Está en la página 1de 113

Soluciones

Convergentes y Seguras
para PyMes
David Melndez Campos

Solucin de Punta a Punta con un solo Fabricante

Network & Security Management


IP Voice
Security
Converged
Secure
Converged
Secure

WAN

Networks
3Com

Wired

Wireless
2

Lan Switching

3Com
Confidential

3Com

Portafolio Completo de Switches

Switch 7700/880
0Family
Switch 5500Fam
ily
SuperStack 3 Switch 4200G/4500GFamily
Switch 4500Family
SuperStack 3 Switch 4200Family
Office
Connect IntelliJackFa
mily
BaselineFami
ly

3Com

Quarantine

Solucin Lan Tpica

Preguntas claves :

Wiring
Closet

Switch Departamental

L2/L4

Nmero de Edificios
Nmero de pisos
Nmero de usuarios por piso
Nmero de Servidores
Aplicaciones
Crecimiento

Switch Departamental

Core
L2/L3/L4

Server Farm

Switch Core
Switch Modular

10/100
Gigabit

3Com

Soluciones de Red para PyMes

3Com

Small Office
Connectivity

3Com
Confidential

3Com

3 COM SWITCH 5 & 8


10/100 DESKTOP UNMANAGED
New Sleek and Stylish
Enclosure
5 and 8 port version of 10/100
Internal power supply
Autosensing and Auto
MDI/MDIX
Illuminating 3Com Logo
Sharp Blue LEDs
High Quality Finish and
Materials
2 year warranty

3Com
3ComSwitch
Switch553CFSU05
3CFSU05List
List
$31
$31
3Com
3ComSwitch
Switch883CFSU08
3CFSU08-- List
List
$49
$49

3Com
Confidenti

3Com Gigabit Switch 5 & 8


Gigabit Unmanaged

>New sleek reliable design


>QoS Traffic prioritzation
>Jumbo Frame support
>Non-blocking wire speed
>Autosensing and Auto
MDI/MDIX
>3Com Illuminated Logo
>Cool Blue LEDs
>High Quality Finish and
Materials
>Ease of set-up
>2 year Warranty

3Com

3CGSU053Com
3ComGigabit
GigabitSwitch
Switch
3CGSU05
55
3CGSU083Com
3ComGigabit
GigabitSwitch
Switch
3CGSU08
88

Familia de Switches
Office Connect

3Com
Confidential

3Com

10

Switches OfficeConnect Dual Speed Plus

OfficeConnect Dual Speed


Switches

Puertos 5, 8, 16 auto-sensing
10/100 Mbps
Auto MDI/MDIX
Soporte de priorizacin de trfico
LEDS Full duplex y Alert
3 Aos de Garanta
90 primeros das de soporte tcnico
telefnico gratuto, acceso ilimitado
a herramientas de web

Dual Speed Switch 5 Plus


3C16790B - $41
Dual Speed Switch 8 Plus
3C16791B - $57
Dual Speed Switch 16 Plus
3C16792B - $79
3Com
Confidenti

11

OfficeConnect Gigabit Switch

Office Connect Gigabit Switch 5


3C1670500B - $79
Office Connect Gigabit Switch 8
3C1670800B - $109

5/8/16 x 10/100/1000 autosensing


Auto MDI/MDIX en todos los
puertos
Compacto
Prioritizacin de Trfico
Soporte para aplicaciones
de alta prioridad de trfico
Leds indicadores del estatus
de los puertos
Certificado FCC Class B
3 Aos de Garantia

Office Connect Gigabit Switch 16


3C1671600 - $275
Intl Slide
3Com
Confidenti

12

Introducing the NEW OfficeConnect Managed


Gigabit PoE Switch: SMB Voice Ready Gigabit Networking
3Coms most economical, managed, desktop Gigabit PoE Switch PoE on all 1Gigabit ports
New model, adds managed Gigabit PoE functionality to he
OfficeConnect family
Advanced feature set and low price means unbeatable value for the
money
Voice Ready PoE Gigabit Networking for small offices (Branch or
Standalone Business)
FANLESS, desktop design makes it ideal for small office environments
Fully supported by 3NS and 3ND
3CDSG10PWR
Price List : 495
3Com
Confidenti

13

Intelligent Small Office Voice Ready Switching


from 3 Com
Example: small branch deploying IP telephony using the
OfficeConnect Managed Gigabit PoE Switch
IP-PBX

Data
Server
Create Voice
VLAN

Create
DataData
VLAN
At
ta

PCs

Voice
VLAN
ch

ph
on
e

Switch automatically places phone


into the Voice VLAN. All traffic on
VLAN is assigned high priority
3Com
Confidenti

VoIP
phones

14

Familia de Switches
BaseLine

3Com
3Com
Confidential
Confidenti

15

SuperStack 3 Baseline Switch 10/100

SuperStack 3 Baseline 10/100 Switch 16pt


3C16470 - $95

SuperStack 3 Baseline 10/100 Switch 24pt

Funciona sacndolo de la caja"

Los indicadores LED simplifican


la resolucin de problemas

Encolamiento con prioridad


802.1p

Control de congestin 802.3x

3 Aos de Garanta

90 das de soporte telefnico

3C16471 - $145

3Com
Confidenti

16 / 24 puertos auto-sensing
10/100 Mbps
Auto MDI/MDIX en todos los
puertos

16

SuperStack 3 Baseline 2126-G

SuperStack 3 Switch
Baseline 2126-G

3C16472 - $245

3Com
Confidenti

24 puertos auto-sensing 10/100


2 puertos 10/100/1000 Mbps
Rendimiento sin bloqueo
Auto MDI/X en todos los puertos

