แนะนำ ซื้อ firewall และซื้อต้องซื้ออะไรอีกบ้าง

• 1. ติดตั้งฟรี กรุงเทพและปริมณฑล ขอบเขตงานนี้
• 2. ขอบเขตเหนือการติดตั้งฟรี จากข้อ 1 สอบถามราคาค่าติดตั้งได้ค่ะ
• 3. บริการอุปกรณ์เปลี่ยนระหว่างส่งซ่อม
•      3.2 Spare part* ลูกค้ามารับอุปกรณ์เองที่ Monster สอบถามราคาได้ค่ะ
  
•      3.1 Advance replacement** นำอุปกรณ์ไปส่งให้ที่ site สอบถามราคาได้ค่ะ
• 4. บริการดูแล Services (ราย Incident หรือ ครั้ง) สอบถามราคาได้ค่ะ
•      4.1 แก้ไขปัญหา*** 2 ครั้งต่อปี กรุงเทพและปริมณฑล 8x5xNBD****
•      4.2 แก้ไขปัญหา*** 2 ครั้งต่อปี กรุงเทพและปริมณฑล 24x7x4*****
  
•      4.3 แก้ไขปัญหา*** 4 ครั้งต่อปี กรุงเทพและปริมณฑล 8x5xNBD****
  
•      4.4 แก้ไขปัญหา*** 4 ครั้งต่อปี กรุงเทพและปริมณฑล 24x7x4*****
  
•      4.5 แก้ไขปัญหา ต่างจังหวัด สอบถามราคาได้ค่ะ
  
• 5. บริการเก็บ Log ตาม พรบ. คอมพิวเตอร์ ระยะเวลา 1 ปี สอบถามราคาได้ค่ะ

อธิบายรายละเอียด

*บริการอุปกรณ์เปลี่ยนระหว่างส่งซ่อม แบบ spare part หมายถึง บริการให้ยืมอุปกรณ์ Firewall ทดแทน (หลังจากได้รับ approve RMA จาก vender แล้ว) โดยที่ลูกค้า จะต้องนำอุปกรณ์ที่เสียมาส่งที่ Monster และกลับนำมาเปลี่ยนเมื่อซ่อมเสร็จ โดย Monster จะเตรียมอุปกรณ์รุ่นเดียวกันหรือดีกว่า

**บริการอุปกรณ์เปลี่ยนระหว่างส่งซ่อม แบบ advance replacement หมายถึง การบริการที่ ขนส่ง อุปกรณ์รุ่นเดียวกันหรือดีกว่าให้ลูกค้า (หลังจากได้รับ approve RMA จาก vender แล้ว) พร้อมกลับนำอุปกรณ์ที่เสียกลับมาซ่อม แต่ไม่รวมเรื่องการ configure อุปกรณ์

***แก้ไขปัญหา หมายถึง การแก้ปัญหาที่ขัดข้องของการใช้งานอุปกรณ์ ไม่ว่าจะเป็นการ remote หรือ on-site จะกี่วันก็แล้วแต่ จนกว่าจะแก้ปัญหาเสร็จปิดเคส ticket (remote หรือ on-Site เป็นการประเมินจาก engineer) 

****8x5xNBD หมายถึง การแก้ไขปัญหา ภายในเวลาทำการ จันทร์ - ศุกร์ (response ภายในวันถัดไปหลังจากเปิดเคส)

*****24x7x4 หมายถึง การแก้ไขปัญหา ตลอด 7 วัน 24 ชม. (response ภายใน 4 ชั่วโมงหลังจากเปิดเคส)

Barracuda Link Balancer Overview:

The Barracuda Link Balancer is an affordable and powerful solution for routing and managing traffic across multiple Internet connections. Designed to scale for high bandwidth requirements and provide business continuity for an organization of any size, the Barracuda Link Balancer optimizes the use of multiple Internet links, such as T1s, T3s, DSL and cable connections from one or multiple Internet service providers. Capable of automatic failover in the event of link failure, the Barracuda Link Balancer helps ensure that your network is always connected to the Internet.

