Firewall

Firewall general :Operating system : SonicOS 6.5.1Security processing cores : 8Interfaces : 2 x 10-GbE SFP+,4 x 1-GbE SFP,12 x 1-GbE,1 GbE Management,1 ConsoleExpansion:1 Expansion Slot (Rear)*, SD Card*Management : CLI, SSH, Web UI, Capture Security Center, GMS, REST APIsSSO users : 50,000 Maximum access points supported : 64 Logging : Analyzer, Local Log, Syslog Firewall/VPN Performance:Firewall inspection throughput : 6.0 GbpsFull DPI throughput : 800 MbpsApplication inspection throughput : 2.0 GbpsIPS throughput : 2.0 GbpsAnti-malware inspection throughput : 1.1 GbpsIMIX throughput : 1.6 GbpsTLS/SSL decryption and inspection (DPI SSL) : 500 MbpsVPN throughput : 3.0 GbpsConnections per second : 40,000/secMaximum connections (SPI) : 1,000,000Maximum connections (DPI) : 500,000Default/Maximum connections (DPI SSL) : 3,000/4,500 VPN :Site-to-site VPN tunnels : 3,000IPSec VPN clients (max) : 500 (3,000)SSL VPN NetExtender clients (max) : 2 (500)Encryption/Authentication :DES, 3DES, AES (128, 192, 256-bit)/MD5, SHA-1, Suite B CryptographyKey exchange : Diffie Hellman Groups 1, 2, 5, 14vRoute-based VPN : RIP, OSPF, BGP Networking :IP address assignment : Static (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP RelayNAT modes : 1:1, many:1, 1:many, flexible NAT (overlapping IPS), PAT, transparent modeVLAN interfaces : 256Routing protocols : BGP, OSPF, RIPv1/v2, static routes, policy-based routingQoS : Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1pAuthentication : LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC)VoIP : Full H323-v1-5, SIPStandards : TCP/IP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3Certifications : ICSA Firewall, ICSA Anti-Virus, FIPS 140-2, Common Criteria NDPP (Firewall and IPS), UC APLHigh availability : Active/Passive with State Sync, Active/Active Clustering Hardware :Power supply : Single, Fixed 250WFans : Dual, FixedInput power : 100-240 VAC, 60-50 HzMaximum power consumption (W) : 86.7MTBF @25ºC in hours : 139,783 MTBF @25ºC in years : 15.96 Form factor : 1U Rack MountableDimensions : 1.75 x 19.1 x 17 in (4.5 x 48.5 x 43 cm)Weight : 13.56 lb (6.15 kg)WEEE weight : 14.24 lb (6.46 kg) Shipping weight : 20.79lb (9.43 kg)Major regulatory : FCC Class A, CE (EMC, LVD, RoHS), C-Tick, VCCI Class A, MSIP/KCC Class A, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE , REACH, ANATEL, BSMI, CUEnvironment (Operating/Storage) : 32°-105° F (0°-40° C)/-40° to 158° F (-40° to 70° C)Humidity : 10-90% non-condensing

Firewall general :Operating system : SonicOS 6.5.1Security processing cores : 24Interfaces : 4 x 10-GbE SFP+,8 x 1-GbE SFP,8 x 1-GbE,1 GbE Management,1 ConsoleExpansion:1 Expansion Slot (Rear)*, SD Card*Management :CLI, SSH, Web UI, Capture Security Center, GMS, REST APIsSSO users:70,000 Maximum access points supported : 128Logging : Analyzer, Local Log, Syslog Firewall/VPN Performance:Firewall inspection throughput : 12.0 GbpsFull DPI throughput : 3.0 GbpsApplication inspection throughput : 4.5 GbpsIPS throughput : 4.5 GbpsAnti-malware inspection throughput : 3.0 GbpsIMIX throughput : 3.5 GbpsTLS/SSL decryption and inspection (DPI SSL) : 1.3 GbpsVPN throughput : 5.0 GbpsConnections per second : 90,000/secMaximum connections (SPI) : 1,500,000Maximum connections (DPI) : 1,000,000Default/Maximum connections (DPI SSL) : 6,000/10,500 VPN :Site-to-site VPN tunnels : 6,000IPSec VPN clients (max) : 2,000 (6,000)SSL VPN NetExtender clients (max) : 2 (1,500)Encryption/Authentication :DES, 3DES, AES (128, 192, 256-bit)/MD5, SHA-1, Suite B CryptographyKey exchange : Diffie Hellman Groups 1, 2, 5, 14vRoute-based VPN : RIP, OSPF, BGP Networking :IP address assignment : Static (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP RelayNAT modes : 1:1, many:1, 1:many, flexible NAT (overlapping IPS), PAT, transparent modeVLAN interfaces : 256Routing protocols : BGP, OSPF, RIPv1/v2, static routes, policy-based routingQoS : Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1pAuthentication : LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC)VoIP : Full H323-v1-5, SIPStandards : TCP/IP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3Certifications : ICSA Firewall, ICSA Anti-Virus, FIPS 140-2, Common Criteria NDPP (Firewall and IPS), UC APLHigh availability : Active/Passive with State Sync, Active/Active DPI with State Sync, Active/Active Clustering Hardware :Power supply : Single, Fixed 250WFans : Dual, redundant, hot swappableInput power : 100-240 VAC, 60-50 HzMaximum power consumption (W) : 113.1MTBF @25ºC in hours : 116,477MTBF @25ºC in years : 13.30 Form factor : 1U Rack MountableDimensions : 1.75 x 19.1 x 17 in (4.5 x 48.5 x 43 cm)Weight : 14.93 lb (6.77 kg)WEEE weight : 19.78 lb (8.97 kg)Shipping weight : 26.12 lb (11.85 kg)Major regulatory : FCC Class A, CE (EMC, LVD, RoHS), C-Tick, VCCI Class A, MSIP/KCC Class A, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE , REACH, ANATEL, BSMI, CUEnvironment (Operating/Storage) : 32°-105° F (0°-40° C)/-40° to 158° F (-40° to 70° C)Humidity : 10-90% non-condensing