Funciona sacndolo de la caja"

Los indicadores LED simplifican


la resolucin de problemas

Control de congestin 802.3x

Una unidad de Rack (RU)

3 aos de Garanta, 90 das de


soporte telefnico
17

3 Com Baseline Gigabit Switch

8/16/24 x 10/100/1000 autosensing


Alto rendimiento, sin
bloqueo

Baseline Switch 2816


3C16478 - $295
Baseline Switch 2824
3C16479- $405

3Com
Confidenti

Una unidad de Rack


Auto MDI/MDIX en todos los
puertos
Prioritizacin de trfico
LED indicadores para
simplificar la resolucin de
problemas
3 aos de Garanta, 90 das
de soporte telefnico

18

Familia de Switches
BaseLine Plus

3Com
Confidential

3Com

19

SuperStack 3 Baseline Switch Plus


SuperStack 3 Baseline 2226 Plus
3C16475CS - $ 265

SuperStack 3 Baseline 2250 Plus


3C16476CS - $ 495

3Com

24/48 puertos auto-sensing 10/100


Mbps
2 puertos auto-sensing 10/100/1000
Mbps doble propsito

Auto MDI/X en todos los puertos

Funciona sacndolo de la caja"

Los indicadores LED simplifican la


resolucin de problemas

Encolamiento con prioridad 802.1p

Control de congestin 802.3x

Administrables via Web

3 aos de Garanta, 90 das de


soporte telefnico, NBD AHR
20

Administracin WEB
Tabparaun
rpidosetup

Men
Principal

Informacinde
Configuracinyoperacin
VisualizacinRemota

3Com

21

3Com Baseline Switch 2426-PWR


Plus

> Especificaciones
24 x 10/100 auto-sensing ports
2 x of dual-purpose, Gigabit uplinks
1 Rack-mount Unit (RU)

> Puertos Gigabit Ethernet SFP


1000 Base-SX
1000 Base-LX

3C16491
$995

> Performance Layer 2 Wire-speed, non-blocking


8.8 Gbps Switching Capacity
4,000 MAC Address Support

> IEEE 802.3af Power over Ethernet


Soportado en todos los puertos
Hasta 15.4W por puerto

> 3 aos de Garanta, NBD AHR

3Com

22

Familia de Switches
BaseLine 2900

3Com
Confidential

3Com

23

Introducing the NEW Baseline Switch 2900 Plus


family: SMB Voice Ready Gigabit Networking
>3Coms most economical, managed, flexible and powerful Gigabit
switching family
>New, redesigned and enhanced management interfaces for improved
ease of use and customer experience
>New advanced feature set and low price means unbeatable value for
money
>Entry to the world of Voice Ready Gigabit networking with 3Coms
unique feature combo that helps to build a converged infrastructure
>New look and feel
>Fully supported by 3NS and 3ND

3Com

3Com Baseline Switch 2916-SFP Plus

3CBLSG16

$355

3Com Baseline Switch 2924-SFP Plus

3CBLSG24

$495

3Com Baseline Switch 2924-PWR Plus

3CBLSG24PWR

$1,19
5

3Com Baseline Switch 2948-SFP Plus

3CBLSG48

$995

24

VOICE READY NETWORKING FOR SMB

NEW 7760 or 8760 APs

to
GbE es/desk
n
pho rvers
e
ps/S

3Com - Asterisk

PoE
IPS/Firewall
NEW SMB Unified
Wireless Switch

er)
opp
c
/
r
(Fibe
GbE

es
hon
p
/
C
P
less
Wire

NEW Baseline
2426-PWR Plus

3Com

d
tops
Wire es/desk
n
pho

25

Soluciones SMB

3Com
Confidential

26

Solution Scenario Diagram Content:


4 to 15 Users

ine
asel R Plus
B
m
3 Co 2924-PW
tch
Sw i

risk
Aste orm
m
f
3 Co og Plat
l
Ana

ect
n
n
Co
ffice 8 Mbps
O
0
m
r
3 Co reless 1 Route
Wi le/DSL
Cab

ess
usin ones
B
2
10 ic Ph
m 3
3 Co 101 Bas
3
and

le
Wire

rk
etwotware
N
m
f
3 Co isor So
v
r
e
Sup

O
M ai n

C
ss P

ffi ce

27

Solution Scenario Diagram Content:


15 to 3 0 Users (Value)

ified
5 Un form
X
t
m
3 Co rity Pla
u
Sec

ine
asel R Plus
B
m
3 Co 924-PW
2
tch
Sw i

risk
Aste orm
m
f
3 Co og Plat
l
a
An

le
Wire

O
M ai n

ss
sine nes
u
B
ho
102
m 3 Basic P
o
C
3
3 101
and

C
ss P

ffice

rk
etwotware
N
m
f
3 Co isor So
v
r
e
Sup

28

Solution Scenario Diagram Content:


