Resource Library

Whitepaper: Guarantee Business Continuity with Hillstone Application Delivery Controller (ADC)

The Hillstone Application Delivery Controller provides a comprehensive suite of load balancing and application acceleration features as well as important security capabilities, SSL decryption to allow full inspection of encrypted traffic, IPv6 and HTTPS transformation and much more.

The Hillstone Application Delivery Controller improves system availability through comprehensive load balancing and a variety of health checks. By thus improving server and bandwidth efficiency, as well as by optimizing web and application performance, the Hillstone ADC delivers the best user access experience to support user productivity and business growth.

In addition, the Hillstone ADC offers effortless IPv6 migration. High-performance SSL offloading allows full inspection of SSL-encrypted traffic by other security devices in the network. And importantly, the Hillstone ADC provides end-to-end secure application delivery to protect against ever-increasing attacks and threats.

Hillstone CIPA Compliance Firewall

This paper discusses the legal requirements of the Children’s Internet Protection Act (CIPA) and how Hillstone’s robust security solutions can help schools and libraries demonstrate that they offer a safe and secure environment for minors.

Hillstone DSS Compliance Firewall

This whitepaper discusses PCI DSS 3.2.1 security requirements compliance of cardholder information when it is transmitted electronically across private and public network connections and how Hillstone’s security solutions can help your organization meet these requirements.

SMBGhost Analysis_Microsoft SMBv3 Remote Code Execution Vulnerability

The SMB protocol is the protocol that WannaCry and NotPetya ransomware worms used in 2017. Using vulnerabilities targeting the SMB server, unauthenticated attackers can send specially crafted packets to the target SMBv3 server. To exploit the vulnerabilities targeted at the SMB client, an authenticated attacker will need to configure a malicious SMBv3 server and trick users into connecting to it.

Hillstone Security for the Healthcare Industry-HIPAA Regulatory Compliance

Healthcare organizations and the information they keep are particularly sensitive to attacks and intrusions because the correct functioning of their information systems and infrastructures is critical to the health of their patients. Grave injury and death may result from a network, computer system, or application outage, potentially caused by a security breach such as a DOS attack or an unauthorized network intrusion. Health information can be stolen for monetary or criminal purposes.

AI Driven Threat Defense: The Next Frontier in Cyber Security

Anyone who follows the state of cybersecurity understands that cyber attacks have increased, becoming ever more targeted, elusive, and damaging. Emerging technologies, like the Internet of Things, artificial intelligence, and hybrid cloud computing, are expanding the attack surface, making detection and understanding the full scope of today’s attacks much more challenging. Today, the enterprise security strategy needs to shift from pre-breach prevention to fast, post-breach detection and mitigation.

Hillstone SD-WAN_Uncompromising Edge Security

IT teams today find themselves in a post-breach world where the edge is both an opportunity and a threat. Networking teams are faced with requirements to quickly stand up new sites in diverse locations, provision bandwidth at those sites costeffectively, and ensure that the network is more reliable than before. At the same time, new threats, innovative malware, intelligent phishing attacks, and disparate insecure IoT devices put pressure on security teams to ensure improved visibility, compliance, and protection at the edge. The software-defined wide area network (SD-WAN) is a new solution platform that promises to solve all these problems, but the key to success is picking the right SD-WAN solution.

CloudHive and VMware NSX–Advanced Threat Prevention for the Software-Defined Data Center

Hillstone’s CloudHIve integrates tightly with VMware’s NSX and SDDC to provide the visibility, automation, scalability and comprehensive L1-7 security at the virtual level needed to identify and remediate today’s advanced SDDC breaches and attacks. Thanks to CloudHive and VMware SDDC, organizations can reap all the business advantages of the software defined data center without exposing themselves to additional business risk.

EU General Data Protection Regulation (GDPR) Compliance With Hillstone Security that Works

This paper discusses GDPR requirements to secure and protect the personal data of EU individuals. GDPR compliance is required of all companies who interact with EU individuals, and process or store their data, regardless of the physical location or ownership of the company. Hillstone’s comprehensive Security that Works solutions—reducing your enterprise’s attack surface along the perimeter, on servers, and in the cloud, along with powerful but simplified management—are essential to your organizations’ compliance with the GDPR directives concerning data protection, secure data access, secure storage, secure data processing, breach and leakage prevention, and breach detection and reporting.

