Multi-Homing Gateway SeriesNusoft．Internet Security Fighter

Nusoft IDR-2000, a full-featured Internet content recordingdevice, can be incorporated into Active Directory to faithfullyrecord visited webpages, email access (both client-based andWeb-based), instant messaging (MSN, Yahoo!, Skype, ICQ,AIM, Google Talk, QQ, etc..), FTP file transfers, and Telnetsessions. Additionally, its Web filtering mechanism helpsprevent network bandwidth from being used for recreationalpurposes during office hours and protects information assetsfrom security threats. On top of that, the top-10 user chartsheds light on network resource utilization, greatly facilitatingbandwidth management.

Product Features

Full Recording Capabilities against SlackingActivities

Grouping Feature for Hierarchical Management

Easy Browsing and Searching

Skype Telephony Recording

Web-Based Email Analysis

Web Filtering Mechanism

IDR-2000 is capable of recording common Internet activities,including Web surfing (HTTP pages), email access (bothclient-based and Web-based), instant messaging (MSN,Yahoo!, Skype, ICQ, AIM, Google Talk, QQ, etc.), FTPfile transfers, and Telnet sessions. IT administrator mayeffortlessly spot network resource misuses when it occurs.

In addition to instant message recording, IDR-2000 also

Most third-party Internet content recorders simply cacheWeb-based email pages to record its usage, and consequentlywinding up with a few simple search criteria, which makeslocating a desired email a challenging task. In comparison,IDR-2000 parses the header information from Web-basedemail messages for search criteria, providing users withan easy search method by sender, recipient, subject, content,attachment, and more.

The Web Filter employs a cloud-based URL databasethat has eight categories namely Anti-Social and Illegal, Pornographic and Abusive, Gaming and Gambling, Societyand Commerce, Communication and Technology, Leisure, Information and Education, Other, and up to sixty-four subcategories. Website browsing now can be easily regulatedby specifying simply the category instead of the URL, keyword, etc.

features Skype telephony recording. The caller and receiver'svoices are separately placed on two different channels foreasy distinction between the internal (on the left channel)and external (on the right channel) Skype users.

When it comes to hundreds of thousands of network logs,it takes more than one person to review. Consequently,hierarchical management is the ultimate solution to theissue. By assigning superiors to supervise their unit usingthe grouping feature, it not only efficaciously reduces themanagement load on IT staff but also helps prevent thebusiness-critical information from unauthorized access.

IDR-2000 has a user-centered design (UCD) to facilitate the operation experience for users with non-IT-expertise.Users are provided with the following features:

UTF-8 character encoding: Displays emails in variouslanguages, ideally suited for email correspondenceamong international businesses.

Various sorting mechanisms Presents data recordings by user, time, service, etc.

:

Intuitive reporting interface: Offers user-friendly layoutand plain descriptions making supervision an easy taskfor supervisors.

Extensive search criteria Assists IT administrators toeasily locate the desired data recordings.

:

Nusoft．Internet Security Fighter

Internet Data Recorder

IDR-2000

1

Internet Data Recorder Series

John

Username Web SiteTime

Nusoft Corporation

Ministry of Foreign Affairs, Ta

Third-party products' unintuitive recordings

Intuitive recordingsfor your easy reference!

Welson

Multi-Homing Gateway SeriesNusoft．Internet Security FighterNusoft．Internet Security Fighter

NAS Support for Optimal Data Storage

Free-of-Charge Firmware Updates

Comprehensive Statistics and Diagrams

IDR-2000 is perfectly adaptable for all sizes of businesses

The device not only has multilingual support (English, TraditionalChinese and Simplified Chinese) but also provides detailedtraffic statistics and graphs for network diagnosis.

due to its no-user-number limitation and free-of-charge firmwareupdates.

Internet-Based Application Blocking

Anomaly Traffic Detection

Third-party firewalls usually lack an effective scheme to

IDR-2000 is able to proactively block packet-floodingattacks (under Bridge mode) and notify related personnelof the event at its initial stage. A core switch may be incorporated to perform a co-defense against the attackby disabling the switch port containing the source of theattack, efficaciously preventing Denial-of-Service attacks.

Apart from that, other activities like multimedia streaming, Web-based email access, online gaming, VPN tunneling, and remote controlling can also be well regulated to ensurenetwork security.

regulate the use of Internet-based applications. Accordingly,IDR-2000 allows IT administrators to base IM access (messaging or file transfer using MSN, Yahoo!, Skype, ICQ,AIM, Google Talk, QQ, etc.) on the company's network policy and forbid the use of peer-to-peer software (eMule, BitTorrent, Thunder, eDonkey, Foxy, etc.).

Internet Data Recorder Series

Real-Time Network Flow Analysis

Multiple Recording Bases

The bandwidth utilization can be obtained based on user,

Most third-party Internet content recorders store data ina first-in, first-out (FIFO) fashion, which might result inimportant data being overwritten by data of less importance.In comparison, IDR-2000 makes the most of hard diskspace by adjusting the storage time of each service logbased upon the importance and deleting them uponexpiration.

Besides, it also supports network-attached storage(NAS) that facilitates storage access such as searching,browsing and retrieval simply through a Web browserfrom anywhere. No additional software installation isrequired.

The recordings can be based on:AD account - Seamlessly incorporates Active Directory;

recordings are associated with each individual.

Auth name - Requires users to be authenticated prior to

accessing services. (An alternative when AD is not available)

IP / MAC address - Adopted accordingly.

time and service. With the help of an exclusive slider bar,IT administrators may effortlessly pinpoint all bandwidthresource misuses.

