Quick find
Russia Ukraine Belarus Israel Turkey Lithuania Latvia Estonia Mongolia Moldova Armenia Kazahstan Georgia
Product features:
NetDefend UTM Firewall
Project
General features:
Interfaces
• 6 x configurable 10/100/1000Base-T ports
• 2 x USB 2.0 ports (reserved for future use)
• 1 x Mini-USB console port
Performance*
• Firewall Throughput**: 4 Gbps
• VPN Throughput***: 1 Gbps
• IPS Throughput****: 450 Mbps
• Anti-virus Throughput****: 600 Mbps
• Application Control Throughput****: 700 Mbps
• Concurrent Sessions: 500,000
• New Sessions per Second: 45,000
• Supported Number of Policies: 2,000
Software Features
Firewall System
• NAT/PAT
• Dynamic Routing Protocol: OSFPv2
• Application layer gateway:
HTTP
FTP
H.323
POP3
SMTP
SIP
TFTP
TLS 1.0 (RFC2246)
• Transparent mode
• H.323 NAT Traversal
• Time-scheduled policies
• ZoneDefend proactive endpoint security
• User Authentication:
Local user database
RADIUS
Microsoft AD
LDAP
Networking
• DHCP server/client
• DHCP relay
• IGMPv3 IP multicasting
• IPv6 support
• Policy-based Routing
• IEEE 802.1Q VLAN
• Link aggregation
Traffic Load Balancing
• Outbound load balancing
• Failover traffic redirection
• Server load balancing
Bandwidth Management
• Guaranteed bandwidth
• Priority bandwidth
• Time-scheduled traffic shaping
• Dynamic bandwidth balancing
• Maximum bandwidth
• Policy-based traffic shaping
• VPN tunnel bandwidth management
• IDP traffic shaping
High Availability (HA)
• WAN failover
• Device failure detection
• FW/VPN session synchronisation
• Active/passive mode
• Link failure detection
Virtual Private Network (VPN)
• 200 tunnels
• Encryption methods:
DES
3DES
AES
Blowfish
Twofish
CAST-128
• IKE/IKEv2
• Redundant IPSec VPN gateway
• Hub-and-spoke
• IPSec NAT traversal
• Dead Peer Detection (DPD)
• PPTP/L2TP server/client
• SSL VPN*****
• GRE
Intrusion Detection & Prevention System (IDPS)******
• 12 months service subscription
• Automatic pattern updating
• DoS/DDoS attack protection
• Email-based intrusion notification
• IP blacklisting based on threshold or IDP/IPS
• Advanced IDP/IPS subscription
Content Filtering******
• 12 months service subscription
• Web URL blacklisting/whitelisting: HTTP, HTTPS
• Customize forbidden web page
• Maximum file size protection
• SafeSearch Enforcement*******
• Filtering based on script types:
Java applets
JavaScript
VBScript
Cookies
ActiveX
Anti-Virus******
• 12 months service subscription
• Real-time scanning
• Virus scanning for protocols:
HTTP
FTP
SMTP
POP3
IMAP
• Stream-based scanning
• Anti-virus over VPN
• ZIP/GZIP compressed file scanning up to 10 levels
• Signature licensing: Kaspersky
Application Control******
• 12 months service subscription
• Supports 1,000+ recognized applications
• Schedule and rule-based control
• Application bandwidth management, policy control, and prioritization
Email Security
• Supported protocols:
SMTP
POP3
IMAP
• File type whitelisting/blacklisting
• Email address filtering:
Sender/receiver blacklist
Exempt list
• File extension and MIME type verification
• Anti-spam
System Management
• Install Wizard
• Command line interface (CLI)
• SNMP (v1/v2c)
• Email notifications
• Web-based user interface (HTTP/HTTPS)
• Secure Shell (SSH)
• Syslog
• Real-time performance monitoring
Physical Parameters
Power Supply
• 100 to 240 V AC, internal AC power supply
Maximum Power Consumption
• 20 W
MTBF
• 374,681 hours
Dimensions (W x D x H)
• 278 x 183 x 44 mm
Weight
• 1.7 kg
Temperature
• Operating: 0 to 40В°C
• Storage: -20 to 70В°C
Humidity
• Operating: 5% to 95% non-condensing
• Storage: 5% to 95% non-condensing
EMI
• FCC Class A
• VCCI
• CE Class A
Safety
• LVD (EN60950-1)
* Actual performance may very depending on network conditions and services activated on the firewall.
** Firewall throughput was measured using UDP traffic with a 1,518 bytes packet size, conforming with RFC2544.
*** VPN Throughput was measured using UDP traffic with a 1,420 bytes packet size, conforming with RFC2544.
**** IPS and anti-virus performance is based on FTP protocol with a 1 GB file attachment run on IXIA IxLoad. Testing was done with multiple flows through multiple port pairs.
***** Only server mode is available for SSL VPN.
****** 12 months service subscription is purchased separately.
******* The SafeSearch Enforcement only supports Google, Bing, and Yahoo search engines.


Products | Support  | News  | About |