Product: NC-2000-AG
Family: NetContinuum Application Security Gateway

Product Description: The NC-2000-AG is the world’s most powerful application proxy. It is deployed in data centers to minimize the risk of exposing critical applications over the web. The NC-2000-AG provides comprehensive application assurance: securing the web applications in the data center from professional hackers and their methods, accelerating the user experience through caching, compression and connection pooling, and assuring availability through load balancing and application health checks. The comprehensive application assurance feature set is delivered from a single point of control.

Performance:

L2-L4

• Maximum Concurrent TCP connections: 1,400,000 connections
• Maximum Throughput: 1 Gbps
• Maximum TCP connections/second: 23,000 connections per second
• TCP Multiplexing ratio: 10:1

SSL

• Maximum Concurrent SSL connections: 100,000 connections
• Maximum Throughput: 1 Gbps
• Maximum SSL transaction rate with no session reuse: 8,000 transactions per second

L7 HTTP

• HTTP 1.1 Transactions / second with all security and acceleration features turned on: 28,000 transactions per second
• Latency: Less than 1 millisecond

L7 HTTPS

• HTTPS 1.1 Transactions / second with all security and acceleration features turned on: 10,000 transactions per second
• Latency: Less than 5 milliseconds

Interfaces:

Connectivity

• 2 x traffic interfaces: 10/100/1000 Ethernet
• 1 x management interface: 10/100/1000
• Gigabit fiber optional
• RS-232 serial, 9600 bps, DB9F

Management Interfaces

• GUI (installs on Linux and Windows)
• CLI (accessible from any SSHv2 client)

Key Features & Benefits:

Web Application Security

• WEB APPLICATION FIREWALL (WAF): application cloaking, AAA, white lists, forms protection, cookie protection, data theft protection, SQL injection protection, cross-site scripting protection, custom black lists built on regular expression engine, other application layer threats.

• FULL XML FIREWALL: optional.

Web Application Acceleration

• CACHING: Six gigabytes of memory cache much of the static content. Requests for cached content served immediately decreasing costs and increasing usefulness of server lifetime.
• SSL ACCELERATION: Dedicated SSL hardware for a fast encryption platform.
• COMPRESSION: Saves on bandwidth bills; each rendered HTML page is significantly squeezed down in size.
• CONNECTION POOLING: Reverse proxy engine keeps connections to servers open, greatly reducing overhead associated with creating new TCP connections with faster response times.

Availability

• LOAD BALANCING: Modes include source IP and cookie-based persistence. Rule groups allow content switching based on headers, URL, parameters, and other HTTP protocol aspects.
• IN-BAND, OUT-OF-BAND, and HEART­ BEAT CHECKS: Flexible health checking options ensures traffic only goes to eligible servers.
• INFRASTRUCTURE VIRTUALIZATION: Full reverse proxy functionality isolates internal network from outside appearance. Adminis­trators can freely move around or modify server resources, with proxy making changes completely transparent to outside world.

Highlights: Application proxies are an architectural best practice for data centers looking to provide application assurance. NetContinuum’s NC-2000-AG is the world’s most powerful application proxy.

• NetContinuum has engineered a “full proxy TCP and HTTP software architecture stack from the ground up.  The system delivers extremely low latency and very high performance due to its light weight threading architecture but also  has a very powerful rule processing engine attached to the virtualized protocol stack. 
• The resulting system provides the industry’s most comprehensive set of Layer 7 security controls to the data center and application development team, while improving, not degrading, application performance.
• NetContinuum has also simplified the tasks of inserting and managing a proxy by an order of magnitude, and has addressed the “additional point of failure” argument with a fault tolerant proxy solution.

End-Users: Large enterprises with transactional web applications which are accessible over the Internet. Specifically, these enterprises use the NetContinuum product to:

• Manage their business risks
• React to application audits and comply with regulations
• Enable rapid, secure application deployment
• Realize significant costs savings by consolidating previously disparate appliances into one control point.

NetContinuum
1705 Wyatt Drive
Santa Clara , CA 95054 USA
Tel: 1 (408) 961-5600