Firewall

TOTAL NETWORK PROTECTION Small businesses and remote locations have long been thought of as soft targets for attackers. WatchGuard Firebox T35 and T55 tabletop appliances bring enterprise-level network security to those small office/branch office and small retail environments that matches the reality of today’s distributed work style. Our unique product architecture enables smaller businesses to leverage best-in-class security services – from URL filtering and intrusion prevention to application control and data loss prevention – minus the cost and complexity of managing multiple single-point solutions.   QUICK AND SIMPLE DEPLOYMENT Cloud-based RapidDeploy technology, a configuration and deployment tool that comes standard with WatchGuard Firebox appliances, enables IT staff to create and store configuration data in the cloud – public or private – and have a new appliance directly shipped to its destination. Once the device arrives, it can connect to the cloud for a secure download of its configuration settings, saving staff travel time and money. This technology is particularly advantageous for large distributed enterprises where managing a multitude of devices efficiently across multiple locations and geographies is critical.   EASY TO MANAGE AND UNDERSTAND Firebox T Series appliances are not only easy to initially configure and deploy, they are also designed with an emphasis on centralized management, making ongoing policy and network management simple and straightforward. WatchGuard Dimension, which is included with purchase, provides a suite of big data visibility and reporting tools that instantly identify and distill key network security threats, issues and trends so you can take immediate preventive or corrective action. Security is complex, running it doesn’t have to be.   FEATURES & BENEFITS Wireless versions of the T35 and T55 use 802.11ac operating in the 2.4 GHz and 5GHz bands for high performance and superior reliability. All logging and reporting functions included with purchase, with over 100 dashboards and reports including PCI and HIPAA. 5 Gigabit Ethernet ports support high-speed LAN backbone infrastructures & gigabit WAN connections. PoE port to power a peripheral device such as a WatchGuard Secure Wi-Fi Access Point, allowing administrators to extend the reach of their networks without having to run costly AC power to the remote device.

Interfaces and Modules :Hardware Accelerated : 10 GE SFP+ Slots 2Hardware Accelerated GE SFP Slots : 16Hardware Accelerated GE RJ45 Ports : 16GE RJ45 Management / HA Ports : 2USB Ports (Client / Server) : 1 / 2Console Port : 1Onboard Storage : 1x 256 GB SSDIncluded Transceivers : 0 System Performance — Enterprise Traffic Mix:IPS Throughput : 4.2 GbpsNGFW Throughput : 4 GbpsThreat Protection Throughput : 3 Gbps System Performance and Capacity:IPv4 Firewall Throughput(1518 / 512 / 64 byte, UDP) : 52 / 52 / 33 GbpsIPv6 Firewall Throughput(1518 / 512 / 86 byte, UDP) : 52 / 52 / 33 GbpsFirewall Latency (64 byte, UDP) : 3 μsFirewall Throughput (Packet per Second) : 49.5 MppsConcurrent Sessions (TCP) : 11 MillionNew Sessions/Second (TCP) : 280,000Firewall Policies : 10,000IPsec VPN Throughput (512 byte) : 25 GbpsGateway-to-Gateway IPsec VPN Tunnels : 2,000Client-to-Gateway IPsec VPN Tunnels : 50,000SSL-VPN Throughput : 3.6 GbpsConcurrent SSL-VPN Users(Recommended Maximum, Tunnel Mode) : 10,000SSL Inspection Throughput (IPS, avg. HTTPS) : 3.9 GbpsSSL Inspection CPS (IPS, avg. HTTPS) : 2,400SSL Inspection Concurrent Session(IPS, avg. HTTPS) : 800,000Application Control Throughput (HTTP 64K) : 10 GbpsCAPWAP Throughput (1444 byte, UDP) : 11 GbpsVirtual Domains (Default / Maximum) : 10 / 10Maximum Number of FortiSwitches Supported : 64Maximum Number of FortiAPs (Total / Tunnel) : 1024 / 512Maximum Number of FortiTokens : 5,000High Availability Configurations : Active-Active, Active-Passive, Clustering Dimensions and Power:Height x Width x Length (inches): 1.75 x 17.22 x 18.24Height x Width x Length (mm) : 44.45 x 437.5 x 463.2Weight : 20.24 lbs (9.18 kg)Form Factor (supports EIA / non-EIA standards) : Rack Mount, 1 RU Power Input : 100–240V AC, 50–60 Hz, 300 W RedundantPower Consumption (Average / Maximum): 135 W / 187.2 WCurrent (Maximum): 100V/5A, 240V/3AHeat Dissipation:638.75 BTU/hRedundant Power Supplies: Yes (Hot Swappable) Operating Environment and Certifications:Operating Temperature : 32–104°F (0–40°C)Storage Temperature : -31–158°F (-35–70°C)Humidity : 10–90% non-condensingNoise Level : 49.9 dBAOperating Altitude Up to : 7,400 ft (2,250 m)Compliance : FCC Part 15 Class A, RCM, VCCI, CE, UL/cUL, CBCertifications ICSA Labs: Firewall, IPsec, IPS, Antivirus, SSL-VPN; USGv6/IPv6

