Firewall

Firewall general :Operating system : SonicOS 6.5.1Security processing cores : 8Interfaces : 2 x 10-GbE SFP+,4 x 1-GbE SFP,12 x 1-GbE,1 GbE Management,1 ConsoleExpansion:1 Expansion Slot (Rear)*, SD Card*Management : CLI, SSH, Web UI, Capture Security Center, GMS, REST APIsSSO users : 50,000 Maximum access points supported : 64 Logging : Analyzer, Local Log, Syslog Firewall/VPN Performance:Firewall inspection throughput : 6.0 GbpsFull DPI throughput : 800 MbpsApplication inspection throughput : 2.0 GbpsIPS throughput : 2.0 GbpsAnti-malware inspection throughput : 1.1 GbpsIMIX throughput : 1.6 GbpsTLS/SSL decryption and inspection (DPI SSL) : 500 MbpsVPN throughput : 3.0 GbpsConnections per second : 40,000/secMaximum connections (SPI) : 1,000,000Maximum connections (DPI) : 500,000Default/Maximum connections (DPI SSL) : 3,000/4,500 VPN :Site-to-site VPN tunnels : 3,000IPSec VPN clients (max) : 500 (3,000)SSL VPN NetExtender clients (max) : 2 (500)Encryption/Authentication :DES, 3DES, AES (128, 192, 256-bit)/MD5, SHA-1, Suite B CryptographyKey exchange : Diffie Hellman Groups 1, 2, 5, 14vRoute-based VPN : RIP, OSPF, BGP Networking :IP address assignment : Static (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP RelayNAT modes : 1:1, many:1, 1:many, flexible NAT (overlapping IPS), PAT, transparent modeVLAN interfaces : 256Routing protocols : BGP, OSPF, RIPv1/v2, static routes, policy-based routingQoS : Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1pAuthentication : LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC)VoIP : Full H323-v1-5, SIPStandards : TCP/IP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3Certifications : ICSA Firewall, ICSA Anti-Virus, FIPS 140-2, Common Criteria NDPP (Firewall and IPS), UC APLHigh availability : Active/Passive with State Sync, Active/Active Clustering Hardware :Power supply : Single, Fixed 250WFans : Dual, FixedInput power : 100-240 VAC, 60-50 HzMaximum power consumption (W) : 86.7MTBF @25ºC in hours : 139,783 MTBF @25ºC in years : 15.96 Form factor : 1U Rack MountableDimensions : 1.75 x 19.1 x 17 in (4.5 x 48.5 x 43 cm)Weight : 13.56 lb (6.15 kg)WEEE weight : 14.24 lb (6.46 kg) Shipping weight : 20.79lb (9.43 kg)Major regulatory : FCC Class A, CE (EMC, LVD, RoHS), C-Tick, VCCI Class A, MSIP/KCC Class A, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE , REACH, ANATEL, BSMI, CUEnvironment (Operating/Storage) : 32°-105° F (0°-40° C)/-40° to 158° F (-40° to 70° C)Humidity : 10-90% non-condensing

Overview: Get Industry-leading Performance with the Firebox T70 Many organizations today are dependent on fast, reliable and secure Internet connectivity, but are struggling to find network security solutions that can keep up with their ever growing needs. While many rack-mount solutions can keep up with today’s fastest fiber-to-the-premises speeds, there are not currently any tabletop security appliances available that have this capability, especially when running with additional security services enabled. This makes it difficult for SMBs and distributed enterprises to harness these powerful Internet speeds with the complete UTM protection they require.   The Fastest Tabletop Available The WatchGuard Firebox T70 is the fastest performing tabletop appliance available on the market today. The T70 is the only tabletop appliance that is capable of running full UTM services at over 1 gigabit per second, enabling you to keep up with lightning-fast fiber broadband speeds.   The WatchGuard Firebox T70 will make network slowdown concerns a thing of the past, with blazing-fast performance capable of delivering full UTM protection at over 1 gigabit per second. With the release of the WatchGuard Firebox T70 tabletop network security appliance, customers can now enjoy the fast throughput that they want, with the industry-leading security that they need. The WatchGuard T70 is also one of the only tabletop appliances available today that provides users two Power-over-Ethernet (PoE) ports enabling power to peripheral devices, such as wireless access points and security cameras.

Overview Small businesses and remote locations have long been thought of as soft targets for attackers. The WatchGuard T55 Firebox Firewall tabletop appliance bring enterprise-level network security to those small office/branch office and small retail environments that matches the reality of today's distributed work style.Perfect as stand-alone solutions for a small office, The WatchGuard T55 Firebox Firewall are ideal for larger organizations that want to extend easy-to-use, full UTM protection for remote workers and smaller sites. With WatchGuard Total Security Services, this appliance are small-footprint, cost-effective security powerhouses that deliver nearly every feature present in WatchGuard’s higher end UTM appliances, including all security capabilities such as ransomware protection and data loss prevention.   Key Features Includes a one (1) year standard support licence subscription. Boosts five (5) Gigabit Ethernet RJ45 LAN interfaces. No need to compromise protection for strong performance or vice versa. Support high-speed LAN backbone infrastructures and Gigabit WAN connections. Best-of-breed security components into one platform for stronger security at big cost savings. Firewall throughput up to 1Gbps and VPN throughput upto 360Mbps to keep traffic moving. Brings enterprise-level network security to small offices and retail environments. Cloud-based RapidDeploy technology taking the delay out of the firewall deployment process. Allows small businesses to have access to enterprise-grade security.

Overview WatchGuard Firebox T15 delivers complete enterprise-level network security for small office/home office and retail environments. Offering optional web filtering, intrusion prevention, antivirus and more. It can be used as a stand-alone solution or centrally managed from corporate headquarters. Flexible management tools and WatchGuard’s RapidDeploy technology enable administrators to quickly set up the Firebox T15 at remote locations so businesses can ensure that they protect where they connect. Firebox T15 provides 400 Mbps firewall throughput and three 1-Gigabit Ethernet ports. WatchGuard Dimension provides visibility into network activity and security events at no additional cost. Wireless models are available.   Details The WatchGuard Firebox T Series appliances bring enterprise-level network security to the small office/branch office and small retail environments that matches the reality of today's distributed work style. They can be used as a stand-alone solution or centrally managed from corporate headquarters. Flexible management tools and WatchGuard's RapidDeploy technology enable administrators to quickly set up a T Series device at remote locations so businesses can ensure that they protect everywhere they connect. T Series appliances sustain up to 1.2 Gbps firewall throughput and come in wired and wireless versions. WatchGuard Dimension, which provides real-time visibility into network activity and security events, is included at no additional cost. Ideal for Small office/home office and small retail environments Recommended User Count: 5 Firewall Throughput: 400 Mbps VPN Throughput: 150 Mbps UTM Throughput: 90 Mbps Concurrent Sessions: 100,000 1 Year Standard Support

