Enhancing Network Edge Security with Flexible Solutions

The rapid increase of connected devices leads to the growing complexity of network infrastructure at the edge, which demands a more flexible network appliance that not only protects the network edge by offering security measures such as VPN, intrusion protection, content filtering and data encryption, but also offers a quick, easy-to-implement solution with efficiency in size, performance and power consumption.

The Intel Atom Processor C2000 Series

The Intel Atom processor C2000 series, codenamed “Rangeley”, addresses the need for building efficient entry to mid-range security appliances to safeguard the network edge. Based on the Silvermont microarchitecture, these processors deliver up to six times of the energy efficiency and up to seven times of the performance, compared to the previous Atom predecessors. (See our Whitepaper for details) Under “Rangeley” generations, Intel Atom processor C2000 series comes in a 64-bit systems-on-a-chip (SoCs) in two-to-eight core designs, offering high level of integration in packets processing and crypto acceleration. The followings are additional value-added features provided by the processor:

Intel QuickAssist Crypto Acceleration

Intel® QuickAssist Technology employs a hardware-assisted security engine designed to optimize the security applications, such as cryptography, data compression, and pattern matching. This engine works to reserve processor cycles for application processing, and that in turn not only relieves CPU burden but also improves overall system performance. Intel® QuickAssist Technology, made integral to the Intel architecture, aims to address the demand for hardware appliances with built-in security processing and to obviate the need for 3rd party co-processors.

Intel® DPDK Packet Processing Acceleration

Intel Data Plane Development Kit (DPDK) manages communication workload consolidation for hardware appliances built with the Intel® architecture, making application developer to accelerate network packet processing performance by 3 to 4 times.

Intel Virtualization for Efficient Resource Management

Flexibility in workload management is especially vital for an all-in-one network edge security appliance. Intel Atom processor C2000 series is coupled with the Intel Virtualization (VT-x and VT-d) enabled chipset, which manages multiple workloads in a virtualized environment. This technology provides flexibility in computing resource management, especially when high computing power required for specific security applications.

Lanner Solutions

Lanner Electronics has developed a series of entry-to-mid range communication appliances based on the Intel® Atom™ processor C2000 product family. By unifying computing, networking, management, virtualization, and security capabilities in integrated hardware architecture, these appliances work as multi-services network edge controllers for applications such as firewall, WAN optimization, CPE gateway and wired and wireless management in retail, SMEs, factories and other small area network environments.

The table below lists the Lanner’s Intel Atom C2000 based network security appliances. These platforms vary in form factor, CPU power, port density and LAN bypass function.

FW-7525 FW-7551 FW-7573 UP-2010
Form Factor Desktop (rack mount kit available) Desktop (rack mount kit available) Rackmount 1U Rackmount 1U
System Cooling Fanless With Fan(s) With Fan(s) With Fan(s)
Processor Options / Cores Intel® Atom™ C2358 2C, C2518 4C Intel® Atom™ C2358 2C, C2518 4C, C2758 8C Intel® Atom SoC C2758 8C, C2518 4C Intel® Atom SoC C2758 8C
Max. Capacity Memory 8 GB 8 or 16 GB 16 GB 16 GB
Storage 1 x 2.5” drive bay, CF 1 x 2.5” drive bay (Optional), CF 2 x 2.5” drive bay, CF 1 x SATA 3.0 port (Optional), CF
Ethernet Ports 4 or 6 x RJ45 GbE ports 4 or 6 x RJ45 GbE ports 6 x GbE RJ45 default 14 x GbE RJ45 maximum 24 x GbE ports onboard +2 x 10G SFP+
Bypass 1 pair Gen.2 (7525A) N/A or 2 pairs Gen.2 3 pairs Gen.3 (Optional) N/A
TPM FW-7525A support N/A N/A TPM 1.2
Console/USB 1 x RJ45/2xUSB 2.0 1 x RJ45/2xUSB 2.0 1 x RJ45/2xUSB 2.0 1 x RJ45/2xUSB 2.0
LCM N/A N/A 2 x 20 characters N/A
Dimensions (mm) 177 x 44 x 145.5 231 x 44 x 200 431 x 44 x 305 431 x 44 x 366.2
Security Acceleration Intel QuickAssist Technology Intel QuickAssist Technology Intel QuickAssist Technology Intel QuickAssist Technology
Power Type/Watt 36 or 60W Power Adapter 36 or 60W Power Adapter 1U ATX PSU 150W 1U ATX PSU 500W
Certifications CE Class B, FCC Class B, RoHS, UL CE Class B, FCC Class B, RoHS CE, FCC Class A, RoHS, UL CE Class A, FCC Class A, RoHS
SKU Information FW-7525A,FW-7525B, FW-7525C FW-7551A,FW-7551B, FW-7551C, FW-7551D FW-7573A, FW-7573B, FW-7573E UP-2010A

 

Desktop Network Edge Security Gateway – FW-7525 and FW-7551

Desktop Network Edge Security Gateway - FW-7525 and FW-7551

The FW-7525 and the FW-7551 are positioned as desktop network security systems designed for entry-level UTM, firewall, VPN, IPS, and WAN optimization applications. The FW-7525 supports 2/4-core Intel Atom C2358/C2518 CPU, 4 or 6 GbE LAN ports with optional 1 pair of Gen.2 LAN bypass, 1 ECC DDR3 1600 SODIMM and a 36W or 60W power adapter. The FW-7551 supports up to 8-core Intel Atom C2758 CPU, 4 or 6 GbE LAN ports with optional 2 pairs of Gen.2 LAN bypass, 1 or 2 ECC DDR3 1600 SODIMM, 1 system cooling fan and a 36 or 60W power adapter.

Rackmount Network Security Appliance with NIC Module Expansion – FW-7573

Rackmount Network Security Appliance with NIC Module Expansion – FW-7573

The FW-7573 is a 1U network security appliance designed for UTM, firewall, VPN, IPS and WAN optimization applications from SMB to enterprise branch office. The system includes 6 built-in GbE LAN ports with optional 3 pairs of Gen.2 LAN bypass, 1 PCIe*8 NIC expansion slot, 2 x ECC DDR3 1600 DIMMs, 1 system cooling fan and an ATX power supply. The FW-7573 allows the expansion with one NIC modules, increasing the number of GbE ports to a total of 14.

Rackmount Network Appliance with High-port Density – UP-2010

Rackmount Network Appliance with High-port Density – UP-2010

Lanner UP-2010 is a 1U rackmount network security appliance with high-density Ethernet ports. Built with Intel® Atom™ C2000 processor, the appliance delivers efficient packet processing abilities and Intel® security instructions at low power consumption. In addition, UP-2010 also comes with Marvell® Prestera® packet processor to provide high-port density.

Enhancing Network Edge Security with Flexible Solutions was last modified: January 14th, 2020 by LEI Technology