Overview
Firewall is a kind of high performance hardware firewall, compared with other hardware firewall has essential difference.Actually,other hardware firewall is running a software firewall on PC platform, and the firewall is by ASIC chip to carry out the strategy of firewall and data encryption, so it's much faster than other firewalls. From software features, the firewall is a combination of state detection and application agent, for most of the applications of a firewall is monitoring the whole communication state,if the communication state is found to be abnormal, it wil refuse to enter a protected internal network, for FTP or H322 and other communication status is not well tracked service,the firewall by applying the agent to ensure the security of the service.

Equipment of a technology company. It has three Ethernet interfaces: DMZ interface, Trust interface and Untrust interface. As shown in the figure, the Trust interface is connected to the protected intranet, Untrust is connected to an external network (such as the Internet), and the DMZ interface is connected to the company's external servers, such as the Mail server and the WEB server. From the security level, the Trust interface is the most secure, followed by the DMZ, and finally Untrust. Taking into account the impact of security factors, the solution uses the network card LRES8001PT-BP produced by Shenzhen Lianrui Electronics Co., Ltd.
Advantages

Three Ethernet interfaces

DMZ interface, Trust interface, and Untrust interface
Save channel resources
Bandwidth can be expanded through link aggregation and PCI Express lane resources can be saved
Full duplex mode
Allows two ports to operate in full-duplex mode at the same time
Deduplication
The deduplication function reduces the space occupation by 80%;
Support PCI-SIG Single-Root I/O virtualization
Support Direct Cache Access (DCA)
Supports Vital Product Data (VPD)
Other Solution