TOTAL NETWORK PROTECTION Small businesses and remote locations have long been thought of as soft targets for attackers. WatchGuard Firebox T35 and T55 tabletop appliances bring enterprise-level network security to those small office/branch office and small retail environments that matches the reality of today’s distributed work style. Our unique product architecture enables smaller businesses to leverage best-in-class security services – from URL filtering and intrusion prevention to application control and data loss prevention – minus the cost and complexity of managing multiple single-point solutions.   QUICK AND SIMPLE DEPLOYMENT Cloud-based RapidDeploy technology, a configuration and deployment tool that comes standard with WatchGuard Firebox appliances, enables IT staff to create and store configuration data in the cloud – public or private – and have a new appliance directly shipped to its destination. Once the device arrives, it can connect to the cloud for a secure download of its configuration settings, saving staff travel time and money. This technology is particularly advantageous for large distributed enterprises where managing a multitude of devices efficiently across multiple locations and geographies is critical.   EASY TO MANAGE AND UNDERSTAND Firebox T Series appliances are not only easy to initially configure and deploy, they are also designed with an emphasis on centralized management, making ongoing policy and network management simple and straightforward. WatchGuard Dimension, which is included with purchase, provides a suite of big data visibility and reporting tools that instantly identify and distill key network security threats, issues and trends so you can take immediate preventive or corrective action. Security is complex, running it doesn’t have to be.   FEATURES & BENEFITS Wireless versions of the T35 and T55 use 802.11ac operating in the 2.4 GHz and 5GHz bands for high performance and superior reliability. All logging and reporting functions included with purchase, with over 100 dashboards and reports including PCI and HIPAA. 5 Gigabit Ethernet ports support high-speed LAN backbone infrastructures & gigabit WAN connections. PoE port to power a peripheral device such as a WatchGuard Secure Wi-Fi Access Point, allowing administrators to extend the reach of their networks without having to run costly AC power to the remote device.

Hardware Specifications GE RJ45 Switch Ports : 5 GE RJ45 WAN Ports : 2 USB Ports : 1 Console (RJ45) : 1 System Performance — Enterprise Traffic Mix : IPS Throughput : 350 Mbps NGFW Throughput : 220 Mbps Threat Protection Throughput : 160 Mbps System Performance : Firewall Throughput : 2.5 Gbps Firewall Latency (64 byte UDP packets) : 180 μs Firewall Throughput (Packets Per Second): 375 Kpps Concurrent Sessions (TCP) : 1.8 Million New Sessions/Second (TCP) : 21,000 Firewall Policies : 5,000 IPsec VPN Throughput (512 byte) : 90 Mbps Gateway-to-Gateway IPsec VPN Tunnels : 200 Client-to-Gateway IPsec VPN Tunnels : 250 SSL-VPN Throughput : 100 Mbps Concurrent SS-VPN Users (Recommended Maximum, Tunnel Mode) : 200 SSL Inspection Throughput (IPS, avg. HTTPS) : 150 Mbps SSL Inspection CPS (IPS, avg. HTTPS) : 140 SSL Inspection Concurrent Session (IPS, avg. HTTPS) : 75,000 Application CoLntrol Throughput (HTTP 64K) : 450 Mbps CAPWAP Throughput (HTTP 64K) : 1.2 Gbps Virtual Domains (Default / Maximum) : 5 / 5 Maximum Number of FortiSwitches Supported : 8 Maximum Number of FortiAPs (Total / Tunnel Mode) : 10 / 5 Maximum Number of FortiTokens : 500 High Availability Configurations : Active/Active, Active/Passive, Clustering Dimensions : Height x Width x Length (inches) : 1.44 x 8.52 x 5.5 Height x Width x Length (mm) : 36.5 x 216 x 140 Weight  : 2.015 lbs(0.914 kg) Form Factor : Desktop

FORTIGATE 300E FORTIGATE 301EInterfaces and Modules:GE RJ45 Interfaces : 16GE SFP Slots : 16GE RJ45 Management Ports : 2USB Ports : 2RJ45 Console Port : 1Local Storage : 2x 240 GB SSDIncluded Transceivers : 2x SFP (SX 1 GE) System Performance — Enterprise Traffic Mix:IPS Throughput : 5 GbpsNGFW Throughput : 3.5 GbpsThreat Protection Throughput : 3 Gbps System Performance and Capacity:IPv4 Firewall Throughput(1518 / 512 / 64 byte, UDP) : 32 / 32 / 20 GbpsIPv6 Firewall Throughput(1518 / 512 / 64 byte, UDP) : 32 / 32 / 20 GbpsFirewall Latency (64 byte, UDP) : 3 μsFirewall Throughput (Packet per Second) : 30 MppsConcurrent Sessions (TCP) : 4 MillionNew Sessions/Second (TCP) : 300,000Firewall Policies : 10,000IPsec VPN Throughput (512 byte) : 20 GbpsGateway-to-Gateway IPsec VPN Tunnels : 2,000Client-to-Gateway IPsec VPN Tunnels : 50,000SSL-VPN Throughput : 2.5 GbpsConcurrent SSL-VPN Users(Recommended Maximum, Tunnel Mode):5,000SSL Inspection Throughput (IPS, avg. HTTPS) : 3.9 GbpsSSL Inspection CPS (IPS, avg. HTTPS) : 2,500SSL Inspection Concurrent Session (IPS, avg. HTTPS) : 340,000Application Control Throughput (HTTP 64K) : 7 GbpsCAPWAP Throughput (1444 byte, UDP) : 5 GbpsVirtual Domains (Default / Maximum) : 10 / 10Maximum Number of FortiSwitches Supported : 72Maximum Number of FortiAPs (Total / Tunnel) : 512 / 256Maximum Number of FortiTokens : 5,000High Availability Configurations : Active-Active, Active-Passive, Clustering Dimensions and Power:Height x Width x Length (inches) : 1.75 x 17.0 x 15.0Height x Width x Length (mm) : 44.45 x 432 x 380Weight : 16.1 lbs (7.3 kg) 16.6 lbs (7.6 kg)Form Factor (supports EIA / non-EIA standards) : Rack Mount, 1 RUPower Consumption (Average / Maximum) : 90 W / 173 W 95 W / 180 WPower Input : 100V–240V AC, 50–60HzCurrent (Maximum) : 6AHeat Dissipation : 570 BTU/h 614 BTU/hRedundant Power Supplies (Hot Swappable) : optional Operating Environment and Certifications:Operating Temperature : 32–104°F (0–40°C)Storage Temperature : -31–158°F (-35–70°C)Humidity : 10–90% non-condensingNoise Level : 48 dBAOperating Altitude Up to : 7,400 ft (2,250 m)Compliance : FCC Part 15 Class A, RCM, VCCI, CE, UL/cUL, CBCertifications ICSA Labs: Firewall, IPsec, IPS, Antivirus, SSL-VPN; USGv6/IPv6

