Tuesday, December 25, 2012

Huawei's SIG: Policy Enforcement and URL Filtering


More than 2 years ago I had a post about the use of Huawei's solution by TalkTalk for web filtering (parental control) service - see "TalkTalk Uses Huawei to Detect Malware (or Parental Control?)" - here.

Later TalkTalk provided more details on the service itself (HomeSafe) - see "TalkTalk [UK] Launches Free, Opt-in, Parental Control/Malware Detection Service" - here.

A recent document by Huawei provides more technical information on the product used by TalkTalk - Service Intelligence Gateway (SIG):

"Huawei provided its Service Intelligence Gateway (SIG) solution, which can be deployed on a fixed (between the broadband remote access server and international gateway), mobile (at the Gi, Pi, or ASN-GW egress), or converged network. Its architecture is simple, consisting of a front end, back end, upgrade center, and cloud security center.

The front end is responsible for analysis, reporting, and policy enforcement, while the back end manages SIG systems, users, and policies. The back end automatically receives the latest knowledge base and URL classification statistics from the upgrade center and cloud security center, without service interruption, while providing SOAP (Simple Object Access Protocol) interfaces to enable/disable services and configure policies. Based on its interfaces, service providers can develop self-service portals by themselves or through Huawei, while operators can use the SIG to deliver AoS (Alert of Security) messages to customers.


With its carrier-class router platform, Huawei SIG performance is assured through its ASIC and multi-core network processors – service throughput can reach 120Gbps on fixed networks and 100Gbps for mobile. Reliability is another key feature, thanks to redundancy in SIG’s design for boards and key components, both on the front end and the back. The system is also equipped with professional-grade bypass devices, to protect links against anomalies. During upgrade, operators need only replace the interface or service board (overhaul is unnecessary).





SIG boasts a library of over 65 million URLs in 43 categories, which operators can customize as required. Based on an industry-leading malicious code detection technology, SIG can filter malicious URLs dynamically, keeping viruses and other malware out of the home. If something is detected, the system can send alerts to users".

See "TalkTalk provides online protection for families" - here.

No comments:

Post a Comment