Nexsi Announces World's First Content Services System; New Approach Enables Service Providers and Enterprises to Dramatically Reduce Capital Investments and Operating Costs.Business Editors/High-Tech Writers NOTE TO MEDIA: Photo is available in a Smart News Release(TM) on Business Wire's Home Page at www.businesswire.com and at www.newstream.com SAN JOSE San Jose, city, United States San Jose (sănəzā`, săn hōzā`), city (1990 pop. 782,248), seat of Santa Clara co., W central Calif.; founded 1777, inc. 1850. , Calif.--(BUSINESS WIRE)--Sept. 4, 2001 Nexsi Systems, a provider of high-performance, mission-critical network systems, today unveiled the Nexsi 8000, the world's first Content Services System (CSS (1) See Cascading Style Sheets. (2) (Content Scrambling System) The copy protection system applied to DVDs, which uses a 40-bit key to encrypt the movie. ). Nexsi's CSS is an expandable networking system that aggregates and delivers a rich suite of security, bandwidth management Controlling the traffic flow in a network. See bandwidth manager. and content services for hundreds of secure content domains at multi-gigabit rates. "Enterprises' increasing reliance on e-business has created new, higher standards for the performance, availability and security of Web applications. As a result, enterprises and their service providers must re-invent their approach to the delivery and management of mission critical Internet-based services," said John McFarlane John McFarlane is the chief executive of the Australia and New Zealand Banking Group Limited (ANZ), one of Australia's leading banks. The Scottish-born businessman began his career in manufacturing with Ford of Europe in 1969, and subsequently had a long and distinguished , CEO (1) (Chief Executive Officer) The highest individual in command of an organization. Typically the president of the company, the CEO reports to the Chairman of the Board. of Nexsi Systems. "By delivering a complete suite of security, bandwidth management and content services to hundreds of secure content domains, the Nexsi 8000 virtually eliminates the operational and management complexity service providers and enterprises currently experience with traditional approaches. Our multi-gigabit capacity also allows customers to scale their businesses without interruption INTERRUPTION. The effect of some act or circumstance which stops the course of a prescription or act of limitation's. 2. Interruption of the use of a thing is natural or civil. ." "Because existing service elements are limited in their ability to scale, bandwidth-hungry customers are adding more dedicated devices, making their infrastructure increasingly unmanageable," said David Passmore, research director, The Burton Group. "Nexsi's approach addresses this complexity, and makes new service management and provisioning extremely efficient." Breakthrough Architecture The Nexsi 8000 is powered by Nexsi's innovative Content Services Processor, a custom-designed, 87-million transistor system-on-a-chip, which integrates computing computing - computer and network functions optimized for line-rate layer 4-7 services processing. Unlike existing network devices that focus on layer 2-3 packet switching A network technology that breaks up a message into small packets for transmission. Unlike circuit switching, which requires the establishment of a dedicated point-to-point connection, each packet in a packet-switched network contains a destination address. and forwarding, the Nexsi 8000 is designed to provide unsurpassed levels of computation Computation is a general term for any type of information processing that can be represented mathematically. This includes phenomena ranging from simple calculations to human thinking. on each packet that flows through the system. This computational Having to do with calculations. Something that is "highly computational" requires a large number of calculations. ability allows the Nexsi 8000 to perform layer 4-7 services at unprecedented performance levels. Nexsi's industry-leading architecture provides 8-Gbps line-rate packet processing for stateful inspection A firewall technology that ensures that all inbound packets are the result of an outbound request. Also called "stateful packet inspection" (SPI), it was designed to prevent harmful or unrequested packets from entering the computer. firewall, VPN (Virtual Private Network) A private network that is configured within a public network (a carrier's network or the Internet) in order to take advantage of the economies of scale and management facilities of large networks. (Virtual Private Network) with 3DES (Triple Data Encryption Standard See DES. Data Encryption Standard - (DES) The NBS's popular, standard encryption algorithm. It is a product cipher that operates on 64-bit blocks of data, using a 56-bit key. It is