PC based Firewall program to manage your company's network? The OvisLink RS family of security gateways are designed to offer complete advance Firewall, 2-Way Bandwidth manager, VPN servers, Messenger Control, Access Authentication, and much more in an all-in-one box. The RS-2000 is powered by a powerful 400Mhz RISC processor. It is available at a fraction of the cost of Software based solutions.

2-Way QoS Bandwidth Management
The RS-2000 feature OvisLink's second generation bandwidth management function which easier setting and more features. Administrators can control the bandwidth speed for downstream and upstream traffic separately. For each traffic direction, administrator can define the Guaranteed (Minimum) and Maximum bandwidth. Furthermore, the bandwidth definition can be saved as a policy for firewall. So administrator can easily control the bandwidth of a single IP, IP group, or by applications. Best of all, application support are user definable for infinite expandability. Whether it is for business to set priority of their application or for selling Internet services by bandwidth, the RS-2000 has the function for it.

VPN Server and client
The RS-2000 features advance VPN server and client function. The gateway offers both IPsec and PPTP server function plus PPTP client function, So whether you want to work from home or connect 2 office networks together over Internet securely, the RS-2000 has the function for you. The gateway support up to 200 IPsec Tunnels and 100 PPTP accounts.



Policy Based Firewall with scheduling
At the factory's default setting, the RS-2000 does not open any services. Administrator should decide whether to open all services (just go to the policy page and create a policy from inside any to outside any and create another one from outside any to inside any) or open certain services only. The policies are listed in a order list, so administrator has the flexibility to choose which policy has the highest priority. Best of all, all these policies can be activate or deactivate by automatic scheduling (Monday to Sunday, starting and finishing hours)



Password Authentication for Internet Access
For each policy, administrator can define a password needed for accessing. Take for example, you can set a policy for web browsing (port 80). And the gateway will automatically pop-up a window asking the user to enter password when they want to access the Internet. Up to 200 authentication policies can be made. This feature is useful for system administrator who want to limit certain service to certain individuals regardless of which station they use. Furthermore, it can also be used for control of selling Internet services.




Content Filtering
System administrators can establish and enforce acceptable Internet access policies. Content filtering enables the blocking of certain websites either by IP or by domain name. Administrators can also define schedule for each content filtering rules. But best of all, you can also choose to block javascript, active-X, POP-UP, or Cookies. Up to 300 content filtering rules can be made.

Messenger and Skype Blocking
One of the biggest headache for system administrators is to block messenger and Skype traffic. Because these applications use dynamic ports that are hard to block, it is usually difficult to block these particular applications. With the RS-2000, it can block MSN messenger, Yahoo Messenger, ICQ, QQ messenger, and Skype traffic with a click of a button.

Multiple Virtual Server
Some router provide Multi-DMZ support. But the RS-2000 goes one extra step to provide multi virtual server support. So that means if your ISP provide more than one real IP address, you can take full advantage of it by assigning different forwarding rules for each real IP address. Up to 4 real IP addresses are supported each with its own NAT table.

Advance Security Functions
The gateway can be either configured in transparent mode as a gateway or enable the NAT router function. It has many security features built-in such as SPI, SYN, ICMP, DoS, UDP, Ping of Death and Port Scan. The traffic log can be sent automatically by email or by Syslog function. The gateway even features Accounting Report function that display individual IP/service's usage in time or Kilobytes. Therefore, administrator can charge account by time or traffic used. The RS-2000 is a product that combines the most important and useful security features in one package. It allows you to take complete control over your network. Contact your authorized OvisLink dealer for details.
 





Model: RS-2000
Hardware Specifications

  • Processor: Intel IXP-425, 400MHZ
  • Memory: 16MB Flash, 64MB SDRAM
  • Power: 100~240 VAC
  • Dimensions: H: 40mm W: 150m D: 220mm


Physical Interface

  • WAN Port: 1 x 10/100 Base-T Ethernet RJ45 port
  • LAN Ports: 1 x 10/100 Base-T Ethernet RJ45 port


QoS Functions

  • Upstream and Downstream Bandwidth Control
  • Define Guaranteed and Maximum Bandwidth
  • Limit bandwidth by IP and/or by Application Service
  • User definable Service
  • Save QoS rule as a policy
  • Up to 100 rules

VPN

  • IPsec Server, 200 tunnels
  • PPTP server, 100 connection
  • PPTP client, 100 connection
  • DES, 3DES, AES 128.168.192 encryptions

Authentication

  • Local User name and password
  • Up to 200 policies

WAN Support

  • PPPoE
  • Fixed IP
  • DHCP
  • PPTP (support both hostname and server IP)
  • 100Mbps NAT throughtput
  • 45000 Concurrent NAT sessions


LAN Support

  • DHCP with 2 WINS server settings
  • Transparent mode
  • NAT mode
  • Multiple Subnets


IP Grouping

  • Define LAN or WAN group for use in policies

Scheduling

  • Define Days of the Week
  • Define Start Hour (in 30 minutes interval)
  • Define Ending Hour (in 30 minutes interval)
  • Up to 20 schedule type

Messenger & Skype Blocking

  • MSN messenger
  • Yahoo Messenger
  • ICQ
  • QA Messenger
  • Skype


Firewall

  • Incoming and outgoing policy
  • Stateful Packet Inspection (SPI)
  • PI, SYN, ICMP, DoS, UDP
  • Permited IP
  • Hacker Alert
  • Ping of Death and Port Scan
  • Blaster Alert


Log and Statistic

  • Email alert
  • Syslog
  • Accounting Report:

    Incoming IP traffic
    Outgoing IP traffic
    Incoming Service
    Outgoing Service
    By usage in Kbps
    By Time used

  • Event Alarm

Content Filtering

  • Javascript, active-X, POP-UP, or Cookies controls
  • URL Filtering
  • IP Filtering
  • Up to 300 entries

Virtual Server

  • Multi Virtual Server support (up to 4 real IP)
  • Up to 16 virtual server entries

Management and Maintenance

  • Web-based management
  • Firmware upgrade
  • DDNS
  • Routed Table
  • Clock
  • Host name table

Certifications

  • Comply with FCC part 15, subpart J
  • Class B CISPR/FCC
  • Comply with CE/EMC