FORTIGATE 100F FORTIGATE 101FHardware Specifications:GE RJ45 Ports : 12GE RJ45 Management/HA/DMZ Ports : 1 / 2 / 1GE SFP Slots : 410 GE SFP+ Slots : 2GE RJ45 WAN Ports : 2GE RJ45 or SFP Shared Ports : 4USB Port : 1Console Port : 1Internal Storage : 1x 480 GB SSDIncluded Transceivers : 0 System Performance — Enterprise Traffic Mix:IPS Throughput : 2.6 GbpsNGFW Throughput : 1.6 GbpsThreat Protection Throughput : 1 Gbps System Performance:Firewall Throughput(1518 / 512 / 64 byte UDP packets) : 20 / 18 / 10 GbpsFirewall Latency (64 byte UDP packets) : 5 μsFirewall Throughput (Packets Per Second) : 15 MppsConcurrent Sessions (TCP) : 1.5 MillionNew Sessions/Second (TCP) : 56,000Firewall Policies : 10,000IPsec VPN Throughput (512 byte) : 11.5 GbpsGateway-to-Gateway IPsec VPN Tunnels : 2,500Client-to-Gateway IPsec VPN Tunnels : 16,000SSL-VPN Throughput : 1 GbpsConcurrent SSL-VPN Users(Recommended Maximum, Tunnel Mode) : 500SSL Inspection Throughput (IPS, avg. HTTPS) : 1 GbpsSSL Inspection CPS (IPS, avg. HTTPS) : 1,800SSL Inspection Concurrent Session(IPS, avg. HTTPS) : 135,000Application Control Throughput (HTTP 64K) : 2.2 GbpsCAPWAP Throughput (HTTP 64K) : 15 GbpsVirtual Domains (Default / Maximum) : 10 / 10Maximum Number of FortiSwitches Supported : 24Maximum Number of FortiAPs(Total / Tunnel Mode) : 128 / 64Maximum Number of FortiTokens : 5,000High Availability Configurations : Active / Active, Active / Passive, Clustering Dimensions:Height x Width x Length (inches) : 1.73 x 17 x 10Height x Width x Length (mm) : 44 x 432 x 254Form Factor (supports EIA / non-EIA standards) : Rack Mount, 1 RUWeight : 7.25 lbs (3.29 kg) 7.56 lbs (3.43 kg) Environment:Power Required : 100–240V AC, 50-60Maximum Current : 100V / 1A, 240V / 0.5APower Consumption (Average / Maximum) : 35.1 W / 38.7 W 35.3 W / 39.1 WHeat Dissipation : 119.77 BTU/h 121.13 BTU/hRedundant Power Supplies : Yes Environment:Operating Temperature : 32–104°F (0–40°C)Storage Temperature : -31–158°F (-35–70°C)Operating Altitude Up to : 7,400 ft (2,250 m)Humidity : 10–90% non-condensingNoise Level : 40.4 dBACompliance : FCC Part 15B, Class A, CE, RCM, VCCI, UL/cUL, CB, BSMICertifications ICSA Labs: Firewall, IPsec, IPS, Antivirus, SSL-VPN; IPv6

SpecificationsFORTIGATE 100E Hardware Specifications:GE RJ45 Ports : 14 GE RJ45 Management/HA/DMZ Ports : 1 / 2 GE SFP Slots : 0 GE RJ45 PoE/+ Ports : 0GE RJ45 WAN Ports : 2 GE RJ45 or SFP Shared Ports : 2 USB Port : 1 Console Port : 1 Internal Storage : 0Included Transceivers : 0 System Performance — Enterprise Traffic Mix:IPS Throughput : 500 MbpsNGFW Throughput : 360 MbpsThreat Protection Throughput : 250 Mbps System Performance:Firewall Throughput (1518 / 512 / 64 byte UDP packets) : 7.4 / 7.4 / 4.4 GbpsFirewall Latency (64 byte UDP packets) : 3 μsFirewall Throughput (Packets Per Second) : 6.6 MppsConcurrent Sessions (TCP) : 2 MillionNew Sessions/Second (TCP) : 30,000Firewall Policies : 10,000IPsec VPN Throughput (512 byte) : 4 GbpsGateway-to-Gateway IPsec VPN Tunnels : 2,000Client-to-Gateway IPsec VPN Tunnels : 10,000SSL-VPN Throughput : 250 MbpsConcurrent SSL-VPN Users(Recommended Maximum, Tunnel Mode) : 500SSL Inspection Throughput (IPS, avg. HTTPS) : 130 MbpsSSL Inspection CPS (IPS, avg. HTTPS) : 130SSL Inspection Concurrent Session (IPS, avg. HTTPS) : 125,000Application Control Throughput (HTTP 64K) : 1 GbpsCAPWAP Throughput (1444 byte, UDP) : 1.5 GbpsVirtual Domains (Default / Maximum) : 10 / 10Maximum Number of FortiSwitches Supported : 24Maximum Number of FortiAPs (Total / Tunnel Mode) : 64 / 32Maximum Number of FortiTokens : 5,000High Availability Configurations : Active / Active, Active / Passive, Clustering Dimensions:Height x Width x Length (inches) : 1.75 x 17 x 10 1.75 x 17 x 10 1.75 x 17 x 10 1.75 x 17 x 15.5Height x Width x Length (mm) : 44.45 x 432 x 254 44.45 x 432 x 254 44.45 x 432 x 254 44.45 x 432 x 394Form Factor (supports EIA / non-EIA standards) : Rack Mount, 1 RU Rack Mount, 1 RU Rack Mount, 1 RU Rack Mount, 1 RUWeight : 7.28 lbs (3.3 kg) 7.28 lbs (3.3 kg) 7.28 lbs (3.3 kg) 12.4 lbs (5.6 kg) Environment:Power Input : 100–240V AC, 50–60 HzMaximum Current : 100V / 0.52A, 240V / 0.22A 100V / 0.59A, 240V / 0.25A 100V / 0.52A, 240V / 0.22A 100V / 5ATotal Available PoE Power Budget* — — — 400 WPower Consumption (Average / Maximum) : 23.0 W / 28.6 W; 51.9 VA 24.8 W / 33.8 W; 59.2 VA 24.4 W / 28.6 W; 51.9 VA 477.1 W / 500.0 WHeat Dissipation : 97.6 BTU/h 115.3 BTU/h 97.6 BTU/h 1706.07 BTU/h

