Category: Hirschmann

IPv6 Ready

Network address is now moving from IPv4 to IPv6. All security functions on RAVEN NGFW

and IDS support IPv4/IPv6 dual stack, which ensures RAVEN products can fulfill the security

requirements no matter in current networking environment or in future security design.

vFW

vFW is a feature that enable RAVEN NGFW to divide into multiple isolated virtual firewalls

serving different security domains or security designs. RAVEN NGFW allows users to manage

the resource of each vFW, which avoid the over subscription of resource during heavy

traffic. vFW also balance the traffic between HA (High Availability) members under specific

configuration.

HA (High Availability)

To cope with the risk of chassis failure, all RAVEN products support HA function. In RAVEN

NGFW, HA function merge 2 firewalls into one cluster, and thus all traffic fingerprints, such

as TCP status, ICMP/UDP timer, ALG sessions and VPN cookies, will be synchronized in both

firewalls. Therefore, no new session is needed once a member of HA cluster failed. In RAVEN IDS,

HA function helps to remove duplicate session and to ensure no security events will be missed

during the failure of one chassis.

Virtualization and High Availability (HA)

RAVEN series products can build a reliable security solution to not only improve cyber protection but also avoid

introducing additional risk into the network system. RAVEN NGFW supports virtual firewall (vFW) technology

to provide flexibility in multi-context design. As for HA, this is the basic function included in all RAVEN security

products. HA function eliminates the risk of device failure in single box and thus fundamentally improves the

reliability when merging cyber security device into current network.

RAVEN EYE

RAVEN series products can get latest cyber security events from over 70 traffic flow sampling centers around

the world. Combining these data with Hirschmann IT’s security analysis, tracking and modeling database, any

new network attack and security accidents around the world will be updated onto RAVEN EYE database within

6 hours.

RAVEN EYE is an intelligent analysis center which contains compressed behavior signature and profile information

database. Through regular updates to RAVEN EYE, RAVEN NGFW and RAVEN IDS can identify the latest attacks

and implicit risks.

Comprehensive Inspection

From security design perspective, all security target need to be accomplished without being interfered

by previous network design. To achieve this expectation, RAVEN NGFW and RAVEN IDS support multiple

deployment modes to adapt to various network environment. RAVEN NGFW support L2/L3 deployment modes

and RAVEN IDS support centralized/distributed deployment modes. These multiple deployment modes help

RAVEN security products implement comprehensive inspections in all scenes.

Multi-Functional Report

Clear and clarified information visualization help network and security administrators understand what

happened in their network and how to take correct action to defense/mitigate network attack. RAVEN security

products provide advanced algorithms and dashboard to show security information in real time. Besides,

RAVEN security products provide analysis report based on time, address, event and other multiple parameters.

Combined with historical analysis data, it can clearly show the trend of security risks and help to evaluate the

result of network security construction.

Hirschmann IT RAVEN Next Generation Fire Wall

Hirschmann IT RAVEN security products help Belden deliver total solution for compliance and

security requirements in IT/OT converged network design.

RAVEN Security Products Commit to Provide Customers with a Secure and Trusted Networking

Environment, Perfect Border Management Functions, and Predictable Behavior/Performance

RAVEN series products are important security solutions from Hirschmann IT product portfolio. They

can help customers benefit from the evolution of IT/OT convergence and avoid as more risks as

possible in this convergence trend.

Integration Protection

RAVEN series products (RAVEN Next Generation Firewalls and RAVEN Intrusion Detection Systems) are

designed as part of the total security solution of Belden. They can co-work with Hirschmann EAGLE firewall

products to offer a total cyber security solution in IT/OT convergence. Besides, by synchronizing with RAVEN

EYE, RAVEN series products shares the same security updates, which helps implement end-to-end security

strategy and also helps network administrators assess their security strategy with the same benchmark.

Hirschmann IT Dragonfly Enterprise Wi-Fi 6 Access Point

Hirschmann IT Dragonfly series Wi-Fi 6 certified access point is the last puzzle for the Hirschmann IT

enterprise network solution.

Dragonfly Wi-Fi 6 access point has indoor and outdoor version. All models  support 2.4GHz & 5GHz

dual GE uplink, OFDMA, MU-MIMO and all sort of Wi-Fi 6 features that can deliver more capacity for

bandwidth with less latency, which is ideal choice for your high-quality wireless requirement.

Featuring enhanced WLAN technology with RF Radio Dynamic Adjustment, a distributed control Wi-Fi

architecture with unified access secure network admission control, built in application intelligence and

analytics, making it ideal for enterprises wireless solution. All DAP models except DAP620 has integrated

with BLE5/Zigbee (802.15.4), making it ideal for broad scope of IoT endpoints and applications.

Plug-and-Play Deployment

The DAP  Series works in a fully redundant cluster architecture to provide simplified plug-and-play deployments.

