3Com 3CR13501-73 Datasheet

blended threats with port- assigned firewalls, spam filters, antivirus scanners, intrusion detection and protection systems (IDS/IPS), content filtering, and more. • Multilayered protection Improves network’s intrusion resistance across multiple network segments, layers, and services-inside and outside the perimeter boundaries. • Network processor Aggregates up to 18 data streams into a single sensor, for improved monitoring performance. 3Com ® Security Switch 6200 Key Benefits Protects Against Blended Threats Integrates enterprise-class firewall, virtual private network (VPN), intrusion detection system (IDS), antivirus, spam and content filtering, and more in a high-performance, defense-in-depth platform for corporate headquarters and regional offices. Safeguards Internal and External Networks Applies firewall policies on a per-port basis for up to 18 physical LAN segments, placing multiple security zones inside and outside the perimeter. Deploys No-Compromise Security at Wire Speeds Delivers robust security services without impacting data-center performance or other high-speed access—with 2 Gbps firewall, 500 Mbps IDS, and 300 Mbps IPSec VPN throughputs. Consolidates Switching and Security Capabilities Integrates a high port-density interface with proven security applications onto one centrally managed platform—for dramatic savings over multiple-appliance, load- balanced alternatives. Cost-Effectively Scales as Needed Supports a variety of third-party security bundles that can be separately purchased and configured as needed, with the option of trying out new security applications prior to purchase. Ensures High Availability of Security Protects enterprise networks with a highly available system that includes VRRP dual- box stateful synchronization and dual hot-swap power supplies. The revolutionary 3Com® Security Switch 6200 delivers a score of security services for a fraction of the cost of purchasing these disparate capabilities separately. Ideal for large enterprise deployments, such as regional- or head-office networks and data centers, this switch supports a range of proven security applications. Without compromising protection, performance, or availability, this integrated security services switch platform delivers significant savings over multiple-appli- ance, load-balanced solutions. Traditional security best practices require purchasing and administering individual firewalls, VPNs, content and spam filters, antivirus scanners, IDS, and intrusion prevention systems (IPS). With the 3Com Security Switch 6200, these applications can be seamlessly consolidated onto one centrally managed, load-balanced, high- capacity platform. IT managers can purchase only the features they need to effectively deploy multiple layers of secu- rity against blended threats. For example, the 3Com Security Switch 6200 can monitor up to 18 IDS zones using one soft- ware license—as opposed to requiring 18 separate appliances and 18 software licenses. Or they can use it to manage a blend of security services deployed across multiple network segments. A unique, two-stage architecture combines an embedded network processor and flow- management and acceleration software—enabling the switch to simulta- neously process multiple traffic streams and security services. It also includes built-in redundancy for applications, system, interface, and power to help ensure 24/7 availability and reliability. DATA SHEET

2 Why a Security Services Switch? In the face of an epidemic of Internet hackers and e-mail viruses, enterprise security has become a business-critical imperative. But deploying a truly effective, multiple-service security solution is very cost- and labor- intensive. And unless combined with load balancing, it can result in response lags or bandwidth bottlenecks. The 3Com Security Switch 6200 resolves the "either/or" dilemma with a unique, inte- grated platform that eliminates the traditional barriers associated with managing disparate appliances, purchasing multiple software licenses, and configuring load balancers. This cost-effective, high-perform- ance security services switch delivers: • Enterprise-class security services— including firewalls, spam filters, antivirus scanners, IDS/IPS, content filtering, and more • Intrusion resistance across multiple network segments, layers, and services— inside and outside the perimeter • Aggregated monitoring of multiple data streams through a single IDS sensor, for improved cost savings, performance, and manageability • Exceptional security engine through- puts—including up to 2 Gbps firewall, 500 Mbps IDS, and 300 Mbps IPSec VPN • High-capacity data interface with 16 10/100 Ethernet and 2 Gigabit Ethernet (fiber or copper) ports Features Description SECURITY Proven services Protect against specific or blended threats with port-assigned firewalls, spam filters, antivirus scanners, intru- sion detection and protection systems (IDS/IPS), content filtering, and more. Multilayered protection Improves network’s intrusion resistance across multiple network segments, layers, and services—inside and outside the perimeter boundaries. Firewall and VPN Deliver robust stateful-inspection firewall and IPSec VPN capabilities. IDS and IPS Provide real-time monitoring of pre-firewall hacker reconnaissance activity and post-firewall integrity breaches. E-mail and Internet filters Block viruses, spam, URLs, downloads, and inappropriate content by filtering SMTP, HTTP, HTTS, and FTP traffic. PERFORMANCE Network processor Aggregates up to 18 data streams into a single sensor, for improved monitoring performance. Flow management and Delivers exceptional firewall throughput—up to 2 Gbps—while flexibly acceleration software supporting multiple applications and network zones. High port density Includes 16 10/100 Ethernet and 2 Gigabit Ethernet (fiber or copper) ports for outstanding security services throughput and scalability. MANAGEMENT Easy-to-use control panels Simplify security configuration and management with intuitive menus and web-based interfaces. Streamlined administration Controls multiple security services through one integrated platform. AVAILABILITY Built-in redundancy Includes VRRP dual-box stateful synchronization and dual hot-swap power supplies to ensure security services high availability. Flexible deployment Enables installation of security services as needed, with most third-party applications offering 30-day free trial versions. COST-SAVINGS Integrated platform Delivers the functionality of several enterprise-class security engines for a fraction of the cost of purchasing dedicated appliances. Software consolidation Allows existing security licenses to be transferred directly to the security platform. Aggregated monitoring Enables monitoring of up to 18 traffic streams from one IDS license. 3Com® Security Switch 6200 $$$ Savings IDS Firewall/VPN Antivirus/Spam LOAD BALANCERS