FORTIGATE 200E FORTIGATE 201EHardware Specifications:GE RJ45 WAN Interfaces : 2GE RJ45 Management/HA Ports : 2GE RJ45 Ports : 14GE SFP Slots : 4USB port : 1Console (RJ45): 1Local Storage : 1x 480 GB SSDIncluded Transceivers : 0 System Performance — Enterprise Traffic Mix:IPS Throughput : 2.2 GbpsNGFW Throughput : 1.8 GbpsThreat Protection Throughput : 1.2 Gbps System Performance:Firewall Throughput(1518 / 512 / 64 byte UDP packets) : 20 / 20 / 9 GbpsFirewall Latency (64 byte UDP packets) : 3 μsFirewall Throughput (Packets Per Second) : 13.5 MppsConcurrent Sessions (TCP) : 2 MillionNew Sessions/Second (TCP) : 135,000Firewall Policies : 10,000IPsec VPN Throughput (512 byte) : 7.2 GbpsGateway-to-Gateway IPsec VPN Tunnels : 2,000Client-to-Gateway IPsec VPN Tunnels : 10,000SSL-VPN Throughput : 900 MbpsConcurrent SSL-VPN Users(Recommended Maximum, Tunnel Mode) : 500SSL Inspection Throughput (IPS, avg. HTTPS) : 820 MbpsSSL Inspection CPS (IPS, avg. HTTPS) : 1,000SSL Inspection Concurrent Session(IPS, avg. HTTPS) : 240,000Application Control Throughput (HTTP 64K) : 3.5 GbpsCAPWAP Throughput (1444 byte, UDP) : 1.5 GbpsVirtual Domains (Default / Maximum) : 10 / 10Maximum Number of FortiSwitches Supported : 64Maximum Number of FortiAPs (Total / Tunnel Mode) : 256 / 128Maximum Number of FortiTokens : 5,000High Availability Configurations : Active / Active, Active / Passive, Clustering Dimensions:Height x Width x Length (inches) : 1.75 x 17.0 x 11.9Height x Width x Length (mm) : 44.45 x 432 x 301Weight : 11.9 lbs (5.4 kg) 12.12 lbs (5.5 kg)Form Factor (supports EIA / non-EIA standards) : Rack Mount, 1 RU Environment:Power Input :100–240V AC, 50–60 HzMaximum Current : 110 V / 3 A, 220 V / 0.42 APower Consumption (Average / Maximum) : 70.98 / 109.9 WHeat Dissipation : 374.9 BTU/hOperating Temperature : 32–104°F (0–40°C)Storage Temperature : -31–158°F (-35–70°C)Humidity : 10–90% non-condensingNoise Level : 31.1 dBAOperating Altitude Up to : 7,400 ft (2,250 m)Compliance : FCC Part 15B, Class A, CE, RCM, VCCI, UL/cUL, CB, BSMICertifications ICSA Labs: Firewall, IPsec, IPS, Antivirus, SSL-VPN; IPv6

FORTIGATE 100F FORTIGATE 101FHardware Specifications:GE RJ45 Ports : 12GE RJ45 Management/HA/DMZ Ports : 1 / 2 / 1GE SFP Slots : 410 GE SFP+ Slots : 2GE RJ45 WAN Ports : 2GE RJ45 or SFP Shared Ports : 4USB Port : 1Console Port : 1Internal Storage : 1x 480 GB SSDIncluded Transceivers : 0 System Performance — Enterprise Traffic Mix:IPS Throughput : 2.6 GbpsNGFW Throughput : 1.6 GbpsThreat Protection Throughput : 1 Gbps System Performance:Firewall Throughput(1518 / 512 / 64 byte UDP packets) : 20 / 18 / 10 GbpsFirewall Latency (64 byte UDP packets) : 5 μsFirewall Throughput (Packets Per Second) : 15 MppsConcurrent Sessions (TCP) : 1.5 MillionNew Sessions/Second (TCP) : 56,000Firewall Policies : 10,000IPsec VPN Throughput (512 byte) : 11.5 GbpsGateway-to-Gateway IPsec VPN Tunnels : 2,500Client-to-Gateway IPsec VPN Tunnels : 16,000SSL-VPN Throughput : 1 GbpsConcurrent SSL-VPN Users(Recommended Maximum, Tunnel Mode) : 500SSL Inspection Throughput (IPS, avg. HTTPS) : 1 GbpsSSL Inspection CPS (IPS, avg. HTTPS) : 1,800SSL Inspection Concurrent Session(IPS, avg. HTTPS) : 135,000Application Control Throughput (HTTP 64K) : 2.2 GbpsCAPWAP Throughput (HTTP 64K) : 15 GbpsVirtual Domains (Default / Maximum) : 10 / 10Maximum Number of FortiSwitches Supported : 24Maximum Number of FortiAPs(Total / Tunnel Mode) : 128 / 64Maximum Number of FortiTokens : 5,000High Availability Configurations : Active / Active, Active / Passive, Clustering Dimensions:Height x Width x Length (inches) : 1.73 x 17 x 10Height x Width x Length (mm) : 44 x 432 x 254Form Factor (supports EIA / non-EIA standards) : Rack Mount, 1 RUWeight : 7.25 lbs (3.29 kg) 7.56 lbs (3.43 kg) Environment:Power Required : 100–240V AC, 50-60Maximum Current : 100V / 1A, 240V / 0.5APower Consumption (Average / Maximum) : 35.1 W / 38.7 W 35.3 W / 39.1 WHeat Dissipation : 119.77 BTU/h 121.13 BTU/hRedundant Power Supplies : Yes Environment:Operating Temperature : 32–104°F (0–40°C)Storage Temperature : -31–158°F (-35–70°C)Operating Altitude Up to : 7,400 ft (2,250 m)Humidity : 10–90% non-condensingNoise Level : 40.4 dBACompliance : FCC Part 15B, Class A, CE, RCM, VCCI, UL/cUL, CB, BSMICertifications ICSA Labs: Firewall, IPsec, IPS, Antivirus, SSL-VPN; IPv6