One single access point (AP) cluster is an autonomous system that consists of a group of APs and a virtual

controller, which is performed by a selected access point for cluster management. One AP cluster supports up

to 255APs

The access point cluster architecture ensures simplified and quick deployment. Once the first AP is configured

using the configuration wizard, the remaining APs in the network will get online automatically with updated

configuration. This ensures that the whole network is up and operational within a few minutes.

Network Management Platform deployment

All Drgonfly APs can be managed by DAC (Dragonfly Access Point Virtual Controller). APs is managed as

one or more AP Groups (a logical grouping of one or more access points). The DAC is a visualized, user

friendly and hardware free management platform. It supports WLAN management together with integrated

authentication server which helps define authentication strategy and policy enforcement for Employees and

Guest devices. The network administrator can obtain a comprehensive overview of all running applications on

the network and apply adequate control to optimize the network performance for mission critical applications.

DAC Management platform provides advanced options for RF Management, as well as WIDS/WIPS for

intrusion detection and prevention.

Wi-Fi 6 (802.11ax) Features

Wi-Fi 6 (802.11ax) allows enterprises to deliver high performance wireless LAN services with increased

throughput, enabling more clients in dense environments. Furthermore, it provides high power efficiency for

Internet of Things (IoT) devices, while it remains fully backward compatible with existing 802.11 a/b/g/n/ac

deployments.  Some of the key features enabled on DAP series are:

Orthogonal frequency division multiple access (OFDMA) enables more clients to simultaneously operate

in the same channel, therefore improved efficiency, latency, and throughput. OFDMA can simultaneously

address multiple clients in both directions downlink (DL) and uplink (UL). OFDMA is extremely effective for

lower latency applications with mass clients such as voice and video transmission.

Multi-user multiple input, multiple output (MU-MIMO) allows more data to be transferred at once

and enables a single access point to handle a larger number of concurrent clients.

1024 quadrature amplitude modulation mode (1024-QAM)

boosting peak data-rates by as much as 25 %.

BSS Coloring improves spatial reuse in dense environments by providing a mechanism for color

coding different overlapping BSS’s, allowing more simultaneous transmissions.

Extended Range (ER) provides increased coverage in scenarios where receiving side encounters

high path loss and channel delay spread, especially in outdoor environments.

Target wake time (TWT) improves power efficiency for Wi-Fi 6 devices. This capability lets client

devices to sleep much longer, and wake up to less contention, extending the battery life of smart

phones, IoT sensors, and other devices.

Features

MTS2600 series:

• Entry-level access switches in the Mammuthus series

• Support auto-negotiation and MDI/MDI-X

• Static IPv4 and IPv6 routing

• 10 Gigabit port is available, so uplink speed to core switch is assured

• All SFP+ slots can work under 1/10G mode

• Supports stacking and downlink-oversubscribe design

MTS2700 Series:

• Power over Ethernet Plus (PoE+)

• Full IPv6 static, unicast, and multicast routing

• Stackable up to 8 devices

• Storm control

• EAL2

MTS2800 Series:

• Full IPv6 static, unicast, and multicast routing

• Stackable up to 8 devices

• Storm control

• EAL2

Applications

• IT networks in industrial facilities

• Smart building

• CCTVs

• Railways, highways, and airports

Easy to Configure

Our managed switches are easy to configure with an integrated password controlled web interface, via SNMP or

CLI (command line interface), providing secure remote configuration through the network. Configuration data

and device Operating System can be saved and stored on an external flash-based configuration storage device,

simplifying and automating commissioning and device replacement.

Security and Authentication

The Mammuthus series switches provide a full complement of port security features, including Dynamic Host

Configuration Protocol (DHCP) snooping, dynamic ARP inspection (DAI), IP source guard, and media access

control (MAC) limiting (per port and per VLAN), to defend against internal and external spoofing, man-in-the

middle and denial-of-service (DoS) attacks.

MTS series switches also provide user authentication based on AAA, port security, ACL and 802.1x. These

features can help customer to manage their network in a more secured way.

Broad Product Line

The Mammuthus series switches have various interfaces including GE TX, SFP, SFP+ and QSFP, and the

configuration varies from 1RU fixed switch to more than 6RUs modular switch. Software feature set varies from

basic level, which includes full L2 switching feature, to advanced level, which supports many advanced L3

function such as MPLS and SDN. Thus, any requirements can be matched with a certain model without needless

budget spending.

Persistent PoE

In IoT situation, continuous power supply may be expected in any cases. The Mammuthus series switches

support PoE/PoE+ function, power supplying will not be interrupted during device rebooting.

Network Software

Monitoring and visualizing your network is made easy with the use of our Industrial HiVision network

management software. Requiring little or no IT knowledge, Industrial HiVision allows users to monitor alarms,

bandwidth utilization, and availability of networked devices – not just switches. Industrial HiVision allows the

user to configure a single switch or multiple switches at the same time, significantly simplifying commissioning.