PowerStation Services

HGiga > Help you Get Innovation in Great Age

Bandwith Aggregation- Smart Bandwidth Aggregation that Saves Money

Trunking is a method that improves overall network performance and increases bandwidth by aggregating multiple leased lines. The broadband leased-lines from several different ISPs can be aggregated together. For example, when your company rent two-way 512 Kbps ADSL lines from ISP-1, ISP-2 and ISP-3, these 3 leased lines can be aggregated together to form a connection that has bandwidth equivalent to a T1 leased line. In another word, without paying for the expensive leased line, your company could still benefit from the bandwidth of a leased line. PowerStation not only integrates your broadband connections, it's also a saving to your bottom line.
ISP 1 ISP 2

ISP 3

ADSL 512k/512k ADSL 512k/512k

ADSL 512k/512k

Outbound Load Balancing

The outbound load balancing is based on the static policies, which are static traffic allocation rules, and in conjunction with the dynamic feedback of run-time load across the network. The system automatically feeds these performance parameters, such as response time and traffic load, and in consideration of the predefined static policies, into a load-balancing algorithm to calculate the most efficient routing path. Ultimately, the users are guaranteed of having the fastest connection available.
ISP 1

ISP 2

ISP 3

Inbound Load Balancing

PowerStation has a built-in Dynamic Domain Name Service Database (DDNS Database) that is serving as an efficient lookup table for the domain name resolution requested by the Internet users. The system automatically determines the best routing path and replies the resolved IP back to the requester. In effect, PowerStation achieves inbound load balancing and eliminates the need for an enterprise to maintain a dedicated DNS server.
ISP 1

Internet

WWW

ISP 2

Outbound Fault Tolerance

With the built-in fault detection mechanism, it's always keeping an eye on the connection status and its quality. Through the Multi-Homed service, whenever the system detects traffic blockage in a faulty line, it will

HGiga > Help you Get Innovation in Great Age

automatically redirect the traffic on that line to an active working line. This entire process is done without any human involvements. By doing so, PowerStation not only lessens the system and network administrators' burden, but also ensures the enterprise will always be connected.

ISP 1

ISP 2

ISP 3

Inbound Fault Tolerance

PowerStation automatically adjusts DNS entries according to the line status of different ISP This ensures a non. interruption Internet service by guaranteeing resolving DNS requests to a functional IP address.

ISP 1

Internet

WWW

ISP 2

Policy Routing - Flexibility for Internet Services' Linking Arrangement

Policy Routing allows flexibility in adjusting the line usage of external connection, such that an enterprise can dedicate its key Internet services (e.g. E-Mail Service) to highly reliable lines, and other less critical services (e.g. employee's Internet usage) to other relatively less reliable lines. By doing so, enterprises are guaranteed to operate continuously.
Web Mail FTP ISP 1

b We
Mail
FP T

ISP 2

Internet

ISP 3

Ensure the Quality of Service (QoS)

Network administrators can set a minimum guaranteed bandwidth, maximum bandwidth and prioritize specific traffic to ensure the important data or application services always flow through with the highest urgency.
Web Mail FTP Web 50kbps FTP Mail Internet 30kbps 100kbps

Effectively lower Single Point of Failure (SPoF)

Since PowerStation is architect at the gullet point of LAN and WAN, the importance of lowering the risk of Single Point of Failure is clearly seen. The high-end PowerStation supports HA architecture by clustering an Active/Passive configuration of two PowerStation boxes to achieve self fault-tolerant redundancy backup. Under the normal situation, the active machine responds to all connection requests. As soon as that active

machine fails, the passive machine immediately becomes active and takes over all the jobs performed by the failed primary active machine.
Passive Mode

Active Mode

Internet

Compatible with optional "Inappropriate Webpage Filter" - PStop

PowerStation can be used in consolidation with PStop, the Inapproprate Webpage Filter that was developed by HGiga Inc. Technology, to assist your enterprise effectively block the inappropriate Internet browsing by employees during the office hours. With the elimination of access to inappropriate webpages, PowerStation not only increases the speed of legitimate Internet browsing, but also regains those misplaced productivities. PStop is a Transparent Mode filtering system, this means all outgoing Internet traffic automatically passthrough PStop without having to reconfigure the settings on the user's browser. In the end, there is literally no need to purchase the expensive WCCP-capable routers in order to benefit from the use of webpage filtering.
www.traffic

Internet

Cache of Proxy

WWW

Virtual Private Network (VPN)

By utilizing the advantages of Internet, free and convenient, enterprises can construct a private network across several regional branches using IP VPN. All communications made through the public network are encrypted using 3DES (168 bits) or MPPE (128 bits) to ensure the data privacy. Henceforth, the sharing of enterprise resources penetrates the barrier of space and time to truly achieve zero differences.
Remote Client A Dial-Up VPN Office A PPTP Tunnel Site-to-site VPN PPTP Tunnel Remote Client D

IPSec Tunnel PPTP Tunnel Remote Client B Internet PPTP Tunnel Remote Client C

Office B

Network Status Detection

PowerStation's Network Status Detection mechanism thoroughly examines network at every connection nodes at detail. This feature reflects the realistic network status and sets PowerStation apart from other partial solutions, such as detection based on the default router or by pinging the remote server.

