Interfaces
• 1 10/100/1000 Ethernet WAN port
• 1 10/100/1000 Ethernet DMZ port (configurable)
• 5 10/100/1000 Ethernet LAN ports
• 2 USB ports (reserved)
• Console: RJ-45
System Performance*
• Firewall throughput**: 150 Mbps
• VPN throughput***: 45 Mbps
• IPS throughput****: 60 Mbps
• Antivirus throughput****: 35 Mbps
• Concurrent sessions: 25000*****
• New sessions (per second): 2000
• Policies: 500
Firewall system
• Transparent mode
• NAT, PAT
• H.323 NAT Traversal
• Time-scheduled policies
• Application Layer Gateway (ALG)
Networking
• DHCP server/client
• DHCP relay
• Policy-based routing
• IEEE 802.1q VLAN: 8
• Port-based VLAN
• IP Multicast: IGMP v3
Virtual Private Network (VPN)
• Encryption methods (DES/3DES/Twofish/Blowfish/CAST-128)
• Dedicated VPN tunnels: 100
• PPTP/L2TP server
• Hub and Spoke
• IPSec NAT Traversal
• SSL VPN (will be available in the future)
Traffic load balancing
• Outbound load balancing
• Outbound load balance algorithms: Round-robin, Weight-based Round-robin, Destination-
ased, Spill-over
• Traffic redirect at fail-over
Bandwidth Management
• Policy-based traffic shaping
• Guaranteed bandwidth
• Maximum bandwidth
• Priority bandwidth
• Dynamic bandwidth balancing
High Availability (HA)
• WAN fail-over******
Intrusion and Detection Prevention System (IDP/IPS)
Automatic pattern update
• DoS, DDoS protection
• Attack alarm via e-mail
• Advanced IDP/IPS subscription (purchased separately)
Content filtering
• HTTP type: URL blacklist/whitelist
• Script type: Java, Cookie, ActiveX, VB
• E-mail type: e-mail blacklist/whitelist
• External database content filtering
Antivirus
• Real-time AV scanning
• Unlimited file size
• VPN tunnel scanning
• Supports compressed files
• Signature licensor: Kaspersky
• Automatic pattern update