Superior business resiliency and protection : Gain business resiliency through superior security with sustained performance. The Firepower 2100 Series has an innovative dual multicore CPU architecture that optimizes firewall, cryptographic, and threat inspection functions simultaneously. Now, achieving security doesn’t come at the expense of network performance.    Optimized performance and port density : Firewall throughput speeds from 2 Gbps to 8.5 Gbps. Support for sixteen (16) 1 GE ports on the low-end models. The high-end models support up to twenty-four (24) 1 GE ports or up to sixteen (16) 10 GE ports. All in a 1RU form factor.    Innovative architecture : With its unique dual-CPU, multicore architecture, the 2100 maintains throughput performance when threat inspection is activated by routing different workloads to different chips. And enabling the threat protection features does not affect the firewall throughput.   Management to meet your needs : Cisco Firepower NGFW is now even less time-consuming to configure and less costly to manage. You can choose from local, centralized, and cloud-based managers that fit your environment and the way you work.

Simplified management and lower costs : Get visibility into and control over activity across your network. Gain insight into users, apps, devices, threats, files, and vulnerabilities.   Unified security services and task automation : Our integrated approach to threat defense reduces capital and operating costs as well as administrative complexity by consolidating multiple security services in a single platform. Automate security tasks to increase agility and speed remediation.   Wide range of sizes and form factors : We have the platform for you: standalone options for small and midsize businesses, ruggedized appliances for extreme environments, midsize appliances for security at the Internet edge, and high-performance appliances for enterprise data centers.   Highly effective in threat protection : Highly effective threat prevention and a full contextual awareness of users, infrastructure, applications, and content help you detect multi vector threats and automate the defense response.   Low cost of ownership : Effective breach detection with low total cost of ownership offers protection value. Discover, understand, and stop malware and emerging threats missed by other security layers.

Overview: Up to 8 Gbps firewall throughput, 2.6 Gbps UTM throughput Because smaller companies are generally less protected and easier to break into, small business has become the new big target for cyber attacks. The Firebox® M270 and M370 firewalls are specifically engineered to defend all types of small businesses against attacks that are no less fierce than those targeting larger organizations. Our unique product architecture enables SMBs to leverage best-in-class security services – from URL filtering and intrusion prevention to application control and data loss prevention - without the cost and complexity of running multiple single-point solutions. The M270 and M370 are part of WatchGuard’s award-winning Firebox security platform. The platform not only provides the most complete suite of unified security controls on the market today, it has consistently been the first to offer solutions for addressing new and evolving network threats including advanced malware and ransomware. Blazing Fast Performance Firebox M270 and M370 Unified Threat Management (UTM) solutions are up to 3 times faster than competing products with all security layers turned on, and up to 94 percent faster performing HTTPS inspection, according to the independent test lab Miercom. This ensures you never have to compromise network security for performance. Quick And Simple Deployment SMBs usually have smaller, less technical staff, which can make network expansion challenging. RapidDeploy – a powerful, cloud-based deployment and configuration tool – comes standard with WatchGuard Firebox appliances. With it, IT staff can create and store configuration data in the cloud – public or private – and have the appliance directly shipped to its destination. Once the device arrives, it can connect to the cloud for a secure download of its configuration settings, saving your staff travel time and money. Easy To Manage And Understand The M270 and M370 are not only easy to initially configure and deploy, they are also designed with an emphasis on centralized management, making ongoing policy and network management simple and straightforward. WatchGuard Dimension, included with purchase, provides a suite of big data visibility and reporting tools that instantly identify and distill key network security threats, issues and trends so you can take immediate preventive or corrective action. Security is complex, running it doesn’t have to be.