Internet

Maximize your IT Security & Bandwidth Performance

VPN Aggregation (VPN Trunking)

PowerStation VPN Aggregation facilitates the use of multiple VPN connection lines possibly provided by different ISP The maximum level of fault tolerance could be achieved. For enterprise that has multi-site offices . on VPN, VPN Aggregation allows maximum stability and reliability, and also efficient bandwidth usage. In the event of a line failure, PowerStation will also automatically redirect the traffic to an active working VPN connection. For the highly important VPN traffic, this is the most suitable solution.
Router T1, DSL VPN Tunnel Router T1, DSL

Router

VPN Tunnel Internet

Router

Office A T1, DSL Router VPN Tunnel Router T1, DSL

Office B

PPPOE For ADSL with Dynamic IP

Support dial-up (Dynamic IP), Dynamic VPN Tunnel and VPN Aggregation. In another word, enterprise can enjoy high speed Internet connects at a relatively economical price.

Modem Dial-Up ADSL (PPPOE) Modem

VPN Tunnel

Modem Dial-Up ADSL (PPPOE) Modem

VPN Tunnel Internet

Office A

Dial-Up ADSL (PPPOE) Modem VPN Tunnel

Dial-Up ADSL (PPPOE) Modem

Office B

Intrusion Detection System (IDS) Log Recording and Analysis

After PowerStation confirms an event of intrusion, it will create a complete IDS alarm history and record completed packet information according to the security policy. The IDS history can automatically be exported to external databases, like MySQL, PostgreSQL, and Microsoft SQL Server. This allows an easier access and search for IDS information, such as the source and destination's IP address, port number, and network protocol, for further analysis.

Attacker

Log Server

Maximize your IT Security & Bandwidth Performance

PowerStation Specification
Bandwidth Management
All types of broadband connections: T1, E1, ADSL, ethernet. Outbound Load Balancing. Inbound Load Balancing. Outbound / Inbound Fault Tolerance. Flexible Policy Routing for network services. Guaranteed QoS. Multiple static Routing Rules for customizable best paths. Virtual network card that facilitates up to 20 ~ 50 external connections.

Firewall Function
Dynamic Packet Filtering and Stateful Inspection. Configurable LAN, WAN, DMZ, VPN. Web-based configuration GUI encrypted by SSL (128 bits). Web-based or Command-Line configuration interface. TCP/IP connection inspection, including protocol such as TCP UDP ICMP etc. , , ... Configurable Screened Subnet as a buffer zone between the internal and external network. Anti-Network Attacks. Built-in Network Intrusion Detection System. NAT Policy Filtering specific at source, destination and network protocol. Concurrent session:196,000 Mbps ;Throughput: 190Mbps ;VPN:25 Mbps

VPN
PPTP Tunnel: EClient-side authentication mechanism: PAP CHAP MS-CHAP MS-CHAP2. , , , EStrong data encryption: MPPE (40, 128 bits). EOperating systems: Windows 9x, Windows Me, Windows 2000, Windows XP . PSec Tunnel: EData signature algorithm: MD-5, SHA-1. EData encryption algorithm: 3DES (168 bits). VPN Aggregation: Load balance between VPN.

Others
English menus, Traditional Chinese, and Simplified Chinese.
Unlimited users license. High Availability Optional PStop "Inappropriate Webpage Filtering System" (Web Filter). Public IP NAT Pass-Through. Smart NAT. Dynamic Host Configuration Protocol DHCP . Configurable network components and unlimited hierarchical group definition. Mail Alert and SMS transmission.(optional) URL Filtering and configurable limit for uploading and downloading file size. Built-in DNS Server and DNS Proxy Server. Policy validation to ensure no conflicting policies in presence.

Intrusion Detection
Detailed history recording: including the source IP address, destination IP address, network protocol and time of an illegal intrusion.

Hardware Specification
Network Ports: Many 10/100 Mbps high-speed Ethernet interface or optional Gigabit interfaces. Gigabit interfaces can be installed with two fiberoptic single mode or multi mode interfaces, or RJ45 (Cat 6). Serial Port: one for console and one for HA connection. System Status LEDs: Power, Connection port status. Dimensions: Standard 19-inches rack mounted model 1U.

VAR (Value Added Reseller)

HGiga Inc.
http://www.hgiga.com
March, 2004