 |
» |
|
|
|
|
|
|
|
|
|
|
|
Overview
|
|
|
ProCurve 745wl Secure Access Controller series solution delivers identity-based rights management, wireless data security and secure subnet roaming enabling network managers to increase business productivity by extending mobile users secure and appropriate access to network services without risk to the network. Designed to reduce cost and complexity of securing a mobile LAN, the 700wl series easily integrates into existing authentication services, network and WLAN infrastructure providing a superior return on IT investment. With centralised policy and system management, IT administrators can easily adjust user and security policies in response to evolving business needs.
Features
|
|
|
| • |
The Administration Console: simplifies the deployment and management of a secure mobile LAN by providing a single place to create and manage user access policies, administer system-wide management, and monitor all Access Control Server 745wl components as well as all user activity |
| • |
Multiple administrator accounts: enhance network security by offering three levels of access to the Administration Console, increasing network security and accountability by separating network management functions from access policy administration--both assigned and controlled by a superuser account |
| • |
Complete session logging: provides detailed information for problem identification and resolution |
| • |
High-speed backbone connectivity: provides connectivity to a Gigabit Ethernet backbone |
| • |
Support for up to 50,000 concurrent users: provides user capacity and scalability for large wireless LANs |
Resiliency and high availability
| • |
Access Control Server redundancy and failover: offers high network availability for mission-critical mobile LAN deployments; in the event the primary ProCurve Access Control Server 745wl should fail or become unreachable, a secondary Access Control Server 745wl immediately steps in and takes over the management of Switch xl Access Controller Modules to help ensure uninterrupted mobile LAN access |
| • |
Roaming across subnets: helps ensure that users maintain persistent connectivity to the network and applications |
| • |
Wireless data privacy: IPSec, PPTP, L2TP/IPSec, or SSH tunnels are used to encrypt wireless traffic with DES, 3DES, Blowfish, CAST, or AES, providing the utmost in wireless data privacy. |
| • |
Client VPN sessions: are terminated using non-proprietary, built-in VPN clients of Microsoft Windows and Apple Macintosh operating systems and third-party VPN clients |
| • |
Secure Sockets Layer (SSLv3): encrypts all HTTP traffic over browser-based connections |
| • |
Anti-MAC-address spoofing: prevents untrusted users from gaining access by spoofing a trusted user's MAC address |
| • |
Packet classification: can be based on a variety of criteria, including VLAN ID, IP, source and destination IP addresses and ports, MAC address, user identity, and Ethertype |
| • |
IEEE 802.1Q VLAN support: Enables traffic tagging based on user or point of network access; Allows placement of wireless traffic on separate VLANs; Allows VLAN tags to be removed or remapped |
| • |
Class of Service (CoS): Access policies enable remapping of QoS marking, including DiffServ value, IP precedence, or Type of Service (ToS). |
| • |
Identity-driven network access control and management: enables network administrators to easily create and maintain robust access policies, including secure wireless guest access to appropriate network services, without risk to the network |
| • |
Precise control over who has access to what and when: centrally managed access policies combined with edge-enforced packet inspection allow or deny user access to specific network services at the edge of the network, including services such as Internet or intranet Web access, FTP, telnet, specialized application servers, or any network element that can be identified by port and IP address |
| • |
Built-in RADIUS server: can perform authentication services or act as a proxy server for a remote RADIUS authentication service; active authentication services now enable user authentication and granular access control of user traffic on wireless LANs secured by IEEE 802.11i or WPA |
| • |
Standards-based authentication support for LDAP, Active Directory, and IEEE 802.1X: seamlessly integrates into existing authentication services or uses the built-in database |
| • |
Misconfigured service management and proxy redirection: allow secure, transparent login for guests or users who have changed their client network configurations |
|
| ♦ For as long as you own the product, with next-business-day advance replacement (available in most countries). The following hardware products and their related family modules have a one-year warranty with extensions available: The ProCurve Routing Switch 9300m Series, ProCurve Routing Switch 9408sl Series, ProCurve Switch 8100fl Series, ProCurve Access Control Server 745wl, and the ProCurve Network Access Controller 800. Standalone software may have a different warranty duration. For details, refer to the ProCurve Software License, Warranty, and Support booklet at: www.procurve.eu/warranty |
|
|
Printable version