• Incoming and outgoing network traffic balancing across multiple Internet links
• Automated failover in case of link failure
• Bandwidth management
• Quality of Service (QoS) for Internet applications
• Traditional firewall
• Provides site-to-site VPN with link failover

	Cost-Effective Internet Continuity Internet continuity is just as important as application and data availability in a business continuity plan. The Barracuda Link Balancer provides: automatic Internet link monitoring and failover, which prevents Internet downtime and lost employee productivity during ISP outages. Key services such as web, voice, and email continue to be available to customers and partners, protecting the business and brand.
	Scale Bandwidth and Performance Scale bandwidth and increase reliability without purchasing expensive backup lines. Transparent switching and failover across multiple Internet links based on active monitoring of link health and performance guarantee maximum speed and reliability. Application-aware traffic shaping allows granular bandwidth prioritization for critical Internet applications and infrastructure across one or more Internet links.
	Quick Return on Investment The Barracuda Link Balancer is affordably priced, without any per-user or per-port fees. Drop-in, transparent deployment ensures rapid installation with minimal disruptions to existing network infrastructure. It provides immediate return on investment by allowing the provisioning of underutilized backup links or the use of low-cost Internet links instead of expensive T1 lines – while making Internet connectivity more reliable.

The Barracuda Link Balancer manages multiple concurrent Internet connections

Cost-Effective Internet Performance and Availability

The Barracuda Link Balancer dynamically balances traffic across multiple ISP links to ensure Internet continuity and availability, even during ISP outages. It balances both outbound and inbound traffic intelligently, so users have Internet access whenever they need it. Application prioritization and granular quality-of-service (QoS) policies assure priority to business-critical application traffic – and the applications remain available even when links fail. It deploys quickly and transparently into existing networks without changes to configuration or topology. Secure and affordable, the Barracuda Link Balancer streamlines bandwidth management while providing maximum Internet access.

Cost-Effective Internet Performance and Availability

As data traffic grows exponentially – and organizations grow ever more dependent on continuous connectivity – the ability to intelligently and dynamically balance traffic across multiple Internet links is critical to efficiently maintain day-to-day operations. The Barracuda Link Balancer deploys transparently in front of legacy firewalls that cannot handle such requirements.1

1 For information on Barracuda Firewalls, which include link balancing, see the Barracuda Firewall and Barracuda NG Firewall datasheets.

• - เป็นอุปกรณ์ Firewall ชนิด Next Generation Firewall แบบ Appliance
• - มี Firewall Througpu 30 Gbps
• - มีช่องเชื่อมต่อระบบเครือข่าย (Network Interface) แบบ 10/10/100T จำนวน 24 ช่อง
• - มีระบบตรวจสอบและป้องกันผู้บุกรุกแบบต่างๆอย่างน้อยดังนี้ Syn Flood, UDP Flood, ICMP
  Flood, IP Address Spoofing, Port Scan, DoS or DDoS, Teardrop Attack, Land Attack, IP
  Fragment, ICMP Fragment เป็นต้น
• - สามารถทำการกำหนด IP Address และ Service Port แบบ Network Address (NAT) และ Port Address Translation(PAT) ได้
• - สามารถ Routing แบบ Static, Dynamic Routing ได้
• - สามารถบริหารจัดการอุปกรณ์ผ่านมาตรฐาน HTTPS หรือ SSH ได้เป็นอย่างน้อย
• - สามารถเก็บและส่งรายละเอียดและตรวจสอบการใช้งาน (Logging/Monitoring)ในรูปแบบ Syslog ได้
• - สามารถใช้านตามมาตรฐาน IPv6 ได้

• - เป็นอุปกรณ์ Firewall ชนิด Next Generation Firewall แบบ Appliance
• - มี Firewall Througput 2 Gbps
• - มีช่องเชื่อมต่อระบบเครือข่าย (Network Interface) แบบ 10/10/100T จำนวน 6 ช่อง
• - มีระบบตรวจสอบและป้องกันผู้บุกรุกแบบต่างๆอย่างน้อยดังนี้ Syn Flood, UDP Flood, ICMP
  Flood, IP Address Spoofing, Port Scan, DoS or DDoS, Teardrop Attack, Land Attack, IP
  Fragment, ICMP Fragment เป็นต้น
• - สามารถทำการกำหนด IP Address และ Service Port แบบ Network Address (NAT) และ Port Address Translation(PAT) ได้
• - สามารถ Routing แบบ Static, Dynamic Routing ได้
• -สามารถบริหารจัดการอุปกรณ์ผ่านมาตรฐาน HTTPS หรือ SSH ได้เป็นอย่างน้อย
• - สามารถเก็บและส่งรายละเอียดและตรวจสอบการใช้งาน (Logging/Monitoring)ในรูปแบบ Syslog ได้
• - สามารถใช้านตามมาตรฐาน IPv6 ได้

