Product Description

The Loop-ISS2180 is a NFV (Network Function Virtualization) based information security solution. Loop’s
proposal of information security solution is the latest of all with NFV which is the pioneer technology structure
of cloud and data center around the world. Recently, telecommunication operators, cloud service providers
and multinational corporations begin to import NFV based network solutions.

Intel x86 platform White Box, a high proficiency and low cost server, can be used in NFV architecture. Virtual
cloud operation system would be in charge of the delivery and fabrication of VNF (Virtual Network Function),
and operates and manages the cooperation of hardware resources’ functions–calculation, network and
storage–as well as the life cycle of VNF. Through the management center with stationed professional
personnel, virtual firewall of remote offices, system setting and analyzing, log data analyze, secure encryption
and update can all be monitored.

Loop Information security solution integrated FortiGate virtual appliance firewall and Nozomi virtual appliance
ICS firewall to meet the requirement.

Network Server

Loop provides high quality Network Server Hardware/ Network Appliance for network security applications. Currently Loop supplies customers with one main network product: 1U Rackmount Server.

The high quality network server hardware and network appliances are ideal for network security and network communication applications.

The product feature includes:

• Intel® Xeon® E3-1275 v6 Embedded SKUs 3.8GHz, 4 core 8 thread processor
• Memory supports 4x 288-pin UDIMM DDR4-2400, ECC/non-ECC, up to 64GB
• Expandable network interface by multiple NIMs (Network interface Modules)
• Ethernet: Fixed 12 GbE Copper (4-pair bypass), 1 Mgmt port, 0/2 SFP+ (10G Fiber)
• Storage: 2 x 2.5″ SATA3 hot-swappable (for RAID 0/1)

NID

The NID is an Ethernet Demarcation Device at the Customer Premises to enforce the Ethernet traffic policing policies, such as rate limiting, QoS, and VLAN tagging functions. Advanced features for Bonding and Tapping applications are also available on NID.

• Mechanical, Electrical, Environmental
  • Complies with ANSI/ETSI units
  • Power: AC and DC module coexistent
  • Temperature sensor and overheat alarm
  • RoHS Compliant
• Interface Ports
  • NIDS
    • Support rich functions of ECFM Ethernet, OAM, and Electrical bypass
    • Multiple configurable user ports
      • 2 GbE WAN ports with 1 Combo GbE (RJ45+SFP housing) and 1 SFP optical housing (WAN2 is future option)
      • 1 GbE LAN port with Combo (RJ45+SFP housing) interface
      • Electrical Ethernet bypass during power outage
    • 1 SNMP port
  • NIDT
    • Supports Tapping/monitoring function
• Management (For NIDB/NIDS/NIDT/NIDF*)
  • CLI through SSH v2, Telnet
  • SNMP v1/v2/v3
  • Web-based management via Loop-iNet
  • Download firmware upgrades, remote configuration upload/download via TFTP
• Ethernet Functionality (For NIDB/NIDS/NIDF*)
  • IEEE 802.1q VLAN Tagging, 802.1p QoS
  • Support 256 configurable VLAN tags
    • TM (Throughput Measurement)
      • OOS Throughput Measurement
      • IS (In-Service) Throughput Measurement
      • Round-trip Throughput Measurement
      • One-way Throughput Measurement
    • Diagnosis Management
      • BERT
        • Built-in Ethernet BERT Generation/Detection
        • OOS (Out-of-Service) Ethernet E2E Diagnosis
      • Loopback
        • Auto-Loopback for ETH-TEST
        • Supports ACL (Access Control List) Loopback
        • Supports definable Loopback Mac swapping
        • Supports IP swapping
    • MAC Capacity Test
    • MTU Measurement
• Bonding (For NIDB)
  • Agg ports can be bonded and combined to increase effective Bandwidth for a specific service
  • Packet sequence reordering timeout: 100ms ~ 500ms
  • Discard or forward for out of sequence packets
  • Differential delay between two Aggregate Ports < 500ms
  • Supports Ethernet CFM Connectivity Check (CC)
• Tapping (For NIDT)
  • Monitors WAN/LAN data
• CoS/QoS
  • 8 priority queues
  • Strictly Priority or Weighted Round-Robin (WRR)
  • 802.1P CoS bits, IPV4 ToS (DiffServ) bits
  • NIDB
    • Supports Bonding feature
    • Bonding Agg1 and Bonding Agg 2, both with Combo GbE (RJ45+SFP housing) interface
    • 1 Bonding User port
  • NIDF*
    • Supports all optical interface for link aggregation applications
    • 2 WAN ports with SFP (mini-GBIC) GbE optical housing
    • 2 LAN ports with SFP (mini-GBIC) GbE optical housing
    • Optical by-pass function during power outage
    • 1 SNMP port
    • 1 Monitor port
• Protection (For NIDS/NIDF*)
  • WAN Port
    • 802.3ad Link Aggregation*
    • ITU G8031* 1:1 or 1+1 Linear protection
• OAM Protocols (For NIDB/NIDS/NIDF*)
  • IEEE 802.3ah OAM, Ethernet in First Mile (EFM)
    • Supports Active & Passive modes
    • EFM Dying Gasp Alarm
    • EFM diagnosis (OOS Link Diagnosis)
    • EFM In-service performance monitoring
      • RFC1757 RMON (Remote Network Monitoring MIB)
      • Per port or per VLAN (up to 128 VLANs)
      • 64-bit counter used for performance parameter
  • IEEE 802.1ag OAM, (CFM)
    • CCM — Connectivity (heartbeat) Check
    • Link Trace (Trace Route)
    • CFM Ping
    • Supports 128 (<1sec) / 512 (1sec) MEPs for NIDS & NIDF
    • Supports 16 (<1sec) / 512 (1sec) MEPs for NIDB & NIDT
  • Y.1731 OAM (CFM+)
    • Fault management
    • LM (Loss Measurement)
      • Y.1731 LM of user data
      • Synthetic LM using CCM statistics
    • Performance Monitoring
    • DM (Delay Measurement)
      • Round-trip Delay Measurement
      • One-way Delay Measurement
• Other Features
  • DHCP Client
  • ACL (Access Control List) Loopback
  • Jumbo frame: Up to 9600 bytes
  • Synchronous Ethernet
  • Synchronization
    • IETF NTP v3
  • Ping to the user domain PCs
    • IETF RFC792 ICMP (Internet Control Message Protocol)