FG-6500F/6501FInterfaces and Modules:40/100 GE QSFP28 Slots : 41/10/25 GE SFP28 Slots : 2410 GE SFP+ Slots : 3GE RJ45 Management Ports : 2USB Ports : 1Console Port : 1Internal Storage : 2x 1 TB NVMe (for 6301F and 6501F only)Included Transceivers : 2x SFP+ (SR 10 GE) System Performance — Enterprise Traffic Mix:IPS Throughput : 170 GbpsNGFW Throughput : 150 GbpsThreat Protection Throughput : 100 Gbps System Performance and Capacity :Firewall Throughput(1518 / 512 / 64 byte, UDP) : 239 / 238 / 135 GbpsFirewall Latency (64 byte, UDP) : 5 μsFirewall Throughput (Packet per Second) : 202.5 MppsConcurrent Sessions (TCP) : 200 MillionNew Sessions/Sec (TCP) : 3 MillionFirewall Policies : 200,000IPsec VPN Throughput (512 byte) : 160 GbpsGateway-to-Gateway IPsec VPN Tunnels : 16,000Client-to-Gateway IPsec VPN Tunnels : 90,000SSL-VPN Throughput :9 GbpsConcurrent SSL-VPN Users(Recommended Maximum, Tunnel Mode) : 30,000SSL Inspection Throughput (IPS, avg. HTTPS) : 110 GbpsSSL Inspection CPS (IPS, avg. HTTPS) : 50,000SSL Inspection Concurrent Session(IPS, avg. HTTPS) : 18 MillionApplication Control Throughput (HTTP 64K) : 220 GbpsCAPWAP Throughput (1444 byte, UDP) : N/AVirtual Domains (Default / Maximum) : 10 / 500Maximum Number of FortiSwitches Supported : 256Maximum Number of FortiAPs(Total / Tunnel Mode) : N/AHigh Availability Configurations : Supported Dimensions and Power:Height x Width x Length (inches): 5.20 x 17.20 x 26.18 5.3 x 17.2 x 27.3Height x Width x Length (mm) : 132 x 437 x 665 133 x 437 x 694Weight : 78.26 lbs (35.5 kg) / 79.59 lbs (36.1 kg) Form Factor (supports EIA/non-EIA standards) : Rack Mount, 3 RUAC Power Supply : 100–240V AC, 50–60 HzPower Consumption (Average / Maximum) : (1,308 / 1,548 W) / (1,328 / 1,568 W)Current (Maximum) : 20A@240VACRedundant Power Supplies : 2+1 Redundant, Hot Swappable Operating Environment and Certifications:Operating Temperature : 32–104°F (0–40°C)Storage Temperature : -31–158°F (-35–70°C)Humidity : 10–90% non-condensingNoise Level : 57.43 dBAOperating Altitude Up to : 7,400 ft (2,250 m)Compliance : FCC Part 15 Class A, RCM, VCCI, CE, UL/cUL, CB

Performance Overview: Operating system : SonicOS 5.9.x – Wired / SonicOS 6.2.x – WirelessSecurity Processor: 2x400 MHz (Wired) / 2x800 MHz (Wireless) Memory (RAM): 512 MB (Wired) /1 GB (Wireless) 1 GbE Copper interfaces : 5 Expansion : USB Firewall inspection throughput: 300 Mbps Full DPI throughput:50 Mbps Application inspection throughput:0 IPS throughput : 100 Mbps Anti-malware inspection throughput : 50 Mbps IMIX throughput : 60 Mbps SSL Inspection and Decryption (DPI SSL) :15 Mbps VPN throughput : 100 Mbps Connections per second : 1,800 Maximum connections (SPI) : 10,000 Maximum connections (DPI) : 10,000 Single Sign-On (SSO) Users :250 VLAN interfaces : 25 SonicPoints supported (Maximum) : 2 VPN :Site-to-Site VPN Tunnels : 10 IPSec VPN clients (Maximum) : 1 (5) SSL VPN licenses (Maximum) : 1 (10) Virtual assist bundled (Maximum) : No Encryption/Authentication : DES, 3DES, AES (128, 192, 256-bit), MD5, SHA-1, Suite B CryptographyKey exchange : Diffie Hellman Groups 1, 2, 5, 14Route-based VPN : RIP, OSPFCertificate support : Verisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWall-to-SonicWall VPN, SCEPVPN features : Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPNGlobal VPN client platforms supported : Microsoft® Windows Vista 32/64-bit, Windows 7 32/64-bit, Windows 8.0 32/64-bit, Windows 8.1 32/64-bitNetExtender : Microsoft Windows Vista 32/64-bit, Windows 7, Windows 8.0 32/64-bit, Windows 8.1 32/64-bit, Mac OS X 10.4+, Linux FC3+/Ubuntu 7+/OpenSUSEMobile Connect : Apple® iOS, Mac OS X, Google® Android™, Kindle Fire, Windows 8.1 (Embedded) Security Services:Deep Packet Inspection services : Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSLContent Filtering Service (CFS) : HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid listsEnforced Client Anti-Virus and Anti-Spyware : McAfee®Comprehensive Anti-Spam Service : SupportedApplication Intelligence and Control : Yes Application Visualization : No Networking:IP address assignment : Static, (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relayNAT modes : 1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent modeRouting protocols : OSPF, RIPv1/v2, static routes, policy-based routing, multicast QoS : Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1e (WMM)Authentication : XAUTH/RADIUS, Active Directory, SSO, LDAP, Novell, internal user database, Terminal Services, CitrixLocal user database : 150 VoIP : Full H.323v1-5, SIPStandards : TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3Certifications : VPNC, IPv6 (Phase 2)Certifications pending : Common Criteria NDPP, FIPS 140-2 (with Suite B) Level 2, ICSA Firewall, ICSA Anti-virus, UC APLCommon Access Card (CAC) : SupportedHigh Availability : No Hardware:Form factor : Desktop Power Supply (W) : 24W external Maximum power consumption (W) : 6.4 / 11.3Input power : 100 to 240 VAC, 50-60 Hz, 1 ATotal heat dissipation : 21.8 / 38.7 BTU Dimensions : 3.6x14.1x19cm Weight : 0.34 Kg / 0.75 lbs & 0.48 Kg / 1.06 lbs WEEE weight : 0.80 Kg / 1.76 lbs & 0.94 Kg / 2.07 lbs Shipping weight : 1.20 Kg / 2.64 lbs & 1.34 Kg / 2.95 lbs MTBF (Years) : 30 / 15 Environment : 40-105° F, 0-40° CHumidity : 5-95% non-condensing

