Archiv für den Monat: Juni 2023

USG FLEX vs. USG FLEX H-Serie – Vorteile

Quelle: Link

1) Überblick

1.1 Highlight-Übersicht (USG FLEX H-Serie)

1. Multi-G, PoE-Unterstützung

– Unterstützt die Geschwindigkeiten 10 Mbit/s, 100 Mbit/s, 1 Gbit/s und 2,5 Gbit/s

2. Brandneues uOS für bessere Benutzerfreundlichkeit

3. Hoher Leistungsdurchsatz (einschließlich UTM und VPN)

– Bis zu 3-facher Firewall-Durchsatz

4.Alles-in-einem-VPN-Client

5. Erhöhte Sicherheit

 

1.2 Überblick über die USG FLEX H-Serie

Hinweis: PoE+-Funktion mit Ports : USG FLEX 200HP P2; USG FLEX 500H P3, P4; USG FLEX 700H P3, P4.

 

2) Leistung der USG FLEX-Serie im Vergleich zur USG FLEX H-Serie

2.1 USG FLEX-Reihe

Merkmal USG FLEX 100(W) USG FLEX 200 USG FLEX 500 USG FLEX 700
SPI-Firewall-Durchsatz 900Mbps 1.8Gbps 2.3Mbps 5.4Gbps
VPN-Durchsatz 270Mbps 450Mbit/s 810Mbps 1.1Gbps
UTM-Durchsatz (AV & IPS) 360Mbps 550 Mbit/s 800Mbit/s 1.35Gbps
Max. TCP gleichzeitige Sitzungen 300,000 600,000 1,000,000 1,600,000
Max. gleichzeitige IPSec VPN 40 100 300 500
Gleichzeitige SSL VPN-Benutzer 30 60 150 150
Max. VLAN-Schnittstellen 8 16 64 128
Max.gleichzeitige Geräteanmeldungen 64 200 300 800

2.2 USG FLEX H-Serie

Merkmal USG FLEX 100H USG FLEX 200H/HP USG FLEX 500H USG FLEX 700H
SPI-Firewall-Durchsatz 3Gbps 5Gbps 10Gbps 15Gbps
VPN-Durchsatz 750Mbps 1,2 Gbit/s 2 Gbit/s 3 Gbps
UTM-Durchsatz (AV & IPS) 750Mbps 1,5 Gbit/s 2,5 Gbit/s 4Gbps
Max. TCP gleichzeitige Sitzungen 300,000 600,000 1,000,000 2,000,000
Max. gleichzeitige IPSec VPN 50 100 300 1,000
Gleichzeitige SSL VPN-Benutzer 25 50 150 500
Maximale VLAN-Schnittstellen 16 32 64 128
Max.gleichzeitige Geräteanmeldungen 64 200 300 4,000

 

2.3 Andere Vorteile

Funktion USG FLEX 200 USG FLEX 200H
Systemstartzeit 4 Minuten Innerhalb von 3 Minuten*
Lokale Firmware-Uploads – Schneller
Konfigurations-Uploads – Schneller

 

Worry-Free Business Security (On-Premises) and Worry-Free Business Security Services (WFBS-SVC) minimal Windows requirements for ACS (Azure Code Signing)

Quelle: Link

 

Worry-Free Business Security (On-Premises) and Worry-Free Business Security Services (WFBS-SVC) minimal Windows requirements for ACS (Azure Code Signing)
Product/Version includes:Worry-Free Business Security Advanced , Worry-Free Business Security Standard , Worry-Free Business Security Services , View More
Update Date: 2023/05/29
Article Number: 000291908
Category: Install, Update

Microsoft requires security vendors to sign binaries using ACS. WFBS (On-Premises) and WFBS-SVC will be changing to this new certificate accordingly. However, a minimal update of the Microsoft KB will be required to support this new certificate.

Impact

Customers who do not have the minimum OS build/patch of Microsoft Windows after February 18, 2023 may encounter the following errors:

  • Agent Program and Services may not work properly.
  • There will be a reporting issue between the Windows Security Center (WSC) and the Trend Micro Security Agent which could result to the agent co-existing with Windows Defender. This could possibly lead to slow login, application lockup, or machine unresponsiveness.

To prevent this situation, Trend Micro will add a mechanism to the products to check whether ACS is already supported on the machine. If minimum OS build/patch of Microsoft Windows is not applied, it will prevent security agent fresh installation and agent hot fix after February 18, 2023.

 
Agent Program Upgrade blocking on non-ACS machines is a best effort implementation to prevent accidental deployment of new build on non-ACS compliant system. The ACS complaint detection logic however may not work correctly on some environment. Customers are strongly advised to apply appropriate MS KB to enable ACS support before deploying WFBS Patch 2472 or later.

Check Mechanism Release Schedule

  • Worry-Free Business Security Services (WFBS-SVC): January 9, 2022 Hot fix Maintenance
  • Worry-Free Business Security (On-Premises): To be included in all patches released after Patch 2459.

Customers who will be performing an update or install newer builds released after February 18, 2023 must have applied a minimum Microsoft Windows patch depending on the version of Windows you have deployed mentioned on the article, IMPORTANT BULLETIN: Trend Micro Server and Endpoint Protection Agent Minimum Windows Version Requirements for Updated Binaries After Mid-February 2023.

 
For machines that do not allow “trusted root CA auto update” or are in air-gapped or otherwise locked down environments, please make sure to apply Microsoft Identity Verification Root Certificate Authority 2020. A tool can be utilized for this by following the steps mentioned in this KB article. You may use the command EasyFixSysCerts.exe A1 .

Customers who have questions are encouraged to contact Trend Micro Technical Support for further assistance.