ipscanbrochure3.5

8/4/2019 IPScanBrochure3.5

1/6

IPScanSecure IP Address

management &

Layer 2 Network

Access Control

Solution

ViaScope Int.Tel. 822-3412-9700

www.viascope.com

[email protected]

1page

Viascope provides remarkable IP resource management solution called IPScan.

It is the industry's leading solution for centrally managing and enforcing control over fundamental network

access and IP address allocation. Distributed IPScan probes monitor every VLAN, and detect all Ethernet and IP

devices connecting to the network. The centralized IPScan server including an integrated RDBMS provides

centralized policy administration, monitoring, alerting and real-time control over all device access to the

enterprise-wide backbone network.

Secure IP Address Management

Layer 2 Network Access Control Solution

Be

nefits

IPScan offers perfect IP address management for static IP address

environment and DHCP environment. By enabling state-of-the-art

DHCP Server feature in IPScanProbe, it provide very highly secure

and flexible DHCP environment.

Based on configured policies, IPScan can automatically prevent

any device that has an unauthorized or conflicting Ethernet or IP

address from connecting to the network. By denying these devices,

IPScan prevents potential attacks from outsiders that have gained

connectivity to switch or WiFi access point, and helps eliminate

address conflicts that can potentially bring down critical network

infrastructure components or mission-critical servers.

IPScan also collects and stores an ongoing, auditable history of

all devices on the network, providing a highly valuable set of

always-updated network documentation.

IPScan offers IT managers a tremendous return on investment,

by greatly increasing mitigation of security and network address-

conflict based downtime risks.

IPScan automate IP address management tasks, which are currently

manually managed and very time-consuming, delivering cost-savings

in operational efficiency.

Empower IT managers to successively deploy and control company'snetwork policies to the internal users. IT managers can now block and

control unauthorized/unknown user and/or any user who don't follow

company policy from accessing the network to prevent problems that

can impact the network performance.

Automatic detection of IP related events such as IP conflicts and

unknown devices, enabling IT managers to take prompt reactions to

minimize the impact.

Centrally manage the entire network distributed across regions from

a single location.

The deployment is completely transparent to the existing network

requiring neither network reconfiguration nor upgrade.

Users no need to login using ID & password. Its transparent

architecture will not affect the network performance in any ways.


2/6


management &

Layer 2 Network

Access Control

Solution


www.viascope.com

[email protected]

2page

Secure IP Address

ManagementAutomatic IP/MAC resource monitoringAutomatic detection, display and update on IP, MAC,

host name, workgroup name, detected time and etc.

IP address reservationBy pre-defining IP Block for the unassigned IPaddress, any free IP address will be in control of ITmanager for the future assignment.

IP-MAC bindingBy binding IP and MAC address, User cannot changetheir IP address without IT manager's permission.

Real-time IP/MAC inventoryList complete IP device Inventory in real-time for theentire network.

IP/MAC description column & quick searchBy providing additional IP/MAC description column,IP manager can find out IP/MAC device immediately.

Event detection and logDetect and save IP/MAC related events such as (IPchange, IP conflict, New MAC and etc.) in real-timeand save the logs in MySQL, MS-SQL or Oracledatabase.

IP groupingCreate groups and categorize IP users into theirphysical and logical groups for comprehensive

management.

Network Access ControlLayer 2 level blockingWithout touching devices on the physical level ordisabling switch ports, IPScan provide strict Layer 2level blocking commands.

Network based IP/MAC blockingEnable IT managers to block any IP and/or MAC thatshould stay out of the network without installing anyagent program on PC clients.No need to change any of the existing networkinfrastructure or configuration.

MAC authenticationDetect and save MAC address automatically.Unregistered MAC address is blocked instantly ortemporarily depends on policy. MAC authenticationprocess is simple and hassle-free.

Visitor access time controlOffer IP/MAC based time control to pre-define thenetwork access periods for the visitors.

Host name controlRegister host names and block anyone violating thedefined rule.

Expired IP/MAC controlProactively manage IP/MAC users no longer active inthe network for a defined number of days.

Wireless access point securityRegardless of the network environment (wired and/orwireless), all IP/MAC device access will be control by

IT managers

IP Conflicts ManagementMission critical server protection from IP conflictProtect IP addresses of important devices in the networkfrom IP conflicts by binding IP and MAC.

Ideal for static IP address deviceAutomatic IP conflict detection and prevention by registeringMAC address for each static IP address.

Fe

atures


3/6


management &

Layer 2 Network

Access Control

Solution


www.viascope.com

[email protected]

3page

Secure DHCP ServerNext generation DHCP serverIPScan Probe include enhanced DHCP Serverfeatures with heightened security.