Performance Overview: Operating system : SonicOS 5.9.x – Wired / SonicOS 6.2.x – WirelessSecurity Processor: 2x400 MHz (Wired) / 2x800 MHz (Wireless) Memory (RAM): 512 MB (Wired) /1 GB (Wireless) 1 GbE Copper interfaces : 5 Expansion : USB Firewall inspection throughput: 300 Mbps Full DPI throughput:50 Mbps Application inspection throughput:0 IPS throughput : 100 Mbps Anti-malware inspection throughput : 50 Mbps IMIX throughput : 60 Mbps SSL Inspection and Decryption (DPI SSL) :15 Mbps VPN throughput : 100 Mbps Connections per second : 1,800 Maximum connections (SPI) : 10,000 Maximum connections (DPI) : 10,000 Single Sign-On (SSO) Users :250 VLAN interfaces : 25 SonicPoints supported (Maximum) : 2 VPN :Site-to-Site VPN Tunnels : 10 IPSec VPN clients (Maximum) : 1 (5) SSL VPN licenses (Maximum) : 1 (10) Virtual assist bundled (Maximum) : No Encryption/Authentication : DES, 3DES, AES (128, 192, 256-bit), MD5, SHA-1, Suite B CryptographyKey exchange : Diffie Hellman Groups 1, 2, 5, 14Route-based VPN : RIP, OSPFCertificate support : Verisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWall-to-SonicWall VPN, SCEPVPN features : Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPNGlobal VPN client platforms supported : Microsoft® Windows Vista 32/64-bit, Windows 7 32/64-bit, Windows 8.0 32/64-bit, Windows 8.1 32/64-bitNetExtender : Microsoft Windows Vista 32/64-bit, Windows 7, Windows 8.0 32/64-bit, Windows 8.1 32/64-bit, Mac OS X 10.4+, Linux FC3+/Ubuntu 7+/OpenSUSEMobile Connect : Apple® iOS, Mac OS X, Google® Android™, Kindle Fire, Windows 8.1 (Embedded) Security Services:Deep Packet Inspection services : Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSLContent Filtering Service (CFS) : HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid listsEnforced Client Anti-Virus and Anti-Spyware : McAfee®Comprehensive Anti-Spam Service : SupportedApplication Intelligence and Control : Yes Application Visualization : No Networking:IP address assignment : Static, (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relayNAT modes : 1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent modeRouting protocols : OSPF, RIPv1/v2, static routes, policy-based routing, multicast QoS : Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1e (WMM)Authentication : XAUTH/RADIUS, Active Directory, SSO, LDAP, Novell, internal user database, Terminal Services, CitrixLocal user database : 150 VoIP : Full H.323v1-5, SIPStandards : TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3Certifications : VPNC, IPv6 (Phase 2)Certifications pending : Common Criteria NDPP, FIPS 140-2 (with Suite B) Level 2, ICSA Firewall, ICSA Anti-virus, UC APLCommon Access Card (CAC) : SupportedHigh Availability : No Hardware:Form factor : Desktop Power Supply (W) : 24W external Maximum power consumption (W) : 6.4 / 11.3Input power : 100 to 240 VAC, 50-60 Hz, 1 ATotal heat dissipation : 21.8 / 38.7 BTU Dimensions : 3.6x14.1x19cm Weight : 0.34 Kg / 0.75 lbs & 0.48 Kg / 1.06 lbs WEEE weight : 0.80 Kg / 1.76 lbs & 0.94 Kg / 2.07 lbs Shipping weight : 1.20 Kg / 2.64 lbs & 1.34 Kg / 2.95 lbs MTBF (Years) : 30 / 15 Environment : 40-105° F, 0-40° CHumidity : 5-95% non-condensing

Performance Overview: Operating system : SonicOS 5.9.x – Wired / SonicOS 6.2.x – WirelessSecurity Processor: 2x400 MHz (Wired) / 2x800 MHz (Wireless) Memory (RAM): 512 MB (Wired) /1 GB (Wireless) 1 GbE Copper interfaces : 5 Expansion : USB Firewall inspection throughput: 300 Mbps Full DPI throughput:50 Mbps Application inspection throughput:0 IPS throughput : 100 Mbps Anti-malware inspection throughput : 50 Mbps IMIX throughput : 60 Mbps SSL Inspection and Decryption (DPI SSL) :15 Mbps VPN throughput : 100 Mbps Connections per second : 1,800 Maximum connections (SPI) : 10,000 Maximum connections (DPI) : 10,000 Single Sign-On (SSO) Users :250 VLAN interfaces : 25 SonicPoints supported (Maximum) : 2 VPN :Site-to-Site VPN Tunnels : 10 IPSec VPN clients (Maximum) : 1 (5) SSL VPN licenses (Maximum) : 1 (10) Virtual assist bundled (Maximum) : No Encryption/Authentication : DES, 3DES, AES (128, 192, 256-bit), MD5, SHA-1, Suite B CryptographyKey exchange : Diffie Hellman Groups 1, 2, 5, 14Route-based VPN : RIP, OSPFCertificate support : Verisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWall-to-SonicWall VPN, SCEPVPN features : Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPNGlobal VPN client platforms supported : Microsoft® Windows Vista 32/64-bit, Windows 7 32/64-bit, Windows 8.0 32/64-bit, Windows 8.1 32/64-bitNetExtender : Microsoft Windows Vista 32/64-bit, Windows 7, Windows 8.0 32/64-bit, Windows 8.1 32/64-bit, Mac OS X 10.4+, Linux FC3+/Ubuntu 7+/OpenSUSEMobile Connect : Apple® iOS, Mac OS X, Google® Android™, Kindle Fire, Windows 8.1 (Embedded) Security Services:Deep Packet Inspection services : Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSLContent Filtering Service (CFS) : HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid listsEnforced Client Anti-Virus and Anti-Spyware : McAfee®Comprehensive Anti-Spam Service : SupportedApplication Intelligence and Control : Yes Application Visualization : No Networking:IP address assignment : Static, (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relayNAT modes : 1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent modeRouting protocols : OSPF, RIPv1/v2, static routes, policy-based routing, multicast QoS : Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1e (WMM)Authentication : XAUTH/RADIUS, Active Directory, SSO, LDAP, Novell, internal user database, Terminal Services, CitrixLocal user database : 150 VoIP : Full H.323v1-5, SIPStandards : TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3Certifications : VPNC, IPv6 (Phase 2)Certifications pending : Common Criteria NDPP, FIPS 140-2 (with Suite B) Level 2, ICSA Firewall, ICSA Anti-virus, UC APLCommon Access Card (CAC) : SupportedHigh Availability : No Hardware:Form factor : Desktop Power Supply (W) : 24W external Maximum power consumption (W) : 6.4 / 11.3Input power : 100 to 240 VAC, 50-60 Hz, 1 ATotal heat dissipation : 21.8 / 38.7 BTU Dimensions : 3.6x14.1x19cm Weight : 0.34 Kg / 0.75 lbs & 0.48 Kg / 1.06 lbs WEEE weight : 0.80 Kg / 1.76 lbs & 0.94 Kg / 2.07 lbs Shipping weight : 1.20 Kg / 2.64 lbs & 1.34 Kg / 2.95 lbs MTBF (Years) : 30 / 15 Environment : 40-105° F, 0-40° CHumidity : 5-95% non-condensing

