Interfaces
• 1 WAN Ethernet output 10/100/1000
• 1 DMZ Ethernet output 10/100/1000 (configurable)
• 5 LAN Ethernet outputs 10/100/1000
• 2 USB outputs (reserved)
• Console: RJ-45
System Performance*
• Backup protection speed**: 150 megabits per second
• VPN backup speed***: 45 megabits per second
• IPS backup speed****: 60 megabits per second
• Antivirus backup speed****: 35 megabits per second
• Continuous sessions: 25000*****
• New sessions (per second): 2000
• Policies: 500
Firewall System
• Transparent mode
• NAT, PAT
• H.323 NAT traversal
• Scheduled policy
• Application layer gateway (ALG)
Networks
• DHCP server/client
• DHCP relay
• Policy-based routing
• VLAN IEEE 802.1q: 8
• Exit-based VLAN
• Multicast IP views: IGMP v3
Virtual Private Network (VPN)
• Encryption methods (DES/3DES/Twofish/Blowfish/CAST-128)
• Assigned VPN tunnels: 100
• PPTP/L2TP server
• Pub and spoke
• IPSec NAT traversal
• SSL VPN (will be available in the future)
Traffic Load Balancing
• Outbound load balancing
• Outbound load balancing algorithms: round-robin, weight-based round-robin, destination-based, burst-based
• Traffic redirection in case of failure
Bandwidth Management
• Policy-based traffic shaping
• Guaranteed bandwidth
• Maximum bandwidth
• Priority bandwidth
• Dynamic bandwidth balancing
High Availability (HA)
• WAN failure******
Intrusion Prevention and Detection System (IDP/IPS)
• Automatic pattern updates
• Protection against DoS, DDoS
• Attack alert via email
• Advanced IDP/IPS subscription (purchased separately)
Content Filtering
• HTTP type: URL blacklist/whitelist
• Script type: Java, Cookie, ActiveX, VB
• Email type: Email blacklist/whitelist
• Content filtering from external database
Antivirus
• Real-time scanning for unlimited file size
• VPN tunnel scanning
• Support for compressed files
• Signature license: Kaspersky
• Automatic pattern updates
