|

White Papers
In this section of the site you'll find various white
papers covering a wide selection of topics. We will
be adding more titles as they are published so check
back on a regular basis. You can book mark this page
or add it to your favorites by pressing "Ctrl+D".
Click any of the headings below to read the white
papers:
Firewall
If you are considering a security system to protect
your network you should be aware of the significant
differences between application firewalls and router
based security.
Buying
your first router
At the Monday morning staff meeting the Director of
Marketing is talking about how it would be nice to connect
to the Internet...
Thin
Client Computing
The thin client is an alternative to the personal computer...
Voice
and data integration
This paper explores the following voice and data consolidation
technologies: TDM, Frame Relay, ATM and IP.
Voice
over IP
This document outlines the changes in hardware and software
that will facilitate the reliable transmission of voice
and video over almost any data network.
Storage
Area Networking
A quick guide to the network behind the server.
ReefEdge
Whitepaper (The Seven Deadly Sins of Wireless LANS)
PDF 199KB
These are the seven most common assumptions or errors
made when designing a wireless network.
Beyond
IDS : Essentials of Network Intrusion Prevention (IPS)
PDF 1.98Mb
Companies are now recognizing that it costs much less
to prevent attacks than to repair the associated damages
related to a cyber attack. This is the idea behind Intrusion
Prevention Solutions (IPS). This white paper will review
critical weaknesses of network intrusion detection technology
(nIDS) that can affect the security of your network,
and a new breed of IPS products that can help alleviate
these issues. For years, the philosophy behind network
Intrusion Detection could be summarized as "Detect as
many attacks and intrusions as possible, and report
them, so that others may take action." In contrast,
network Intrusion Prevention Systems have been designed
with a new philosophy: "Take decisive action on those
attacks or intrusions which can be accurately detected."
Vulnerabilities
of Network Intrusion Systems: Realizing and Overcoming
Risks PDF 377Kb
This document provides an overview of some of
the key problems that arise in network-based Intrusion
Detection System (nIDS) deployments. These deployment
issues result in missed intrusions, network degradation,
and lost business. The document further demonstrates
how a network-based load balancer with session-based
flow mirroring developed by Top Layer Networks can cost-effectively
overcome many of these deployment pitfalls.
Stopping
Attacks: The Importance of Denial of Service (DoS) Security
Appliances PDF 113kb
This paper outlines the growing DoS/DDoS (Distributed
Denial of Service) problem and examines how a network
can be secured against all types of DoS attacks by employing
firewall and DoS mitigation systems together. It presents
how the solution meets the varying application performance
and security needs of enterprise customers, service
providers and carriers. It also illustrates the business
benefits of deploying DoS mitigation security appliances
as opposed to using firewalls alone.
Managing University Campus Network Resources
Describes how the NetEnforcer can prevent network
abuse and ensure access to network resources
for university faculty members and administrators.
The Problem:
Students overloading network resources (WAN
connection, Cache, servers) with superfluous
traffic (such as audio files). Faculty and administration
suffer from reduced available bandwidth and
higher response time. Critical applications
(like SAP) users are experiencing unpredictable
performance.
The Solution:
Limit the use of lower priority traffic with
the Allot Communications NetEnforcer®. Assign
Quality of Service for each user group, for
students a limited access during business hours,
and for Faculty members or administration high
priority access to network resources
The Environment
With the growing popularity of applications
like Napster (sharing music files), more bandwidth
is used for non-business purposes, while critical
applications (like ERP) suffer long delays.
New multimedia rich applications like distance
learning and web traffic of threaded newsgroups
are demanding a wider bandwidth and low jitter
for stable picture and clear sound. Adding bandwidth
does not solve the problem. More available bandwidth
is "swallowed" by new traffic rapidly. In the
lack of QoS, downloading of (music) files will
consume any available bandwidth. University
campus network managers face the following issues:
How to assign the minimum bandwidth necessary
to critical applications How to prevent non-critical
traffic from overloading the already stretched
bandwidth How to avoid abuse of campus computers
and block illegal use of CPU to attack other
.com sites (e.g. Denial-of-Service attack)
|

232kb
|
|
Allot Solutions for Service
Providers - General Description
Allot Communications delivers the ideal solution
for implementing service level agreements (SLAs).
Using the Allot system of policy-based network
products, you now have the tools necessary to
deploy, enforce and manage your SLAs. You can
offer broad functionality and services to your
customers while maintaining a network that flows
smoothly according to policies that you define
and control. The Allot solution gives you, the
Service Provider, the power of integrated policies.
Your bandwidth management, enforcement, billing,
and organizational policies can all be combined
to form a single solution for total SLA management.
|