Performance Overview: Operating system : SonicOS 6.2.xSecurity Processor: 2x 800 MHzMemory (RAM): 1 GB 1 GbE Copper interfaces : 5 Expansion : USB Firewall inspection throughput: 750 Mbps Full DPI throughput:100 Mbps Application inspection throughput:300 Mbps IPS throughput : 300 Mbps Anti-malware inspection throughput : 100 Mbps IMIX throughput : 200 Mbps SSL Inspection and Decryption (DPI SSL) :45 Mbps VPN throughput : 300 Mbps Connections per second : 5,000 Maximum connections (SPI) : 50,000 Maximum connections (DPI) : 50,000 Single Sign-On (SSO) Users :500 VLAN interfaces : 25 SonicPoints supported (Maximum) : 8 VPN :Site-to-Site VPN Tunnels : 10 IPSec VPN clients (Maximum) : 1 (10) SSL VPN licenses (Maximum) : 1 (50) Virtual assist bundled (Maximum) : 1 (30-day trial) Encryption/Authentication : DES, 3DES, AES (128, 192, 256-bit), MD5, SHA-1, Suite B CryptographyKey exchange : Diffie Hellman Groups 1, 2, 5, 14Route-based VPN : RIP, OSPFCertificate support : Verisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWall-to-SonicWall VPN, SCEPVPN features : Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPNGlobal VPN client platforms supported : Microsoft® Windows Vista 32/64-bit, Windows 7 32/64-bit, Windows 8.0 32/64-bit, Windows 8.1 32/64-bitNetExtender : Microsoft Windows Vista 32/64-bit, Windows 7, Windows 8.0 32/64-bit, Windows 8.1 32/64-bit, Mac OS X 10.4+, Linux FC3+/Ubuntu 7+/OpenSUSEMobile Connect : Apple® iOS, Mac OS X, Google® Android™, Kindle Fire, Windows 8.1 (Embedded) Security Services:Deep Packet Inspection services : Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSLContent Filtering Service (CFS) : HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid listsEnforced Client Anti-Virus and Anti-Spyware : McAfee®Comprehensive Anti-Spam Service : SupportedApplication Intelligence and Control : Yes Application Visualization : Yes Networking:IP address assignment : Static, (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relayNAT modes : 1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent modeRouting protocols : OSPF, RIPv1/v2, static routes, policy-based routing, multicast QoS : Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1e (WMM)Authentication : XAUTH/RADIUS, Active Directory, SSO, LDAP, Novell, internal user database, Terminal Services, CitrixLocal user database : 150 VoIP : Full H.323v1-5, SIPStandards : TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3Certifications : VPNC, IPv6 (Phase 2)Certifications pending : Common Criteria NDPP, FIPS 140-2 (with Suite B) Level 2, ICSA Firewall, ICSA Anti-virus, UC APLCommon Access Card (CAC) : SupportedHigh Availability : Active/Standby Hardware:Form factor : Desktop Power Supply (W) : 24W external Maximum power consumption (W) : 6.9 / 12.0Input power : 100 to 240 VAC, 50-60 Hz, 1 ATotal heat dissipation : 23.5 / 40.9 BTU Dimensions : 3.5x13.4x19cm Weight : 0.73 Kg / 1.61 lbs & 0.84 Kg / 1.85 lbsWEEE weight : 1.15 Kg / 2.53 lbs & 1.26 Kg / 2.78 lbs Shipping weight : 1.37 Kg / 3.02 lbs & 1.48 Kg / 3.26 lbs MTBF (Years) : 28 / 14Environment : 40-105° F, 0-40° CHumidity : 5-95% non-condensing

Performance Overview: Security Processor: 4x 1.4 GHzMemory (RAM): 1 GB 1 GbE Copper interfaces : 10 Expansion : Expansion Slot (Rear), 2 USB Firewall inspection throughput: 1.5 Gbps Full DPI throughput: 500 Mbps Application inspection throughput:1.1 Gbps IPS throughput : 1.1 Gbps Anti-malware inspection throughput : 500 Mbps IMIX throughput : 900 Mbps SSL Inspection and Decryption (DPI SSL) :200 Mbps VPN throughput : 1.1 Gbps Connections per second : 12,000Maximum connections (SPI) : 150,000Maximum connections (DPI) : 125,000 Single Sign-On (SSO) Users : 500 VLAN interfaces : 50SonicPoints supported (Maximum) : 24 VPN :Site-to-Site VPN Tunnels : 50 IPSec VPN clients (Maximum) : 2 (25) SSL VPN licenses (Maximum) : 2 (200) Virtual assist bundled (Maximum) : 1 (30-day trial) Encryption/Authentication : DES, 3DES, AES (128, 192, 256-bit), MD5, SHA-1, Suite B CryptographyKey exchange : Diffie Hellman Groups 1, 2, 5, 14Route-based VPN : RIP, OSPFCertificate support : Verisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWall-to-SonicWall VPN, SCEPVPN features : Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPNGlobal VPN client platforms supported : Microsoft® Windows Vista 32/64-bit, Windows 7 32/64-bit, Windows 8.0 32/64-bit, Windows 8.1 32/64-bitNetExtender : Microsoft Windows Vista 32/64-bit, Windows 7, Windows 8.0 32/64-bit, Windows 8.1 32/64-bit, Mac OS X 10.4+, Linux FC3+/Ubuntu 7+/OpenSUSEMobile Connect : Apple® iOS, Mac OS X, Google® Android™, Kindle Fire, Windows 8.1 (Embedded) Security Services:Deep Packet Inspection services : Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSLContent Filtering Service (CFS) : HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid listsEnforced Client Anti-Virus and Anti-Spyware : McAfee®Comprehensive Anti-Spam Service : SupportedApplication Intelligence and Control : Yes Application Visualization : Yes Networking:IP address assignment : Static, (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relayNAT modes : 1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent modeRouting protocols : BGP, OSPF, RIPv1/v2, static routes, policy-based routing, multicast QoS : Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1e (WMM)Authentication : XAUTH/RADIUS, Active Directory, SSO, LDAP, Novell, internal user database, Terminal Services, CitrixLocal user database : 150 VoIP : Full H.323v1-5, SIPStandards : TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3Certifications : VPNC, IPv6 (Phase 2)Certifications pending : Common Criteria NDPP, FIPS 140-2 (with Suite B) Level 2, ICSA Firewall, ICSA Anti-virus, UC APLCommon Access Card (CAC) : SupportedHigh Availability : Active/Standby with stateful synchronization Hardware:Form factor : Desktop Power Supply (W) : 36W external Maximum power consumption (W) : 13.4 / 17.7Input power : 100 to 240 VAC, 50-60 Hz, 1 ATotal heat dissipation : 45.9 / 60.5 BTU Dimensions : 3.5x15x22.5cm Weight : 0.92 Kg / 2.03 lbs & 1.05 Kg / 2.31 lbs WEEE weight : 1.34 Kg / 2.95 lbs & 1.48 Kg / 3.26 lbs Shipping weight : 1.93 Kg / 4.25 lbs & 2.07 Kg / 4.56 lbs MTBF (Years) : 20 / 12Environment : 40-105° F, 0-40° CHumidity : 5-95% non-condensing

