Secure FTP
allows secure file transfer to and from the switch; protects against unwanted file downloads or unauthorized copying of a switch
configuration file
Switch management logon security
helps secure switch CLI logon by optionally requiring either RADIUS or TACACS+ authentication
Secure management access
securely encrypts all access methods (CLI, GUI, or MIB) through SSHv2, SSL, and/or SNMPv3
ICMP throttling
defeats ICMP denial-of-service attacks by enabling any switch port to automatically throttle ICMP traffic
Virus throttling
detects traffic patterns typical of worm-type viruses and either throttles or entirely prevents the virus from spreading across the
routed VLANs or bridged interfaces without requiring external appliances
Identity-driven ACL
enables implementation of a highly granular and flexible access security policy and VLAN assignment specific to each
authenticated network user
STP BPDU port protection
blocks Bridge Protocol Data Units (BPDUs) on ports that do not require BPDUs, preventing forged BPDU attacks
Dynamic IP lockdown
works with DHCP protection to block traffic from unauthorized hosts, preventing IP source address spoofing
DHCP protection
blocks DHCP packets from unauthorized DHCP servers, preventing denial-of-service attacks
Dynamic ARP protection
blocks ARP broadcasts from unauthorized hosts, preventing eavesdropping or theft of network data
STP Root Guard
protects the root bridge from malicious attacks or configuration mistakes
Management Interface Wizard
helps secure management interfaces such as SNMP, telnet, SSH, SSL, Web, and USB at the desired level
Security banner
displays a customized security policy when users log in to the switch
Switch CPU protection
provides automatic protection against malicious network traffic trying to shut down the switch
USB Secure Autorun
deploys, diagnoses, and updates a switch using a USB flash drive; works with a secure credential to prevent tampering (requires
HP PMC+)
Access control lists
(ACLs)
provide filtering based on the IP field, source/destination IP address/subnet, and source/destination TCP/UDP port number on a
per-VLAN or per-port basis
Multiple authentication methods
IEEE 802.1X
authenticates multiple IEEE 802.1X users per port; prevents a user from "piggybacking" on another user's authentication
Web-based authentication
authenticates from Web browser for clients that do not support 802.1X supplican
MAC-based authentication
authenticates client with the RADIUS server based on client's MAC address
Concurrent authentication modes
enables each switch port to accept up to 32 sessions of 802.1X, Web, and MAC authentication
Convergence
IP multicast snooping
(data-driven IGMP)
QuickSpecs
HP 3800 Switch Series
Overview
DA - 14152 Worldwide — Version 15 — January 16, 2014
Page 6
To Next Page
Loading...
Need help?
General
