Hirschmann IT RAVEN Next Generation Fire Wall

the information base, RAVEN NGFW and RAVEN IDS can identify the latest network attacks and

implicit risks.

L2/L3 Mode

RAVEN NGFW can work under Layer2 or Layer3 mode which provides flexibility during network

design. It can serve as the network gateway in L3 mode or as a network bridge in L2 mode.

According to the limitation in deployment environment, RAVEN NGFW can choose either L2 or

L3 mode on demand or combine both modes in one chassis.

IPv6 Ready

Network address is now moving from IPv4 to IPv6. All security functions on RAVEN NGFW

and IDS support IPv4/IPv6 dual stack, which ensures RAVEN products can fulfill the security

requirements no matter in current networking environment or in future security design.

vFW

vFW is a feature that enable RAVEN NGFW to divide into multiple isolated virtual firewalls

serving different security domains or security designs. RAVEN NGFW allows users to manage

the resource of each vFW, which avoid the over subscription of resource during heavy

traffic. vFW also balance the traffic between HA (High Availability) members under specific

configuration.

HA (High Availability)

To cope with the risk of chassis failure, all RAVEN products support HA function. In RAVEN

NGFW, HA function merge 2 firewalls into one cluster, and thus all traffic fingerprints, such

as TCP status, ICMP/UDP timer, ALG sessions and VPN cookies, will be synchronized in both

firewalls. Therefore, no new session is needed once a member of HA cluster failed. In RAVEN IDS,

HA function helps to remove duplicate session and to ensure no security events will be missed

during the failure of one chassis.