Deployment

Internet

LAN

Internet

LAN

IDR-2000 IDR-2000

Sniffer Mode Bridge Mode

Firewall Firewall

Hub or Switch (with port

mirroring)

Internal Users Internal Users

2

Multi-Homing Gateway SeriesNusoft．Internet Security FighterNusoft．Internet Security Fighter

3

Internet Data Recorder Series

Product HighlightsHighlights Benefits Third-Party Products

Web-based email analysis

Parses the headers from Web-based emails forsearch criteria, providing IT administrators withan easy search method by sender, recipient,subject, content, attachment, etc.

Fails to provide effective search criteria such asrecipient, sender, etc., and as a result, it makeslocating a desired email a challenging task.

Requires specialized training to operate andfrequent switches between languages to displaydifferent encoding.

Less effectively filters website access by basiccriteria such as IP, domain, keyword, etc.

Not supported for Active Directory. It merely associatesdata recordings with each IP or MAC address.

Merely associates data recordings with each IPor MAC address.

Service logs are hard to locate and can only beaccessed by service type.

The storage time of each service log is notconfigurable.

Not supported. It offers no clue regarding networkusage.

Sensitive information is opened to non-relatedpersonnel.

Fails to record local emails journaled by MSExchange Server.

Not available. Network resources are easilymisused.

Not available. It requires manual intervention toperform a routine content auditing.

Concurrent IM sessions of a user are all mixedup together. It is easy to get lost in conversations.

Not available. It has no protection againstpacket flooding, especially from within the LAN.

Backups require manual intervention and lackof direct accessibility and data durability due tothe only available media: CD/DVD.

Either unavailable (simply text recording) ormerely mono-channel recording (voices areeasily mixed up).

User-centered design

Web category filtering

Active Directory-based recording

Authname-based recording

Skype telephony recording

Various data access and search

Configurable data expirationdates

NAS storage support

Real-time network flow analysis

Hierarchical management

LAN recording for MS Exchange

Internet-based applicationblocking

Anomaly traffic detection

Automated content auditing

High IM recordings readability

Facilitates the operation experience for non-ITexperts as well as ideally adapts to internationalbusiness due to its UTF-8 character encoding.

Effortlessly regulates website access by eightcategories and sixty-four subcategories.

Seamlessly associates data recordings witheach Active Directory account.

Seamlessly associates data recordings witheach authentication name.

Features Skype telephony recording, separatelyplacing the caller and receiver's voices on twodifferent channels for easy distinction.

Provides various ways to access service logs(by user, service type, etc.) and comprehensivesearch criteria to locate the desired one.

Achieves an efficient long-term storage byadjusting expiration dates of each service log.

Automatically backs up data recordings to aNAS device and provides an easy access tothem via any Web browser.

Effortlessly pinpoints all network misuses suchas who connected where using what service.

Limits the access to data recordings to eachdivision supervisor only, preventing thesensitive information from unauthorized access.

Supports the recording of local emails journaledby MS Exchange Server.

Separately saves each IM session for easy IMcorrespondence distinction.

Helps regulate the use of Internet-basedapplications such as IM clients, P2P software,VPN tunneling software, etc.

Proactively blocks packet-flooding attacks suchas Denial-of-Service and notify relatedpersonnel of the event at its initial stage.

Automatically audits network logs from theprevious day at 24:30 and, based on the results,generates a corresponding email report fornetwork usage analysis.

繁 E

Application BlockingTelnet / BBSRecording

Data StorageManagement

NAS Support Username Binding Anomaly TrafficDetection

AutomatedContent Auditing

MultilingualSupport

FlowAnalysis

HierarchicalManagement

IM Recording FTP RecordingSkype TelephonyRecording

Client-BasedEmail Recording

Web-BasedEmail Recording

HTTP Recording

Bi-DirectionalRecording

NameIP

User-CenteredDesign

Multi-Homing Gateway SeriesNusoft．Internet Security FighterNusoft．Internet Security Fighter

4

Internet Data Recorder Series

Model Comparison

Hardware Specifications

Product Features

Model Name

Network Ports

Hardware Bypass

Hard Disk Capacity

Deployment

Bridge Mode

Sniffer Mode

Form Factor

IM

Client-Based Email

Web

RecordingSessions

RecordingBases

RecordingsAnalysis

RemoteBackup

BehaviorManagement

IP / MAC

AD Account

Auth Name

By Service

By User

NAS / File Server

Remote Access

Flow Analysis

IM Blocking

Web Filtering

Content Auditing

Application Blocking

Anomaly Traffic Detection

Web-Based Email

FTP

Telnet / BBS

Bi-Directional

IDR-950 IDR-1000 IDR-1500 IDR-2000 IDR-3000 IDR-5000

4 GbE (RJ45)4 GbE (RJ45)4 GbE (RJ45)4 GbE (RJ45)

Unlimited Unlimited Unlimited Unlimited Unlimited

500GB 500GB 500GB 1TB 1TB

X

X

X

2U Rack-Mountable

2U Rack-Mountable

1U Rack-Mountable

1U Rack-Mountable

1U Rack-Mountable

1U Rack-Mountable

2 TB x 2(RAID-1)

4 GbE4 GbE (RJ45/Mini-GBIC) (RJ45/Mini-GBIC)

Nusoft CorporationTel: +886-2-8226-6789 Fax: +886-2-8226-6488Address:

http://www.nusoft.com.twSales Department : sales@nusoft.com.twTechnical Support: support@nusoft.com.tw

3F.-1, No. 880, Zhongzheng Rd., Zhonghe Dist., New Taipei City 235-86, Taiwan (R.O.C.)

User Limit Limited