1.Introduction

Fisherman's IPSec VPN Security Gateway is a high-speed network security device independently developed by Shandong Fisherman Information Technology Co., Ltd., which complies with the latest IPSec VPN Technical Specification promulgated by the National Cryptography Administration. It has been certified by the National Cryptographic Administration and obtained the computer information system security product sales license from the Ministry of Public Security.

The high-speed cryptographic module independently developed by Fisherman fully supports the SM1, SM2, SM3, and SM4 cryptographic algorithms specified by the State Cryptography Administration and provides high-performance encryption and signature verification services for data transmitted by the network. Through tunnel technology, the product could establish dedicated security channel between the enterprise or government headquarters and the branches. It adopts strict encryption and authentication measures to ensure the privacy, integrity, and authenticity of the data transmitted in the channel.

The product is simple to deploy, flexible in configuration, and does not require changes to existing networks. It can be widely used in government, public security, energy, transportation, taxation, enterprise groups, and other fields.

Application areas: government, public security, taxation, finance, enterprises, universities, and other fields.

Commercial Cryptographic product model: SJJ1414.

2.Features:

Deployment mode: Supports gateway mode and single-arm mode, flexible deployment; supports hot standby.

VPN function: strictly follow the latest IPSec VPN technical specification issued by the National Cryptography Administration; support standard IPsec protocols such as ESP/AH/IKE/NATT; support tunnel mode; support efficient data stream compression algorithm; support NAT traversal of tunnel; support automatic recovery of the tunnel; support routing functions. Branch offices with the same intranet address can simultaneously access the headquarters to ensure the integrity of the organization's network structure.

Networking mode: support ADSL dial-up networking; support fixed IP networking.

Data encryption: Supports the SM1, SM2, SM3, and SM4 national cipher algorithms specified by the State Cryptography Administration; supports international standard RSA, AES, and 3DES cipher algorithms; supports external hardware crypto cards to complete data encryption and decryption operations.

Attack defense: It can defend against multiple attacks such as dos, Synflood, ICMP flood, and fragmentation attack.

Firewall: Support packet filtering and string filtering to ensure network security.

Security management: support friendly WEB graphics configuration; support command line configuration; support local and remote configuration; support digital certificate combined with USB keys to achieving administrator identity authentication; support real-time monitoring the network port, user online status, connection number, routing table, and other information.

Log auditing: It could do detail logging on system status, alarm information, user information, and other system activities. It also supports log query and download.

3.superiority

It complies with the national cryptography management policy;

The product adopts the hardware cryptographic module independently developed by Fisherman and supports the SM1, SM2, SM3 and SM4 national secret algorithms specified by the State Cryptography Administration.

Follows the national IPSec VPN specification requirements;

The product strictly follows the latest IPSec VPN Technical Specification issued by the State Cryptography Administration and implements cryptographic operations such as data encryption and decryption, signature verification, and random number generation through hardware cryptographic modules.

High reliability

The product guarantees high reliability of the user network through various technical solutions such as hot standby and automatic recovery after tunnel broken.

High performance;

The product is based on a high-performance hardware cryptographic module, with fast cryptographic operations and cryptographic modules. The fast stream compression algorithm is adopted to ensure the real-time transmission.

4. Project case

 Application value

Eliminate the high cost of renting carrier links and reduce the operating costs of enterprises.

Through the NAT traversal technology of VPN, the address information of all the internal application servers is well protected, thereby avoiding direct hacker attacks and improving the overall security of the system.

The user authentication method based on the digital certificate improves the authentication strength of the user and ensures the secure access of the branch.

The data transmitted on the network is encrypted in the VPN and encapsulated in the tunnel to ensure the confidentiality of user data in the network transmission.

The VPN device is deployed on the basis of not changing the original network architecture, which facilitates system maintenance and management and avoids redundant construction.

5. certificate