|
|
Anchiva
Fastest Content Security Gateway
High Performance Anti-Spyware and Anti-Virus Protection
The Anchiva Content Security Appliances provide best-in-class performance and an
unmatched threat database that scales to detect and block up to 1 million forms of
Spyware, Viruses, Adware, Rootkits, Trojans and other types of malicious and unwanted
programs. Developed around an ASIC accelerated data inspection engine and patent-
pending malware identification techniques, the Content Security Appliances ensure safe
web usage without impacting network performance.
•
•
•
•
• |
Largest onboard threat database provides real-time inspection of web downloads and
uploads
Protects against stealthy, drive-by spyware installations
Multi-port appliance based platforms integrate seamlessly into the network
Easy to use web based management interface
Flexible deployment modes support inline preventative and offline Recon mode |
Anchiva offers 3 CSA models ranging from the Anchiva-2000X which offers near gigabit
performance for large enterprises, to the Anchiva-500 which is ideal for SMB and remote
offices. These appliances are easy to install and manage, including having an automated
system to update its threat database. Onboard reports allow the administrator to view
which spyware and virus threats were attempted to be downloaded and by which user.
The CSA acts a single point of enforcement in the network by integrating web and email
scanning onto a single platform. The end result of the integrated system is savings in
administrative and licensing costs.
| |
Key Features |
|
| |
•
|
Gateway functionality
|
• |
Establishes central security point |
| |
•
|
Comprehensive content inspection protection |
•
|
Boosts end user productivity - less time
spent on Spyware and virus issues |
| |
• |
Eliminates end user bypass measures |
• |
Reduces need for additional infrastructure |
| |
•
|
Improves Total Cost of Ownership (TCO)
|
• |
Management through graphical Web UI |
| |
•
|
Integrated solution with security-opti-
mized hardware, operating system, and
applications |
•
|
Transparent mode to allow the device to
function as a Layer 2 IP security bridge,
but with minimal change to the existing network |
| |
•
|
High-performance platform with excellent
price/performance
|
|
|
| |
|
|
|
|
|
|
| Model |
Anchiva-206 |
Anchiva-500 |
Anchiva-1000x |
Anchiva-2000x |
| |
|
|
|
|
| Performance HTTP (Mbit/sec) V2.0 |
10 |
50 |
400 |
800 |
| SMTP Performance (MSG/hour) |
200k |
360k |
720k |
1000k |
| Recommended # of users |
100 |
500 |
2500 |
10000 |
| # of interfaces(10/100/1000) |
4 |
4 |
8 |
8 |
| Redundancy |
HA/Lan Bypass |
HA/Lan Bypass |
HA |
HA/Dual Power |
| Target Customer |
SMB |
SMB |
Enterprise |
Large Enterprise |
Inbound and Outbound inspection
Spyware and virus infected hosts can cause damage in multiple ways. While inbound
threat scanning is most commonly discussed in the industry, it is also important to monitor
outbound traffic.
•
• |
Common behavior of virus infected hosts include viral replication used to spread itself
and infect other hosts, thus creating a virus outbreak.
Spyware n the other hand is stealthier and is often used to steal sensitive information
from the infected host and upload the information to a central server. |
Anchiva provides bidirectional traffic visibility and control and thus can prevent unwitting
participation in spreading virus outbreaks. The spyware "phone home blocking" feature
blocks spyware from connecting back to their home sites where hackers can remote
control the infected workstation or upload information farmed from the infected host.
Network Segmentation
The Anchiva-1000X and 2000X have 8 copper, tri-mode 10/100/1000 gigabit interfaces
that allows the system to secure traffic from multiple network segments (Internal, External,
DMZ, Wireless, Guest network, management, etc...) With this type of segmentation
available, the administrator can set distinct and independent policies for each network.
This ensures that one network does not impact the other while at the same can serve to
contain a spyware or virus outbreak to one network.
