3Com 3CR13501-73 User manual

1
•Protect against specific or
blended threats with port-
assigned firewalls, spam filters,
antivirus scanners, intrusion
detection and protection
systems (IDS/IPS), content
filtering, and more.
•Multilayered protection
Improves network’s intrusion
resistance across multiple
network segments, layers, and
services-inside and outside the
perimeter boundaries.
•Network processor Aggregates
up to 18 data streams into a
single sensor, for improved
monitoring performance.
3Com®Security Switch 6200
Key Benefits
Protects Against Blended Threats
Integrates enterprise-class firewall, virtual
private network (VPN), intrusion detection
system (IDS), antivirus, spam and content
filtering, and more in a high-performance,
defense-in-depth platform for corporate
headquarters and regional offices.
Safeguards Internal and External
Networks
Applies firewall policies on a per-port basis
for up to 18 physical LAN segments,
placing multiple security zones inside and
outside the perimeter.
Deploys No-Compromise Security at Wire
Speeds
Delivers robust security services without
impacting data-center performance or
other high-speed access—with 2 Gbps
firewall, 500 Mbps IDS, and 300 Mbps
IPSec VPN throughputs.
Consolidates Switching and Security
Capabilities
Integrates a high port-density interface
with proven security applications onto one
centrally managed platform—for dramatic
savings over multiple-appliance, load-
balanced alternatives.
Cost-Effectively Scales as Needed
Supports a variety of third-party security
bundles that can be separately purchased
and configured as needed, with the option
of trying out new security applications
prior to purchase.
Ensures High Availability of Security
Protects enterprise networks with a highly
available system that includes VRRP dual-
box stateful synchronization and dual
hot-swap power supplies.
The revolutionary 3Com® Security Switch
6200 delivers a score of security services
for a fraction of the cost of purchasing
these disparate capabilities separately.
Ideal for large enterprise deployments,
such as regional- or head-office networks
and data centers, this switch supports a
range of proven security applications.
Without compromising protection,
performance, or availability, this integrated
security services switch platform delivers
significant savings over multiple-appli-
ance, load-balanced solutions.
Traditional security best practices require
purchasing and administering individual
firewalls, VPNs, content and spam filters,
antivirus scanners, IDS, and intrusion
prevention systems (IPS). With the 3Com
Security Switch 6200, these applications
can be seamlessly consolidated onto one
centrally managed, load-balanced, high-
capacity platform. IT managers can
purchase only the features they need to
effectively deploy multiple layers of secu-
rity against blended threats. For example,
the 3Com Security Switch 6200 can
monitor up to 18 IDS zones using one soft-
ware license—as opposed to requiring 18
separate appliances and 18 software
licenses. Or they can use it to manage a
blend of security services deployed across
multiple network segments.
A unique, two-stage architecture combines
an embedded network processor and flow-
management and acceleration
software—enabling the switch to simulta-
neously process multiple traffic streams
and security services. It also includes
built-in redundancy for applications,
system, interface, and power to help
ensure 24/7 availability and reliability.
DATA SHEET

3COM®SECURITY SWITCH 6200 DATA SHEET
2
Why a Security Services Switch?
In the face of an epidemic of Internet hackers
and e-mail viruses, enterprise security has
become a business-critical imperative. But
deploying a truly effective, multiple-service
security solution is very cost- and labor-
intensive. And unless combined with load
balancing, it can result in response lags or
bandwidth bottlenecks.
The 3Com Security Switch 6200 resolves the
"either/or" dilemma with a unique, inte-
grated platform that eliminates the
traditional barriers associated with managing
disparate appliances, purchasing multiple
software licenses, and configuring load
balancers. This cost-effective, high-perform-
ance security services switch delivers:
• Enterprise-class security services—
including firewalls, spam filters, antivirus
scanners, IDS/IPS, content filtering, and
more
•Intrusion resistance across multiple
network segments, layers, and services—
inside and outside the perimeter
•Aggregated monitoring of multiple data
streams through a single IDS sensor, for
improved cost savings, performance, and
manageability
•Exceptional security engine through-
puts—including up to 2 Gbps firewall,
500 Mbps IDS, and 300 Mbps IPSec VPN
•High-capacity data interface with 16
10/100 Ethernet and 2 Gigabit Ethernet
(fiber or copper) ports
Features
Description
SECURITY
Proven services Protect against specific or blended threats with port-assigned firewalls, spam filters, antivirus scanners, intru-
sion detection and protection systems (IDS/IPS), content filtering, and more.