20 to 40 Users (Premium)

m
3 Co

ch O
Bran

ffice

r
Aste

isk

ss
irele

ct Wouter
e
n
on S L R
ceC
Offi Cable/D
m
o
3 C Mbps
108

d
nifie
X5 Ulatform
m
3 Co rity P
u
Sec

t
m
3 Co ssistan
A
e
v
i
c ut
a re
Exe Softw

CD
BX A
m N ation
o
C
3 pplic
A

e
s
elin
Bas WR Plu
m
o
P
3 C 924h2
witc

rk
etwo are
w
mN
3 Co tor Soft
c
Dire

and
s
3 106 Phone
m
3 Co rdless
Co
3 107

m
3 Co

r
Aste

isk

760
ss 8
irele11 a/b/g
W
t
m
3 Co l-Radioss Poin
Dua Acce
it
PoE
ga b
d Gi itch 24
e
i
f
i
n
mU
E Sw
3 Co ess Po
l
PC
e
r
i
W
less
Wire

e
Offic
n
i
Ma

s
ines
Bus hones
2
0
1
ic P
m 3
3 Co 103 Bas
3
and

29

Solution Scenario Diagram Content:


20 to 100 Users (Premium)

m
3 Co

Br

r
Aste

isk

ffice
O
h
an c

ss
irele

ct Wouter
e
n
on S L R
ceC
Offi Cable/D
m
o
3 C Mbps
108

d
nifie
X5 Ulatform
m
3 Co rity P
u
Sec

t
m
3 Co ssistan
A
e
v
i
c ut
a re
Exe Softw

CD
BX A
m N ation
o
C
3 pplic
A

e
s
elin
Bas WR Plu
m
o
P
3 C 924h2
witc

rk
etwo are
w
mN
3 Co tor Soft
c
Dire

and
s
3 106 Phone
m
3 Co rdless
Co
3 107

form
Plat
01R hassis
0
3
BX Vnsion C
mN
3 Co ith Expa
w

760
ss 8
irele11 a/b/g
W
t
m
3 Co l-Radioss Poin
Dua Acce
it
PoE
ga b
d Gi itch 24
e
i
f
i
n
mU
E Sw
3 Co ess Po
l
PC
e
r
i
W
less
Wire

e
Offic
n
i
Ma

s
ines
Bus hones
2
0
1
ic P
m 3
3 Co 103 Bas
3
and

30

Lan Switching
Corporativo

3Coms Stackable Switching Portfolio


Solutions for Business of All Sizes

Business
Requirements

Basic Access,
Distribution

Price, Performance

Switch 4200
Family

Quad Speed
10/100/1000
Gigabit
Ethernet
10 GigE
Uplinks
Tri Speed
10/100
Ethernet
1 GigE
Uplinks
Feature
Function

Switch
4200G

$1,250-$3,495

Switch 4200

$450-$995

Layer 2
Connectivity

Advanced Access,
Distribution
Switch 4500
Family
Switch
4500G

$3,295-$6,295

Enterprise Access,
Distribution, Small
Core
Switch 5500
Family
Switch 5500G

$4,495-$9,995

Switch
5500

Switch
4500

$695-$3,295

Layer 3 & PoE


Conectivity

$1,595-$4,695

Adv Layer 3 & PoE


Connectitvity

Business Size, Features, Function

3Com

32

Familia de
Switches 4200

3Com
Confidential

3Com

33

Familia de Switch 4200


Nueva Generacin de Switches L2 Wirespeed 10/100
3C17300A - Switch 4200 26-Ports
24 puertos 10/100 Ports + 2 puertos 10/100/1000
fijos
Precio de Lista: $ 450

3 C173 02A - Switch 4200 50-Ports


48 puertos 10/100 Ports + 2 puertos 10/100/1000 fijos
Precio de Lista: $ 995

3 C173 04A Switch 4200

28-Port

24 puertos 10/100 Ports + 2 puertos 10/100/1000 fijos


+ dos Ranuras para SFPs
Precio de Lista: $ 525

3Com

Nueva Familia
Switch 4210

3Com
Confidential

3Com

35

Switch 4210 is Updated Switch 4200

Add Switch 4210 here!

3Com

36

Think of These as Two Sub-Families

>PoE models

3Com

>Non-PoE models
9-Port

9-Port

18-Port

18-Port

26-Port

26-Port

52-Port

37

3Com Switch 4210


Software Feature Summary
Layer 1 / Layer 2

Auto negotiation
Auto duplex
Auto MDI / MDIX
802.3X flow control
Broadcast storm suppression
> standard frames (up to 1,526 bytes)
802.1d Spanning Tree Protocol (STP)
802.1w Rapid Spanning Tree Protocol
(RSTP)
802.1s Multiple Spanning Tree Protocol
(MSTP)
Spanning Tree enable / disable per port
Fast-start mode
802.1Q port-based VLANs (up to 256)
8K MAC addresses
802.1ad link aggregation LACP
9-Port: 2 groups, 8 ports max per group
18-Port: 2 groups, 8 ports max per group
26-Port: 3 groups, 8 ports max per
group
52-Port: 6 groups, 8 ports max per
group
IGMP snooping v1, v2, v3
Filtering for 128 multicast groups
DHCP snooping

3Com

Convergence

Power over Ethernet (PWR) models


4 priority Queues per port
WRR queuing
802.1p prioritization
DiffServ / IP Tos / DSCP prioritization