defined in FIPS 46-1 (1988) (which supersedes FIPS 46 (1977)). ) IPSec (Internet Protocol See Internet and TCP/IP. (networking) Internet Protocol - (IP) The network layer for the TCP/IP protocol suite widely used on Ethernet networks, defined in STD 5, RFC 791. IP is a connectionless, best-effort packet switching protocol. Security), bandwidth management, layer 4-7 Web switching Using a Web switch to route Web traffic to the server that can process it most efficiently. See Web switch. , global load balancing The fine tuning of a computer system, network or disk subsystem in order to more evenly distribute the data and/or processing across available resources. For example, in clustering, load balancing might distribute the incoming transactions evenly to all servers, or it might redirect them , SSL (Secure Sockets Layer) The leading security protocol on the Internet. Developed by Netscape, SSL is widely used to do two things: to validate the identity of a Web site and to create an encrypted connection for sending credit card and other personal data. (Secure Sockets Layer (networking, security) Secure Sockets Layer - (SSL) A protocol designed by Netscape Communications Corporation to provide secure communications over the Internet using asymmetric key encryption. ) acceleration, and supports up to 100 secure content domains in a single system. In contrast to traditional approaches, the Nexsi CSS dedicates processing resources to each service performed, allowing multiple services to run simultaneously at multi-gigabit rates without performance degradation. Features/Benefits Nexsi's integrated multi-service solution offers service providers and enterprises significant advantages over dedicated single-service point solutions, including: -- Rapid/Flexible Service Provisioning -- Once the Nexsi 8000 system is installed, the service provider or enterprise can rapidly provision new secure content domains and activate additional services within minutes. -- Aggregation of Content Services -- By aggregating and delivering a rich suite of security, bandwidth management and content services in a single system, the Nexsi 8000 alleviates data center clutter, reduces capital and operating expenses, and simplifies management. -- Independent Secure Content Domains -- The Nexsi 8000 supports services for up to 100 secure content domains within a single system. Because traffic for each secure content domain is kept separate and is processed independently according to that domain's policies, the Nexsi 8000 can replace hundreds of traditional, single domain devices with one network. -- High Availability -- The Nexsi 8000 provides stateful high-availability features and full stateful inter-system failover capabilities. Customers benefit from improved Service-Level Agreements and uninterrupted service delivery. -- Flexible, Multi-Tiered System Management Solution -- NexsiView(TM), a flexible system management solution, enables administrators to easily and accurately configure systems and services. NexsiView also supports a multi-tiered administrative hierarchy granting relevant access and privileges appropriate to each authorized administrator, including secure content domain self-management within pre-established parameters. System Availability The first release of the Nexsi 8000, including stateful inspection firewall, IPSec VPN and bandwidth management services, is expected to begin shipping later this year. About Nexsi Systems Nexsi Systems is the pioneer of Content Services Systems, a new breed of network infrastructure solutions. Nexsi's CSS is an expandable, mission-critical networking system that aggregates and delivers a rich suite of security, bandwidth management and content services for hundreds of secure content domains. Headquartered in San Jose, Calif., Nexsi is supported by leading investors, including Amerindo Investment Advisors Investment Advisor 1. A person making investment recommendations in return for a flat fee or percentage of assets managed, known as a commission. 2. For mutual fund companies, it is the individual who has the day-to-day responsibility of investing and monitoring the cash and , Capital Research Group, Mitsui Corp., Presidio Venture Partners, Raza Ventures, Sequoia Capital Sequoia Capital is a venture capital firm founded by Don Valentine in 1972. The firm's partners include Don Valentine, Pierre Lamond, Michael Moritz, Doug Leone, Mike Goguen, Mark Stevens, Jim Goetz, Sameer Gandhi, Roelof Botha, and Mark Kvamme. , and Soros Investments. For further information visit www.nexsi.com.
SYSTEM INTERFACES
2- or 4-Gigabit Ethernet SX remote ports
2- or 4-Gigabit Ethernet SX local ports
1-Gigabit Ethernet SX High Availability (HA) port
1-Gigabit Ethernet SX management port
1 RS232c serial port for management
DIMENSIONS
H x W x D 27.75 (16U) x 17.75 x 21.28 inches.
