Hirschmann IT RAVEN Next Generation Fire Wall

Hirschmann IT RAVEN Next Generation Fire Wall

Hirschmann IT RAVEN security products help Belden deliver total solution for compliance and

security requirements in IT/OT converged network design.

RAVEN Security Products Commit to Provide Customers with a Secure and Trusted Networking

Environment, Perfect Border Management Functions, and Predictable Behavior/Performance

RAVEN series products are important security solutions from Hirschmann IT product portfolio. They

can help customers benefit from the evolution of IT/OT convergence and avoid as more risks as

possible in this convergence trend.

Integration Protection

RAVEN series products (RAVEN Next Generation Firewalls and RAVEN Intrusion Detection Systems) are

designed as part of the total security solution of Belden. They can co-work with Hirschmann EAGLE firewall

products to offer a total cyber security solution in IT/OT convergence. Besides, by synchronizing with RAVEN

EYE, RAVEN series products shares the same security updates, which helps implement end-to-end security

strategy and also helps network administrators assess their security strategy with the same benchmark.

Comprehensive Inspection

From security design perspective, all security target need to be accomplished without being interfered

by previous network design. To achieve this expectation, RAVEN NGFW and RAVEN IDS support multiple

deployment modes to adapt to various network environment. RAVEN NGFW support L2/L3 deployment modes

and RAVEN IDS support centralized/distributed deployment modes. These multiple deployment modes help

RAVEN security products implement comprehensive inspections in all scenes.

Multi-Functional Report

Clear and clarified information visualization help network and security administrators understand what

happened in their network and how to take correct action to defense/mitigate network attack. RAVEN security

products provide advanced algorithms and dashboard to show security information in real time. Besides,

RAVEN security products provide analysis report based on time, address, event and other multiple parameters.

Combined with historical analysis data, it can clearly show the trend of security risks and help to evaluate the

result of network security construction.

Virtualization and High Availability (HA)

RAVEN series products can build a reliable security solution to not only improve cyber protection but also avoid

introducing additional risk into the network system. RAVEN NGFW supports virtual firewall (vFW) technology

to provide flexibility in multi-context design. As for HA, this is the basic function included in all RAVEN security

products. HA function eliminates the risk of device failure in single box and thus fundamentally improves the

reliability when merging cyber security device into current network.

RAVEN EYE

RAVEN series products can get latest cyber security events from over 70 traffic flow sampling centers around

the world. Combining these data with Hirschmann IT’s security analysis, tracking and modeling database, any

new network attack and security accidents around the world will be updated onto RAVEN EYE database within

6 hours.

RAVEN EYE is an intelligent analysis center which contains compressed behavior signature and profile information

database. Through regular updates to RAVEN EYE, RAVEN NGFW and RAVEN IDS can identify the latest attacks

and implicit risks.

Technologies

Technology Topics on Network Security

RAVEN security products are designed to provide comprehensive and reliable cyber security functions in IT/

OT converged network. With Belden’s 10-year network security experience, below functions can directly benefit

customers and promote security strategy landing.

RAVEN EYE

RAVEN EYE is an intelligent analysis center which contains compressed behavior signature and

profile information database. It can get latest cyber security events from over 70 traffic flow

sampling centers around the world. By combining these collected data with RAVEN EYE security

analysis, tracking and modeling database, any new network attack and security events around

the world will be updated onto RAVEN EYE database within 6 hours. Through regular updates to

the information base, RAVEN NGFW and RAVEN IDS can identify the latest network attacks and

implicit risks.

L2/L3 Mode

RAVEN NGFW can work under Layer2 or Layer3 mode which provides flexibility during network

design. It can serve as the network gateway in L3 mode or as a network bridge in L2 mode.

According to the limitation in deployment environment, RAVEN NGFW can choose either L2 or

L3 mode on demand or combine both modes in one chassis.

IPv6 Ready

Network address is now moving from IPv4 to IPv6. All security functions on RAVEN NGFW

and IDS support IPv4/IPv6 dual stack, which ensures RAVEN products can fulfill the security

requirements no matter in current networking environment or in future security design.

vFW

vFW is a feature that enable RAVEN NGFW to divide into multiple isolated virtual firewalls

serving different security domains or security designs. RAVEN NGFW allows users to manage

the resource of each vFW, which avoid the over subscription of resource during heavy

traffic. vFW also balance the traffic between HA (High Availability) members under specific

configuration.

HA (High Availability)

To cope with the risk of chassis failure, all RAVEN products support HA function. In RAVEN

NGFW, HA function merge 2 firewalls into one cluster, and thus all traffic fingerprints, such

as TCP status, ICMP/UDP timer, ALG sessions and VPN cookies, will be synchronized in both

firewalls. Therefore, no new session is needed once a member of HA cluster failed. In RAVEN IDS,

HA function helps to remove duplicate session and to ensure no security events will be missed

during the failure of one chassis.