Multilayered protection Improves network’s intrusion resistance across multiple network segments, layers, and services—inside and
outside the perimeter boundaries.
Firewall and VPN Deliver robust stateful-inspection firewall and IPSec VPN capabilities.
IDS and IPS Provide real-time monitoring of pre-firewall hacker reconnaissance activity and post-firewall integrity
breaches.
E-mail and Internet filters Block viruses, spam, URLs, downloads, and inappropriate content by filtering SMTP, HTTP, HTTS, and FTP
traffic.
PERFORMANCE
Network processor Aggregates up to 18 data streams into a single sensor, for improved monitoring performance.
Flow management and Delivers exceptional firewall throughput—up to 2 Gbps—while flexibly acceleration software
supporting multiple applications and network zones.
High port density Includes 16 10/100 Ethernet and 2 Gigabit Ethernet (fiber or copper) ports for outstanding security services
throughput and scalability.
MANAGEMENT
Easy-to-use control panels Simplify security configuration and management with intuitive menus and web-based interfaces.
Streamlined administration Controls multiple security services through one integrated platform.
AVAILABILITY
Built-in redundancy Includes VRRP dual-box stateful synchronization and dual hot-swap power supplies to ensure security services
high availability.
Flexible deployment Enables installation of security services as needed, with most third-party applications offering 30-day free trial
versions.
COST-SAVINGS
Integrated platform Delivers the functionality of several enterprise-class security engines for a fraction of the cost of purchasing
dedicated appliances.
Software consolidation Allows existing security licenses to be transferred directly to the security platform.
Aggregated monitoring Enables monitoring of up to 18 traffic streams from one IDS license.
3Com®Security Switch 6200
$$$
Savings
IDS Firewall/VPN
Antivirus/Spam
LOAD BALANCERS

3
3COM®SECURITY SWITCH 6200 DATA SHEET
Ports, Connectors
Console:
RS232 port, DB-9 connector
Management:
2 10/100 Ethernet ports, RJ-45 connector
Device interface:
2 Gigabit Ethernet ports (fiber or copper connectors),
16 10/100 Ethernet ports (RJ-45 connector)
Cables and Operating Distances
Serial:
Up to 15 m (50 ft)
10BASE-T/100BASE-TX:
Category 5 UTP up to 100 m (328 ft)
1000BASE-SX:
Multimode fiber; 62.5 µ up to 275 m (902 ft),
50 µ up to 550 m (1,805 ft)
Processors, Memory, Backplane
Network module:
Broadcom BCM 1250 Network Processor, 512 MB
RAM
Application module:
Pentium IV Xeon 2.4GHz, 512 MB RAM
Ethernet backplane:
Dedicated full-duplex Gigabit Ethernet
Storage
Hard drive IDE (Ultra ATA), 7200 RPM
Security Applications:
Encryption Hardware
VPN accelerated cryptography engine included
Security Applications
Check Point FireWall-1 NG Feature Pack 3 (with
Performance Pack and Policy Server RPMs) and VPN-
1; Check Point FireWall-1 NG AI R55; Enterasys
Dragon IDS Software (Dragon) Version 6.1.1.;Trend
Micro Anti-Virus VirusWall Version 3.8, eManager
3.7, and IMSS Version 5.5.; Websense Enterprise URL
Filtering (OPSEC certified) Version 5.0.1.; Squid Web
Proxy Cache Software Version 2.5.;Internet Security
Systems RealSecure 10/100 Network Version 7.0.;
Secure Computing SmartFilter 3.2.1.; Snort 2.1.2.;
eSafe (CVP) Version 4.0.