Security

802.1X network login with RADIUS


authentication
Supports: MD5, EAP, EAP-TLS, EAPTTLS, PEAP, CHAP, PAP, EAPOL
MAC-based authentication (RADA)
Switch login via RADIUS
Trusted IP Management Addresses
SSH encrypted CLI
Port security
Isolated port in VLAN
Blackhole MAC address
Local switch log-in password
Auto-VLAN assignment based on log-in

Management

3Com Operating System / Comware V3


Configuration management options:
Command Line Interface
Telnet
Web-based interface
SNMP agent
SNMP v1 / v2c / v3
RMON 4 groups
Configuration backup and restore
TFTP configuration upload / download
Port mirroring N:1
IP address allocation via DHCP, bootP
Network Time Protocol
IPv6 management
Syslog
Clustered stacking of up to 32 devices
Compatible single-IP management with
4200G, 4500G, 5500, 5500G

38

Pricing

PoE Models:
3CR17341-91

Switch 4210 PWR 9-Port

$795

3CR17342-91

Switch 4210 PWR 18-Port

$1095

3CR17343-91

Switch 4210 PWR 26-Port

$1295

3CR17331-91

Switch 4210 9-Port

$450

3CR17332-91

Switch 4210 18-Port

$500

3CR17333-91

Switch 4210 26-Port

$525

3CR17334-91

Switch 4210 52-Port

$995

Non-PoE Models:

3Com

39

SOLUCION DE TELEFONIA IP
PARA PYMES

Telefona Analgica

>Central
Telefnica

>Sistema de
correo de Voz

>Cableado

>Servidor de
Aplicaciones

41

Central Telefnica Anloga

Extensiones
TDM PBX

PSTN

.
.
.
.
Troncales
Anlogas
Digitales

Consola de Administracin
42

Red de Voz y Datos


Red de Voz

Red de Datos

TDM PBX

PSTN

.
.
.
.
Troncales
Anlogas
Digitales

Consola de Administracin

43

Esquema Tpico

PSTN

SIP para la nueva Generacin


de Aplicaciones

Un cable al escritorio

Calidad de servicio 802.1p

3 Com Voice Solutions: Next

Go-forward Voice Strategy and Extended Portfolio


# users

3 0

100

200

2,000+

3 Com Asterisk
Appliance
Asterisk on
OSN Platform

Benefits of 3 Com Solutions


NBX IP Telephony
Solutions

VCX Connect 100


Platform

Application enablement
Past, Present, Future
Most Survivable
Ease of Use

VCX Connect 200


Platform

VCX Enterprise IP Telephony and


VCX Enterprise IP Telephony on System i
3Com
Confidenti

45

Descripcin de la
Solucin

46

Qu es SIP?

Session Initiation Protocol


Un protocolo de sealizacin a nivel de
Aplicacin, que define la inicializacin,
modificacin y trmino de las
interacciones de comunicacin
multimedia entre usuarios.
IETF RFC 2543 Session Initiation Protocol

3Com
Confidenti

47

3 Com Asterisk Overview

The 3 Com | Asterisk Solution: Offer


A complete small office, single-site
turnkey phone system for up to 30
users based on the Asterisk
Business Edition (ABE) version
1.4 of the open source software
Defined feature set for SMBs
seeking a platform based on open
standards (Linux, SIP, opensource applications)
Offered under the label
3Com | Asterisk

49

3 Com | Asterisk Overview


Complete phone system preconfigured telephony software
Support for 25 concurrent SIP sessions
Users
VM/AA access
Conferencing

Hardware-based Echo Cancellation


8 MB Onboard Flash
64 MB Onboard RAM

Standard Features Include:

Voice messaging
Auto attendant
Conferencing application
Music on Hold
IVR
Speech Recognition
More

Supported Sets

3Com 3x00 Series Phones


3Com Polycom IP Phones (select sets)
50

3 Com | Asterisk: Hardware Summary


3Com Asterisk Appliance includes:
Four (4) Analog FXO ports
CO Lines

Four (4) Analog FXS ports

Analog phones, Fax Machine

Four (4) LAN ports (non-PoE)


IP Phones

One (1) WAN port

Connect to the network

Additional VoIP Gateways


V7111 Analog Media Gateways

(FXS) 2, 4, 8, and 24 Channels


(FXO) 4 and 8 Channels
FXS/FXO 2/2 and 4/4 Channels

V6100 Modular Digital Gateway

Up to 4 T1/E1; 1-, 2-, 4-span T1/E1 modules

V7122 Digital Media Gateways (T1/E1/PRI/CAS)


1, 2, 4, 8 and 16-span

51

The Appliance: A Closer Look


Complete phone system preconfigured
telephony software
Hardware-based Echo Cancellation
10/100 WAN port
8 MB Onboard Flash
64 MB Onboard RAM
4 ports FXS
4 ports FXO
Supported Sets
3Com 3x00 Series Phones (phones
supported on VCX)
Polycom IP Phones (select sets)
3Com
Confidenti

52

Agenda

> Introduccin
> Modelos de NBX
> Componentes de la NBX
Los Chasis

Los telfonos
Los mdulos

> Funcionalidades Bsicas


> Conectividad Multipunto
> Centros de Contacto
> Resumen

IP Phone Choices
3 Com IP Phones

3 101
Basic

3 101 Basic
with Speaker

3 102
Business

3 103
Manager

3 Com Polycom Phones

SoundPoint IP 3 3 0
Desktop Phone

SoundPoint IP 43 0
Desktop Phone

SoundPoint IP 550
Desktop Phone

SoundPoint IP 650
Desktop Phone

SoundStation IP 4000
SIP Conference Phone

54

Agenda

> Introduccin
> Modelos de NBX
> Componentes de la NBX
Los Chasis
Los telfonos
Los mdulos

