Chapter 1 Overview - Huawei Quidway Eudemon 200 Installation Manual

Installation Manual
Quidway Eudemon200 Firewall
1.1 Introduction to the Eudemon200 Firewall
The Eudemon200 firewall, as a new-generation high-speed firewall independently
developed by Huawei, provides a cost-effective solution to small- and medium-sized
Intranet network security. The chassis of the Eudemon200 firewall is equipped with
console interface, AUX interface and two fixed 10/100M Ethernet interfaces.
Furthermore, a user can log in to the device through AUX interface to check faults and
modify configurations. The Eudemon200 firewall supports AC and DC power input
modes, and its power module, fan module and multi-functional module are
hot-swappable. In addition, it supports two-way power supply and redundant standby
for power supply.
The Eudemon200 firewall adopts an integrated software and hardware platform. Based
on its special and real-time operating system, a user can flexibly set a security area.
The user can not only set as the predefined trust zone, untrust zone or DMZ
(demilitarized zone), but also can customize the areas at other security levels. If the
data is delivered between two interfaces at different security levels, the security check
function of the Eudemon200 firewall will be activated.
Following describes the features of the Eudemon200 firewall.
I. Powerful attack defense capability
The Eudemon200 firewall provides a powerful attack defense mechanism to defend
multiple attacks such as DoS (Denial of Service), scan and snoop. Based on such a
defense mechanism, the Eudemon200 firewall can protect the internal network from
illegal attack.
II. IDS cooperation
With a powerful attack defense capability, the Eudemon200 firewall can network with
the professional IDS (Intrusion Detective System). Since the IDS device contains the
complete attack information, the internetworking will provide a more reliable safeguard
for the network.
III. Enhanced packet filtering
The Eudemon200 firewall supports high-speed ACL (Access Control List) searching,
malicious host filtering based on blacklist, and MAC address and IP address binding,

Chapter 1 Overview

1-1
Chapter 1 Overview