Ports, Connectors Console: RS232 port, DB-9 connector Management: 2 10/100 Ethernet ports, RJ-45 connector Device interface: 2 Gigabit Ethernet ports (fiber or copper connectors), 16 10/100 Ethernet ports (RJ-45 connector) Cables and Operating Distances Serial: Up to 15 m (50 ft) 10BASE-T/100BASE-TX: Category 5 UTP up to 100 m (328 ft) 1000BASE-SX: Multimode fiber; 62.5 µ up to 275 m (902 ft), 50 µ up to 550 m (1,805 ft) Processors, Memory, Backplane Network module: Broadcom BCM 1250 Network Processor, 512 MB RAM Application module: Pentium IV Xeon 2.4GHz, 512 MB RAM Ethernet backplane: Dedicated full-duplex Gigabit Ethernet Storage Hard drive IDE (Ultra ATA), 7200 RPM Security Applications: Encryption Hardware VPN accelerated cryptography engine included Security Applications Check Point FireWall-1 NG Feature Pack 3 (with Performance Pack and Policy Server RPMs) and VPN- 1; Check Point FireWall-1 NG AI R55; Enterasys Dragon IDS Software (Dragon) Version 6.1.1.;Trend Micro Anti-Virus VirusWall Version 3.8, eManager 3.7, and IMSS Version 5.5.; Websense Enterprise URL Filtering (OPSEC certified) Version 5.0.1.; Squid Web Proxy Cache Software Version 2.5.;Internet Security Systems RealSecure 10/100 Network Version 7.0.; Secure Computing SmartFilter 3.2.1.; Snort 2.1.2.; eSafe (CVP) Version 4.0. (leave space, then insert..) Support for RIPv2 and OSPF dynamic routing proto- cols are available through Optional Routing software Redundant Components Active/standby dual-box redundancy using VRRP interface redundancy; Check Point application synchronization; dedicated high-availability systems link; dual hot-swappable power supplies RFC Compliance 791 (IP), 792 (ICPM), 826 (ARP), Static Routes, 854 (Telnet), 951 (BOOTP), 959 (FTP), 1157 (SNMP), 1519 (CIDR), 1812 (IPv4 routers), 2068 (HTTP), 2246 (SSL/TLS), SSH Regulatory Compliance UL 60950; FCC Part 15, Subpart B, Class A; EN 55024; EN 55022; VCCI V-3; AS/NZS 3548:1995; CNS 13438 Class A (test passed; country approval pending); KN22, KN61000-4 Series, TTA. IC-950 Power 100-240 VAC, 350W LED Indicators System, device ports, management ports, hard drive, and power supply Environmental Temperature: 0°-40° C (32°-104° F) Humidity: 10%-90% non-condensing Altitude: 3,048 m (10,000 ft) Physical Front-/mid-rack mountable in standard 19-inch rack Dimensions: 90 mm (3.5 in) high, 435 mm (17.1 in) wide, 635mm (25.0 in) deep Weight: 14.5 kg (32 lb) Warranty The 3Com Security Switch 6200 is backed by a One- Year Limited Warranty that includes 30-day hardware replacement and 90-day phone support. For addi- tional services—such as installation packages and extended warranties—please refer to the product manual or visit www.3com.com. Support For proven answers and technical expertise—that is available 7 days a week, 24 hours per day—go to www.3com.com and explore our 3Com Knowledgebase, as well as product information, tech- nical tips, and FAQs. Specifications Copies of packets sent to IDS through test access port (TAP) Internet DMZ STAGE 1 STAGE 2 Dept. 1 Dept. 2 Traffic aggregation Security engines Flow-management and acceleration engines Mail, web, and FTP traffic for content scanning Secure Acceleration FIREWALL VPN ANTI- VIRUS IDS The 3Com Security Switch 6200 uses an embedded network processor and flow-management/acceleration software to consolidate and switch traffic between multiple network segments and security engines. This allows the switch to simultaneously accelerate firewall processing while copying and directing traffic to IDS and antivirus engines.

To learn more about 3Com solutions, visit www.3com.com. 3Com Corporation is publicly traded on Nasdaq under the symbol COMS. Copyright © 2004 3Com Corporation. All rights reserved. 3Com and the 3Com logo are registered trademarks of 3Com Corporation. All other company and product names may be trademarks of their respective companies. While every effort is made to ensure the information given is accurate, 3Com does not accept liability for any errors or mistakes which may arise. Specifications and other information in this document may be subject to change without notice. 400835-002 09/04 3Com Security Switch 6200 supports these third-party security applications: • Check Point FireWall-1 NG Feature Pack 3 (with Performance Pack and Policy Server RPMs) and VPN-1 • Check Point FireWall-1 NG AI R55 • Enterasys Dragon IDS Software • Trend Micro Anti-Virus VirusWall, eManager, and IMSS • Websense Enterprise URL Filtering (OPSEC certified) • Squid Web Proxy Cache Software • Internet Security Systems RealSecure 10/100 • Secure Computing SmartFilter ·Snort ·eSafe (CVP) 3COM ® SECURITY SWITCH 6200 DATA SHEET Ordering Information PRODUCT DESCRIPTION 3COM SKU 3Com Security Switch 6200 3CR13501-73 3Com Security Switch 6200 Spare Power Supply Unit 3C13502 3Com Security Switch 6200 Routing Software 3C13532