An Introduction to the Hillstone Networks Server Breach Detection Solution

Sophisticated, targeted cyberattacks, such as ransomware, have become the biggest threats to modern society, as well business. Attackers often exploit security vulnerabilities in traditional static, rule-based cyber defense technologies that are usually deployed at the network perimeter. Malware and viruses designed by these hackers breach into the intranet of the corporate networks and hibernate for certain periods of time, looking for and identifying high valued targets inside the corporate network (such as database servers), then try to gain access to these servers and ultimately steal valuable data and other information or demand ransom by disrupting normal business operations.

CloudEdge For Network Function Virtualization (NFV) Solutions

With the advancing technologies, business applications and operations naturally have become more dynamic in order to adapt. New applications or business operations are created almost every day. In addition to adding new applications, removing or modifying applications and operations happen at a similar speed. However, traditional hardware-based data centers and networks could not meet the requirements of these highly dynamic changes, as hardware infrastructure cannot be adjusted at the same speed as applications.

Hillstone CloudHive: Micro-segmentación de Seguridad para Centros de Datos Virtualizados

Como los centros de datos han evolucionado desde lo físico a lo virtual, de empresarial a la nube, los problemas de seguridad que enfrentan han evolucionado también. Algunas de las tendencias que han cambiado la naturaleza de la seguridad del centro de datos incluyen: Multi-Alquiler, Multi-nube, Norte-Sur al Este-Oeste, SDN y NFV, Movilidad y Elasticidad.

Hillstone Twin-Mode Solución de Firewall para Centros de Datos Redundantes

A medida que más empresas confían en disponibilidad 24/7/365 para sus aplicaciones, el diseño de los centros de datos redundantes con conmutación por error se han vuelto cada vez más populares. Hasta hace poco, muchos de los firewall más sofisticados eran incapaces de garantizar la seguridad completa en un entorno de centro de datos redundantes.

Hillstone Twin-Mode Firewall Solution for Redundant Data Centers

As more enterprises rely on 24/7/365 application availability, redundant data center design with application failover has become increasingly widespread. Until recently, many of the e ven most sophisticated firewalls were incapable of ensuring full security in a redundant data center environment. Hillstone’s Next Generation Firewalls now address this issue head on with their Firewall Twin-Mode feature, which links redundant firewall pairs across data centers to maintain full security for all redundant data center traffic flows. Thanks to Hillstone Firewall Twin-Mode , enterprises can achieve 24/7/365 business continuity and disaster recovery without any gaps in data center security.

Ransomware–Detection and Prevention via Hillstone’s Intelligent Next-Generation Firewall

On Black Friday 2016, a powerful ransomware attack slammed San Francisco’s Muni light rail system, threatening to destroy more than 30GB of critical database, email, staff training, payroll, ticketing and other system data, unless Muni paid perpetrators 100 Bitcoin (worth roughly $70,000). Muni refused, throwing its ticketing system offline for two days, and forcing the agency to absorb thousands of free passenger rides.

Cisco’s 2016 Midyear Cybersecurity Report, declares ransomware “the most profitable malware type in history,” echoing other studies that have tracked ransomware’s rapid ascendance to one of the most prevalent and virulent enterprise security threats across all business sectors. According to a June 2016 Osterman Research survey, almost one out of every three surveyed organizations suffered a ransomware attack in the previous 12 months.

The Evolution of Security for Cloud Data Centers: Micro-segmentation Technology

As datacenters have evolved from physical to virtual, enterprise to cloud, the security challenges they face have evolved as well. Some of the trends that have changed the nature of datacenter security include: Multi-tenancy, Multi-cloud, North-South to East-West, SDN and NFV, as well as Mobility and elasticity.

Firewall Inteligente de Próxima Generación de Hillstone Networks Detección de Amenazas Post-Brechas Utilizando la Cyber Cadena de la Muerte

The cyber threat landscape has evolved from traditional “hit and smash” type of attacks to more sophisticated, targeted and well-coordinated techniques aiming to El ámbito de la amenaza cibernética ha evolucionado del tipo tradicional de “golpear y aplastar” a los ataques más sofisticados, específicos y técnicos, bien coordinados con el objetivo de robar valiosos datos corporativos y los secretos de estado o secretos personales. Estos ataques cibernéticos causan enormes daños financieros y políticos a las empresas, instituciones y agencias gubernamentales en todo el mundo.

Whitepaper: Hillstone S-Series Network Intrusion Prevention System (NIPS) PCI DSS 3.2 Compliance

This paper discusses PCI DSS 3.2 security requirements compliance of cardholder information when it is transmitted electronically across private and public network connections and how Hillstone’s S-Series Network Intrusion Prevention System (NIPS) appliance can help your organization comply with these requirements.

