BRCM: Broadcom's New Gigabit Switches with BroadShield Security Technology Aim to Reduce the Complexity of Implementing Secure Enterprise Networks

Broadcom Corporation (Nasdaq: BRCM), a global leader in semiconductors for wired and wireless communications, today announced a new generation of multi-layer Gigabit Ethernet (GbE) switches designed to improve enterprise network security through a highly scalable and easy-to-manage security infrastructure. This latest generation of Broadcom® StrataXGS® III Gigabit Ethernet switches features new BroadShield™ security technology, which enables network admission control (NAC) and supports Microsoft's Network Access Protection policy enforcement technology to achieve dramatically improved network security and manageability when compared to existing solutions.
Network security is one of the top concerns for enterprise IT network managers, given the prevalence of hacking, malware and inside security threats, as well as, the need to comply with government regulations. It is a challenge to implement security profiles for one user, let alone an enterprise network with hundreds, or thousands, of users. Additionally, IT professionals prefer standards-based solutions (versus proprietary solutions) to ensure interoperability between multiple hardware and software vendors. As a result, next-generation switching solutions must keep pace with the ever changing security threats in enterprise networks, and the underlying security infrastructure must be cost-effective, as well as easier to implement and manage.

Announced today is the Broadcom StrataXGS III BCM56510 series of multi- layer Gigabit Ethernet switches, a follow-on series to the company's widely deployed BCM56500 series. All products in the BCM56510 series are equipped with BroadShield security technology, a multi-layered security framework that includes a robust set of standards-based features to dramatically improve security while delivering unmatched scalability. The key security features include standards-based authentication, user quarantine, denial of service (DoS) attack prevention, 'man in the middle' attack prevention, spoofing prevention, and support for advanced access control lists (ACLs).

"The breadth of security features in Broadcom's BroadShield technology addresses our customers' needs for a more robust and scalable enterprise security infrastructure," said Eric Hayes, Director of Marketing, Broadcom Enterprise Switching line of business. "Broadcom is setting the stage for standards-based networks where endpoints and switches can interoperate in today's complex multi-vendor environment."

Through BroadShield technology, Broadcom's new BCM56510 series of GbE switches is designed to support Microsoft Network Access Protection. Network Access Protection is a policy enforcement technology built into the Windows Vista and Windows Server, codenamed "Longhorn" operating systems that allows customers to better protect network assets from unhealthy computers by enforcing compliance with network health policies. Microsoft's Network Access Protection technology is publicly available with trial versions of Windows Vista, and available to select partners and customers with Beta 2 of the future version of Windows Server, codename "Longhorn."

"Standardization of network security is a topic that needs to be addressed, pairing the hardware at the chip level with the software that runs the network," said Mike Schutz, Group Product Manager - Security and Access, at Microsoft Corp. "Broadcom is one of the companies that is laying the groundwork for standardization by developing new technology that will support Microsoft's vision for network security."

The BCM56510 series, with BroadShield technology, also enables network admission control (NAC), which governs how security policies are enforced on any device on the network with the goal of minimizing the damage from emerging security threats. IT managers employing NAC have the ability to control network access for any client that accesses the network (for example, a PC, PDA or other endpoint device), granting the appropriate level of access based on the classification of the endpoint device.

"Integration of security into hardware will significantly enhance performance and lower costs while ensuring the integrity of the network infrastructure," said Chris Crowell, EVP Research & Development, Enterasys Networks. "Broadcom's new switch silicon enables us to cost-effectively further our integrated hardware and software developments to automatically sense and respond to network security threats in a way that is practical, achievable, and delivers rapid time to value."

BroadShield Security Technology

Broadcom's BroadShield security technology is a multi-layer security framework that enables a scalable network security architecture with simplified network management. BroadShield utilizes a unique flow-based user- classification framework that allows IT managers to enforce secure policies on a packet-by-packet basis without complicated administration of a large numbers of rules. The overriding benefit is the ease at which these secure profiles are implemented and proliferated through the network, regardless of the scale of the user base.

The key features of the new StrataXGS III BCM56510 series include:

• Advanced Layer 2 (L2) switching and Layer 3 (L3) routing, including IPv4/IPv6
  
• BroadShield security technology addresses enterprise security with ContentAware™-based scalable ACLs, port-level L2 and L3 security, integrated and enhanced DOS prevention mechanism, and L3 traffic virtualization
  
• Microsoft Network Access Protection support enables robust network admission control (NAC)
  
• Virtual router technology provides secure virtualization of network traffic
  
• Tunneling schemes such as IPv6 over IPv4, ISATAP, IP over IP, etc., provide a variety of transition mechanisms
  
• High-end IP multicast for video/audio distribution, web conferencing, etc.
  
• Supports eight classes of service (CoS) with sophisticated scheduling mechanism
  
• Robust 802.1ad support enables scalable carrier access

Availability
The new Broadcom StrataXGS III BCM56510 series (BCM56510, BCM56511, BCM56512, BCM56513 and BCM56514) is now sampling to early access customers. The StrataXGS III family features a mature, widely adopted software API, which is common across the entire product line and supported by multiple third-party software vendors. BCM56510 series reference designs are available to help speed time-to-market and include software, schematics, layout files and related documentation. Product pricing is available upon request.