​​​​​​​​​​​​​​

ADVA Ensemble Suite

Ensemble suite enables users to benefit from the cloud by replacing closed appliances with their choice of software hosted anywhere in the network and with open hardware. Ensemble includes six components for NFVI, NFV Management and Orchestration (MANO).

• Ensemble Connector: a high performance network virtualization platform available for hosting multi-vendor VNFs
• Ensemble Orchestrator: an ETSI MANO-compliant NFV orchestration platform providing end-to-end network service and VNF lifecycle management
• Ensemble Director: provides traditional resource management and transport service management for physical and virtual network elements
• Ensemble Controller:  a set of networking applications delivered on open SDN frameworks
• Ensemble Analytics:  leverages big data technologies that provides actionable intelligence for service orchestration and assurance
• Ensemble Network Hypervisor: abstracts and virtualizes the transport network for integration into a MANO/XOS management paradigm

FortiGate Firewall Virtual Appliance

FortiGate virtual appliances allow you to mitigate blind spots by implementing critical security controls within your virtual infrastructure. They also allow you to rapidly provision security infrastructure whenever and wherever it is needed. Moreover, FortiGate virtual appliances feature all of the security and networking services common to traditional hardware-based FortiGate appliances. With the addition of virtual appliances from Fortinet, you can deploy a mix of hardware and virtual appliances, operating together and managed from a common centralized management platform.
Using the advanced FortiOS™ operating system, FortiGate appliances effectively neutralize a wide range of security threats facing your virtualized environment. Whether deployed at the edge as a front-line defense, or deep within the virtual infrastructure for inter-zone security, FortiGate appliances protect your infrastructure with some of the most effective security available today by enabling security features you need.
FortiGate virtual appliances offer protection from a broad array of threats, with support for all of the security and networking services offered by the FortiOS operating system.

Nozomi ICS Firewall Virtual Appliance

Nozomi network’s SCADAguardian is a virtual appliance that provides real-time cybersecurity and operational visibility of industrial control networks.
Protect your control networks from cyber attacks and operational disruptions with SCADAguardian. It rapidly detects cyber threats and process anomalies, providing unprecedented operational visibility.
SCADAguardian automatically discovers the industrial network including its components, connections and topology. It develops security and process profiles and monitors the system in real-time for any changes
SCADAguardian uniquely provides:

• Comprehensive, hybrid ICS threat detection that combines behavior-based, rules, signatures and artificial intelligence analysis
• Superior incident capture and forensic tools
• Easy integration and sharing of ICS and cybersecurity information with IT/OT environments
• Enterprise-class scalability when deployed with the related Central Management Console

* Future Option