 |
Scalable, Expandable Platform
IP-X throughput scales to 4Gb/s. Supported servers scale to 24 blades each with a single Intel Pentium III 800MHz to dual Intel Xeon 2.4GHz with up to 8GB of DDR ECC memory. IP-X offers a simple upgrade path: as more capacity is needed, a blade is added either as a replacement or an addition. IP-X automatically configures the blade and the network. IP-X technology allows as many segments as needed to run off a single Firewall blade. IP-X allows clustering applications to run across multiple blades, and balances the load between these clustered blades.
Consolidated Management
Configuration, including HW, O/S, applications and network is performed with the graphical web-based IP-X console. IP-X orchestrates services, hardware, network configuration, topology and segments automatically.
- No single point of failure - at all layers and components
- All components: blades, disks, network switches, NIC's and power supplies are redundant and hot plug able.
Complete N:1 FailOver
IP-X offers an innovative, low-cost and reliable FailOver mechanism. Instead of dedicating a standby node for every active node and manually replicating configurations, IP-X sets a pool of one or more standby blades. If IP-X detects a failure in either hardware or application, it automatically initiates a standby blade with the appropriate O/S kernel and parameters, application and network settings. The entire process is completed in less than 15 seconds. Policies can be set to prioritise use of standby blades. The administrator can also designate a pre-configured standby blade, so that FailOver of mission critical applications such as firewalls is instantaneous. In addition to reducing the cost hardware and set-up compared to conventional high-availability configurations, the IP-X FailOver scheme is much more reliable: even the most sophisticated high-availability applications do not replicate O/S and network settings. Even if tested at set-up, subsequent upgrades and patches to the O/S and applications may destabilize the system. In the moment of truth many do not fail over properly. IP-X solves this problem. Since the entire system is replicated at FailOver, all subsequent upgrades will be replicated as well. Software cost is also reduced because no license is required for the standby blades, since they are not simultaneously loaded with the application.
Hot-Plug Upgrades and Maintenance
All components are hot-plug enabled. A failed component is simply replaced while the system is on-line, and IP-X restores the system to its original state. Upgrades are also straightforward: simply add a new blade, designate it as either a replacement or a new member of a cluster, and IP-X will automatically configure it appropriately.
- Simple Physical Network Topology
- No wiring. The network is embedded in the blade-server chassis, and IP-X controls all network settings. IP-X automates adding/editing network segments and number of external ports per segment.
Model Replication and Rollback
A snapshot (model) can be produced with a push of a button that includes the entire configuration in a single location, including hardware, network, O/S kernel and parameters and applications and parameters. The model is used for both rollback in case of a failed upgrade and for creating instantaneous replicas of the entire gateway.
IP-X Benefits
Enhance Security Quality
IP-X offers a complete solution that enhances the quality of the gateway. Security services are all best-of-breed incorporating the most advanced and comprehensive set of features. The cohesive approach to configuring the gateway from network to blades to O/S to applications results in fewer configuration errors and fewer security vulnerabilities. The unique high-availability mechanism eliminates many of the problems associated with FailOver. The ability to pre-test the entire configuration before deployment and to produce exact copies of the entire gateway for replication across the enterprise slashes time-to-upgrade and ensures a more robust and stable gateway.
Reduce Capital Costs (CAPEX)
IP-X runs on open-system blade-servers available from multiple leading hardware manufacturers. These platforms are available at a fraction of the cost of proprietary security hardware while offering comparable performance. In addition, when retired, the platform may be used for other less demanding applications. Inventory is also reduced because a single type of blade can replace any failed security appliance. IP-X reduces software license costs as well because its unique high-availability scheme eliminates the need for licenses for idle standby nodes.
Reduce Operational Costs (OPEX)
IP-X reduces operational costs in all stages of the gateway's life cycle. Set-up is compressed from days to minutes. The ability to replicate the gateway across multiple sites without resident experts further increases these savings significantly. Upgrades and patches are also greatly simplified and are easily replicated and distributed throughout the organization's multiple gateways. The ability to automatically roll back to a previous setting reduces the penalty of any configuration problem or error.
Increase Gateway Longevity
The simple upgrade path that allows scaling any component of the gateway at low cost and effort greatly enhances the longevity of the gateway.
The BladeFusion Operation System (BFOS)
- Provides unique High-Avilability features: Hi-Avilability to all security application - all supported application can use the same standby blade thus eliminating singe-point-of-failure thought the system
- All level replication - in the event of FailOver the standby blade will operate and a exact copy of the original
- Guaranteed FailOver - Since The HA build in feature and not (external integration dependant) the FailOver configuration will work every time
- Post FailOver recovery - Eliminating the need for long and complicated integration process to fix the failed device ensures a successful recovery
- Enable rapid network changes - Modifying the network topology and transparent to the HA module
- Simple installation - No need for integration expertise, use the 6 steps GUI to configure the system including the HA function
- Better Cost Effective model - Reducing installation and maintenance overhead allows you to do more with what you have
|