Load Balancing

Split 40 Gbps network streams/flows into 4 x 10 Gbps interfaces – load balancing based on:

• TCP sessions
• service availability on selected servers/nodes

Benefits

• Increased services availability
• Flexible session splits
• Services uptime monitoring

MPLS VPN

Encapsulation, decapsulation and aggregation of network streams to MPLS streams. Works as an MPLS edge router as well as MPLS core router.

Benefits

• MPLS configuration flexibility
• Ingress and core MPLS traffic processing
• Access and core networks
• High speed MPLS processing (160 Gbps) with low latency

OT Secure Access & Network Segmentation

Provide secure remote service access to industry control systems (SCADA) for technicians. Improve control over the remote sessions by applying firewall rules, service window definitions and network traffic monitoring for accountability.

Implement proper network segmentation according to Purdue model for ICS systems and utilize unidirectional connections for critical components, take advantage of fully flexible traffic flow control.

Benefits

• Remote service access control in ICS systems (DCS/SCADA)
• Data exchange control in ICS systems
• Network segmentation
• Traffic separation

SSL Decryption & IDS Monitoring

Selected network traffic can be transferred to IDS appliances or SSL decryption devices. Flexible open flow rules can be used to select traffic based on all ISO/OSI layers. Ability to process network traffic transparently inline as well as traffic mirroring (tap).

Benefits

• Reduced cost of IDS licenses
• Wider selection of IDS appliances and SSL decryption devices
• Increased decryption and packet analysis performance
• Inline processing and traffic mirroring (tap)
• Flexible network traffic selection and filtering rules

IPSec Traffic Aggregation

Aggregation and split of network traffic into multiple IPSec devices up to their throughput limit. Enables to increase the total IPSec throughput using existing or more cost-effective IPSec devices.

Benefits

• Increased total IPSec throughput
• Removed IPSec bandwidth limit
• Flexible traffic division rules into multiple IPSec devices