Overview: Get Industry-leading Performance with the Firebox T70 Many organizations today are dependent on fast, reliable and secure Internet connectivity, but are struggling to find network security solutions that can keep up with their ever growing needs. While many rack-mount solutions can keep up with today’s fastest fiber-to-the-premises speeds, there are not currently any tabletop security appliances available that have this capability, especially when running with additional security services enabled. This makes it difficult for SMBs and distributed enterprises to harness these powerful Internet speeds with the complete UTM protection they require. The Fastest Tabletop Available The WatchGuard Firebox T70 is the fastest performing tabletop appliance available on the market today. The T70 is the only tabletop appliance that is capable of running full UTM services at over 1 gigabit per second, enabling you to keep up with lightning-fast fiber broadband speeds. The WatchGuard Firebox T70 will make network slowdown concerns a thing of the past, with blazing-fast performance capable of delivering full UTM protection at over 1 gigabit per second. With the release of the WatchGuard Firebox T70 tabletop network security appliance, customers can now enjoy the fast throughput that they want, with the industry-leading security that they need. The WatchGuard T70 is also one of the only tabletop appliances available today that provides users two Power-over-Ethernet (PoE) ports enabling power to peripheral devices, such as wireless access points and security cameras.

Overview Small businesses and remote locations have long been thought of as soft targets for attackers. The WatchGuard T55 Firebox Firewall tabletop appliance bring enterprise-level network security to those small office/branch office and small retail environments that matches the reality of today's distributed work style.Perfect as stand-alone solutions for a small office, The WatchGuard T55 Firebox Firewall are ideal for larger organizations that want to extend easy-to-use, full UTM protection for remote workers and smaller sites. With WatchGuard Total Security Services, this appliance are small-footprint, cost-effective security powerhouses that deliver nearly every feature present in WatchGuard’s higher end UTM appliances, including all security capabilities such as ransomware protection and data loss prevention. Key Features Includes a one (1) year standard support licence subscription. Boosts five (5) Gigabit Ethernet RJ45 LAN interfaces. No need to compromise protection for strong performance or vice versa. Support high-speed LAN backbone infrastructures and Gigabit WAN connections. Best-of-breed security components into one platform for stronger security at big cost savings. Firewall throughput up to 1Gbps and VPN throughput upto 360Mbps to keep traffic moving. Brings enterprise-level network security to small offices and retail environments. Cloud-based RapidDeploy technology taking the delay out of the firewall deployment process. Allows small businesses to have access to enterprise-grade security.

Overview WatchGuard Firebox T15 delivers complete enterprise-level network security for small office/home office and retail environments. Offering optional web filtering, intrusion prevention, antivirus and more. It can be used as a stand-alone solution or centrally managed from corporate headquarters. Flexible management tools and WatchGuard’s RapidDeploy technology enable administrators to quickly set up the Firebox T15 at remote locations so businesses can ensure that they protect where they connect. Firebox T15 provides 400 Mbps firewall throughput and three 1-Gigabit Ethernet ports. WatchGuard Dimension provides visibility into network activity and security events at no additional cost. Wireless models are available.   Details The WatchGuard Firebox T Series appliances bring enterprise-level network security to the small office/branch office and small retail environments that matches the reality of today's distributed work style. They can be used as a stand-alone solution or centrally managed from corporate headquarters. Flexible management tools and WatchGuard's RapidDeploy technology enable administrators to quickly set up a T Series device at remote locations so businesses can ensure that they protect everywhere they connect. T Series appliances sustain up to 1.2 Gbps firewall throughput and come in wired and wireless versions. WatchGuard Dimension, which provides real-time visibility into network activity and security events, is included at no additional cost. Ideal for Small office/home office and small retail environments Recommended User Count: 5 Firewall Throughput: 400 Mbps VPN Throughput: 150 Mbps UTM Throughput: 90 Mbps Concurrent Sessions: 100,000 1 Year Standard Support

Firewall general :Operating system : SonicOS 6.5.1Security processing cores : 10Interfaces : 2 x 10-GbE SFP+,4 x 1-GbE SFP,12 x 1-GbE,1 GbE Management,1 ConsoleExpansion:1 Expansion Slot (Rear)*, SD Card*Management : CLI, SSH, Web UI, Capture Security Center, GMS, REST APIsSSO users : 60,000 Maximum access points supported : 96 Logging : Analyzer, Local Log, Syslog Firewall/VPN Performance:Firewall inspection throughput : 9.0 GbpsFull DPI throughput : 1.6 GbpsApplication inspection throughput : 3.0 GbpsIPS throughput : 3.0 GbpsAnti-malware inspection throughput : 1.7 GbpsIMIX throughput : 2.4 GbpsTLS/SSL decryption and inspection (DPI SSL) : 800 MbpsVPN throughput : 4.5 GbpsConnections per second : 60,000/secMaximum connections (SPI) : 1,500,000Maximum connections (DPI) : 1,000,000Default/Maximum connections (DPI SSL) : 4,000/8,500 VPN :Site-to-site VPN tunnels : 4,000IPSec VPN clients (max) : 2,000 (4,000)SSL VPN NetExtender clients (max) : 2 (1,000)Encryption/Authentication :DES, 3DES, AES (128, 192, 256-bit)/MD5, SHA-1, Suite B CryptographyKey exchange : Diffie Hellman Groups 1, 2, 5, 14vRoute-based VPN : RIP, OSPF, BGP Networking :IP address assignment : Static (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP RelayNAT modes : 1:1, many:1, 1:many, flexible NAT (overlapping IPS), PAT, transparent modeVLAN interfaces : 400Routing protocols : BGP, OSPF, RIPv1/v2, static routes, policy-based routingQoS : Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1pAuthentication : LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC)VoIP : Full H323-v1-5, SIPStandards : TCP/IP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3Certifications : ICSA Firewall, ICSA Anti-Virus, FIPS 140-2, Common Criteria NDPP (Firewall and IPS), UC APLHigh availability : Active/Passive with State Sync, Active/Active DPI with State Sync, Active/Active Clustering Hardware :Power supply : Single, Fixed 250WFans : Dual, FixedInput power : 100-240 VAC, 60-50 HzMaximum power consumption (W) : 90.9MTBF @25ºC in hours : 134,900 MTBF @25ºC in years : 15.40 Form factor : 1U Rack MountableDimensions : 1.75 x 19.1 x 17 in (4.5 x 48.5 x 43 cm)Weight : 13.56 lb (6.15 kg)WEEE weight : 14.24 lb (6.46 kg) Shipping weight : 20.79lb (9.43 kg)Major regulatory : FCC Class A, CE (EMC, LVD, RoHS), C-Tick, VCCI Class A, MSIP/KCC Class A, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE , REACH, ANATEL, BSMI, CUEnvironment (Operating/Storage) : 32°-105° F (0°-40° C)/-40° to 158° F (-40° to 70° C)Humidity : 10-90% non-condensing

