MPSec ISG1000-G2 Online Behavior Management Gateway

l A variety of convenient user authentication modes It provides a variety of convenient Internet access authentication modes, including local authentication based on user name and password, WEB authentication, and external authentication by combining with third-party RADIUS/LDAP server, applicable to various user internet access scenarios. l Refined online behavior identification and control It can accurately identify more than 1000 applications. With the content-class packet mining technology, it can accurately identify a variety of behaviors, and perform the refined control for the user network access behavior. l Flexible flow control management The traffic control technology can effectively curb all kinds of applications to snatch valuable bandwidth and IT resources, so as to ensure the rational allocation of network resources and the service quality of key services, improving the overall performance of the network. It can perform the traffic nesting IP and application, and support 4 layers of QoS, flexibly controlling customer business. l Rich Internet marketing functions It provides the Portal page push function. Combining with AAS series products, the users in different locations can push different advertising pages after getting online, realizing the accurate locating and pushing of the advertising. It supports the APP cache technology, and mobile users can download APP at a high speed without occupying export bandwidth. This enhances customer business experience and improves APP downloading and usage. l Perfect log management and analysis It provides a variety of log functions, traffic statistics and analysis functions, various events monitoring and statistics functions, and mail alarming function. Combining with the log management system, it can complete log recording, query, analysis and report generating, providing a perfect data basis for big data analysis. l Advanced hardware platform and software architecture It adopts the MIPS platform, high-speed security processing, unified feature library and integrated analysis processing engine design, greatly improving the operation efficiency of multiple function modules when running at the same time. l Comprehensive network attack protection It supports DoS/DDoS attack protection, MAC and IP binding function, intelligent anti-worm virus technology, ARP attack protection, ultra-large ICMP packet attack prevention, and other network attack protections. l High-reliability guarantee It supports the dual-system hot backup function, and the Active/Active and Active/Passive working modes, realizing load sharing and business backup; supports auto synchronizing the feature library and policy library; supports dual configuration files. The key parts of the equipment all adopt the redundant design.