187kb
|
| |
|
Increase Your Revenues with Service Management
Solutions
Discusses revenue opportunities enabled by the NetEnforcer.
Real-world model demonstrates the NetEnforcer's
contribution to your bottom line.
The Challenge:
To increase revenues from existing infrastructure
- by offering new lucrative services, attracting
new customers and retaining existing customers.
To create the competitive edge in your IP services
business!
|

144kb
|
| |
|
|
Managing Multi-Tenant Intelligent Buildings
Discusses how Allot provides a full QoS solution
for multi-tenant and intelligent buildings.
The Problem:
Building managers are adding today broadband Internet
connection to Multiple Dwelling Units (MDU), Multiple
Tenant Units (MTU), office buildings and hotels.
Tenants are looking for fast Internet connection,
access to advanced services (e.g., video, games)
and PC office applications. Tenants require the
ability to receive streaming video traffic continuously,
but since they are sharing the broadband media,
they may suffer a degradation in network performance
and response due to heavy downloads (e.g., music)
by neighbors. In addition, users require the ability
to receive streaming traffic (e.g., music) continuously
and the option to upgrade their service level.
A full Quality of Service (QoS) solution is needed
along with the ability to monitor and bill per
network usage.
The Solution:
Allot's NetEnforcer® provides a full QoS solution
for intelligent buildings. Tenants are identified
and filtered based on IP or MAC address to prevent
fraud. The NetEnforcer enables the creation of
service classes (i.e., Gold, Silver and Bronze)
and bandwidth allocation per users and applications.
Streaming applications like VoIP, video and multimedia
games are enabled by providing guaranteed bandwidth.
Allot's NetEnforcer provides a full Service Level
Agreement (SLA) solution with integration to other
Customer Care and Billing (CCB) solutions.
|
132kb
|
| |
|
|
Policy-Based Management of Web Hosting Services
Discusses how Allot enables service providers
to offer Web hosting services based on Service
Level Agreements (SLA).
The Problem: Web hosting offers a business
opportunity that could clog backbone servers and
network access. Different customers demand a choice
of service classes. Customers' service requirements
may vary based on time of day and content type.
Adding more bandwidth and server resources will
only attracts more traffic and will not unclog
lines. Providing Service Level Agreements (SLAs)
to customers and charging per actual traffic is
needed.
The Solution:
The Allot Communications NetEnforcer® enables
service providers to offer web hosting services
based on SLA. Access to servers and networks can
be categorized into service classes (e.g., Gold,
Silver and Bronze). Real-time monitoring gives
updated network-load information and troubleshooting
traces. NetBalancer® Server Load Balancing software
provides load management onto your servers. IP
accounting data is available on-line or via export
to third party billing applications.
|
162kb
|
| |
|
|
Quality of Service for Co-Location Service
Discusses how Allot products present a scalable
QoS solution for co-location services.
The Problem:
Co-location service providers offer fast access
to network backbone, scalable bandwidth, expert
24x7 service, network monitoring and ongoing maintenance
and management services. Companies sharing the
broadband access may suffer slow network response
due to heavy traffic from and to other servers.
In addition, users require the ability to receive
streaming data (e.g., music) continuously and
the option to upgrade their service level. Co-location
customers demand a scalable Quality of Service
(QoS) solution with service guarantees.
The Solution:
Allot products present a scalable QoS solution
for co-location services. The NetEnforcer® enables
the creation of tiered service classes (i.e.,
Gold, Silver and Bronze) and bandwidth allocation
per servers, users and applications. The NetEnforcer
provides traffic monitoring and statistics. Streaming
services of multimedia traffic are enabled with
guaranteed bandwidth. Optional load balancing
is available with full packet content inspection.
Allot offers a comprehensive solution for delivering
QoS to applications and Web-based services over
the Internet or a Virtual Private Network (VPN).
Allot's QoS solution fully integrates with other
Customer Care and Billing (CCB) solutions.
|
179kb
|
| |
|
|
NetReality® Deployment in Enterprise
Wide Area Networks
Describes how you can deploy the NetReality to
relieve the application performance bottleneck
on the WAN.
|