>Funcionalidades
Bsicas
> Conectividad Multipunto
> Centros de Contacto
> Resumen

APX
Advanced Powermail eXchange

> SIN COSTO en todos los sistemas


> Correo de voz y Operadora automtica
> Mensajes Unificados
> Notificacin de correo de voz va email o localizador
> Escalable 25 Horas de correo

56

Recibiendo Voice Mail en el


E-mail Inbox . . .
Voice Message.wav
00:02

Start Your E-mail Program


X

Check

00:02
00:01
00:00 Timer
Mark Falk

E-mail Message Opens Media Player


Just Click on Play to Hear Voice Message

09:35 AM 11 / 9/ 98 Just checking in!

New
Your
Voice
E-mail
for New
Messages
Messages
Have
Arrived!

Double Click on New Message

LAN
Connection
57

TechConnect - Asterisk GUI


Accessing the 3Com Asterisk GUI

58

TechConnect - Asterisk GUI


Accessing the 3Com Asterisk GUI

59

Funciones de Call Center

> Hunt groups


Circular y lineal

> Calling groups


> Call pickup
> Mesaje adaptado a la hora del da
> Directorio interno seleccionable va pantalla LCD
> Caller ID

60

Flexibilidad de Cambio

Movimientos
MovimientosyyCambios:
Cambios:
Se
Seminimizan
minimizanlos
loscostos
costosde
demantenimiento
mantenimientoalal
realizar
realizartraslados
trasladosde
deusurios.
usurios.

Instalacin:
Instalacin:
Se
Seconectan
conectanlas
laslneas
lneasyylos
los
telfonos
telfonosyyse
sepone
poneaatrabajar
trabajar
en
enminutos
minutoselelsistema.
sistema.
Se
Seadministra
administrade
decualquier
cualquier
punto
puntoen
enforma
formaintuitiva
intuitiva
mediante
medianteWEB.
WEB.

61

TechConnect - 3Com Asterisk Appliance


Conference Bridge Performance
>Up to 15 concurrent users in a single bridge or any
number of bridges and users not totaling more than 15
combined users

Conferenc
e
Bridge

62

Llamadas en Conferencia
Total
Totalde
deConferencias
ConferenciasSimultaneas
Simultaneas==Hasta
Hasta15
15
Participantes
Participantespor
porConferencia
Conferencia==Hasta
Hasta15
15

PSTN

63

Telealimentacin de Energa
Alimentacin sobre Ethernet

La fuente de alimentacin sobre Ethernet aade 24 Volts de corriente


DC sobre los pines 4+5 y 7+8. Estos son los pines no usados en el
estndar 802.3 para Ethernet 10/100
El inyector de energa se instala en la salida del hub o switch Ethernet y
suministra alimentacin a los telfonos asociados a los cables.
3Com - Asterisk

Switch POE

Inyector de energa
Patch Panel

Cable
asociado

64

Variedad de Switches PoE

Switch 5500

Switch 4500

Switch 4210

Office Connect

Switch Baseline

Switch L4 con Power over Ethernet


Bajo el estandar P802.3af
Power-up the Network

65

Gateways Opcionales
3Com VCX V7122 Digital Media Gateways
(E1/PRI/CAS) 1 span

3Com VCX V7111 Analog Media Gateways


(FXS) 4, 8, & 24 Channels
(FXO) 4 & 8 Channels
FXS/FXO 2/2 and 4/4 Channels

3Com
Confidenti

66

Factores de Diferencia

#1 Solucin Nativa SIP

3Com es uno de los pocos fabricantes que ofrecen


verdaderamente una solucin pura end-to-end SIP
Porqu es importante?

Clientes de otros
fabricantes

Soporte de telfonos, gateways y aplicaciones de terceros

3Com no trata de encarcelar a los clientes!


3Com
Confidenti

68

#2 - Linux, Linux por todo lado


Nuestro sistema basado en Linux opera tanto en nuestro Call
Processor, nuestro IP Messaging, nuestro IP Conferencing, and
nuestro Presence Engine
Otros fabricantes usan multiples sistemas operativos para sus
diferentes componentes

Porqu esto es importante?

3Com
Confidenti

69

3Com
Confidenti

70

Making Money with the Asterisk Appliance

3 Com Asterisk Appliance IP Telephony Bundle with 5


3 102B Business Phones

3 CRB13 000

2,795.00

3 Com Asterisk Appliance IP Telephony Solution 4 FXS,


4 FXO, 1 WAN, 4 LAN, FRU (Field Replacement Unit)

3 CR10551A

1,795.00

3Com
Confidenti

71

Solucin Inalmbrica para


PyMes

Introduccin
Name

>

Title

Unified Gigabit Wireless


PoE Switch 24
Name

>

Title

Qu es el Unified Switch?
Inicia como un Lan Switch
Adiciona los siguientes servicios:
Layer 2 GbE
Managed Switch

Detection/
802.3af PoE midtigate
Span

Wireless Controller

68.1
192.1

.5

Una sola IP
De Administracin

802.1x/WPA2/WEP
ed/Wireless Security
Management

75

Informacin de Producto
Informacin de Orden
SKU 3CRUS2475

Garanta
3 aos
76

Porqu es importante el Controlador


Wireless para las SMB?