FG-6300F/6301F Interfaces and Modules:40/100 GE QSFP28 Slots : 41/10/25 GE SFP28 Slots : 2410 GE SFP+ Slots : 3GE RJ45 Management Ports : 2USB Ports : 1Console Port : 1Internal Storage : 2x 1 TB NVMe (for 6301F and 6501F only)Included Transceivers : 2x SFP+ (SR 10 GE) System Performance — Enterprise Traffic Mix :IPS Throughput : 110 Gbps NGFW Throughput : 90 Gbps Threat Protection Throughput : 60 Gbps System Performance and Capacity:Firewall Throughput (1518 / 512 / 64 byte, UDP) : 239 / 238 / 135 Gbps Firewall Latency (64 byte, UDP) : 5 μs Firewall Throughput (Packet per Second): 202.5 Mpps Concurrent Sessions (TCP) 120 Million : 200 MillionNew Sessions/Sec (TCP) : 2 Million Firewall Policies : 200,000 IPsec VPN Throughput (512 byte) : 96 Gbps Gateway-to-Gateway IPsec VPN Tunnels : 16,000 Client-to-Gateway IPsec VPN Tunnels : 90,000 SSL-VPN Throughput : 9 Gbps Concurrent SSL-VPN Users(Recommended Maximum, Tunnel Mode) : 30,000SSL Inspection Throughput (IPS, avg. HTTPS) : 66 Gbps SSL Inspection CPS (IPS, avg. HTTPS) : 30,000 SSL Inspection Concurrent Session(IPS, avg. HTTPS) : 10 Million Application Control Throughput (HTTP 64K) : 150 Gbps CAPWAP Throughput (1444 byte, UDP) : N/A Virtual Domains (Default / Maximum) : 10 / 500Maximum Number of FortiSwitches Supported : 256Maximum Number of FortiAPs (Total / Tunnel Mode) : N/AHigh Availability Configurations : Supported Dimensions and Power:Height x Width x Length (inches) : 5.20 x 17.20 x 26.185.3 x 17.2 x 27.3Height x Width x Length (mm) : 132 x 437 x 665 Weight : 67.68 lbs (30.7 kg) Form Factor (supports EIA/non-EIA standards) : Rack Mount, 3 RUAC Power Supply : 100–240V AC, 50–60 HzRedundant Power Supplies : 2+1 Redundant, Hot Swappable Operating Environment and Certifications:Operating Temperature : 32–104°F (0–40°C)Storage Temperature : -31–158°F (-35–70°C)Humidity : 10–90% non-condensingNoise Level : 57.43 dBAOperating Altitude Up to : 7,400 ft (2,250 m)Compliance : FCC Part 15 Class A, RCM, VCCI, CE, UL/cUL, CB

Performance Overview: Operating system : SonicOS 5.9.x – Wired / SonicOS 6.2.x – WirelessSecurity Processor: 2x400 MHz (Wired) / 2x800 MHz (Wireless) Memory (RAM): 512 MB (Wired) /1 GB (Wireless) 1 GbE Copper interfaces : 5 Expansion : USB Firewall inspection throughput: 300 Mbps Full DPI throughput:50 Mbps Application inspection throughput:0 IPS throughput : 100 Mbps Anti-malware inspection throughput : 50 Mbps IMIX throughput : 60 Mbps SSL Inspection and Decryption (DPI SSL) :15 Mbps VPN throughput : 100 Mbps Connections per second : 1,800 Maximum connections (SPI) : 10,000 Maximum connections (DPI) : 10,000 Single Sign-On (SSO) Users :250 VLAN interfaces : 25 SonicPoints supported (Maximum) : 2 VPN :Site-to-Site VPN Tunnels : 10 IPSec VPN clients (Maximum) : 1 (5) SSL VPN licenses (Maximum) : 1 (10) Virtual assist bundled (Maximum) : No Encryption/Authentication : DES, 3DES, AES (128, 192, 256-bit), MD5, SHA-1, Suite B CryptographyKey exchange : Diffie Hellman Groups 1, 2, 5, 14Route-based VPN : RIP, OSPFCertificate support : Verisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWall-to-SonicWall VPN, SCEPVPN features : Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPNGlobal VPN client platforms supported : Microsoft® Windows Vista 32/64-bit, Windows 7 32/64-bit, Windows 8.0 32/64-bit, Windows 8.1 32/64-bitNetExtender : Microsoft Windows Vista 32/64-bit, Windows 7, Windows 8.0 32/64-bit, Windows 8.1 32/64-bit, Mac OS X 10.4+, Linux FC3+/Ubuntu 7+/OpenSUSEMobile Connect : Apple® iOS, Mac OS X, Google® Android™, Kindle Fire, Windows 8.1 (Embedded) Security Services:Deep Packet Inspection services : Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSLContent Filtering