Interfaces
• 2 10/100/1000 Ethernet WAN ports
• 1 10/100/1000 Ethernet DMZ port (configurable)
• 8 10/100/1000 Ethernet LAN ports
• 2 USB ports (reserved)
• Console: RJ-45
System Performance*
• Firewall throughput**: 200 Mbps
• VPN throughput***: 60 Mbps
• IPS throughput****: 80 Mbps
• Antivirus throughput****: 50 Mbps
• Concurrent sessions: 40000*****
• New sessions (per second): 4000
• Policies: 1000
Firewall system
• Transparent mode
• NAT, PAT
• Dynamic routing protocol: OSPF
• H.323 NAT Traversal
• Time-scheduled policies
• Application Layer Gateway (ALG)
• Proactive end-point security: ZoneDefense
Networking
• DHCP server/client
• DHCP relay
• Policy-based routing
• IEEE 802.1q VLAN: 16
• Port-based VLAN
• IP Multicast: IGMP v3
Virtual Private Network (VPN)
• Encryption methods (DES/3DES/Twofish/Blowfish/CAST-128)
• Dedicated VPN tunnels: 200*****
• PPTP/L2TP server
• Hub and Spoke
• IPSec NAT Traversal
• SSL VPN (will be available in the future)
Traffic load balancing
• Outbound load balancing
• Server load balancing
• Outbound load balance algorithms: Round-robin, Weight-based Round-robin, Destination-based, Spill-over
• Traffic redirect at fail-over
Bandwidth Management
• Policy-based traffic shaping
• Guaranteed bandwidth
• Maximum bandwidth
• Priority bandwidth
• Dynamic bandwidth balancing
High Availability (HA)
• WAN fail-over
Intrusion and Detection Prevention System (IDP/IPS)
• Automatic pattern update
• DoS, DDoS protection
• Attack alarm via e-mail
• Advanced IDP/IPS subscription (purchased separately)
• IP blacklist by threshold or IDP/IPS
Content filtering
• HTTP type: URL blacklist/whitelist
• Script type: Java, Cookie, ActiveX, VB
• E-mail type: e-mail blacklist/whitelist
• External database content filtering
Antivirus
• Real-time AV scanning
• Unlimited file size
• VPN tunnel scanning
• Supports compressed files
• Signature licensor: Kaspersky
• Automatic pattern update