Hillstone iNGFW White Paper: Threat Correlations on Hillstone intelligent Next-Generation Firewall Connecting the Dots

Today’s cyber attackers have become ever more sophisticated, using targeted, persistent, stealthy and multi-phased attacks in order to avoid detection at network perimeters through traditional security measures.

iNGFW-Test Report by Gawain

The landscape for enterprise IT has changed in the new era; internet access has become more and more sophisticated. For many enterprises, a fast and robust network has become a basic working condition. The manner in which employees use the network and their satisfaction levels have also changed dramatically.

Hillstone Networks intelligent Next-Generation Firewall: Detecting Post-Breach Threats Using the Cyber Kill Chain

The cyber threat landscape has evolved from traditional “hit and smash” type of attacks to more sophisticated, targeted and well-coordinated techniques aiming to steal valuable corporate data and state or personal secrets. These cyberattacks cause enormous financial and political damages to corporations, institutions and government agencies worldwide.

Hillstone iNGFW White Paper: A Hybrid Approach to Detect Malicious Web Crawlers

A web crawler (also called web spider, web robot) is typically a script or computer program that browses the targeted website in an orderly and automated manner. It is an important method for collecting information on the Internet and is a critical component of search engine technology. Most popular search engines, such as GoogleBot and BaiduSpider, use underlying web crawlers to get the latest data on the internet.

Hillstone iNGFW White Paper: Intelligence Driven Defense

Cyber-security has gone from a niche IT issue to a boardroom priority. Senior executives and boards of directors are no longer complacent about the risks posed by data breaches and cyber attacks. They know that a breach of confidential information can damage brand or reputation, trigger class-action lawsuits and cause costly downtime. They also know that data breaches are thrusting organizations into the media spotlight, as new regulations require public disclosure of security breaches – especially if cardholder data or personally identifiable information is exposed.

Hillstone iNGFW White Paper: Advanced Security Correlation Analytics

Information security incidents may happen due to a lack of data availability, integrity or confidentiality. Many security vendors have conducted considerable research to determine how best to protect data. Many current security products and technologies—such as firewalls, intrusion detection/prevention systems, strong authentication access control mechanisms, virtual private networks, public key infrastructure—arose from these efforts. Businesses around the world deploy security products and technologies to identify, and defend themselves against, information security breaches.

Gartner & Hillstone: Intelligent Next-Generation Firewalls

Addressing Today’s Advanced Threats
As cybercriminals get more advanced and the cloud becomes an extension of the network, protecting IT assets becomes more difficult—and more important. Intelligent Next-Generation Firewalls (iNGFW) can address advanced threats and shift the protection paradigm.

Prevent Data Breaches with Analytics and Network Intelligence

If your organization is connected to the Internet, it’s vulnerable to attack. The days of staving off Internet security hazards with traditional firewall, intrusion prevention, and antivirus systems have passed. This paper discusses the advantages of Hillstone’s Intelligent Next-Generation firewall technology.

Hillstone T-Series Intelligent Next-Generation Firewall Whitepaper: Configuration and Operation Analysis using Packet Route Inspection

This paper describes the packet inspection analysis and troubleshooting capabilities of the Hillstone T-Series Intelligent Next Generation Firewall (iNGFW). The firewall automatically traces and collects information on packet processing and inspection.

Hillstone Next-Generation Firewall Whitepaper: Enhanced Intelligent QoS

This paper describes the unique Enhanced Intelligent QoS (iQoS) capabilities of the Hillstone Next Generation Firewall (NGFW). Compared to traditional QoS, iQoS is equipped with rich features including two-layer and eight-level tunnel embedding, tunnel monitoring, priority based differentiated services and allocation of remaining bandwidth.

Hillstone T-Series Intelligent Next-Generation Firewall Whitepaper: Abnormal Behavior Analysis

This paper describes the Abnormal Behavior Analysis capability of the Hillstone Intelligent Next-Generation Firewall (iNGFW) product. This technology offers a cutting-edge method of detecting unknown threats by analyzing user and server traffic, tracking a myriad of traffic parameters, and correlating and comparing the gathered data to limit risk and reveal potential new threats. Over a period of system learning, each tracked parameter generates a baseline, as well as high and low thresholds. Subsequent behavior patterns violating these thresholds are deemed abnormal and the system generates a threat warning. The correlation of time, parameters exhibiting abnormal behavior, and system warnings enable you to recognize and prevent potential new threats in advance of them impacting your network operation or applications.