(leave space, then insert..)
Support for RIPv2 and OSPF dynamic routing proto-
cols are available through Optional Routing software
Redundant Components
Active/standby dual-box redundancy using VRRP
interface redundancy; Check Point application
synchronization; dedicated high-availability systems
link; dual hot-swappable power supplies
RFC Compliance
791 (IP), 792 (ICPM), 826 (ARP), Static Routes, 854
(Telnet), 951 (BOOTP), 959 (FTP), 1157 (SNMP), 1519
(CIDR), 1812 (IPv4 routers), 2068 (HTTP), 2246
(SSL/TLS), SSH
Regulatory Compliance
UL 60950; FCC Part 15, Subpart B, Class A; EN 55024;
EN 55022; VCCI V-3; AS/NZS 3548:1995; CNS 13438
Class A (test passed; country approval pending);
KN22, KN61000-4 Series, TTA. IC-950
Power
100-240 VAC, 350W
LED Indicators
System, device ports, management ports, hard drive,
and power supply
Environmental
Temperature:
0°-40° C (32°-104° F)
Humidity:
10%-90% non-condensing
Altitude:
3,048 m (10,000 ft)
Physical
Front-/mid-rack mountable in standard 19-inch rack
Dimensions:
90 mm (3.5 in) high, 435 mm (17.1 in) wide, 635mm
(25.0 in) deep
Weight:
14.5 kg (32 lb)
Warranty
The 3Com Security Switch 6200 is backed by a One-
Year Limited Warranty that includes 30-day hardware
replacement and 90-day phone support. For addi-
tional services—such as installation packages and
extended warranties—please refer to the product
manual or visit www.3com.com.
Support
For proven answers and technical expertise—that is
available 7 days a week, 24 hours per day—go to
www.3com.com and explore our 3Com
Knowledgebase, as well as product information, tech-
nical tips, and FAQs.
Specifications
Copies of packets
sent to IDS through
test access port (TAP)
Internet
DMZ
STAGE 1 STAGE 2
Dept. 1
Dept. 2
Traffic aggregation
Security enginesFlow-management and
acceleration engines
Mail, web, and
FTP traffic for
content scanning
Secure Acceleration
FIREWALL
VPN
ANTI-
VIRUS
IDS
The 3Com Security Switch 6200 uses
an embedded network processor
and flow-management/acceleration
software to consolidate and switch
traffic between multiple network
segments and security engines. This
allows the switch to simultaneously
accelerate firewall processing while
copying and directing traffic to IDS
and antivirus engines.

3Com Corporation, Corporate Headquarters, 350 Campus Drive, Marlborough, MA 01752-3064
To learn more about 3Com solutions, visit www.3com.com. 3Com Corporation is publicly traded on Nasdaq under the
symbol COMS.
Copyright © 2004 3Com Corporation. All rights reserved. 3Com and the 3Com logo are registered trademarks of 3Com
Corporation. All other company and product names may be trademarks of their respective companies. While every effort is
made to ensure the information given is accurate, 3Com does not accept liability for any errors or mistakes which may arise.
Specifications and other information in this document may be subject to change without notice. 400835-002 09/04
3Com Security Switch 6200 supports these
third-party security applications:
•Check Point FireWall-1 NG Feature Pack 3
(with Performance Pack and Policy Server
RPMs) and VPN-1
•Check Point FireWall-1 NG AI R55
•Enterasys Dragon IDS Software
•Trend Micro Anti-Virus VirusWall,
eManager, and IMSS
•Websense Enterprise URL Filtering (OPSEC
certified)
•Squid Web Proxy Cache Software
•Internet Security Systems RealSecure
10/100
•Secure Computing SmartFilter
·Snort
·eSafe (CVP)
3COM®SECURITY SWITCH 6200 DATA SHEET
Ordering Information PRODUCT DESCRIPTION 3COM SKU
3Com Security Switch 6200 3CR13501-73
3Com Security Switch 6200 Spare Power Supply Unit 3C13502
3Com Security Switch 6200 Routing Software 3C13532