77

Qu es el Controlador Wireless?
El Controlador Wireless proporciona :
Administracin y configuracin
centralizada de Access Point
Control automtico de radio frecuencia
y potencia
Manejo centralizado de reglas y
polticas de seguridad
SSIDs, Encryption keys (WPA2, WEP)

Balanceo automtico de usuarios


entre APs
Deteccin y bloqueo de APs intrusos
Rogue AP
Roaming automtico entre APs

78

Unified Switch Resumen de Funcionalidades


Proporciona administracin y seguridad centralizada con:
Hasta 24 3Com 7760 o 8760 Access Points
Enterprise- WPA2/AES encryption, WPA/WEP
802.1X authentication
Fast roaming entre APs sin perdidas de sesin
Rogue AP detection and mitigation
Multiple security profiles (4 SSIDs) por radio
WMM Traffic prioritization for VoIP

AP8760

Load balancing de clientes

Capacidad del sistema Wireless


Hasta 24 access points (Directos o conectados en L2 )
Hasta 250 usuarios wireless (max 30 usuarios por radio)
AP7760
79

Primeros Access Point de Doble Propsito


Los nicos APs que son vendidos como (FAT) y con un botn se
convierte en AP (FIT)
Un AP que cubre las necesidades del Mercado (FAT y FIT)
Inicia como FAT hoy, opera como FIT maana
Una perfecta proteccin de la inversin o proceso de migracin de un
cliente SMB ...

SMB Unified Switch soporta los nuevos APs FAT/FIT


7760 un radio 11a/b/g PoE AP
8760 doble radio 11a/b/g PoE AP

Los APs de Doble-Propsito no limitan la operacin


Los APs pueden operar segn lo establezcan los giros del negocio

80

Conversin Access Point Fat to Fit

Unicos APs de doble propsito en el Mercado


81

Control de interferencia de AP
Ajuste de canal y potencia

APs en el mismo
Canal

> En este caso ms APs no darn ms cobertura


Muchos APs en el mismo canal
Interferencia entre canales

> Un ajuste manual de los canales de los AP no es prctico


Especialmente en ambientes grandes
Reparar un problema, generar otro
82

Unified Switch Manejo de Auto RF

Optimiza la
asignacin de
canales en todos
los APs
Resultado: mejor
rendimiento

Automticamente ajusta los canales de los APs


Continua monitoreando y optimizando el ambiente RF
La red RF es optimizada, mediante algoritmos complejos de decisin
Balanceo de cargas para usuarios inalmbricos
El ambiente es escaneado para detectar APs intrusos y aislarlos
83

Solucin 3 Com para redes de todo tamao


MARKET
FEATURE
Switch 5500G PoE
10/100 &
Gigabit PoE
Switch

Wireless LAN
Controller

Switch 4500PoE

3Com Unified Gigabit


Wireless PoE Switch 24

Wireless Mobility System


WXR100/1200/2200/4400

84

Seleccionando la Mejor solucin Wireless


para el Cliente
3Com Unified Switch
SMB single-site solution
Deployed as network core
Layer 2 support
10 to 250 users
Up to 24 APs
Single location

Wireless Mobility System


Enterprise-wide solution
Overlay to existing network
Multiple locations or floors in
building
Layer 3 Support
10 to 10,000 users
Dozens to hundreds of APs
Advanced RF planning
Rogue location services
Time/day/location access
Web portal authentication

85

Construyendo una Red con el Unified Switch


Paso 1 El Unified Switch puede operar como un
punto de inicio para una red lan de alto rendimiento
L2 Gigabit Ethernet
Router

Interne
Interne
tt

bE
or G
s
b
0M
s, 10
p
b
10M
ired
W
o 24
Up t s
t
Clien

86

Construyendo una Red con el Unified Switch


Paso 2 El PoE hace fcil la adicin de APs 7760 y 8760
para crear una red cableada e inalmbrica con
administracin centralizada de los APs.
Interne
Interne
tt
Router

802.11a
802.11g

PoE

Mbs
0
0
1
bps ,
M
0
1
ired Clients
W
s
4
bE
o2
oint
t
P
G
s
r
p
s
o
U
Acce

802.11g

n
twee
e
b
ing
roam
s
s
le
Seam

87

Construyendo una Red con el Unified Switch


Paso 3 Adicionando un Sistema de telefona IP 3com
- Asterisk para completar una red convergente
Interne
Interne
tt
Router

802.11a
802.11g

3com Asterisk

802.11g

PoE
ts
Poin
s
s
ce
n Ac
e
e
tw
g be
n
i
m
roa
less
m
a
Se

88

Plataforma
Unificada de
Seguridad

La Seguridad
Tradicional

3Com
Confidential

3Com

90

The only place where all traffic can be secured

IPS and Switching Infrastructure


Internet

Home Users Using


WLAN/Broadband

Router

Mobile
Devices

Firewall

Mkt

Financial
WAP

Supplier
Connected
to Sales
Server

Engineering
Switch

Trusted
Zone
3Com

CAD

Mail

Sales

Mobile
Users
Connected
to LAN

91

Configuraciones de Firewall de hoy


Infraestructura

QuickTime and a
TIFF (LZW) decompressor
are needed to see this picture.

