Central Management Server for Embedded-Firewall Clients
The 3Com® Embedded Firewall Starter Policy Server is a 10-client version of our embedded firewall management software. It supports the same feature set as the full version and likewise is required for configuring and managing 3Com Firewall PCI and PC Cards (sold separately). This cost-saving offering lets your IT staff test-run embedded firewalls on a smaller scale. It's also convenient for securing smaller networks.

Together, the policy server and firewall cards extend centrally managed, hardware-enforced security to notebooks, desktops, and servers across the organization-inside and outside the network perimeter. This unique firewall solution combines management software and distributed hardware to deliver superior tamper-resistance that software-only firewalls can't match.

Only authenticated policy servers can communicate with and configure the distributed firewall cards. Firewall cards operate independently of their host systems and are practically impervious to Internet attacks, user actions, or malicious code. In other words, even if an embedded firewall-enabled system is invaded, it's practically impossible to exploit as an attack launching pad.

The 3Com Embedded Firewall Starter Policy Server and Firewall Cards are standards-based to complement your defense-in-depth strategy and enhance other security products, including security services switches, firewall/VPNs, antivirus software, and intrusion detection systems (IDS). Once the policy server is installed, firewall cards can be flexibly added on a system-by-system basis when and where they're needed.

Features and Benefits:

• Facilitates assigning security by group role or function and accelerates response to detected network attacks; centrally configured and deployed security policies can be pushed to users and hosts independent of routers or traffic streams
• Configures global policies that automate packet filtering and auditing chores, enforce no sniffing/no spoofing, block unnecessary ports, and deny "ping" requests
• Provides superior resistance to malicious code, user modifications, and unauthorized access; firewall cards only accept instructions from authenticated policy servers
• Secures open Internet connections, such as VPN endpoints and broadband access gateways, located inside or outside the perimeter firewall
• Protects users with multiple levels of protection wherever they work—more relaxed for internal LAN connections and more restricted for shared and Internet-accessible systems
• Hardens web and e-commerce servers, DMZ subnets, and customer databases against Internet attacks and unauthorized access
• Limits system-to-system communication when connecting outside the network perimeter; automatically ignores nonessential protocols, shuts down unnecessary ports, denies "ping" requests, and disables packet sniffing and IP spoofing
• Provides around-the-clock peace of mind; if firewall cards cannot communicate with the policy server, they will default to your maximum security levels
• Complements other 802.3-standard compliant security solutions—including security services switches, firewall/VPNs, antivirus scanners, and intrusion-detection systems (IDSs)
• Lowers IT administration costs with 24/7 intrusion resistance that helps eliminate false alarms generated by IDS monitoring
• Flexibly supports any combination of firewall-enabled desktops, servers, or notebooks up to 10 firewall clients maximum

3Com Embedded Firewall Starter Policy Server

• Summary
• News
• Video
• Buy