1.Introduction

Fisherman VPN Security Authentication Gateway is an IPSec/SSL integrated VPN security gateway based on national cryptographic algorithm independently developed by Shandong Fisherman Information Technology Co., Ltd. This product is designed for enterprise users and can effectively establish secure data channels between geographically dispersed subnets through IPSec/SSL tunnel technology. This product could provide content encryption protection for enterprise data transmission on the Internet. Fisherman VPN security authentication gateway implements two sets of encryption technologies (IPSec and SSL) and integrates enterprise-level firewalls, which greatly reduces the procurement cost of security applications.

The Fisherman VPN Security Authentication Gateway fully supports the national cryptographic algorithms designated by the State Cryptography Administration, such as SM1, SM2, SM3, and SM4.It also supports mainstream operating systems such as Windows, Linux, Mac OS, Android, IOS, etc. Users can easily achieve remote access through terminal devices such as laptops, desktop PCs, smartphones, and tablets securely and conveniently.

Application areas: government, public security, taxation, finance, enterprises, universities, and other fields.

2.Features

IPSec VPN function: Fisherman VPN security authentication gateway integrates IPSec VPN function, and fully implements standard protocols such as IPSec and IKE. It can effectively establish secure data channels between geographically dispersed subnets and help enterprises to integrate intranet information resources effectively.

SSL VPN function: Fisherman VPN security authentication gateway follows the latest SSL VPN technical specification issued by the State Cryptography Administration. It uses the Secure Sockets Layer (SSL protocol) to provide data encryption so that internal data of the enterprise can be transmitted securely through the public network (Internet) channel.

Firewall function: Fisherman VPN security authentication gateway integrates high-performance enterprise-level stateful firewall, which can protect the internal network from all kinds of access attacks from the Internet and effectively ensure the security of the gateway itself.

Multi-line load balancing technology: Fisherman VPN security authentication gateway supports multi-machine parallel work. It achieves load balancing and line backup functions between multiple lines, can effectively widen the enterprise Internet bandwidth, improve the reliability and stability of the enterprise intranet system.

Well combined the SSL tunnel and the IPSec tunnel. For the branch network of the enterprise, IPSec VPN can be used for secure interconnection. For users and partners, secure access is implemented by using SSL VPN.

Support multiple network protocols: By using the IP tunneling technology, Fisherman VPN security authentication gateway supports all TCP / IP protocols; and the latest IPv6 protocols are also supported.

Support national cipher algorithms: fully support SM1, SM2, SM3, SM4 and other national cipher algorithms specified by the State Cryptography Administration.

Data Compression Technology: Fisherman VPN Security Authentication Gateway adopts real-time data compression algorithm to compress the data before transmission, which effectively improves the access speed of end users when using VPN and reduces download time and network traffic.

Rich log function: Fisherman VPN security authentication gateway can send logs to an external log server through standard protocols. The administrator can query the log with specified conditions such as time range, log level, error type, and so on.

Support for third-party CA: The Fisherman VPN Security Authentication Gateway can support digital certificates issued by third-party CAs through generating PKSC#10 requests. This provides more flexibility while ensuring security, simplifies the deployment process, and avoids the maintenance costs and security risks associated with multiple authentication systems.

3.Superior

Full support national cipher algorithms: support SM1, SM2, SM3, SM4 high security commercial cryptographic algorithms approved by the State Cryptography Administration.

Combined SSL VPN and IPSec VPN techniques

Combined IPSec VPN and SSL VPN techniques, giving full play to the advantages of both, avoiding the shortage of single technology and broadening the application range of VPN.

Independent hardware crypto card:

Fisherman VPN security gateway adopts the high-speed crypto card independently developed by Fisherman Co., which separates the encryption/decryption process that needs more resources from the CPU and improves the performance of the SSL VPN gateway.

Load balancing:

Load balancing algorithm is used to ensure resources access load are balanced and access servers are dynamically selected to improve access efficiency.

Intelligent routing

Our product applied the VPN multi-line most preferred way technology, which specifically contains the "intelligent routing" function. If the headquarter is a multi-line server, then each branch node can analyze and judge the external network access request of the client when the VPN tunnel is built with the headquarters. The clients can select the optimal line so that the user can connect to the headquarters with the fastest speed wherever they are.

Built-in CA system, support for third-party CA:

Fisherman digital certificate authentication system is built in the VPN. Clients can also build their own complete identity authentication system. VPN server certificate and personal identity certificate service are provided, and digital certificates of third-party digital certificate centers are also seamlessly supported.

Support multiple authentication methods:

Support digital certificate, username/password, LDAP, Radius, SMS modem + SMS gateway and other authentication methods.