|
RFP
Series: VPN for Broadband SMBs
R apidStream—continued
|
Requirements
Map:
What follows is a checklist of the RFP requirements, indicating
Yes/No compliance. Of course, RapidStream products are designed
to provide:
• Turn-key hardware solution
• No truck roll required for existing accounts
• Remote configuration of all but basic network parameters
• Remote activation of add-on features
|
•
|
Software/Policy Installation:
|
|
Yes
|
Central (ISP) policy definition and update |
|
Yes
|
Central (ISP) software update |
|
Yes
|
IPSec client support for all Windows OSs
|
|
•
|
Physical:
|
|
Yes
|
Two or more 10BaseT or 10/100 ports |
|
Yes
|
Support for both DSL bridging modem and
router environments |
|
Yes
|
AC Power |
|
No
|
Enclosure should be tamper-resistant |
|
•
|
Management:
|
|
Yes
|
Enable secure remote management by ISP
NOC |
|
Yes
|
Some method of out-of-band management
in case of failure |
|
Yes
|
Configuration backup/restore |
|
Yes
|
Enclosure should be tamper-resistant |
|
Yes
|
Remote diagnostics; ping and traceroute |
|
Yes
|
Enable customer management of remote access
user accounts |
|
Yes
|
Single-point administration of multiple
devices from ISP NOC |
|
Yes
|
Configuration change audit trail |
|
•
|
Monitoring:
|
|
Yes
|
Enable remote monitoring from ISP NOC
|
|
Yes
|
For site-to-site tunnels, traffic stats;
minimum, avg. throughput, downtime |
|
Yes
|
For remote user tunnels, user session
stats; minimum, connection log |
|
Yes
|
Configurable real-time alerts; SNMP, email,
and/or pager |
|
Yes
|
Event logging, stored locally and aggregated
centrally |
|
•
|
Firewall Features:
|
|
Yes
|
Stateful inspection and/or application
proxy firewall |
|
Yes
|
ICSA certification |
|
Yes
|
Logging with configurable detail, alerting
|
|
Yes
|
Network/Port address translation |
|
Yes
|
DMZ option |
|
•
|
VPN Features:
|
|
Yes
|
IPSec support for ESP, 3DES, SHA-1, and
Diffie-Hellman Group2 |
|
Yes
|
IKE automated key management |
|
Yes
|
IPSec or IPsec/L2TP for remote access
|
|
Yes
|
IPSec/IKE-level diagnostic tools |
|
Yes
|
ICSA certification and/or VPNC brand |
|
Yes
|
Authentication: Pre-Shared Secret, X.509,
and RADIUS |
|
•
|
A La Carte Options:
|
|
No
|
Content-filtering plug-in |
|
No
|
Intrusion detection plug-in |
|
No
|
Antivirus scanning plug-in |
|
•
|
Vendor Support:
|
|
Yes
|
Technical support, accessible 24/7 to ISP NOC |
|
Yes
|
Marketing support program |
|
Yes
|
ISP staff training program |
|
Yes
|
24-hour parts replacement and warranty program |
|
Yes
|
Software upgrades and patches available on-line |
|
|
|
