The first level of defense in networks connected to Internet is the firewall – a security solution that controls and enforces policies on incoming and outgoing connections. A classical firewall is a mandatory component in every modern network, a key security component that cannot be replaced by client-based personal firewalls, UTM-solutions, or stateless Access Control Lists (ACLs) on routers.

Firewalls in enterprise and corporate environments must perform stateful inspection of hundreds of thousands of connections based on protocol and options, detect anomalies and. inspect payloads. Providing high availability and redundancy as well as compliance with multi-user and security requirements is particularly important. Modern firewalls must do more than a border security solution. A firewall must be an intelligent edge security solution between a number of subnets, VLANs, and logical security layers.

HP Networking is a world leader in the Ethernet switch market. As the Network of Choice, HP Networking provides best-in-class solutions, products and services for wired and wireless networks. .vantronix | secure systems GmbH is a specialist in IT-Security and leading vendor in OpenBSD-based security appliances from Hannover, Germany. The joint ZL1 solution is a faster, more secure, and better-integrated firewall that provides enterprise-grade services at a lower cost than proprietary competitive products.

The combination of a .vantronix Firewall ZL1 running in a ProCurve 8200zl series switch or the 5400zl switch and the HP Networking architecture is a powerful border security solution. The ZL1 is physically integrated in the HP Networking platform, interoperates with the HP Networking management and software platform, and operates as an enterprise-grade firewall, load balancer, VPN, IPv6 gateway, and anti-spam solution. The ZL1 Intelligent Edge Firewall offers .vantronix Trusted Proactive Security in an HP ProCurve Adaptive Edge Architecture.

• Firewall: The Packet Filter (PF) is a Stateful Packet Inspection firewall with full support for IPv4 and IPv6, queuing (QoS), translation (various forms of NAT), traffic normalization, DoS-protection, High Availability (HA), and .vantronix preinspection. Its unique tree-based state engine can handle hundreds of thousands of concurrent sessions while delivering high performance. The post inspection option extends the firewall with IDS, Anti-Virus, and URL-Filtering.
• Load Balancer: The integrated load balancer provides support for multi-protocol layer 2 to layer 7 load balancing, .vantronix | greenbalancing, active health checking of server pools, transparent operation, session persistence, and attack prevention as an integrated subsystem of the .vantronix firewall engine.
• VPN: Integrated VPN support is a mandatory feature for firewalls in enterprise environments. The ZL1 provides strong security and crypto using the industry-standard IPSec protocol and .vantronix' alternative SSH-VPN.
• IPv6 Gateway: .vantronix provides full support for the next generation Internet Protocol version 6. The IPv4-to-IPv6 and IPv6-to-IPv4 gateway extends dual stack functionality with dynamic translation between address families for interconnecting and migrating IPv4 and IPv6 network clouds.
• Anti-spam: The network-based Anti-spam solution is powered by .vantronix' preinspection approach to detect spammers based on their network behavior and SMTP-compliance. Core technologies like fully-transparent greylisting and greytrapping have been extended to meet the requirements of high-volume enterprise email applications.

• The firewall is a border protection and inter-VLAN security solution. It will control access to internal, external, and restricted networks, prevent intrusion, inspect inbound and outbound traffic and protect against Denial-of-Service (DoS) attacks. The .vantronix Firewall ZL1 is an enterprise-grade solution satisfying the needs of critical environments. HA-functionality is provided with every additional ZL1 device in a cluster configuration without any additional licensing costs.
• A classic load balancer is an independent device. The .vantronix load balancer is an integrated extension of a powerful firewall. As a load balancer, the ZL1 can extend the scalability of IT applications by virtualizing server pools behind single addresses to transparently cluster a database, e-commerce, mail or service application. And as a firewall, it will protect the internal systems.
• The integrated VPN functionality allows the secure extension of the network to remote branches, interconnect with third-party organizations (for example in healthcare networks), or to simply provide remote access for IT administrators. The VPN interacts with the firewall engine and allows enforcing security policies on VPN connections. The VPN functionality is based on proven, open standards and implementations, such as the common and interoperable IPsec protocol and SSH-VPN.
• IPv6, the next generation Internet Protocol, is currently in the rollout by governmental and enterprise organizations, especially in the telecommunications, national security and public safety areas. Unlike many other firewall solutions, the .vantronix ZL1 provides full support for IPv6 – stateful filtering and consistent operation based on a proven code base. The unique IPv6 Gateway will solve the #1 migration issue – interconnecting traditional IPv4 and new IPv6 networks.
• .vantronix provides a network-based anti-spam solution. The .vantronix solution will reject spammers before they're able to send any mails to the protected mail infrastructure. It will also detect and reject spammers without inspecting the mail contents. It is a first-level-of-defense, pre-inspection anti-spam approach with 80-95 percent efficiency, and can significantly reduce spam traffic. This will reduce work-load from second-level content-filtering anti-spam and UTM appliances and the internal mail servers, and will preserve the privacy of mails because the mail content itself is not inspected.

Core solutions:

• HP ProCurve Switch 5400zl series – the 5406/5412/8200zl series switch chassis
• HP ProCurve ONE Services zl Module
• .vantronix Firewall ZL1: Software and license with .vantronix Silver Care 1Y (default integrated 1Y release maintenance and access to two major release upgrades, unlimited security and errata fixes, access to online .vantronix customer care).

Suggested extensions:

• High Availability: Redundant cluster solution with two or more modules in a single switch chassis or modules in independent switch chassis interconnected via a management VLAN. A HA setup costs n times of the HP Networking hardware + .vantronix ZL1 software license.
• Support: The additional .vantronix Gold and Platinum Support for 1 or 3 years provides advantages of the included Silver Care.

Sun Java runtime and plugin is a requirement for non-MS IE browsers.

How to purchase:

• HP Networking integrated applications are available for purchase from the ProCurve ONE alliance partner or channel partner of the alliance partner.
• HP Networking integrated applications require a ProCurve ONE Services zl Module, which works either a ProCurve Switch 5400zl or 8200zl. To purchase one of these contact your HP Networkingreseller.

• »  Contact HP Networkingsales to discuss your needs for a joint solution with HP Networking
• »  Download demo
• »  Find a joint HP Networking/.vantronix partner
• »  Find a HP Networking partner
• »  Find a .vantronix partner

Download — Download application image (if you already have a license key)

• Download application
• Note: A permanent license key is required for each application to be installed on the Service module.
• The license key for HP Networking integrated applications are available to from the HP Networking alliance partner or channel partner of the alliance partner

Sun Java runtime and plugin is a requirement for non-MS IE browsers.