Dual DHCP poolsProvide 2 types of DHCP pool: one for authorizedDHCP clients and another for unauthorized DHCPclients

Authorized poolDHCP pool for registered MAC address.IP addresses in the authorized pool will grantpermanent network access to registered MACaddresses.

Unauthorized poolDHCP pool for unregistered MAC address.Unauthorized MAC will get a temporary IP addressfirst for a limited time, but the access will beterminated if not authorized by IT manager.

Unauthorized MAC device blockingApply MAC blocking immediately for unauthorizedMAC addresses or allow to use the networktemporarily.

Static IP address control in DHCP poolautomatic detection and prevention of DHCP clientto use static IP address in DHCP pool.

Other DHCP server detectionAutomatic detection of other DHCP server existingin the same network. Other DHCP

server can be disconnectionfrom the networkusing IP/MACblocking feature.

Fe

atures

Advanced Pack V2.0Integra ted Add-OnFeature s for IPScan

Advanced Pack V2.0 is anintegrated add-on packageoffers yo u to cost-effectivelyextend managem ent capabilitiesand streamlines diversemanagem ent tasks with its highperform ed functions.

To manage your network,it is needed to deploy management solutionsfor each task. However, it requires high cost investment,

and it will lay a burden on the network managerAdvanced Pack isthe collection of the user's best required functions overthe network management will be the best answer to liftyour burden from managing various managementsolutions and save your network budget.

Switch Port ManagementControl your Switch Port & Secure your GatewaySwitch Port Management function allows IT manager tocontrol each Switch port automatically and manually in real-time without heavy SNMP solutions.Also it offers you to secure the Gateway from

the IP duplication by blockingSwitch Port of the violation IPuser. It is not only blockingthe violation user's IP address,but blocking the Switch Port ofthat user to completely blockeven broadcasting packets andany repeated violation from thenetwork.

Service Port ManagementService Port ManagementManage Your Network Vulnerability Service PortManagement feature provides IT manager to probe thenetwork service port of IP users, and block the violationusers who do not use the required or compulsory networkservice applications in order to prevent any trouble causedby the IP users.*** Advanced Pack is compatible with IPScan Server V3.5 or higher version.


4/6


management &

Layer 2 Network

Access Control

Solution


www.viascope.com

[email protected]

4page

Network Configuration with Existing DHCP ServerIPScan product family is composed of software package and hardware probes.

IPScan software package contains IPScan Server and Console software, and the probes are

IPScan agent embedded dedicated hardware. IPScan Server is a communication module that

corresponds with IPScan Console, DB server and probes. IPScan Console is the actual user

interface for IT managers to view current status and execute policies. Depending on your networkconfiguration, different models of IPScan Probe are available for the deployment.

Network Configuration with IPScan DHCP ServerIPScan's DHCP Server Provides Heightened Network Security.IPScan Probe 50, 100A and 600 models are equipped with DHCP server functions.

Configuring DHCP Server can be easily done from IPScan Console, the user interface, which

connects to IPScan Server. When an IP device is detected, IPScan Probe checks with

IPScan Server on the defined policies. If the device meets a company's network access policies,

DHCP Server embedded in IPScan Probe will allocate an IP address from an authorized

IP range pool. However, if it is unknown and/or unauthorized to connect to the network,

DHCP Server will not allocate an IP address. Depending on each company's needs,

IT managers can configure the DHCP Server to grant the network access temporarily.

Co

nfiguration


5/6


management &

Layer 2 Network

Access Control

Solution


www.viascope.com

[email protected]

5page

More than 10,000 users

Win2000 Server

Win2003 Server

Dedicated H/W

platform for DB

Server is required

Inquire

Inquire

Inquire

Inquire

InquireInquire

OS

IPScan

Server

integration

CPU

RAM

HDD

Less than 2,000 users

N/A

IPScan DB Server and

IPScan Server are installed

in the same H/W platform

N/A

N/A

N/A

2,000 ~ 5,000 users

N/A

IPScan DB Server and

IPScan Server are installed

in the same H/W platform

N/A

N/A

N/A

5,000 ~ 10,000 users

Win2000 Server

Win2003 Server

Dedicated H/W

platform for IPScan

Server is required

Pentium4 3GHz

2G

120G

More than 10,000 users

Win2000 Server

Win2003 Server

Dedicated H/W

platform for IPScan

Server is required

Inquire

Inquire

Inquire

H/W Specifications for IPScan Server (minimum requirements)

IPScan ServerInstalled in main center, it communicates with Probes to receive and store collected data andforwards IP policies defined by IT manager. It supports MS-SQL 2000 Server and MySQL Server

Win2000 Professional / Win2000 Server / Win2003 Server / Windows XP

ODBC

Pentium4 2GHz or higher

512MB

1G available (100M spaces for installation)

100 Mbps Ethernet

OS

DB Connection

CPU

RAM

HDD

NIC

H/W Specifications for IPScan Console (minimum requirements)

IPScan ConsoleInstalled in IT managers PC, it enables the connection to IPScan Server to view, monitor and define IP policies.