rflow
e
v
er O
Buff

QuickTime and a
TIFF (LZW) decompressor
are needed to see this picture.

s
rtido
a
p
m
s co nte
o
v
i
Arch ilegalme
ual)
g
i
a
l
gua
i
(
r
ee
to-p
r
e
Pe

QuickTime and a
TIFF (LZW) decompressor
are needed to see this picture.

ri
O
k
c
Ba

133
3
e
fic

DoS

3Com

DMZ (zona desmilitarizada)


Servicios Web
DNS
SNMP

FTP

HTTP

SMB

Telnet

N Fl
Y
S
,

od

92

Limitaciones del Firewall

> Los Firewalls imponen polticas en Capa 3 y 4

Capa 2

Dest MAC Source MAC

Capa 3
Capa 4

Source_IP Dest_IP Datos


Source_port Dest_port Datos

Capa 5-7

3Com

Datos

Gusano

> Los firewalls generalmente son desplegados en el borde de la red


Pero el permetro se est disolviendo: dispositivos inalmbricos, VPN,

93

El Firewall no detiene los Ataques

Servidores y
Clientes vulnerables

Firewall
Ataque externo penetra FW

Multiplicar
Multiplicarpor
porcientos
cientos
oomiles
milesde
declientes
clientesyy
servidores
servidores
Problema
Problemade
deescala
escala
3Com

94

Seguridad Avanzada:
Sistema de prevencin de intrusin (IPS)
Los
Losataques
ataquesse
sedetectan
detectanyy
bloquean
bloqueanaalalavelocidad
velocidadde
de
lalared..
El
IPSfunciona
red.. El IPSfunciona
como
Servidores y
comoelelparche
parchede
dered
red
parche
parchevirtual
virtualde
desoftware
software Clientes vulnerables

Firewall
Ataque
Penetra FW

IPS

Detiene todos los ataques antes que causen dao


3Com

95

Revisin Preliminar

Localizacin de las reas de Riezgo


Diagrama de la Red
Definir si existe o no Firewall
Conectividad de oficinas remotas
Conectividad de Socios de Negocio

Verificacin de el Tipo de conexin


Cobre
Fibra

Verificacin de la Velocidad de los accesos


De Internet
De las oficinas remotas
De los Socios de Negocio
3Com

96

Se cierra la brecha con la prevencin de intrusiones


Hardware Personalizado
de Desempeo
Ultra Alto

Proteccin de
Aplicaciones

Procesamiento de 5 Gbps
Latencia tipo switch
2 millones de sesiones
250,000 sesiones por segundo
Inspeccin de Flujo Total
64,000 filas de moldeo de velocidad
10,000 filtros paralelos

Sistemas de
Prevencin
de
Intrusiones

Proteccin de la
Infraestructura
Proteccin del
Desempeo

3Com

An
Pr om
ot a
oc la
ol d
o el
Vu
ln
er
ab
ili
da
d
An
Tr om
f
ic al
o a
de
l

Fi
rm
a

Mtodos de Filtracin

97

Los filtros de vulnerabilidad mejoran la precisin


Explotacin A
Huella
Explotacin B
Huella
(No vista por la
huella de la
explotacipn A)

Vulnerabilidad
Huella

Falso Positivo
Virtual
Software
Patch

(Huella indefinida)

Filtro Simple para


Explotacin A

Vulnerabilidad es una falla de seguridad en un programa (Software).


Explotacin es un programa que explota la vulnerabilidad para ganar
control de un sistema.
Los filtros de explotacin simples son especficos.
Los desarrolladores estan forzados a escribir filtros sencillos por
limitaciones de rendimiento.
Resultado: Ataques que pasan desapercibidos, falsos positivos riesgo
contnuo a las vulnerabilidades.
Los filtros de vulnerabilidad de TippingPoints actan como un parche
virtual de software y cubren toda la vulnerabilidad.
3Com

98

Proteccin de Rendimiento
Ejemplo de Control de Aplicaciones

120

M bps (Average per Hour)

100

80

60

40

Backup
Oracle
E-mail
HTTP
P2P Rate Limit
Kazaa
eDonkey
WinMX
Gnutella
BitTorrent
Other P2P

20

3Com

> Protects mission-critical


application bandwidth

> Generates report graphs for each


virtual pipe

> Controls misuse and abuse

> Unlimited number of virtual pipes

99

Lnea de Productos

3Com
Confidential

3Com

100

PLATAFORMAS DE SOLUCION

> Integrated Security Platform


IPS
Firewall
Web Filter
VPN

Serie X

> IPS Puro

Serie E
3Com

101

Solucin de Seguridad
Serie X

3Com
Confidential

3Com

102

INTRODUCING THE 3COM X5

>The X5 is an Integrated Security Platform


Combining market leading Intrusion Prevention capabilities
with
> Firewall, IPSec VPN, Web filtering and Policy based traffic shaping

Offers extreme flexibility


> For example: Apply IPS and traffic shaping inside VPN tunnels

Leveraging
> TippingPoint Digital Vaccine
> Threat Suppression Engine
> Secure Management System

