HP 200 Unified Threat Management (UTM) Appliance manual Firewall modules

Figure 6 Rear view

1: Rear chassis cover handle (do not use this handle to lift the chassis)	2: (Optional) Air filter
3: Chassis handle	4: Grounding screw and sign
5: Air vents

Firewall modules

Overview

The firewall modules are developed based on the Open Application Architecture (OAA) for carrier-level customers.

A firewall module can be installed in the HP 5800/7500E/9500E/12500 Switch or a 6600/8800 router. A switch or router can be installed with multiple firewall modules to expand the firewall processing capability for future use. The main network device (switch or router) and the firewall modules together provide highly integrated network and security functions for large networks.

The firewall modules support the following functions and features:

•Traditional firewall functions

•Virtual firewall, security zone, attack protection, URL filtering

•Application Specific Packet Filter (ASPF), which can monitor connection processes and user operations and provide dynamic packet filtering together with ACLs.

•Multiple types of VPN services, such as IPsec VPN

•RIP/OSPF/BGP routing

A firewall module provides two GE ports and two GE combo interfaces, which can be used as management ports and stateful failover ports. It is connected to the main network device through the internal 10GE port. The HP main network device's rear card has the line-speed forwarding capability, ensuring fast data forwarding with the firewall module. The firewall modules are equipped with dedicated, multi-core processors and high-speed caches. They can process security services without impacting performances of the main network devices.

5