TOTAL NETWORK PROTECTION Small businesses and remote locations have long been thought of as soft targets for attackers. WatchGuard Firebox T35 and T55 tabletop appliances bring enterprise-level network security to those small office/branch office and small retail environments that matches the reality of today’s distributed work style. Our unique product architecture enables smaller businesses to leverage best-in-class security services – from URL filtering and intrusion prevention to application control and data loss prevention – minus the cost and complexity of managing multiple single-point solutions.   QUICK AND SIMPLE DEPLOYMENT Cloud-based RapidDeploy technology, a configuration and deployment tool that comes standard with WatchGuard Firebox appliances, enables IT staff to create and store configuration data in the cloud – public or private – and have a new appliance directly shipped to its destination. Once the device arrives, it can connect to the cloud for a secure download of its configuration settings, saving staff travel time and money. This technology is particularly advantageous for large distributed enterprises where managing a multitude of devices efficiently across multiple locations and geographies is critical.   EASY TO MANAGE AND UNDERSTAND Firebox T Series appliances are not only easy to initially configure and deploy, they are also designed with an emphasis on centralized management, making ongoing policy and network management simple and straightforward. WatchGuard Dimension, which is included with purchase, provides a suite of big data visibility and reporting tools that instantly identify and distill key network security threats, issues and trends so you can take immediate preventive or corrective action. Security is complex, running it doesn’t have to be.   FEATURES & BENEFITS Wireless versions of the T35 and T55 use 802.11ac operating in the 2.4 GHz and 5GHz bands for high performance and superior reliability. All logging and reporting functions included with purchase, with over 100 dashboards and reports including PCI and HIPAA. 5 Gigabit Ethernet ports support high-speed LAN backbone infrastructures & gigabit WAN connections. PoE port to power a peripheral device such as a WatchGuard Secure Wi-Fi Access Point, allowing administrators to extend the reach of their networks without having to run costly AC power to the remote device.

TOTAL NETWORK PROTECTION Small businesses and remote locations have long been thought of as soft targets for attackers. WatchGuard Firebox T35 and T55 tabletop appliances bring enterprise-level network security to those small office/branch office and small retail environments that matches the reality of today’s distributed work style. Our unique product architecture enables smaller businesses to leverage best-in-class security services – from URL filtering and intrusion prevention to application control and data loss prevention – minus the cost and complexity of managing multiple single-point solutions.   QUICK AND SIMPLE DEPLOYMENT Cloud-based RapidDeploy technology, a configuration and deployment tool that comes standard with WatchGuard Firebox appliances, enables IT staff to create and store configuration data in the cloud – public or private – and have a new appliance directly shipped to its destination. Once the device arrives, it can connect to the cloud for a secure download of its configuration settings, saving staff travel time and money. This technology is particularly advantageous for large distributed enterprises where managing a multitude of devices efficiently across multiple locations and geographies is critical.   EASY TO MANAGE AND UNDERSTAND Firebox T Series appliances are not only easy to initially configure and deploy, they are also designed with an emphasis on centralized management, making ongoing policy and network management simple and straightforward. WatchGuard Dimension, which is included with purchase, provides a suite of big data visibility and reporting tools that instantly identify and distill key network security threats, issues and trends so you can take immediate preventive or corrective action. Security is complex, running it doesn’t have to be.   FEATURES & BENEFITS Wireless versions of the T35 and T55 use 802.11ac operating in the 2.4 GHz and 5GHz bands for high performance and superior reliability. All logging and reporting functions included with purchase, with over 100 dashboards and reports including PCI and HIPAA. 5 Gigabit Ethernet ports support high-speed LAN backbone infrastructures & gigabit WAN connections. PoE port to power a peripheral device such as a WatchGuard Secure Wi-Fi Access Point, allowing administrators to extend the reach of their networks without having to run costly AC power to the remote device.