Performance Overview: Operating system : SonicOS 6.2.xSecurity Processor: 2x 800 MHzMemory (RAM): 1 GB 1 GbE Copper interfaces : 5 Expansion : USB Firewall inspection throughput: 750 Mbps Full DPI throughput:100 Mbps Application inspection throughput:300 Mbps IPS throughput : 300 Mbps Anti-malware inspection throughput : 100 Mbps IMIX throughput : 200 Mbps SSL Inspection and Decryption (DPI SSL) :45 Mbps VPN throughput : 300 Mbps Connections per second : 5,000 Maximum connections (SPI) : 50,000 Maximum connections (DPI) : 50,000 Single Sign-On (SSO) Users :500 VLAN interfaces : 25 SonicPoints supported (Maximum) : 8 VPN :Site-to-Site VPN Tunnels : 10 IPSec VPN clients (Maximum) : 1 (10) SSL VPN licenses (Maximum) : 1 (50) Virtual assist bundled (Maximum) : 1 (30-day trial) Encryption/Authentication : DES, 3DES, AES (128, 192, 256-bit), MD5, SHA-1, Suite B CryptographyKey exchange : Diffie Hellman Groups 1, 2, 5, 14Route-based VPN : RIP, OSPFCertificate support : Verisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWall-to-SonicWall VPN, SCEPVPN features : Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPNGlobal VPN client platforms supported : Microsoft® Windows Vista 32/64-bit, Windows 7 32/64-bit, Windows 8.0 32/64-bit, Windows 8.1 32/64-bitNetExtender : Microsoft Windows Vista 32/64-bit, Windows 7, Windows 8.0 32/64-bit, Windows 8.1 32/64-bit, Mac OS X 10.4+, Linux FC3+/Ubuntu 7+/OpenSUSEMobile Connect : Apple® iOS, Mac OS X, Google® Android™, Kindle Fire, Windows 8.1 (Embedded) Security Services:Deep Packet Inspection services : Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSLContent Filtering Service (CFS) : HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid listsEnforced Client Anti-Virus and Anti-Spyware : McAfee®Comprehensive Anti-Spam Service : SupportedApplication Intelligence and Control : Yes Application Visualization : Yes Networking:IP address assignment : Static, (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relayNAT modes : 1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent modeRouting protocols : OSPF, RIPv1/v2, static routes, policy-based routing, multicast QoS : Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1e (WMM)Authentication : XAUTH/RADIUS, Active Directory, SSO, LDAP, Novell, internal user database, Terminal Services, CitrixLocal user database : 150 VoIP : Full H.323v1-5, SIPStandards : TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3Certifications : VPNC, IPv6 (Phase 2)Certifications pending : Common Criteria NDPP, FIPS 140-2 (with Suite B) Level 2, ICSA Firewall, ICSA Anti-virus, UC APLCommon Access Card (CAC) : SupportedHigh Availability : Active/Standby Hardware:Form factor : Desktop Power Supply (W) : 24W external Maximum power consumption (W) : 6.9 / 12.0Input power : 100 to 240 VAC, 50-60 Hz, 1 ATotal heat dissipation : 23.5 / 40.9 BTU Dimensions : 3.5x13.4x19cm Weight : 0.73 Kg / 1.61 lbs & 0.84 Kg / 1.85 lbsWEEE weight : 1.15 Kg / 2.53 lbs & 1.26 Kg / 2.78 lbs Shipping weight : 1.37 Kg / 3.02 lbs & 1.48 Kg / 3.26 lbs MTBF (Years) : 28 / 14Environment : 40-105° F, 0-40° CHumidity : 5-95% non-condensing

Performance Overview: Security Processor: 4x 1.4 GHzMemory (RAM): 1 GB 1 GbE Copper interfaces : 10 Expansion : Expansion Slot (Rear), 2 USB Firewall inspection throughput: 1.5 Gbps Full DPI throughput: 500 Mbps Application inspection throughput:1.1 Gbps IPS throughput : 1.1 Gbps Anti-malware inspection throughput : 500 Mbps IMIX throughput : 900 Mbps SSL Inspection and Decryption (DPI SSL) :200 Mbps VPN throughput : 1.1 Gbps Connections per second : 12,000Maximum connections (SPI) : 150,000Maximum connections (DPI) : 125,000 Single Sign-On (SSO) Users : 500 VLAN interfaces : 50SonicPoints supported (Maximum) : 24 VPN :Site-to-Site VPN Tunnels : 50 IPSec VPN clients (Maximum) : 2 (25) SSL VPN licenses (Maximum) : 2 (200) Virtual assist bundled (Maximum) : 1 (30-day trial) Encryption/Authentication : DES, 3DES, AES (128, 192, 256-bit), MD5, SHA-1, Suite B CryptographyKey exchange : Diffie Hellman Groups 1, 2, 5, 14Route-based VPN : RIP, OSPFCertificate support : Verisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWall-to-SonicWall VPN, SCEPVPN features : Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPNGlobal VPN client platforms supported : Microsoft® Windows Vista 32/64-bit, Windows 7 32/64-bit, Windows 8.0 32/64-bit, Windows 8.1 32/64-bitNetExtender : Microsoft Windows Vista 32/64-bit, Windows 7, Windows 8.0 32/64-bit, Windows 8.1 32/64-bit, Mac OS X 10.4+, Linux FC3+/Ubuntu 7+/OpenSUSEMobile Connect : Apple® iOS, Mac OS X, Google® Android™, Kindle Fire, Windows 8.1 (Embedded) Security Services:Deep Packet Inspection services : Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSLContent Filtering Service (CFS) : HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid listsEnforced Client Anti-Virus and Anti-Spyware : McAfee®Comprehensive Anti-Spam Service : SupportedApplication Intelligence and Control : Yes Application Visualization : Yes Networking:IP address assignment : Static, (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relayNAT modes : 1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent modeRouting protocols : BGP, OSPF, RIPv1/v2, static routes, policy-based routing, multicast QoS : Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1e (WMM)Authentication : XAUTH/RADIUS, Active Directory, SSO, LDAP, Novell, internal user database, Terminal Services, CitrixLocal user database : 150 VoIP : Full H.323v1-5, SIPStandards : TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3Certifications : VPNC, IPv6 (Phase 2)Certifications pending : Common Criteria NDPP, FIPS 140-2 (with Suite B) Level 2, ICSA Firewall, ICSA Anti-virus, UC APLCommon Access Card (CAC) : SupportedHigh Availability : Active/Standby with stateful synchronization Hardware:Form factor : Desktop Power Supply (W) : 36W external Maximum power consumption (W) : 13.4 / 17.7Input power : 100 to 240 VAC, 50-60 Hz, 1 ATotal heat dissipation : 45.9 / 60.5 BTU Dimensions : 3.5x15x22.5cm Weight : 0.92 Kg / 2.03 lbs & 1.05 Kg / 2.31 lbs WEEE weight : 1.34 Kg / 2.95 lbs & 1.48 Kg / 3.26 lbs Shipping weight : 1.93 Kg / 4.25 lbs & 2.07 Kg / 4.56 lbs MTBF (Years) : 20 / 12Environment : 40-105° F, 0-40° CHumidity : 5-95% non-condensing

