|
AcoustiRACK Lownoise Cabinets
Allot Communications
Alteon
AppSense
APC American Power Conversion
Nortel Networks Alteon Portfolio
Barracuda Networks
Bluecoat Proxy/Websense
Checkpoint
CipherTrust
Cisco
Cisco PIX Firewalls
Citrix
Crossbeam Systems
CRYPTOCard
Double-Take
EMC Corporation
Expand Networks
F5 Networks
FaceTime
Finjan Software
Fortinet Security Appliance
Foundry Networks
Fujitsu Siemens
GBIC (GigaBit Interface Converter)
HP Proliant Servers
HP Storage Networking Solutions
Identrica
IBM xSeries Server & Bladecenter
Intelligent Wave
Ironport
ISS Proventia
Juniper Networks
McAfee
Netscreen Firewall/VPN
Nokia IP Security Platform
Nortel Networks
Observer Suite
Opteq
Palo Alto Networks
Packeteer
PC Guardian Encryption
Proventia
Q-Balancer
RED-M Wireless Network Security
Retina Network Security Scanner
RightFax (Captaris)
Riverbed Technology
RSA
Reflex Security
Secure Computing
Safeword - Secure Computing
SonicWALL Firewall
SurfControl
Text Message Server
TippingPoint
Top Layer
TRENDMicro
Vasco Digipass Authentication
VMware
WatchGuard Firewall/VPN
Webscreen
Websense
|
ALLOT COMMUNICATIONS
If you would like
to enqure about our Proof of Concept Evaluation Trial
then please click here

NetEnforcer® Data Sheet
Carrier-Grade Service
Control and QoS / SLA Enforcement
Manage bandwidth at Gigabit speeds
Enforce service level agreements
Classify, monitor and control P2P
traffic
Rapidly provision new subscribers
Carriers, service providers (xSPs) and
data centers are faced with large infrastructure costs
and decreasing margins. Profitability hinges on the
ability to control spiraling network costs and to increase
revenue through new lucrative services. These services
may include controlling peer-to-peer (P2P) traffic,
and providing tiered (differentiated) services for home
and SOHO users and classes of service for business users.
Large enterprises with Gigabit backbones seek to ensure
acceptable performance for business- and time-critical
applications such as CRM, ERP and VoIP.
Policy-Powered
Networking
Allot Communications NetEnforcer® AC-1000 Series policy
enforcement devices offer carriers, service providers
and enterprises a complete suite of bandwidth management
tools for quality of service (QoS); class-of-service
enforcement and monitoring; and application performance.
Placed on the network edge between the router and the
switch, the NetEnforcer lets network managers immediately
identify and limit excessive bandwidth consumers and
put "recovered" bandwidth to better business use.
Powerful
Solutions for Your Type of Business
Whatever your type of business, the NetEnforcer AC-1000
offers you the industry's most powerful solution for
active traffic management:
Carriers/Service Providers
The NetEnforcer is an ideal service control platform
that lets you distinguish your business from other
cable, wireless and DSL providers. Offer business
customers tiered/differentiated services, classes
of service with traffic prioritization, SLAs with
guaranteed bandwidth, and usage-based billing. Enable
your customers to monitor and self provision traffic
policies with Allot's NetPolicy Provisioner. Control
P2P traffic on upstream and downstream links of SOHO
and home users. Charge power users higher fees that
more accurately reflect their usage.
-
Data Centers/Hosting Facilities
Use NetEnforcer to manage resource consumption for
the hosted applications and servers. Limit bandwidth
consumption so you can safely oversubscribe your services
while guaranteeing customer SLAs. Control the rate
and number of connections to maximize network performance
and protect your data center against DDoS attacks.
Use NetEnforcer's real-time and long-term monitoring,
and its alert system to maintain control over your
network and quickly respond to network events.
Large Enterprises
Implement quality of service with the NetEnforcer
to confront unprecedented demands on your private
network, Internet connection or VPN. Use the NetEnforcer
to link your business policies to specific network
actions that improve and control users' productivity
and satisfaction. Control expensive Gigabit network
resources to maximize performance of business- and
time-critical applications such as CRM, ERP, and Voice/Video
over IP while throttling high bandwidth consumers
such as P2P.