Native active-active clustering

Up to 16 nodes can be clustered together, providing superior performance and resiliency when running demanding security applications, such as deep packet inspection and VPNs.

Transparent session failover

Provides industry-leading availability and serviceability of security systems. Stonesoft NGFW even supports transparent failover for multiple software and hardware versions within the same cluster.

Multi-Link

Extends high availability coverage to network and VPN connections. Provides the confidence of non-stop security along with high performance for every deployment.

แบบ VM

Virtual LoadMaster appliance, 3 Gbps, 4000 SSL TPS License. Support Required.

***ราคานี้รวม 1 Years Enterprise Plus Subscription for LoadMaster VLM-3000 แล้ว****

แบบ Hardware Box

***ราคานี้รวม 1 Years Enterprise Plus Subscription for LoadMaster LM-X3 แล้ว***

แบบ Hardware Box

***ราคานี้รวม Subscription 1 Years Enterprise Plus  for LoadMaster LM-X15 แล้ว****

Zscaler Web Security, part of the Zscaler Cloud Security Platform, delivers the complete security stack as a cloud service, eliminating the cost and complexity of traditional secure web gateway appliances. By moving security to a globally distributed cloud, Zscaler brings the Internet and web gateway closer to the user for a faster experience. Organizations can easily scale protection to all mobile users or offices via local Internet breakouts, and minimize network and appliance infrastructure.

*Maximum throughput.
**Please refer to the Platform Guide: i2000 Series for the latest power ratings for your specific configurations (dual power supplies, highline input voltage, DC, etc.).
Notes: Performance-related numbers are based on local traffic management services only. Only optics provided by F5 are supported. SFP+ ports in i10800, i10600, i7800, i7600, i5800, and i5600
are compatible with F5 SFP modules.
† ECDHE-ECDSA-AES128-SHA256 cipher string tested.

McAfee Network Security Platform is a uniquely intelligent security solution that discovers and blocks sophisticated threats in the network. Using advanced threat detection techniques, it moves beyond mere pattern matching to defend against stealthy attacks with extreme accuracy.

With its Security Connected approach to network security management, Network Security Platform streamlines security operations by combining real-time McAfee Global Threat Intelligence feeds with rich contextual data about users, devices, and applications for fast, accurate response to network-borne attacks.

McAfee Network Security Platform is a uniquely intelligent security solution that discovers and blocks sophisticated threats in the network. Using advanced threat detection techniques, it moves beyond mere pattern matching to defend against stealthy attacks with extreme accuracy.

With its Security Connected approach to network security management, Network Security Platform streamlines security operations by combining real-time McAfee Global Threat Intelligence feeds with rich contextual data about users, devices, and applications for fast, accurate response to network-borne attacks.

The Check Point 5900 Next Generation Security Gateway combines the most comprehensive security protections to safeguard your mid-size enterprise. The 5900 is a 1U Next Generation Security Gateway with two I/O expansion slots for higher port capacity, redundant fans and a redundant power supply option, a 2 x 500GB (HDD) or 2x 480GB (SSD) drive array option, and Lights-Out Management (LOM) for remote management. This powerful Next Generation Security Gateway is optimized to deliver real-world threat prevention to secure your critical assets and environments. 

COMPREHENSIVE THREAT PREVENTION 

The rapid growth of malware, growing attacker sophistication and the rise of new unknown zero-day threats require a different approach to keep enterprise networks and data secure. Check Point delivers fully integrated, comprehensive Threat Prevention with award-winning SandBlast™ Threat Emulation and Threat Extraction for complete protection against the most sophisticated threats and zero-day vulnerabilities.

