Beschreibung
Firewall Overview
| Feature | Value |
|---|---|
| Deep Packet Inspection Firewall | Standard |
| Stateful Packet Inspection Firewall | Standard |
| Unlimited File Size Protection | Standard |
| Protocols Scanned | 50+ |
| ICSA Firewall Certified | Standard |
Firewall General
| Feature | Value |
|---|---|
| Interfaces | (7) 10/100/1000 Copper Gigabit, 2 USB, Console |
| Management | CLI, SSH, GUI, GMS |
| Certifications | VPNC, ICSA Firewall 4.1 |
| Nodes Supported | Unrestricted |
| RAM | 512 MB |
| Flash Memory | 32 MB |
| Site-to-Site VPN Tunnels | 25 |
| Global VPN Clients (Maximum) | 2 (25) |
| SSL VPN NetExtender Clients (Maximum) | 2 (15) |
| Unique Malware Threats Blocked | 1,000,000+ |
| Virtual Assist Technicians (Maximum) | 30-Day Trial (5) |
| VLAN Interfaces | 25 |
| SonicPoints | 16 |
Security Services Included
| Feature | Value |
|---|---|
| Application Intelligence and Control1 | Standard |
| Intrusion Prevention1 | Standard |
| Gateway Anti-Virus and Anti-Spyware1 | Standard |
| Enforced Client Anti-Virus and Anti-Spyware1 | Optional |
| Content & URL Filtering (CFS)1 | Standard |
| Analyzer Reporting1 | Optional |
| Comprehensive Anti-Spam Service1 | Optional |
| SSL Inspection (DPI-SSL)1 | Optional |
Performance
| Feature | Value |
|---|---|
| Stateful Throughput2 | 600 Mbps |
| DPI Performance3 | 110 Mbps |
| Gateway Anti-Virus Throughput3 | 115 Mbps |
| Intrusion Prevention Throughput3 | 195 Mbps |
| IMIX Performance3 | 195 Mbps |
| 3DES/AES VPN Throughput4 | 150 Mbps |
| Maximum Connections5 | 85,0006 |
| Maximum UTM Connections | 32,0006 |
| New Connections per Second | 2200 |
Features
| Feature | Value |
|---|---|
| Logging | IPFIX, Netflow, Analyzer, Local Log, Syslog |
| Network Traffic Visualization | Standard |
| Netflow/IPFIX Reporting | Standard |
| SNMP | Standard |
| Authentication | XAUTH/ RADIUS, Active Directory, SSO, LDAP, Terminal Services, Citrix, Internal User Database |
| Single Sign-On | Standard |
| Voice over IP (VoIP) Security | Standard |
| PortShield Security | Standard |
| Dynamic Routing | OSPF, RIP |
| Policy-based Routing | Standard |
| Route-based VPN | Standard |
| Dynamic Bandwidth Management | Standard |
| 802.11n Wireless Support via SonicPoints | Standard |
| Integrated Wireless Switch & Controller | Standard |
| Layer 2 Wireless Bridging | Standard |
| High Availability | S 6 |
| Multi-WAN | Standard |
| Load Balancing | Standard |
| Object-based Management | Standard |
| Policy-based NAT | Standard |
| Inbound Load Balancing | Standard |
| IKEv2 VPN | Standard |
| Terminal Services Authentication/Citrix Support | Standard |
| Onboard Quality of Service (QoS) | Standard |
| SSL Control | Standard |
| IPv6 | Standard |
Failover
| Feature | Value |
|---|---|
| Hardware Failover | Optional Active/ Passive with State Sync |
| Multi-WAN Failover | Standard |
| Automated Failover/Failback | Standard |
| Analog Modem Failover | Standard |
| 3G Cellular Modem Failover7 | Standard |
Support Services
| Feature | Value |
|---|---|
| Dynamic Support 8x5 | N/A |
| Dynamic Support 24x71 | 365 Days |
- Services must be purchased separately.
- Testing Methodologies: Maximum performance based on RFC 2544 (for firewall). Actual performance may vary depending on network conditions and activated services.
- UTM/Gateway AV/Anti-Spyware/IPS throughput measured using industry standard Spirent WebAvalanche HTTP performance test and Ixia test tools. Testing done with multiple flows through multiple port pairs.
- VPN throughput measured using UDP traffic at 1280 byte packet size adhering to RFC 2544.
- Actual maximum connection counts are lower when UTM services are enabled.
- Only with the NSA 250M/NSA 240/NSA 220 Series Stateful HA and Expansion Upgrade.
- USB 3G card and modem are not included. View all supported USB devices.
