Logo of NSFOCUS
English Version Chinese Version Japanese Version
Products
Solutions
Security Content Management System
Overview

Challenges
As enterprises become more and more dependent upon networks, Internet has also brought upon enterprises unprecedented compound risks and threats, such as inefficiency of employee performance, leakage of the important information, the abuse of network bandwidth, the spread of the sensitive information which could cause the risk of national defense. These risk and threats could result in a huge economical loss and network information security risks for enterprises.

Product Positioning
With its in-depth intelligent content analysis and protocol recognition and analysis technology, NSFOCUS SCM helps enterprise to:

  • Accurately filter websites that contain inappropriate contents and high risks, so as to purify the enterprise’s network environment.
  • Regulate employee Internet Behaviors and increase work efficiency.
  • Standardize the management of information publishing to avoid the leakage of sensitive information.
  • Rationalize the allocation of the network bandwidth to ensure the smooth operation of the key business.
Key Features and Benefits
  • In-depth Intelligent Content Filtering
    NSFOCUS SCM is equipped with the leading database for web filtering, including more than 10 millions URLs. It can classify the filtering by categories and perform complete, accurate, and efficient filtering for inappropriate websites and the website of high risks; it also supports customized key words, by which it can perform accurate detecting, filtering, alarming, and recording for the content of a web page, search engines, emails, BBS, and the IM applications, thus to perform the in-depth content security management.
  • Complete Internet Behavior management
    Adopting the leading protocol recognition and intelligent correlation technology, NSFOCUS SCM provides the function of user authentication and manages in multi-dimensions user Internet behaviors, network application behaviors, and business operation behaviors.
  • Complete Information Publishing Management
    NSFOCUS SCM is equipped with flexible functions for information publishing; it supports multi-condition combinations based on content key words, behaviors, time, and users and enables the complete information publishing management for receiving and sending of emails (Webmail, SMTP, POP3), BBS, IM, file uploading and downloading (HTTP, FTP), and etc, and provides the functions such as instant alarm, disconnecting, information restoration, and information leaking.
  • Granular and Multi-dimensional Network Traffic Management
    SCM supports even more accurate traffic management based on protocol recognition, including protocols for P2P and online video. By manipulating the 4 modules for traffic control: protocols/ports (the global dimension), source/target IP address and subnet (the local dimension), time (the time dimension), the bandwidth (the traffic dimension), SCM can execute traffic protection policies based on contents and targets; rationalize the allocation of bandwidth, thus, to guarantee the critical business operation.
  • Easy and Flexible Extensibility
    SCM supports multi-channel security content management, exercising management by different business zones and different networks, just like that you were using two SCM appliances, each is independent of the other, one is for in-coming traffic, the other for outgoing traffic, so as to satisfy the needs for various kinds of network deployment.
Typical Application Scenario

SCM supports two types of deployment options: in-line mode or bypass mode. The two different modes can satisfy the needs of various networks, allowing the system to be deployed timely and with flexibility in various networks.

Product Specifications
Product Type SCM-600 SCM-2000
Hardware
Interface Operation port 4*100M ports 8*1000M ports
Management port At most 4 ports At most 8 ports
Serial port 1* RS232 1* RS232
Performance 64 bytes packet process at 1000M line-speed
Protocol Recognition & Analysis Over 100 application protocols (including HTTP, FTP, SMTP, WEBMAIL, P2P, IM, and etc,)
Work Mode Supports transparent mode (inline mode), tap mode(Sniffer Mode), and multi-link mode
Functions
User Authentication Supports web Access authentication, provides the integration of local user database with LDAP, RADIUS user database
Web Browsing Behavior Management Supports multi-combination web browsing behavior policy management based on IP address, user/user group, protocol, time, page content, keywords, and etc. allowing or disabling a user’s access to internet during a fixed period of time, recording the user’s online activities. It also supports web page restoration
Page Content Filtering More than 10 millions URL database in English and Chinese languages, various detailed classification, filtering illegal or inappropriate websites. Supports keyword filtering for URL, HTTP webpage, and HTTP search engines.
Email Monitoring Supports protocols like SMTP, POP3, Webmail, supports multi-combination email management by user/user group, and keywords of email content. Allows and disables the sending and receiving of emails, records logs including source IP address, destination IP address, time, email address, email subject and content and attachment. The email attachments are compatible with DOC, PDF, Zip, RAR, and TXT etc.
BBS Monitoring Supports filtering by BBS subjects, the keywords of the postings. Supports auditing function; allows and disallows postings to BBS, records the source IP address and destination IP address, BBS of the postings, the user who does the posting, the posting subject, posting time, and the content of the posting.
IM Monitoring Supports monitoring on QQ, MSN messenger, ICQ, Yahoo IM, Sina UC and those frequently used IM applications. Able to allow and disallow the usage of IM, file transfer and record the logs including the IM identification numbers, the time to log on and off, and file uploading, and etc.
File Upload and Download Management Compatible with protocols like HTTP, FTP, supports multi-combination management for file uploading and downloading , and types of downloading customized by users, based on the user/user group, time, keywords filtering
P2P Download Management Supports frequently used P2P protocols, such as Donkey/eMule, BitTorrent, FlashGet, KuGoo, and etc, can control P2P downloading by IP address, user/user group, time, or the combinations of the above.
Online Video Management Covers frequently used online video applications, such as online WMV, RM, PPLive and Tudou, can control the access for these online videos by IP address, user/user group, time, protocols, or the combinations of the above.
Online games and Online Stock transactions Covers frequently used online games and online stock applications.It can control the usage of the above applications by IP address, user/user group, keywords, or the combinations of the above.
Business Operation Behavior Management Supports monitoring on business operation commands for TELNET, FTP, and the access to the database. It supports the management policy by IP address, user/user group, keywords, or the combinations of the above, enabling or disabling the usage of the commands and recording the detail logs for commands used.
Traffic management Bandwidth management Supports combined traffic management policy by IP address, user group, protocols, time, the maximum traffic, the maximum sessions, and etc.
Traffic Stats Provides stats for traffic based on protocols, time or the combinations of the above and can analyze the maximum, average, and the total volume of the traffic in real time.
Pre-Sale Consultation
Contact NSFOCUS sales:
overseas@nsfocus.com
  ©2010