Better security, faster speeds, smaller footprint : Stop more threats with our fully integrated next-generation firewall (NGFW) platform. The 4100 Series’ 1-rack-unit size is ideal at the Internet edge and in high-performance environments. It shows you what’s happening on your network, detects attacks earlier so you can act faster, and reduces management complexity.   Performance and density optimized : Key capabilities include support for 1/10/40 Gigabit Ethernet interfaces, up to 60 Gbps stateful firewall throughput, low latency, and a 1 RU form factor.   Unified management : Reduce complexity and simplify operations. Consolidate all security functions in a single management interface. It automatically prioritizes security events, recommends tailored security protections, and tracks and contains malware infections.

Overview: Meet the industry’s first adaptive, threat-focused next-generation firewall (NGFW) designed for a new era of threat and advanced malware protection. Cisco ASA with FirePOWER Services delivers integrated threat defense for the entire attack continuum - before, during, and after an attack - by combining the proven security capabilities of the Cisco ASA firewall with the industry-leading Sourcefire threat and advanced malware protection features together in a single device. The solution uniquely extends the capabilities of the Cisco ASA 5500-X Series Next-Generation Firewalls beyond what today’s NGFW solutions are capable of   Superior Multilayered Protection : Cisco ASA with FirePOWER Services brings distinctive threat-focused next-generation security services to the Cisco ASA 5500-X Series Next-Generation Firewalls and Cisco ASA 5585-X Adaptive Security Appliance firewall products. It provides comprehensive protection from known and advanced threats, including protection against targeted and persistent malware attacks (Figure 1). Cisco ASA with FirePOWER Services features these comprehensive capabilities: Site-to-site and remote access VPN and advanced clustering provide highly secure, high-performance access and high availability to help ensure business continuity. Granular Application Visibility and Control (AVC) supports more than 3,000 application-layer and risk-based controls that can launch tailored intrusion prevention system (IPS) threat detection policies to optimize security effectiveness. The industry-leading Cisco ASA with FirePOWER next-generation IPS (NGIPS) provides highly effective threat prevention and full contextual awareness of users, infrastructure, applications, and content to detect multivector threats and automate defense response. Reputation- and category-based URL filtering offer comprehensive alerting and control over suspicious web traffic and enforce policies on hundreds of millions of URLs in more than 80 categories. AMP provides industry-leading breach detection effectiveness, a low total cost of ownership, and superior protection value that helps you discover, understand, and stop malware and emerging threats missed by other security layers.   Reduced Costs and Complexity : Cisco ASA with FirePOWER Services incorporates an integrated approach to threat defense, reducing capital and operating costs and administrative complexity. It smoothly integrates with the existing IT environment, work stream, and network fabric. The purpose-built appliance family is highly scalable, performs at up to multigigabit speeds, and provides consistent and robust security across branch, Internet edge, and data centers in both physical and virtual environments.

Overview: Meet the industry’s first adaptive, threat-focused next-generation firewall (NGFW) designed for a new era of threat and advanced malware protection. Cisco ASA with FirePOWER Services delivers integrated threat defense for the entire attack continuum - before, during, and after an attack - by combining the proven security capabilities of the Cisco ASA firewall with the industry-leading Sourcefire threat and advanced malware protection features together in a single device. The solution uniquely extends the capabilities of the Cisco ASA 5500-X Series Next-Generation Firewalls beyond what today’s NGFW solutions are capable of   Superior Multilayered Protection : Cisco ASA with FirePOWER Services brings distinctive threat-focused next-generation security services to the Cisco ASA 5500-X Series Next-Generation Firewalls and Cisco ASA 5585-X Adaptive Security Appliance firewall products. It provides comprehensive protection from known and advanced threats, including protection against targeted and persistent malware attacks (Figure 1). Cisco ASA with FirePOWER Services features these comprehensive capabilities: Site-to-site and remote access VPN and advanced clustering provide highly secure, high-performance access and high availability to help ensure business continuity. Granular Application Visibility and Control (AVC) supports more than 3,000 application-layer and risk-based controls that can launch tailored intrusion prevention system (IPS) threat detection policies to optimize security effectiveness. The industry-leading Cisco ASA with FirePOWER next-generation IPS (NGIPS) provides highly effective threat prevention and full contextual awareness of users, infrastructure, applications, and content to detect multivector threats and automate defense response. Reputation- and category-based URL filtering offer comprehensive alerting and control over suspicious web traffic and enforce policies on hundreds of millions of URLs in more than 80 categories. AMP provides industry-leading breach detection effectiveness, a low total cost of ownership, and superior protection value that helps you discover, understand, and stop malware and emerging threats missed by other security layers.   Reduced Costs and Complexity : Cisco ASA with FirePOWER Services incorporates an integrated approach to threat defense, reducing capital and operating costs and administrative complexity. It smoothly integrates with the existing IT environment, work stream, and network fabric. The purpose-built appliance family is highly scalable, performs at up to multigigabit speeds, and provides consistent and robust security across branch, Internet edge, and data centers in both physical and virtual environments.

Superior business resiliency and protection : Gain business resiliency through superior security with sustained performance. The Firepower 2100 Series has an innovative dual multicore CPU architecture that optimizes firewall, cryptographic, and threat inspection functions simultaneously. Now, achieving security doesn’t come at the expense of network performance.   Optimized performance and port density : Firewall throughput speeds from 2 Gbps to 8.5 Gbps. Support for sixteen (16) 1 GE ports on the low-end models. The high-end models support up to twenty-four (24) 1 GE ports or up to sixteen (16) 10 GE ports. All in a 1RU form factor.    Innovative architecture : With its unique dual-CPU, multicore architecture, the 2100 maintains throughput performance when threat inspection is activated by routing different workloads to different chips. And enabling the threat protection features does not affect the firewall throughput.   Integration adds value : Further strengthen your defenses. Share intelligence, context, and policy controls by integration with third-party and other Cisco security solutions. Enable automatic device quarantining and rapid threat containment with Cisco ISE.