With the network development, the major carriers and IDC company requires network security protection, , as well as the stability of security protection, on this basis Kingdon firewall launched the deployment of protective bypass mode on scalable clusters. one Units Kingdon Analyzer (Detector) over the original cluster model can achieve bypass protection, so as to avoid network outage because of the safety equipment itself affect the stability of the entire network.

Kingdon traffic analysis system (Detector)

1. Supports a wide range of data collection mode, such as mirror, SPAN, sFlow, NetFlow, etc.
2. Accurate attack detection , dozens of attack detection algorithm, effective identification of a variety of attacks
3. Complete report Log, accurate logging to individual IP, can also produce Analysis Report
4. Firewalls linkage with JDFW, effective clean-up abnormal flow.

Kingdon firewall optional equipment (a single 1G, 2G, 4G)

1, abnormal traffic flow clean-up; effectively filtering a variety of DOS / DDOS attack
2, eliminating single point of failure; defense equipment anomaly will not affect the entire network
3, efficient defense; defense equipment can clear only attacking traffic, the normal traffic flow does not occupy the processing power of defense equipment

Kingdon cluster bypass firewall protection principle

1. Normal circumstances; firewall does not involved in transmission, Detector from the network data collection and analysis, and the results submitted to the firewall;
2. Attack happened; Detector detects attacking traffic, informing the firewall attacks;
3. Attack treatment; firewall interacts with the core routers, will divert the attack flow to the firewall; firewall traffic returned to normal after treatment network;
4. Ending attacks; firewall detects attacks end and traffic will flow back to the original link