Unlike traditional solutions that are subject to evasion techniques, introduce unacceptable delays, or let potential threats through while evaluating files, Check Point SandBlast stops more malware from entering your network. With our solution your employees can work safely no matter where they are and doesn’t compromise their productivity

Product Benefits

• High performance protection against the most advanced cyber attacks 
• Unique “first time prevention” for the most sophisticated zero day attack 
• Optimized for inspecting SSL encrypted traffic
• Future-proofed technology safeguards against tomorrow’s risks 
• Centralized control and LOM improves serviceability
• Modular, expandable chassis with flexible I/O options 

Product Features

• Simple deployment and management
• Virtual Systems consolidates security onto one device 
• Two network expansion slots to add port density, fiber, 10 GbE, 40 GbE and fail-open IO card options
• Redundant power supplies, drives, fans and clustering technologies eliminate single point of failure 

Overview:

The Branch Office Challenge

The Check Point 3200 Appliance combines the most comprehensive security protections to safeguard your branch and small office deployments. The 3200 appliance is available in a compact desktop form factor with a 320 GB hard disk. This powerful security appliance is optimized to deliver real-world threat prevention to secure your critical assets and environments.

Our Solution

The rapid growth of malware, growing attacker sophistication and the rise of new unknown zero-day threats require a different approach to keep enterprise networks and data secure. Check Point delivers fully integrated, comprehensive Threat Prevention with award-winning SandBlast™ Threat Emulation and Threat Extraction for complete protection against the most sophisticated threats and zero-day vulnerabilities.

1 Performance measured with real-world traffic blend and content, a typical rule base, updated recommended signatures, NAT and logging enabled, 2 FW, IPS, APPCTRL, AV, AB, URLF

Product Benefits

• Enable the most advanced threat prevention security
• Optimal performance even when inspecting SSL encrypted traffic
• Future-proofed technology safeguards against tomorrow’s risks
• Simplify administration with a single integrated management console

Product Features

• Compact desktop form factor
• Simple deployment and management
• Secure branch office connections with site-to-site and client-to-site VPN
• Redundant appliance clustering technologies eliminate a single point of failure

Overview:

The Branch Office Challenge

In the age of global business and a more distributed workforce, remote and branch staff demand access to corporate resources in order to work effectively and efficiently. However, even a small data breach can expose companies to crippling lawsuits, penalties and loss of reputation. Branch offices need an inexpensive, yet effective solution to provide secure access to critical resources from anywhere, while minimizing the risk of a data breach.

Our Solution

The Check Point 1400 Appliance family is a simple, affordable and easy to deploy all-in-one solution for delivering industry leading security to protect the weakest link in your enterprise network—the remote branch offices. Protect against cyber threats with Check Point Threat Prevention all in a quiet, compact desktop form factor.

Setup is done in minutes using our step-by-step configuration wizard. The 1400 Appliances are manageable centrally by means of the Check Point enterprise Security Management or Multi-Domain products.

Available in two appliances, the 1430/1450 and the 1470/1490, these appliances come standard with eight (8) 1-Gigabit or sixteen (16) Ethernet ports respectively. Connect securely from any device direct or through secure authenticated Wi-Fi. The Wi-Fi can even be partitioned separating guest from employee access. Network settings allow for URL and application filtering by employee function, and secure communications between offices is accommodated with VPN. Remote access encrypts data traffic whether you are on the road or in the office. The 1400 Appliances offer monitoring of network traffic by user and easily generate activity reports and logs.

Product Benefits

• All-in-one protection against viruses, spam, bots, dangerous applications and malicious websites
• Continuous security updates from ThreatCloud TM
• Fast set-up, instant protection
• Secure remote access for your mobile worker
• Easy to understand usage reports
• Multiple management options to address any organization’s needs - 
  Simplified web-based Local Management -
  Centralized with our enterprise Security Management or Multi-Domain Management products

Product Features

• Highest ranked Next Generation Firewall
• Profile-based management designed for large-scale deployments
• Multiple internet access options including support of external 3G/4G/LTE modem
• Integrated 802.11ac wireless security with guest access