Interfaces and Modules :Hardware Accelerated : 10 GE SFP+ Slots 2Hardware Accelerated GE SFP Slots : 16Hardware Accelerated GE RJ45 Ports : 16GE RJ45 Management / HA Ports : 2USB Ports (Client / Server) : 1 / 2Console Port : 1Onboard Storage : 1x 256 GB SSDIncluded Transceivers : 0 System Performance — Enterprise Traffic Mix:IPS Throughput : 4.2 GbpsNGFW Throughput : 4 GbpsThreat Protection Throughput : 3 Gbps System Performance and Capacity:IPv4 Firewall Throughput(1518 / 512 / 64 byte, UDP) : 52 / 52 / 33 GbpsIPv6 Firewall Throughput(1518 / 512 / 86 byte, UDP) : 52 / 52 / 33 GbpsFirewall Latency (64 byte, UDP) : 3 μsFirewall Throughput (Packet per Second) : 49.5 MppsConcurrent Sessions (TCP) : 11 MillionNew Sessions/Second (TCP) : 280,000Firewall Policies : 10,000IPsec VPN Throughput (512 byte) : 25 GbpsGateway-to-Gateway IPsec VPN Tunnels : 2,000Client-to-Gateway IPsec VPN Tunnels : 50,000SSL-VPN Throughput : 3.6 GbpsConcurrent SSL-VPN Users(Recommended Maximum, Tunnel Mode) : 10,000SSL Inspection Throughput (IPS, avg. HTTPS) : 3.9 GbpsSSL Inspection CPS (IPS, avg. HTTPS) : 2,400SSL Inspection Concurrent Session(IPS, avg. HTTPS) : 800,000Application Control Throughput (HTTP 64K) : 10 GbpsCAPWAP Throughput (1444 byte, UDP) : 11 GbpsVirtual Domains (Default / Maximum) : 10 / 10Maximum Number of FortiSwitches Supported : 64Maximum Number of FortiAPs (Total / Tunnel) : 1024 / 512Maximum Number of FortiTokens : 5,000High Availability Configurations : Active-Active, Active-Passive, Clustering Dimensions and Power:Height x Width x Length (inches): 1.75 x 17.22 x 18.24Height x Width x Length (mm) : 44.45 x 437.5 x 463.2Weight : 20.24 lbs (9.18 kg)Form Factor (supports EIA / non-EIA standards) : Rack Mount, 1 RU Power Input : 100–240V AC, 50–60 Hz, 300 W RedundantPower Consumption (Average / Maximum): 135 W / 187.2 WCurrent (Maximum): 100V/5A, 240V/3AHeat Dissipation:638.75 BTU/hRedundant Power Supplies: Yes (Hot Swappable) Operating Environment and Certifications:Operating Temperature : 32–104°F (0–40°C)Storage Temperature : -31–158°F (-35–70°C)Humidity : 10–90% non-condensingNoise Level : 49.9 dBAOperating Altitude Up to : 7,400 ft (2,250 m)Compliance : FCC Part 15 Class A, RCM, VCCI, CE, UL/cUL, CBCertifications ICSA Labs: Firewall, IPsec, IPS, Antivirus, SSL-VPN; USGv6/IPv6

Interfaces and Modules:Hardware Accelerated 10 GE SFP+ Slots : 2Hardware Accelerated GE SFP Slots : 8Hardware Accelerated GE RJ45 Ports : 20Accelerated GE RJ45 Bypass Interfaces : 4GE RJ45 Management / HA Ports : 2USB Ports (Client / Server) : 1 / 2Console Port : 1Onboard Storage : 1x 240 GB SSDIncluded Transceivers : 2x SFP (SX 1 GE) System Performance — Enterprise Traffic Mix:IPS Throughput : 4.2 GbpsNGFW Throughput : 4 GbpsThreat Protection Throughput : 3 Gbps System Performance and Capacity:IPv4 Firewall Throughput(1518 / 512 / 64 byte, UDP):36 / 36 / 22 GbpsIPv6 Firewall Throughput(1518 / 512 / 86 byte, UDP):36 / 36 / 22 GbpsFirewall Latency (64 byte, UDP) : 3 μsFirewall Throughput (Packet per Second) : 33 MppsConcurrent Sessions (TCP) : 5 MillionNew Sessions/Second (TCP) : 280,000Firewall Policies : 10,000IPsec VPN Throughput (512 byte) : 20 GbpsGateway-to-Gateway IPsec VPN Tunnels: 2,000Client-to-Gateway IPsec VPN Tunnels : 50,000SSL-VPN Throughput : 2.2 GbpsConcurrent SSL-VPN Users(Recommended Maximum, Tunnel Mode) : 5,000SSL Inspection Throughput (IPS, avg. HTTPS) : 3.9 GbpsSSL Inspection CPS (IPS, avg. HTTPS) : 2,400SSL Inspection Concurrent Session(IPS, avg. HTTPS) : 380,000Application Control Throughput (HTTP 64K) : 9 GbpsCAPWAP Throughput (1444 byte, UDP) : 5.5 GbpsVirtual Domains (Default / Maximum) : 10 / 10Maximum Number of FortiSwitches Supported : 64Maximum Number of FortiAPs (Total / Tunnel) : 1024 / 512Maximum Number of FortiTokens : 5,000High Availability Configurations : Active-Active, Active-Passive, Clustering Dimensions and Power:Height x Width x Length (inches) : 1.75 x 17.0 x 16.4Height x Width x Length (mm): 44.45 x 432 x 416Weight : 19.0 lbs (8.6 kg)Form Factor (supports EIA / non-EIA standards) : Rack Mount, 1 RUWall Mountable : NoPower Input : 100–240V AC, 50–60 HzPower Consumption (Average / Maximum) : 128 W / 187 WCurrent (Maximum) : 110V/7A, 220V/3.5AHeat Dissipation : 636 BTU/hRedundant Power Supplies (Hot Swappable) optional Operating Environment and Certifications:Operating Temperature : 32–104°F (0–40°C)Storage Temperature : -31–158°F (-35–70°C)Humidity : 10–90% non-condensingNoise Level : 55 dBAOperating Altitude Up to : 7,400 ft (2,250 m)Compliance : FCC Part 15 Class A, RCM, VCCI, CE, UL/cUL, CBCertifications ICSA Labs: Firewall, IPsec, IPS, Antivirus, SSL-VPN; USGv6/IPv6