Service (CFS) : HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid listsEnforced Client Anti-Virus and Anti-Spyware : McAfee®Comprehensive Anti-Spam Service : SupportedApplication Intelligence and Control : Yes Application Visualization : No Networking:IP address assignment : Static, (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relayNAT modes : 1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent modeRouting protocols : OSPF, RIPv1/v2, static routes, policy-based routing, multicast QoS : Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1e (WMM)Authentication : XAUTH/RADIUS, Active Directory, SSO, LDAP, Novell, internal user database, Terminal Services, CitrixLocal user database : 150 VoIP : Full H.323v1-5, SIPStandards : TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3Certifications : VPNC, IPv6 (Phase 2)Certifications pending : Common Criteria NDPP, FIPS 140-2 (with Suite B) Level 2, ICSA Firewall, ICSA Anti-virus, UC APLCommon Access Card (CAC) : SupportedHigh Availability : No Hardware:Form factor : Desktop Power Supply (W) : 24W external Maximum power consumption (W) : 6.4 / 11.3Input power : 100 to 240 VAC, 50-60 Hz, 1 ATotal heat dissipation : 21.8 / 38.7 BTU Dimensions : 3.6x14.1x19cm Weight : 0.34 Kg / 0.75 lbs & 0.48 Kg / 1.06 lbs WEEE weight : 0.80 Kg / 1.76 lbs & 0.94 Kg / 2.07 lbs Shipping weight : 1.20 Kg / 2.64 lbs & 1.34 Kg / 2.95 lbs MTBF (Years) : 30 / 15 Environment : 40-105° F, 0-40° CHumidity : 5-95% non-condensing

Performance Overview: Operating system : SonicOS 5.9.x – Wired / SonicOS 6.2.x – WirelessSecurity Processor: 2x400 MHz (Wired) / 2x800 MHz (Wireless) Memory (RAM): 512 MB (Wired) /1 GB (Wireless) 1 GbE Copper interfaces : 5 Expansion : USB Firewall inspection throughput: 300 Mbps Full DPI throughput:50 Mbps Application inspection throughput:0 IPS throughput : 100 Mbps Anti-malware inspection throughput : 50 Mbps IMIX throughput : 60 Mbps SSL Inspection and Decryption (DPI SSL) :15 Mbps VPN throughput : 100 Mbps Connections per second : 1,800 Maximum connections (SPI) : 10,000 Maximum connections (DPI) : 10,000 Single Sign-On (SSO) Users :250 VLAN interfaces : 25 SonicPoints supported (Maximum) : 2 VPN :Site-to-Site VPN Tunnels : 10 IPSec VPN clients (Maximum) : 1 (5) SSL VPN licenses (Maximum) : 1 (10) Virtual assist bundled (Maximum) : No Encryption/Authentication : DES, 3DES, AES (128, 192, 256-bit), MD5, SHA-1, Suite B CryptographyKey exchange : Diffie Hellman Groups 1, 2, 5, 14Route-based VPN : RIP, OSPFCertificate support : Verisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWall-to-SonicWall VPN, SCEPVPN features : Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPNGlobal VPN client platforms supported : Microsoft® Windows Vista 32/64-bit, Windows 7 32/64-bit, Windows 8.0 32/64-bit, Windows 8.1 32/64-bitNetExtender : Microsoft Windows Vista 32/64-bit, Windows 7, Windows 8.0 32/64-bit, Windows 8.1 32/64-bit, Mac OS X 10.4+, Linux FC3+/Ubuntu 7+/OpenSUSEMobile Connect : Apple® iOS, Mac OS X, Google® Android™, Kindle Fire, Windows 8.1 (Embedded) Security Services:Deep Packet Inspection services : Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSLContent Filtering Service (CFS) : HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid listsEnforced Client Anti-Virus and Anti-Spyware : McAfee®Comprehensive Anti-Spam Service : SupportedApplication Intelligence and Control : Yes Application Visualization : No Networking:IP address assignment : Static, (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relayNAT modes : 1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent modeRouting protocols : OSPF, RIPv1/v2, static routes, policy-based routing, multicast QoS : Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1e (WMM)Authentication : XAUTH/RADIUS, Active Directory, SSO, LDAP, Novell, internal user database, Terminal Services, CitrixLocal user database : 150 VoIP : Full H.323v1-5, SIPStandards : TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3Certifications : VPNC, IPv6 (Phase 2)Certifications pending : Common Criteria NDPP, FIPS 140-2 (with Suite B) Level 2, ICSA Firewall, ICSA Anti-virus, UC APLCommon Access Card (CAC) : SupportedHigh Availability : No Hardware:Form factor : Desktop Power Supply (W) : 24W external Maximum power consumption (W) : 6.4 / 11.3Input power : 100 to 240 VAC, 50-60 Hz, 1 ATotal heat dissipation : 21.8 / 38.7 BTU Dimensions : 3.6x14.1x19cm Weight : 0.34 Kg / 0.75 lbs & 0.48 Kg / 1.06 lbs WEEE weight : 0.80 Kg / 1.76 lbs & 0.94 Kg / 2.07 lbs Shipping weight : 1.20 Kg / 2.64 lbs & 1.34 Kg / 2.95 lbs MTBF (Years) : 30 / 15 Environment : 40-105° F, 0-40° CHumidity : 5-95% non-condensing