DB Server for IPScanCollected Data and policies are stored in the RDBMS MS-SQL 2000 Server and MySQL Server are compatible.DB Server and IPScan Server can be installed in a same hardware platform if the number of active IP is less than 5,000.For more than 5,000 active IP network, separate hardware platform is required for each.

H/W Specifications for DB Server (minimum requirements)

Less than 2,000 users

Win2000 Professional

Win2000 Server

Win2003 Server

DB Server and IPScan

Server are installed in the

same H/W platform

MySQL4.1.11

MS SQL2000

Pentium4 3GHz

2G

120G

100Mbps EthernetLess than 50 Probe100

or 5 Probe600

OS

IPScan Server

Integration

DB Type

CPU

RAM

HDD

NICMax number

of Probe

2,000 ~ 5,000 users

Win2000 Server

Win2003 Server

DB Server and IPScan Server

are installed in the same H/W

platform

MS SQL2000

2 Xeon CPU 3GHz

2G

160G(SCSI)

100Mbps EthernetLess than 100 Probe100A

or 10 Probe600

5,000 ~ 10,000 users

Win2000 Server

Win2003 Server

Dedicated H/W

platform for DB Server is

required

MS SQL2000

2 Xeon CPU 3GHz

3G

160G(SCSI)

100Mbps EthernetLess than 500 Probe100A

or 20 Probe600

Sy

stemR

equirements


6/6


management &

Layer 2 Network

Access Control

Solution


www.viascope.com

[email protected]

6page

IPScanProbe

Specifications CPU AMD AUL1550 MIPS Core (333 MHz)Memory 64Mbyte DDR RAM

Flash Memory 4Mbyte NOR Flash, 16Mbyte NAND Flash

Interface Ethernet 10/100Mbps,(RJ-45 )1 port.

RS-232 console 1 port.

Size 118mm(W)x30mm(H)x118mm(D)

Weight 440g

Environment Temperature 0~40C , Humidity 0~90%

Input Voltage AC 100V~240V, 50~60Hz

Power DC 5V/3A, 15W (DC Adaptor)

Firmware OS Linux Kernel 2.4.20

Trunk Protocol IEEE 802.1q support

Capacity Up to 50 active IP addresses

DHCP Server Yes

IPScan Probe 50Software technology embedded hardware Probe that is

dedicated to monitor a remote area or a segment.

Plug-and-play installation. It supports 802.1q to manage

multiple VLANs from a single device.

It supports up to 50 active

IP devices and DHCP

Server feature.

IPScan Probe 100Software technology embedded hardware Probe that is

dedicated to monitor a remote area or a segment.

Plug-and-play installation. It supports 802.1q to manage

multiple VLANs from a single device.

It supports up to 250 active

IP devices. No DHCP

Server feature support

CPU 50MHz RISC KS32C50100

Memory 32Mbyte SDRAM

Flash Memory 0.5Mbyte

EEPROM 128 Kbyte



Size 170mm(W)x44mm(H)x210.5mm(D)

Weight 1.2Kg



Power DC 5V/3A, 15W

Firmware OS MicroC/OS-II



DHCP Server No

IPScan Probe 100ASoftware technology embedded hardware Probe

that is designed to control up to 500 active users.

It supports 802.1q to manage multiple VLANs from a

single device. It supports up to 500 active IP devices

and DHCP Server features.

IPScan Probe 600Software technology embedded hardware that is design

ed to monitor large number of users. It supports 802.1q

to manage multiple VLANs from a single device.

It supports up to 2,500 active IP devices and DHCP

Server features.

CPU Intel Celeron(Coppermine) 733MHz

DRAM 128MB SDRAM

HDD 40GB

Interface Ethernet 10/100Mbps,(RJ-45) 6 ports

RS-232 console 1 port

Size 435mm(W)x45mm(H)x285mm(D)

Weight 4.8Kg

Environment Temperature 0 ~40C , Humidity 0~90%


Power 220W



Capacity Up to 2,500 active IP addresses

DHCP Server Yes

CPU AMD AUL1550 MIPS Core (333 MHz)

System Memory 64M DDR RAM

Flash Memory 4M NOR Flash, 16M NAND Flash



Size 200mm(W) X 44mm(H) X 196mm(D)

Weight 1.3Kg



Power DC 5V/3A, 15W




DHCP Server Yes

ipscanbrochure3.5

Documents