Features
and Benefits
Manage Bandwidth at Gigabit Speed
The NetEnforcer AC-1000 Series offers hardware and software
especially designed for complex networking tasks at
high speeds, providing QoS and service where other devices
cannot. Its carrier-grade design conforms to NEBS and
ETSI standards.
Expand Network Service Offerings
The NetEnforcer enables you to offer new profitable
services that better exploit your network infrastructure.
You can set a wide range of policies that guarantee
or limit bandwidth as well as prioritize traffic types
for every subscriber, class of service or session. This
flexibility allows you to set the exact policies that
will let you deliver services that meet the needs of
your target market.
Classify, Monitor and Control P2P Traffic
One of the most daunting challenges facing all networks
is the high consumption of bandwidth caused by P2P applications.
These applications use dynamic port numbers ("port hopping")
when downloading and uploading files and cannot be identified
or controlled by their port number. The NetEnforcer
classifies P2P file-sharing applications by their application
signature (Layer 7 classification) so you can effectively
throttle KaZaA, Gnutella and other types of P2P traffic,
permitting as much or as little as your business model
permits.
Rapidly Provision New Subscribers
You can rapidly provision new subscribers with the NetEnforcer's
integration with customer care and billing (CCB) systems.
Support for LDAP-based directories saves time by letting
you define each customer in only your customer care
directory while NetEnforcer automatically retrieves
the subscriber's SLA type and applies the minimum and
maximum bandwidth limits.
Manage Bandwidth on Redundant Connections
The NetEnforcer AC-1020 supports two Gigabit links (four
ports), enabling bandwidth management for high-availability
configurations that ensure Internet access via parallel
switches and routers. In addition, the AC-1020 uses
a single traffic enforcement mechanism, enabling a single
policy to be applied to traffic running on both links.
The Policy Editor and NetPolicy Provisioner
Allocate bandwidth to your customers using the Policy
Editor. Customers use the NetPolicy Provisioner to self-provision
their bandwidth and view their traffic consumption.
Monitor Network Activity
The Java-based Traffic Monitor presents real-time and
long-term views of traffic and performance data from
a single, easy-to-read GUI. For example, use real-time
monitoring, to instantly observe your most active users
and servers, or use scalable long-term views to discern
usage trends.

The Real-Time Traffic Monitor
Enable Customer-Provisioned Bandwidth
Management (Optional)
The server-based NetPolicy Provisioner enables your
subscribers to manage their own bandwidth without customer
premises equipment. Business customers can use their
Web browsers to access the NetPolicy Provisioner and
self-provision traffic policies on your NetEnforcer.
Home users can access a simpler, monitoring-only version
that enables them to view traffic statistics.
Receive Alerts for Major Networking
Events
Your days and nights of babysitting your network are
over. NetEnforcer's intelligent alerts inform you about
major networking events with SNMP traps to your management
station; email messages; or SMS messages. These alerts
enable you to take corrective action before problems
become costly. In addition, a variety of preset or customized
scripts can automate network reactions to specific events
or alarms.

Implement Application- and IP-Based
Accounting (Optional)
The NetAccountant software add-on collects traffic data
per session, gathering information on users, applications
and policies that can be used for usage-based billing.
The NetAccountant Reporter delivers a graphical system
for creating detailed usage and performance reports
for improved allocation of network resources.
Secure Device Management
The NetEnforcer offers a dedicated management port that
is physically separated from the ports that carry your
subscribers' traffic. This prohibits unauthorized access
to the device and enables out-of-band management.
Intuitive Policy Editor
The Java-based Policy Editor lets you access all of
your policy information from a single, intuitive view.
Special emphasis has been placed on ease-of-use and
customization so you can quickly create and edit policies
that ensure maximum service control.
DDoS Protection
The NetEnforcer detects known types of distributed denial-of-service
(DDoS) attacks and offers a first line of defense that
enhances the performance of firewalls and internal network
devices. By deploying NetEnforcer, you can monitor,
record, and block malicious traffic flows and alert
users of imminent attacks.