Performance Overview: Security Processor: 4x 800 MHz Memory (RAM): 1 GB 1 GbE Copper interfaces : 7 Expansion : USB Firewall inspection throughput: 1.3 Gbps Full DPI throughput:300Mbps Application inspection throughput:900Mbps IPS throughput : 900Mbps Anti-malware inspection throughput : 300Mbps IMIX throughput : 500Mbps SSL Inspection and Decryption (DPI SSL) : 100Mbps VPN throughput : 900 Mbps Connections per second : 6,000Maximum connections (SPI) : 100,000 Maximum connections (DPI) : 90,000 Single Sign-On (SSO) Users :500 VLAN interfaces : 50 SonicPoints supported (Maximum) : 16 VPN :Site-to-Site VPN Tunnels : 20 IPSec VPN clients (Maximum) : 2 (25) SSL VPN licenses (Maximum) : 2 (100) Virtual assist bundled (Maximum) : 1 (30-day trial) Encryption/Authentication : DES, 3DES, AES (128, 192, 256-bit), MD5, SHA-1, Suite B CryptographyKey exchange : Diffie Hellman Groups 1, 2, 5, 14Route-based VPN : RIP, OSPFCertificate support : Verisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWall-to-SonicWall VPN, SCEPVPN features : Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPNGlobal VPN client platforms supported : Microsoft® Windows Vista 32/64-bit, Windows 7 32/64-bit, Windows 8.0 32/64-bit, Windows 8.1 32/64-bitNetExtender : Microsoft Windows Vista 32/64-bit, Windows 7, Windows 8.0 32/64-bit, Windows 8.1 32/64-bit, Mac OS X 10.4+, Linux FC3+/Ubuntu 7+/OpenSUSEMobile Connect : Apple® iOS, Mac OS X, Google® Android™, Kindle Fire, Windows 8.1 (Embedded) Security Services:Deep Packet Inspection services : Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSLContent Filtering Service (CFS) : HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid listsEnforced Client Anti-Virus and Anti-Spyware : McAfee®Comprehensive Anti-Spam Service : SupportedApplication Intelligence and Control : Yes Application Visualization : Yes Networking:IP address assignment : Static, (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relayNAT modes : 1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent modeRouting protocols : BGP, OSPF, RIPv1/v2, static routes, policy-based routing, multicast QoS : Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1e (WMM)Authentication : XAUTH/RADIUS, Active Directory, SSO, LDAP, Novell, internal user database, Terminal Services, CitrixLocal user database : 250 VoIP : Full H.323v1-5, SIPStandards : TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3Certifications : VPNC, IPv6 (Phase 2)Certifications pending : Common Criteria NDPP, FIPS 140-2 (with Suite B) Level 2, ICSA Firewall, ICSA Anti-virus, UC APLCommon Access Card (CAC) : SupportedHigh Availability : Active/Standby Hardware:Form factor : Desktop Power Supply (W) : 24W external Maximum power consumption (W) : 9.2 / 13.8Input power : 100 to 240 VAC, 50-60 Hz, 1 ATotal heat dissipation : 31.3 / 47.1 BTU Dimensions : 3.6x14.1x19cm Weight : 0.73 Kg / 1.61 lbs & 0.84 Kg / 1.85 lbs WEEE weight : 1.15 Kg / 2.53 lbs & 1.26 Kg / 2.78 lbs Shipping weight : 1.37 Kg / 3.02 lbs & 1.48 Kg / 3.26 lbs MTBF (Years) : 27 / 13Environment : 40-105° F, 0-40° CHumidity : 5-95% non-condensing

Performance Overview: Security Processor: 4x 1.4 GHzMemory (RAM): 1 GB 1 GbE Copper interfaces : 10 Expansion : Expansion Slot (Rear), 2 USB Firewall inspection throughput: 1.5 Gbps Full DPI throughput: 500 Mbps Application inspection throughput:1.1 Gbps IPS throughput : 1.1 Gbps Anti-malware inspection throughput : 500 Mbps IMIX throughput : 900 Mbps SSL Inspection and Decryption (DPI SSL) :200 Mbps VPN throughput : 1.1 Gbps Connections per second : 12,000Maximum connections (SPI) : 150,000Maximum connections (DPI) : 125,000 Single Sign-On (SSO) Users : 500 VLAN interfaces : 50SonicPoints supported (Maximum) : 24 VPN :Site-to-Site VPN Tunnels : 50 IPSec VPN clients (Maximum) : 2 (25) SSL VPN licenses (Maximum) : 2 (200) Virtual assist bundled (Maximum) : 1 (30-day trial) Encryption/Authentication : DES, 3DES, AES (128, 192, 256-bit), MD5, SHA-1, Suite B CryptographyKey exchange : Diffie Hellman Groups 1, 2, 5, 14Route-based VPN : RIP, OSPFCertificate support : Verisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWall-to-SonicWall VPN, SCEPVPN features : Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPNGlobal VPN client platforms supported : Microsoft® Windows Vista 32/64-bit, Windows 7 32/64-bit, Windows 8.0 32/64-bit, Windows 8.1 32/64-bitNetExtender : Microsoft Windows Vista 32/64-bit, Windows 7, Windows 8.0 32/64-bit, Windows 8.1 32/64-bit, Mac OS X 10.4+, Linux FC3+/Ubuntu 7+/OpenSUSEMobile Connect : Apple® iOS, Mac OS X, Google® Android™, Kindle Fire, Windows 8.1 (Embedded) Security Services:Deep Packet Inspection services : Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSLContent Filtering Service (CFS) : HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid listsEnforced Client Anti-Virus and Anti-Spyware : McAfee®Comprehensive Anti-Spam Service : SupportedApplication Intelligence and Control : Yes Application Visualization : Yes Networking:IP address assignment : Static, (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relayNAT modes : 1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent modeRouting protocols : BGP, OSPF, RIPv1/v2, static routes, policy-based routing, multicast QoS : Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1e (WMM)Authentication : XAUTH/RADIUS, Active Directory, SSO, LDAP, Novell, internal user database, Terminal Services, CitrixLocal user database : 150 VoIP : Full H.323v1-5, SIPStandards : TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3Certifications : VPNC, IPv6 (Phase 2)Certifications pending : Common Criteria NDPP, FIPS 140-2 (with Suite B) Level 2, ICSA Firewall, ICSA Anti-virus, UC APLCommon Access Card (CAC) : SupportedHigh Availability : Active/Standby with stateful synchronization Hardware:Form factor : Desktop Power Supply (W) : 36W external Maximum power consumption (W) : 13.4 / 17.7Input power : 100 to 240 VAC, 50-60 Hz, 1 ATotal heat dissipation : 45.9 / 60.5 BTU Dimensions : 3.5x15x22.5cm Weight : 0.92 Kg / 2.03 lbs & 1.05 Kg / 2.31 lbs WEEE weight : 1.34 Kg / 2.95 lbs & 1.48 Kg / 3.26 lbs Shipping weight : 1.93 Kg / 4.25 lbs & 2.07 Kg / 4.56 lbs MTBF (Years) : 20 / 12Environment : 40-105° F, 0-40° CHumidity : 5-95% non-condensing

Performance Overview: Security Processor: 4x 1.4 GHzMemory (RAM): 1 GB 1 GbE Copper interfaces : 10 Expansion : Expansion Slot (Rear), 2 USB Firewall inspection throughput: 1.5 Gbps Full DPI throughput: 500 Mbps Application inspection throughput:1.1 Gbps IPS throughput : 1.1 Gbps Anti-malware inspection throughput : 500 Mbps IMIX throughput : 900 Mbps SSL Inspection and Decryption (DPI SSL) :200 Mbps VPN throughput : 1.1 Gbps Connections per second : 12,000Maximum connections (SPI) : 150,000Maximum connections (DPI) : 125,000 Single Sign-On (SSO) Users : 500 VLAN interfaces : 50SonicPoints supported (Maximum) : 24 VPN :Site-to-Site VPN Tunnels : 50 IPSec VPN clients (Maximum) : 2 (25) SSL VPN licenses (Maximum) : 2 (200) Virtual assist bundled (Maximum) : 1 (30-day trial) Encryption/Authentication : DES, 3DES, AES (128, 192, 256-bit), MD5, SHA-1, Suite B CryptographyKey exchange : Diffie Hellman Groups 1, 2, 5, 14Route-based VPN : RIP, OSPFCertificate support : Verisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWall-to-SonicWall VPN, SCEPVPN features : Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPNGlobal VPN client platforms supported : Microsoft® Windows Vista 32/64-bit, Windows 7 32/64-bit, Windows 8.0 32/64-bit, Windows 8.1 32/64-bitNetExtender : Microsoft Windows Vista 32/64-bit, Windows 7, Windows 8.0 32/64-bit, Windows 8.1 32/64-bit, Mac OS X 10.4+, Linux FC3+/Ubuntu 7+/OpenSUSEMobile Connect : Apple® iOS, Mac OS X, Google® Android™, Kindle Fire, Windows 8.1 (Embedded) Security Services:Deep Packet Inspection services : Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSLContent Filtering Service (CFS) : HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid listsEnforced Client Anti-Virus and Anti-Spyware : McAfee®Comprehensive Anti-Spam Service : SupportedApplication Intelligence and Control : Yes Application Visualization : Yes Networking:IP address assignment : Static, (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relayNAT modes : 1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent modeRouting protocols : BGP, OSPF, RIPv1/v2, static routes, policy-based routing, multicast QoS : Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1e (WMM)Authentication : XAUTH/RADIUS, Active Directory, SSO, LDAP, Novell, internal user database, Terminal Services, CitrixLocal user database : 150 VoIP : Full H.323v1-5, SIPStandards : TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3Certifications : VPNC, IPv6 (Phase 2)Certifications pending : Common Criteria NDPP, FIPS 140-2 (with Suite B) Level 2, ICSA Firewall, ICSA Anti-virus, UC APLCommon Access Card (CAC) : SupportedHigh Availability : Active/Standby with stateful synchronization Hardware:Form factor : Desktop Power Supply (W) : 36W external Maximum power consumption (W) : 13.4 / 17.7Input power : 100 to 240 VAC, 50-60 Hz, 1 ATotal heat dissipation : 45.9 / 60.5 BTU Dimensions : 3.5x15x22.5cm Weight : 0.92 Kg / 2.03 lbs & 1.05 Kg / 2.31 lbs WEEE weight : 1.34 Kg / 2.95 lbs & 1.48 Kg / 3.26 lbs Shipping weight : 1.93 Kg / 4.25 lbs & 2.07 Kg / 4.56 lbs MTBF (Years) : 20 / 12Environment : 40-105° F, 0-40° CHumidity : 5-95% non-condensing

Better security, faster speeds, smaller footprint : Stop more threats with our fully integrated next-generation firewall (NGFW) platform. The 4100 Series’ 1-rack-unit size is ideal at the Internet edge and in high-performance environments. It shows you what’s happening on your network, detects attacks earlier so you can act faster, and reduces management complexity.   Performance and density optimized : Key capabilities include support for 1/10/40 Gigabit Ethernet interfaces, up to 60 Gbps stateful firewall throughput, low latency, and a 1 RU form factor.   Unified management : Reduce complexity and simplify operations. Consolidate all security functions in a single management interface. It automatically prioritizes security events, recommends tailored security protections, and tracks and contains malware infections.

Overview:  Meet the industry’s first adaptive, threat-focused next-generation firewall (NGFW) designed for a new era of threat and advanced malware protection. Cisco ASA with FirePOWER Services delivers integrated threat defense for the entire attack continuum - before, during, and after an attack - by combining the proven security capabilities of the Cisco ASA firewall with the industry-leading Sourcefire threat and advanced malware protection features together in a single device. The solution uniquely extends the capabilities of the Cisco ASA 5500-X Series Next-Generation Firewalls beyond what today’s NGFW solutions are capable of.   Superior Multilayered Protection : Cisco ASA with FirePOWER Services brings distinctive threat-focused next-generation security services to the Cisco ASA 5500-X Series Next-Generation Firewalls and Cisco ASA 5585-X Adaptive Security Appliance firewall products. It provides comprehensive protection from known and advanced threats, including protection against targeted and persistent malware attacks (Figure 1). Cisco ASA with FirePOWER Services features these comprehensive capabilities: Site-to-site and remote access VPN and advanced clustering provide highly secure, high-performance access and high availability to help ensure business continuity. Granular Application Visibility and Control (AVC) supports more than 3,000 application-layer and risk-based controls that can launch tailored intrusion prevention system (IPS) threat detection policies to optimize security effectiveness. The industry-leading Cisco ASA with FirePOWER next-generation IPS (NGIPS) provides highly effective threat prevention and full contextual awareness of users, infrastructure, applications, and content to detect multivector threats and automate defense response. Reputation- and category-based URL filtering offer comprehensive alerting and control over suspicious web traffic and enforce policies on hundreds of millions of URLs in more than 80 categories. AMP provides industry-leading breach detection effectiveness, a low total cost of ownership, and superior protection value that helps you discover, understand, and stop malware and emerging threats missed by other security layers.