19-inch universal EIA (telco) rack mount
WEIGHT
75 pounds (empty chassis)
150 pounds (fully configured chassis)
POWER
AC input 100-240V, 47-63Hz
4 load-sharing power supplies
Maximum 3000 watts consumption (fully configured)
PERFORMANCE
8 Gbps wire speed per content service
See Service sections for specifications
INTERFACE MODULE (1 OR 2 PER SYSTEM)
6 Gigabit Ethernet SX ports, 4 dedicated to traffic
1 RS232c Serial port
1 Gigabit Management Port
1 Gigabit High-Availability Port
SERVICE MODULE (4, 2, OR 1 PER SYSTEM)
System Configurations
INTERFACE SERVICE SYSTEM
MODULES MODULES CAPACITY
2 4 8 Gbps
1 2 4 Gbps
1 1 2 Gbps
VIRTUALIZATION (WITH 100 SECURE CONTENT DOMAINS)
Up to 100 secure content domains
Allocate service capacity per secure content domain
FIREWALL
8 Gbps stateful inspection
100,000 new connections/sec
8,000,000 concurrent flows
Network Address Translation (NAT)
Special support for 160+ applications
VPN
8 Gbps IPSec 3DES
Maximum 300,000 concurrent VPN tunnels
IPSec with IKE, PKI
DES, 3DES encryption
HMAC
MD5, SHA-1 authentication
X.509V3 certificates
BANDWIDTH MANAGEMENT
4 priority levels per customer
Each priority level has min, max Mbps
Application-based traffic coloring
WEB SWITCHING
100,000 HTTP 1.0 sessions/sec
4,000,000 concurrent TCP sessions
Local load balancing
Content switching and persistence based on URL, cookie, source IP,
port, SSL ID
Global load balancing
SSL ACCELERATION
25,000 new connections/sec
4,000,000 concurrent sessions
SSL v2.0, v3.0
Bulk encryption
Encryption protocols RC-2, RC-4, DES, 3DES
Authentication MD5, SHA-1
Global certificates supported
NETWORK MANAGEMENT
Java-based GUI
SSH Telnet for CLI
SNMP
NMS Server for Solaris
PKI Manager
Supports RADIUS and SecurID(TM) Authentication
PROTOCOLS AND STANDARDS
IEEE 802.1q VLAN tagging
IEEE 802.3z 1000BASE-SX
Gigabit Ethernet
RFC 768 UDP
RFC 783 TFTP
RFC 791 IP
RFC 792 ICMP
RFC 793 TCP
RFC 826 ARP
RFC 854 telnet
RFC 1213 MIB II
RFC 1573 evolution of the interfaces group of MIB-II
RFC 1631 network address translation
RFC 1850 OSPF MIB
RFC 1951 SNMP v2c
RFC 2068 HTTP 1.1
RFC 2271 SNMP management framework
RFC 2328 OSPF v2
RFC 2407 encryption algorithms
Secure shell
ENVIRONMENTAL
Operating temperature 0-40 degrees C
Storage temperature -40 degrees to 70 degrees C
Operating humidity: 10% to 95% relative humidity, non-condensing
Maximum heat dissipation, fully populated Nexsi 8000: 3000 watts
Shock and vibration: NEBS GR-63-Core requirements
CERTIFICATIONS
UL/CSA 1950 Listed
R&TTE Directive (1999/5/EC)
FCC, Part 15, Class A
VCCI Class A
CB Scheme
ICSA -- Firewall (pending)
FIPS-140 Level 2 (pending)
VPN-C (pending)
ORDERING INFORMATION
See www.nexsi.com
SecurID(TM) is a registered trademark of RSA Security.
System specifications are subject to change at any time at the
sole discretion of Nexsi Systems Corporation, Inc.
Note: A Photo is available at URL URL in full Uniform Resource Locator Address of a resource on the Internet. The resource can be any type of file stored on a server, such as a Web page, a text file, a graphics file, or an application program. : http://www.businesswire.com/cgi-bin/photo.cgi?pw.090401/bb3 |
|
Printer friendly
Cite/link
Email
Feedback
Reader Opinion