Specifications FORTIGATE 80E  Hardware Specifications : GE RJ45/SFP Shared Media Pairs : 2  GE RJ45 Ports : 12  GE RJ45 PoE/+ Ports : 0  GE RJ45 DMZ/HA Ports : 2  USB Ports : 1  Console (RJ45) : 1  Internal Storage : 0  FORTIGATE 80E-POE  Hardware Specifications GE RJ45/SFP Shared Media Pairs : 2  GE RJ45 Ports  : 0  GE RJ45 PoE/+ Ports : 12  GE RJ45 DMZ/HA Ports : 2  USB Ports : 1  Console (RJ45) : 1  Internal Storage : 0  FORTIGATE 81E  Hardware Specifications GE RJ45/SFP Shared Media Pairs : 2  GE RJ45 Ports : 12  GE RJ45 PoE/+ Ports : 0  GE RJ45 DMZ/HA Ports : 2  USB Ports : 1  Console (RJ45) : 1  Internal Storage : 1x 128 GB SSD  FORTIGATE 81E-POE Hardware Specifications GE RJ45/SFP Shared Media Pairs : 2  GE RJ45 Ports : 0 GE RJ45 PoE/+ Ports : 12 GE RJ45 DMZ/HA Ports : 2  USB Ports : 1  Console (RJ45) : 1  Internal Storage : 1x 128 GB SSD System Performance — Enterprise Traffic Mix : IPS Throughput : 450 Mbps NGFW Throughput : 360 Mbps Threat Protection Throughput : 250 Mbps System Performance : Firewall Throughput (1518 / 512 / 64 byte UDP packets) : 4 / 4 / 4 Gbps Firewall Latency (64 byte UDP packets) : 3 μs Firewall Throughput (Packets Per Second) : 6 Mpps Concurrent Sessions (TCP) : 1.3 Million New Sessions/Second (TCP) : 30,000 Firewall Policies : 5,000 IPsec VPN Throughput (512 byte) : 2.5 Gbps Gateway to Gateway IPsec VPN Tunnels : 200 Client to Gateway IPsec VPN Tunnels : 2,500 SSL VPN Throughput : 200 Mbps Concurrent SSL VPN Users (Recommended Maximum, Tunnel Mode) : 200 SSL Inspection Throughput (IPS, avg. HTTPS) : 135 Mbps SSL Inspection CPS (IPS, avg. HTTPS) : 135 SSL Inspection Concurrent Session (IPS, avg. HTTPS) : 95,000 Application Control Throughput (HTTP 64K) : 900 Mbps CAPWAP Throughput (HTTP 64K) : 920 Mbps Virtual Domains (Default / Maximum) : 10 / 10 Maximum Number of FortiSwitches Supported : 16 Maximum Number of FortiAPs (Total / Tunnel Mode) : 32 / 16 Maximum Number of FortiTokens : 500 High Availability Configurations : Active / Active, Active / Passive, Clustering Dimensions : Height x Width x Length (inches) : 1.65 x 8.5 x 7 Height x Width x Length (mm) : 42 x 216 x 178 Weight : 2.65 lbs (1.2 kg) Form Factor : Desktop