Overview: Meet the industry’s first adaptive, threat-focused next-generation firewall (NGFW) designed for a new era of threat and advanced malware protection. Cisco ASA with FirePOWER Services delivers integrated threat defense for the entire attack continuum - before, during, and after an attack - by combining the proven security capabilities of the Cisco ASA firewall with the industry-leading Sourcefire threat and advanced malware protection features together in a single device. The solution uniquely extends the capabilities of the Cisco ASA 5500-X Series Next-Generation Firewalls beyond what today’s NGFW solutions are capable of   Superior Multilayered Protection : Cisco ASA with FirePOWER Services brings distinctive threat-focused next-generation security services to the Cisco ASA 5500-X Series Next-Generation Firewalls and Cisco ASA 5585-X Adaptive Security Appliance firewall products. It provides comprehensive protection from known and advanced threats, including protection against targeted and persistent malware attacks (Figure 1). Cisco ASA with FirePOWER Services features these comprehensive capabilities: Site-to-site and remote access VPN and advanced clustering provide highly secure, high-performance access and high availability to help ensure business continuity. Granular Application Visibility and Control (AVC) supports more than 3,000 application-layer and risk-based controls that can launch tailored intrusion prevention system (IPS) threat detection policies to optimize security effectiveness. The industry-leading Cisco ASA with FirePOWER next-generation IPS (NGIPS) provides highly effective threat prevention and full contextual awareness of users, infrastructure, applications, and content to detect multivector threats and automate defense response. Reputation- and category-based URL filtering offer comprehensive alerting and control over suspicious web traffic and enforce policies on hundreds of millions of URLs in more than 80 categories. AMP provides industry-leading breach detection effectiveness, a low total cost of ownership, and superior protection value that helps you discover, understand, and stop malware and emerging threats missed by other security layers.   Reduced Costs and Complexity : Cisco ASA with FirePOWER Services incorporates an integrated approach to threat defense, reducing capital and operating costs and administrative complexity. It smoothly integrates with the existing IT environment, work stream, and network fabric. The purpose-built appliance family is highly scalable, performs at up to multigigabit speeds, and provides consistent and robust security across branch, Internet edge, and data centers in both physical and virtual environments.

Unprecedented Network Visibility : Cisco ASA with FirePOWER Services is centrally managed by the Cisco FireSIGHT Management Center. Management Center provides security teams with comprehensive visibility into and control over activity within the network. Such visibility includes users, devices, communication between virtual machines, vulnerabilities, threats, client-side applications, files, and websites. Holistic, actionable indications of compromise (IoCs) correlate detailed network and endpoint event information and provide further visibility into malware infections. Management Center also provides content awareness with malware file trajectory that aids infection scoping and root cause determination to speed time to remediation. Cisco Security Manager provides scalable and centralized network operations workflow management. It integrates a powerful suite of capabilities; including policy and object management, event management, reporting, and troubleshooting for Cisco ASA firewall functions. For small-scale and simple deployments, the Cisco Adaptive Security Device Manager (ASDM) is available to provide on-device, GUI-based firewall network operations management. Cisco’s enterprise-class management tools help administrators reduce complexity with unmatched visibility and control across NGFW deployments.   Reduced Costs and Complexity : Cisco ASA with FirePOWER Services incorporates an integrated approach to threat defense, reducing capital and operating costs and administrative complexity. It smoothly integrates with the existing IT environment, work stream, and network fabric. The purpose-built appliance family is highly scalable, performs at up to multigigabit speeds, and provides consistent and robust security across branch, Internet edge, and data centers in both physical and virtual environments.   With Cisco FireSIGHT Management Center, administrators can streamline operations to correlate threats, assess their impact, automatically tune security policy, and easily attribute user identities to security events. Management Center continually monitors how the network is changing over time. New threats are automatically assessed to determine which can affect your business. Response efforts are then focused on remediation, and network defenses are adapted to changing threat conditions. Critical security activities such as policy tuning are automated, saving time and effort, while protections and countermeasures are maintained in an optimal state.   Cisco FireSIGHT Management Center integrates easily with third-party security solutions through the eStreamer API to streamline operation workflows and fit existing network fabrics.