Onboard logging and reporting
Onboard logs and external logging via syslog are available to allow the administrator to
view spyware and virus and spyware activity on their network. The embedded reports
can be used to generate summary reports that include top 10 lists of spyware and viruses
blocked and also identify which hosts on the network are attempting to download and
equally as important, upload malicious files.
|
|
|
|
Anchiva-206
•
•
•
• |
Multi-layered web security appliance protects networks against 1 million+ known mal-
ware threats
Integrated web and email protection
Easy to deploy and manage, set and forget installation with auto updating features
Affordable, per device subscriptions |
| |
Specifications |
|
| |
•
•
•
•
•
•
•
•
•
•
•
•
•
• |
HTTP Inspection Performance
Interfaces
WebUI and CLI management
HA
VLAN Support
Lan Bypass
Rack Size
Integrated Web and Email inspection
Auto-Updates
Transparent Mode deployment
Interoperable with existing firewall
Interoperable with existing HTTP Proxy
Power
Certifications
|
10 Mbps
6 x 10/100/1000 Copper
Yes
Active/Passive
Yes
Yes, 2 pairs (ETH0 - ETH1, ETH2 - ETH3)
1U
Yes
Yes
Yes
Yes
Yes, (ISA, Bluecoat, Squid)
100V to 240V Auto-Sensing
FCC and CE |
| |
|
|
|
|
|
|
|
|
|
|
Anchiva-500
•
•
• |
Anchiva low cost solution for SME provides customers with all the advanced features
of Anchiva high end systems but at an affordable price. Anchiva-500 offers a LAN
bypass option for customers not able to deploy redundant pairs for high availably.
1U Rack Mountable
LAN Bypass |
| |
Specifications |
|
| |
•
•
•
•
•
•
•
• |
Number of Interfaces
New HTTP sessions/second (10 Kbytes message/file size)
AV Performance HTTP Detection
SMTP Performance (MSG/hour)
Operational Modes
Inspection
Spyware & Antivirus Signatures
High-Availability Modes Supported
|
4 x 10/100/1000
200
50 Mbps
360k
Inline Transparent/Offline Recon
Inbound and Outbound
1 Million+
LAN Bypass |
| |
|
|
|
|
|
|
|
|
|
|
Anchiva-1000X
•
• |
Anchiva-1000X inspects all web and email traffic entering and leaving a network for
malicious content, blocking spyware and other malicious programs, without interfering
with legitimate web based applications.
2U Rack Mountable |
| |
Specifications |
|
| |
•
•
•
•
•
•
•
• |
Number of Interfaces
New HTTP sessions/second
AV Performance HTTP Detection
SMTP Performance (Messages*/hour)
Operational Modes
Inspection
Spyware & Antivirus Signatures
High-Availability Modes Supported
|
8 x 10/100/1000
5,000
400Mbps
720,000
Inline Transparent/Offline Recon
Inbound and Outbound
1 Million+
Active/Passive, Active/Active (Future) |
| |
|
|
|
|
|
|
|
|
|
|
Anchiva-2000X
•
•
• |
Based on an accelerated hardware platform, Anchiva-2000X system provides
unmatched performance with the ability to achieve near-gigabit antivirus scanning
rates. High availability features like dual power supplies allow for the Anchiva-2000X
to be deployed in mission critical environments. The AnchivaOS also provides for
active-active or active-passive deployments.
2U Rack Mountable
Redundant Power Supply |
| |
Specifications |
|
| |
•
•
•
•
•
•
•
• |
Number of Interfaces
New sessions/second (TCP)
AV Performance HTTP Detection
SMTP Performance (Messages*/hour)
Operational Modes
Inspection
Spyware & Antivirus Signatures
High-Availability Modes Supported
|
8 x 10/100/1000
10,000
800Mbps
1000k
Inline Transparent/Offline Recon
Inbound and Outbound
1 Million+
Active/Passive, Active/Active (Future) |
| |
|
|
|
|
|
|
|
|
|
|