FORTIGATE 60F  Hardware Specifications : GE RJ45 WAN / DMZ Ports : 2 / 1  GE RJ45 Internal Ports : 7  GE RJ45 FortiLink Ports : 2  Wireless Interface : 0  USB Ports : 1  Console (RJ45) : 1  Internal Storage : 0 FORTIGATE 61F  Hardware Specifications GE RJ45 WAN / DMZ Ports : 2 / 1  GE RJ45 Internal Ports : 7  GE RJ45 FortiLink Ports : 2 Wireless Interface : 0 USB Ports  : 1  Console (RJ45) : 1  Internal Storage : 1 x 128 GB SSD  FORTIWIFI 60F  Hardware Specifications GE RJ45 WAN / DMZ Ports : 2 / 1  GE RJ45 Internal Ports 7  GE RJ45 FortiLink Ports 2  Wireless Interface : 802.11 a/b/g/n/ac-W2  USB Ports : 1  Console (RJ45) : 1  Internal Storage : 0 FORTIWIFI 61F Hardware Specifications GE RJ45 WAN / DMZ Ports : 2 / 1 GE RJ45 Internal Ports : 7 GE RJ45 FortiLink Ports : 2 Wireless Interface : 802.11 a/b/g/n/ac-W2 USB Ports : 1 Console (RJ45) : 1 Internal Storage : 1 x 128 GB SSD System Performance — Enterprise Traffic Mix : IPS Throughput : 1.4 Gbps NGFW Throughput : 1 Gbps Threat Protection Throughput : 700 Mbps System Performance : Firewall Throughput(1518 / 512 / 64 byte UDP packets) : 10/10/6 Gbps Firewall Latency (64 byte UDP packets) : 4 μs Firewall Throughput (Packets Per Second) : 9 Mpps Concurrent Sessions (TCP) : 700,000 New Sessions/Second (TCP) : 35,000 Firewall Policies : 5,000 IPsec VPN Throughput (512 byte) : 6.5 Gbps Gateway-to-Gateway IPsec VPN Tunnels : 200 Client-to-Gateway IPsec VPN Tunnels : 500 SSL-VPN Thro 9ughput :00 Mbps Concurrent SSL-VPN Users(Recommended Maximum, Tunnel Mode) : 200 SSL Inspection Throughput(IPS, avg. HTTPS) : 750 Mbps SSL Inspection CPS (IPS, avg. HTTPS) : 400 SSL Inspection Concurrent Session (IPS, avg. HTTPS) : 55,000 Application Control Throughput (HTTP 64K) : 1.8 Gbps CAPWAP Throughput (HTTP 64K) : 8 Gbps Virtual Domains (Default / Maximum) : 10 / 10 Maximum Number of FortiSwitches Supported : 16 Maximum Number of FortiAPs (Total / Tunnel Mode) : 30 / 10 Maximum Number of FortiTokens : 500 High Availability Configurations : Active / Active, Active / Passive, Clustering Dimensions : Height x Width x Length (inches) : 1.5 x 8.5 x 6.3 Height x Width x Length (mm) : 38.5 x 216 x 160 mm Weight  : 2.23 lbs (1.01 kg) Form Factor : Desktop

Specifications : FORTIGATE 60E : Hardware Specifications: GE RJ45 WAN / DMZ Ports : 2 / 1  GE RJ45 Internal Ports : 7  GE RJ45 PoE/+ Ports : 0  Wireless Interface : 0  USB Ports : 1  Console (RJ45) : 1  Internal Storage : 0  FORTIGATE 60E-POE :  Hardware Specifications GE RJ45 WAN / DMZ Ports : 2  GE RJ45 Internal Ports : 0  GE RJ45 PoE/+ Ports : 8 Wireless Interface  : 0  USB Ports : 1 Console (RJ45) : 1  Internal Storage : 0 FORTIWIFI 60E :  Hardware Specifications : GE RJ45 WAN / DMZ Ports : 2 / 1  GE RJ45 Internal Ports : 7  GE RJ45 PoE/+ Ports  : 0  Wireless Interface : 802.11 a/b/g/n/ac  USB Ports : 1  Console (RJ45) : 1  Internal Storage : 0  FORTIGATE 61E  Hardware Specifications GE RJ45 WAN / DMZ Ports :  2 / 1 GE RJ45 Internal Ports  : 7 GE RJ45 PoE/+ Ports  : 0 Wireless Interface  : 0 USB Ports : 1  Console (RJ45) : 1  Internal Storage :  1x 128 GB SSD FORTIWIFI 61E Hardware Specifications GE RJ45 WAN / DMZ Ports :  2 / 1 GE RJ45 Internal Ports  : 7 GE RJ45 PoE/+ Ports  : 0 Wireless Interface  : 802.11 a/b/g/n/ac USB Ports : 1 Console (RJ45) :  1 Internal Storage :  1x 128 GB SSD System Performance — Enterprise Traffic Mix : IPS Throughput : 400 Mbps NGFW Throughput : 250 Mbps Threat Protection Throughput : 200 Mbps System Performance: Firewall Throughput (1518 / 512 / 64 byte UDP packets) : 3 / 3 / 3 Gbps Firewall Latency (64 byte UDP packets) : 3 μs Firewall Throughput (Packets Per Second) : 4.5 Mpps Concurrent Sessions (TCP) : 1.3 Million New Sessions/Second (TCP) : 30,000 Firewall Policies : 5,000 IPsec VPN Throughput (512 byte) :2Gbps Gateway-to-Gateway IPsec VPN Tunnels : 200 Client-to-Gateway IPsec VPN Tunnels :  500 SSL-VPN Throughput : 150 Mbps Concurrent SSL-VPN Users (Recommended Maximum, Tunnel Mode) : 200 SSL Inspection Throughput (IPS, avg. HTTPS) : 135 Mbps SSL Inspection CPS (IPS, avg. HTTPS) : 135 SSL Inspection Concurrent Session (IPS, avg. HTTPS) : 75,000 Application Control Throughput (HTTP 64K) : 650 Mbps CAPWAP Throughput (HTTP 64K) : 890 Mbps Virtual Domains (Default / Maximum) : 10 / 10 Maximum Number of FortiSwitches Supported : 16 Maximum Number of FortiAPs (Total / Tunnel Mode) : 30 / 10 Maximum Number of FortiTokens : 500 High Availability Configurations : Active / Active, Active / Passive, Clustering Dimensions : Height x Width x Length (inches) : 1.5 x 8.5 x 6.3 Height x Width x Length (mm) : 38 x 216 x 160 Weight  :1.9 lbs (0.9 kg)  Form Factor : Desktop