>Delivering Secure Converged Networks


For Distributed Multi-site Enterprises In a small affordable
package

3Com

Ideal for remote branch office locations

103

DIGITAL VACCINE BY TIPPINGPOINT

MOST COMPREHENSIVE, ACCURATE & AUTOMATIC PROTECTION


AVAILABLE
>Coverage
Vendors
Threat organizations
Independent researchers (ZDI)
Internal Threat Management
Center

>Timeliness
Weekly filter distribution

@RISK

Zero Day Initiative


Same day Microsoft Tuesday
coverage

>Accuracy
Designed to block
5 years of filter writing
experience

3Com

No performance degradation

Weekly Report

>Extensibility
Signatures, vulnerabilities,
traffic and protocol anomalies
New Threats: P2P, Instant
Messaging, Spyware, Phishing,
VOIP

104

WEB CONTENT FILTERING BY SURFCONTROL


ENFORCE ACCEPTABLE WEB USAGE POLICIES

>Web Content Filtering allows organizations to


Intuitively protect against offensive web content

Delivered in partnership
with SurfControl

Boost employee productivity and conserve bandwidth

Reduce legal liability and security threats from offensive or


harmful content
> Integral Content Filter Service
Optional Annual Content Filter
Service
Hosted rating service no
need to download database
Large URL database always
up to date
40 Separate content
categories

3Com

> Manual URL


Filtering

Standard on box
functionality
Keyword blocking
User consent override
Regular expressions
Allowed / Denied lists
Configurable block message

105

3COM X5 IN ACTION: INTEGRATED SECURITY


PREVENT COMMON, NEW AND EMERGING THREATS

Intrusion
Preventio
n

in

out

Worms / Trojans
Application & OS Vulnerabilities
Zero-Day Exploits

Anti
Spyware

in

out

Key loggers / Adware


Phishing / Identity theft
Instant Messenger control

Bandwidth
Manageme
nt

out

out

Web
Filtering

3Com

Infrastruct
ure
Protection

in

Access
Control

in

Peer-to-Peer file sharing


Streaming media
Skype / youtube broadcasts
Inappropriate web content
Productivity enforcement
www.<restricted-site>.com
Denial of Service Attacks
Network protocol vulnerabilities
Traffic normalization

out

Stateful Firewall
Network Quarantine
Executable email attachments

106

3COM X5 IN ACTION: SECURE CENTRALIZED


MANAGEMENT

COMPREHENSIVE IPS / FIREWALL / VPN PROFILE MANAGEMENT

>Comprehensive Central
Management
>Enterprise wide policy control
Full IPS control
Firewall profile rule management
VPN topology configuration

>Rapid deployment of remote


devices
>Role based administration

3Com

>Full event logging & reporting


107

3COM X5 IN ACTION: FLEXIBLE DEPLOYMENT


OPTIONS

IP DEPLOYMENT MODES & SWITCH-BASED SECURITY ZONES


>Flexible IP deployment modes
NAT, Routed, IP-transparent

DMZ

Eliminates need to reconfigure IP network

VPN
Client

Interne
t

>Advanced zoning capabilities

X5

Segment network by port or VLAN tag


Apply IPS & Firewall between Zones
Terminate VPN tunnels into specified zones
Permits creation of guest, phone, wireless,
employee networks and/or multiple DMZs

>Networking Flexibility

Traffic
switched
inside zone

Apply multiple Ethernet ports to same zone


> Traffic switched inside zone @ wire speed

3Com

LAN
Zone

IPS / FW
Between
zones

Server
Zone

108

3COM X5 INTEGRATED SECURITY PLATFORM

>ORDERING INFORMATION
3Com X5: 25 user*

US List: $995

3Com X5: unrestricted*

US List: $1,195 3CRTPX5-U-96

3CRTPX5-25-96

>SUBSCRIPTION BASED SERVICES


3Com X5 Digital Vaccine US List: $495

3CTPX5-DV

> 1 Year DV updates, telephone support, advanced hardware


replacement

3Com X5 DVGOLDUS List: $695

3CTPX5-DVGOLD

> As Digital Vaccine plus web content filtering

* Must also purchase subscription service with base hardware

3Com

109

3COM X-SERIES PLATFORM SUMMARY

Fixed I/O
Maximum users
FW/VPN T-put
IPS T-put
# Tunnels (site / client)
# Sessions
Security Zones

3Com

X5

(25 user)

(unlimited)

X506

6 x 10/100

6 x 10/100

6 x 10/100

25

Unlimited

Unlimited

50 / 40 Mbps

50 / 40 Mbps

100 / 100 Mbps

18 Mbps

18 Mbps

50 Mbps

50 / 50

50 / 128

50 / 512

32,000

60,000

128,000

16

16

32

Attack Control
Quarantine (switch + IPS)
Integrated Web Filtering
SIP / H323 ALGs
Traffic shaping (in/out
VPN)
Dual-Box HA
Central Management

X5

Vulnerabilities

Virus

Peer-to-Peer

Exploits

Spyware

Instant Messaging

Security Policy

Identity Theft

Streaming Media

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes Ingress &


Egress

Yes Ingress & Egress Yes Ingress & Egress

Active/Passive

Active/Passive

Active/Passive

Yes

Yes

Yes

110

Solucin de Cuarentena

Proteccin Automtica de Cuarentena

Internet

Serie X
Core

Zona
Segura

Switch de acceso
Clientes

3Comde 5 segundos entre la violacin y su contencin


Menos

112

Muchas Gracias.