The Long-Term Traffic Monitor
Product Specifications
Interface Connections
- AC-1010: Two-port 1000BASE-SX/LX Gigabit Ethernet
or two-port 1000BASE-T UTP-5 interface and one 10/100BASE-T
management interface with a RJ-45 connector
- AC-1020: Four-port 1000BASE-SX/LX Gigabit Ethernet
or four-port 1000BASE-T UTP-5 interface and one 10/100BASE-TX
management interface with a RJ-45 connector
Traffic Classification (per Flow)
- IP address (with IP range, list or subnet option,
host name); retrieval via LDAP or text file
- Network protocols (e.g., ARP, IPX, PPPoE), IP protocols
(e.g., ICMP, IGMP, RSVP, EGP) and TCP/UDP applications
- Dynamic port applications (e.g., KaZaA v1 and v2,
Gnutella, WinMX, eDonkey, Winny)
- Classification and authentication of HTTP on all
port numbers
- VLAN (ID, priority)
- ToS byte - DiffServ or IP precedence bits
- Time of day/week/month/year
Policy Enforcement
- Hierarchy of policy rules with outbound and inbound
traffic management
- Minimum/maximum bandwidth enforcement per flow/VC/Pipe
- Ten levels of priorities for VCs/Pipes
- Per flow guaranteed bandwidth, burst rate, CBR (per
flow)
- Maximum number of connections per VC/Pipe
- Fairness between traffic flows/users/applications
- Admission control
Network Security
- Access control - pass/reject/drop
- Protection from distributed denial-of-service (DDoS)
attacks
- Control number/rate of connections
Configuration
- IP configuration and setup via integrated LCD and
keypad
- Remote policy configuration via CLI or Web browser
QoS Policy Management
- Easy-to-manage, single-table view based on catalogs
- Easy expansion of VCs/Pipes (policies) to multiple
subscribers
- Policy distribution from primary NetEnforcer to
other units
- Customer-provisioned QoS via optional NetPolicy
Provisioner
Monitoring and Accounting
-
Monitoring - Protocol distribution, top
hosts, top VCs, top Pipes, VC/Pipe distribution, number
and rate of connections, utilization, bandwidth usage
with 30-second granularity and storage of historical
data
Accounting (via optional NetAccountant) -
accounting of traffic per session; powerful reporter;
ODBC, CSV interfaces
SNMP - Support statistics collection per
VC/Pipe
Fail-Safe Performance (No Single Point of Failure)
- Full functional backup redundancy implemented by
two separate systems connected by a backup cable
- External fiber/copper bypass controlled by the main
board
- Dual 200W load-sharing, hot-swappable power supplies,
dual power feeds and redundant fans
Network Standards Support
- LDAP, DiffServ/ToS (RFCs 2474, 2475, 2597, 2598),
IP Precedence (RFC 791), SNMP, and ODBC
Browser Support
- MS Internet Explorer 5.5, 6.0
Dimensions & Weight
- Standard 2U by 19-inch, rack mountable
- 18.2 lbs (8.3 Kg)
Environmental Standards Compliance & Certification
Safety - UL 1950
EMC - FCC-Part 15 Class B; Directive 89/336/EEC;
EN60950; ETS 300 019-2-2; ETS 300 019-2-3; IEC-68;
VCCI 2002 Class B
NEBS/ETSI - Designed to comply with specification
Products
Solutions
For a technical consultant to call you
click here
and they will do so at the time you specify. If you
are looking for a quotation or need help designing your
solution then click here.
If you require access to our SECURE online catalogue
then click here.
For a technical consultant to call you click here and they will do so at the time you specify. If you are looking for a quotation or need help designing your solution then click here.
|
Get a fast, no-obligation quote tailored to your requirements:
|
|