Shulou(Shulou.com)06/01 Report--

As a result, Qiming Xingchen UTM has been upgraded to UTM, which is a general comparison of these two devices for everyone's reference.

Qiming Star UTM has been used for three years, and the equipment has been replaced directly because the ips rule base cannot be upgraded. Here, we make an intuitive comparison of the basic functions and configurations of the two devices, but do not involve detailed data comparison of performance.

System interface comparison

The interface of the mountains and rocks is friendly, simple and refreshing, which is better than the enlightening stars. Various states are displayed clearly and clearly at a glance. In particular, the part of traffic analysis is much better than Qiming Star. The flow analysis of Qiming stars can be ignored.

Firewall function

The firewall is so mature that both of them are similar, and they all have what they should have.

Ips function

The performance of ips enlightening stars is obviously better than that of mountains and rocks, especially the rule base update. Kai Ming stars are generally updated once a week, while mountains and stones are updated almost once every three months. Shanshi was last updated on April 27, while the last update was on January 30.

Online behavior management function

Internet behavior management function, Kai Ming Star is the decoration, and Shan Shi has done very well, the requirements are not high can replace the ordinary Internet behavior management function, as can be seen from the picture. However, because the storage capacity of the local log is too small, if the data flow is large, the real-time data can be recorded basically, and the data in a few minutes can be stored in the log database, and then overwritten. Additional configuration of syslog server storage is required.

Ssl*** function

Qiming Star's ssl*** experience is very poor, and the virtual network card does not support win7 well. However, there is a custom home page function, you can configure the application link.

Ssl*** is a very standard tunnel, with pc version and mobile version, which is relatively easy to use and has no home page function.

Log management

Rock log management, very clear and easy to view and understand, the only deficiency is that the built-in storage capacity is too small. Qiming Star's log management is limited to look, the experience is not very good.

After configuring a third-party log server, Shanshi can send system and * * logs to the log server, but cannot send audit logs such as nat, Internet behavior and other logs to the log server, probably because these logs are non-syslog.

Yamashi's device can insert sd into the device to store logs. However, it is limited to storing ips and security logs in SD cards, while nat logs and Internet logs, which are relatively large in log volume, cannot be stored in SD cards.

AAA certification

Shanshi is not as good as Qiming Xing. In terms of verification for administrator login, Shanshi does not support radius unified authentication, but can only achieve local account authentication. This adds complexity to enterprises with many devices and unified use of radius to manage all network devices. And the enlightening stars can support it very well. Yamashi replied that it is not supported because the administrator rights management is more complex.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.