100kb
|
| |
|
|
Effectively Managing Your Internet Connection
Describes how the NetEnforcer® can help you maximize
the efficiency of your Internet connection.
The Challenge:
Whether for email, Web browsing, eBusiness or
VPN connections to remote offices, the corporate
Internet connection is a key to doing business
in the global village of the 21st century. Compared
to the 10 Mbps or the 100 Mbps on the LAN, the
WAN is always a potential bottleneck for IP traffic.
Indeed the mix of business-critical and non-critical
traffic on over a WAN carrying both VPN and Internet
traffic can easily translate into decreased productivity,
lost revenues and increased business costs that
may negate the benefits of switching from Frame
Relay or leased lines to a VPN.
The Solution:
The Allot Communications NetEnforcer® enables
enterprises of all sizes to effectively manage
their congested Internet connections and to ensure
maximum performance for business-critical applications.
Placed between your router and your switch, the
NetEnforcer ensures the response time of your
mission-critical applications by prioritizing
their traffic or guaranteeing them a portion of
your Internet bandwidth. At the same time, traffic
from less critical and less time-sensitive applications
receives a limited amount of bandwidth or a lower
priority.
|

117kb
|
| |
|
|
Tuning Your Network for Business (Corporate
Internet)
A detailed look at how you can use the NetEnforcer®
to align Internet usage with your company goals
and priorities.
Introduction
Today's Network managers are concerned with keeping
their corporate LANs and WANs running efficiently.
Network managers run nightly backups of crucial
network servers and implement comprehensive fault
tolerant plans in case of failure - but how many
are concerned with protecting their critical Corporate
Internet Link? In today's fast paced business
world, the Internet has become a vital tool for
all companies. Whether or not your company is
doing business on the Internet or you are simply
using the Internet as a tool to maintain closer
contact with your customers, the Internet has
become a crucial tool for all businesses. Just
think to yourself - what happens in your company
when the Internet connection goes down. How does
it effect your organization? There are no email
services to converse with customers or suppliers;
company employees cannot access vital websites
and employees at remote sites connected via VPN
to the corporate headquarters lose connectivity
to the corporate ERP system. These are just some
examples of how the loss or mismanagement of the
corporate Internet connection can affect your
business. Effective management of the corporate
Internet link is critical to attaining a competitive
advantage for your business. Tuning your network
to your business is the key to making efficient
use of the Internet and maximizing the Return
on Investment your company has made in this technology.
This document will demonstrate how you can successfully
modify your existing Internet usage to mirror
your company goals and priorities. The Allot NetEnforcer
is a network device that will enable you to easily
take control of and manage your company's Internet
resource. We will describe two methods for achieving
this, firstly an automatic approach that will
quickly and simply enable you to discover what
and how your Internet resource is currently being
utilized and how to transform the usage to reflect
your business needs. The second method is a more
advanced manual approach to implementing control
and management of your Internet Access.
|
1252kb
|
| |
|
|
Maximizing Mission-Critical Application Performance
in the Multi-Site Enterprise
Describes how you can use the NetEnforcer to prevent
non-critical applications from utilizing bandwidth,
at the expense of mission-critical traffic.
The Problem:
Corporate Intranets have become key repositories
of business information needed by employees across
the enterprise. Companies also rely on the existence
of network-based services for their businesses,
running mission critical applications for ERP,
CRM, eCommerce, and more. Poor application response
times, caused by the mix of business-critical
and non-critical traffic on the same network,
quickly translate into decreased productivity,
lost revenues and increased business costs. In
addition, the penetration of time-sensitive videoconferencing
and voice over IP (VoIP) offer low-cost alternatives
to expensive business trips and telephone conference
calls, but these applications require sustained
network performance and therefore place increased
demands on the network. The native IP network
infrastructure, with its congested and expensive
WAN links, does not provide the means for you
to fully control all aspects of your complex enterprise
network. Nor can you analyze network usage, prioritize
the critical traffic and ensure that time-sensitive
traffic will receive the appropriate network resources.
The Solution:
Allot Communications NetEnforcer® enables mission-critical
applications to run smoothly over otherwise unmanaged
and congested WAN (IP) networks. The NetEnforcer
ensures the response time of your mission-critical
applications by prioritizing their traffic or
guaranteeing them a portion of bandwidth. At the
same time, traffic from less critical and less
time-sensitive applications receives a limited
amount of bandwidth or a lower priority.
|
162kb
|
| |
|
|