Secospace SVN3000

Secospace SVN3000
Secospace SVN3000
Product Overview
With the rapid development and popularization of the
Internet, intranets have to meet increasing demands for secure,
convenient, and efficient remote access.
•• Staff on business trips and SOHO need to access their
intranets at any time and in any place.
•• Business expansion increases the number of branches,
suppliers, and contractors, making it necessary for
enterprises to share their intranet data and to integrate
their business processes.
•• Dispersed clients need to quickly and easily obtain
documents, services, and technical support from enterprises.
The fundamental problem for an enterprise is to ensure that
authorized users can securely access its intranet in any network
Product Family
SVN3000
Product Features
E2E security
The SVN3000 integrates the SSL VPN and state-of-the-art
security technologies. Through the SVN3000, authorized users
can securely access intranet resources using a standard Web
browser without client software, thus reducing the management
and maintenance costs associated with technical support. The
SVN3000 incorporates various features and functions to provide
a multi-level end-to-end security solution. These include:
enhanced terminal USB key+digital certificate authentication,
data encryption, diversified user ID authentication, reinforced
hardware, and fine control over intranet access.
Full service capability
The SVN3000 supports multiple intranet access modes:
environment while keeping the intranet secure and protected.
Huawei Symantec has launched its high performance SSL
VPN secure access gateway: the SVN3000. Deployable without
changing existing network topology, the SVN3000 allows
users to easily access intranet Web resources without training
and without having to install client software. Furthermore, the
SVN3000 supports various intranet applications and multiple
modes for authentication, authorization, and log auditing. By
employing Huawei Symantec’s highly reliable hardware platform
and dedicated real-time operating system, the SVN3000 is
highly secure and reliable. Therefore, the SVN3000 can provide
mobile staff, customers, and partners of enterprises with secure
and convenient remote access to intranet resources.
standard Web browser; CIFS/NFS file sharing; network layer
service access; and access through traditional C/S applications
such as FTP, Oracle, Notes, Exchange, Telnet, SSH, RDP, and VNC.
Easy to deploy and manage
The easy-to-deploy SVN3000 provides visual Web UI in both
Chinese and English with abundant help information. An
administrator can monitor and manage the SVN3000 in real
time through the Web UI. As a dedicated carrier-class secure
access gateway, the SVN3000 also manages devices through
the command line interface (CLI).
Flawless performance
A single SVN3000 device supports thousands of concurrent
Secospace SVN3000
users and multiple encryption algorithms, including DES, 3DES,
RC4, and AES. With its high performance hardware platform
and high speed hardware encryption module, the SVN3000
provides fully secure encryption and decryption functions.
Complete authentication, authorization, and
auditing
The SVN3000 supports local authentication and authorization
through user names and passwords based on general
authentication and external authorization platforms such
as RADIUS, LDAP, AD, SecureID, X.509, and USB key+digital
certificate. This reduces the need for extra investment and
allows the system administrator to centrally manage and
configure intranet visitors. The SVN3000 provides system,
administrator, and user logs that can be viewed by type.
These are automatically and periodically exported to help the
administrator with analyzing and auditing.
Typical Networking
Business Partners
Mobile Users
Branch Office
Internet
Remote Maintenance
Customers
Encrypted External & Internal Session
Standard Internal Session
Typical networking of the SVN3000
Advanced virtual gateway technology
The SVN3000 supports virtual gateway technology. A single
SVN3000 can be partitioned into 128 virtual SSL VPN gateways
to provide different departments and enterprises with secure
and mutually independent access channels. The SVN3000 can
deliver flexible, secure, easy-to-use, and maneuverable virtual
operation modes for service providers, thus giving high ROI.
Carrier-class reliability
Due to its highly reliable hardware platform and dedicated real-
time OS, the SVN3000 delivers superior performance and higher
reliability than the SSL VPN gateway based on the universal
system. The SVN3000 employs dual power supplies and N+1
cluster extension to ensure high availability and to support
large-scale deployment. The SVN3000 is without question a
highly reliable carrier-class SSL VPN gateway in the industry.
Corporate
Intranet
3000
ERP
Linux/NFS
CIFS
Email
Web Server Group
Secospace SVN3000

Product Specifications
Model SVN3000

Fixed interface Three mutually exclusive 10/100/1000M optical/electrical interfaces, 1 console interface

Number of extension slots 2

Type of extension card High-speed encryption card

Dimensions (mm) (W×D×H) 436×420×44.45

Weight 6.0kg

AC: 85V to 264V, 47/63Hz

Power supply
DC: -40V to -72V

Maximum power 60W

Mean time between failures (MTBF) 12.67 years

Reliability Dual power supplies, N+1 cluster, and dual-system backup

Management mode CLI, Web UI, and SNMP

Standard and protocol SSLv2.0, SSLv3.0, TLSv1.0, and others

The information contained in this document is for reference purpose only, do not constitute the warranty of any kind, experss or implied. It is
subject to change or withdrawal according to specific customer requirements and conditions.
All the trademarks, pictures, and brands mentioned in this document are the property of Huawei Symantec Technologies Co., Ltd or their
respective holders.

Copyright ©2010 Huawei Symantec Technologies Co., Ltd. All rights reserved.

Version No.: M3-110019999-20100120-V-1.0