Hardware Specifications GE RJ45 Switch Ports : 5 GE RJ45 WAN Ports : 2 USB Ports : 1 Console (RJ45) : 1 System Performance — Enterprise Traffic Mix : IPS Throughput : 350 Mbps NGFW Throughput : 220 Mbps Threat Protection Throughput : 160 Mbps System Performance : Firewall Throughput : 2.5 Gbps Firewall Latency (64 byte UDP packets) : 180 μs Firewall Throughput (Packets Per Second): 375 Kpps Concurrent Sessions (TCP) : 1.8 Million New Sessions/Second (TCP) : 21,000 Firewall Policies : 5,000 IPsec VPN Throughput (512 byte) : 90 Mbps Gateway-to-Gateway IPsec VPN Tunnels : 200 Client-to-Gateway IPsec VPN Tunnels : 250 SSL-VPN Throughput : 100 Mbps Concurrent SS-VPN Users (Recommended Maximum, Tunnel Mode) : 200 SSL Inspection Throughput (IPS, avg. HTTPS) : 150 Mbps SSL Inspection CPS (IPS, avg. HTTPS) : 140 SSL Inspection Concurrent Session (IPS, avg. HTTPS) : 75,000 Application CoLntrol Throughput (HTTP 64K) : 450 Mbps CAPWAP Throughput (HTTP 64K) : 1.2 Gbps Virtual Domains (Default / Maximum) : 5 / 5 Maximum Number of FortiSwitches Supported : 8 Maximum Number of FortiAPs (Total / Tunnel Mode) : 10 / 5 Maximum Number of FortiTokens : 500 High Availability Configurations : Active/Active, Active/Passive, Clustering Dimensions : Height x Width x Length (inches) : 1.44 x 8.52 x 5.5 Height x Width x Length (mm) : 36.5 x 216 x 140 Weight  : 2.015 lbs(0.914 kg) Form Factor : Desktop

Hardware Specifications GE RJ45 Switch Ports : 5 GE RJ45 WAN Ports : 2 USB Ports : 1 Console (RJ45) : 1 System Performance — Enterprise Traffic Mix : IPS Throughput : 350 Mbps NGFW Throughput : 220 Mbps Threat Protection Throughput : 160 Mbps System Performance : Firewall Throughput : 2.5 Gbps Firewall Latency (64 byte UDP packets) : 180 μs Firewall Throughput (Packets Per Second) : 375 Kpps Concurrent Sessions (TCP) : 1.8 Million New Sessions/Second (TCP) : 21,000 Firewall Policies : 5,000 IPsec VPN Throughput (512 byte) : 90 Mbps Gateway-to-Gateway IPsec VPN Tunnels : 200 Client-to-Gateway IPsec VPN Tunnels : 250 SSL-VPN Throughput : 100 Mbps Concurrent SSL-VPN Users (Recommended Maximum, Tunnel Mode) : 200 SSL Inspection Throughput (IPS, avg. HTTPS) : 150 Mbps SSL Inspection CPS (IPS, avg. HTTPS) : 140 SSL Inspection Concurrent Session (IPS, avg. HTTPS) : 75,000 Application Control Throughput (HTTP 64K) : 450 Mbps CAPWAP Throughput (HTTP 64K) : 1.2 Gbps Virtual Domains (Default / Maximum) : 5 / 5 Maximum Number of FortiSwitches Supported : 8 Maximum Number of FortiAPs (Total / Tunnel Mode) : 10 / 5 Maximum Number of FortiTokens : 500 High Availability Configurations : Active/Active, Active/Passive, Clustering Dimensions Height x Width x Length (inches) : 1.44 x 8.52 x 5.5 Height x Width x Length (mm) : 36.5 x 216 x 140 Form Factor :  Desktop

Specifications FORTIGATE 30E :  Hardware Specifications: GE RJ45 Switch Ports : 4 GE RJ45 WAN Port : 1 USB Port : 1 Console (RJ45) : 1 Wireless Interface : 0 FORTIWIFI 30E : Hardware Specifications : GE RJ45 Switch Ports : 4 GE RJ45 WAN Port : 1 USB Port : 1 Console (RJ45) : 1 Wireless Interface : 802.11 a/b/g/n System Performance — Enterprise Traffic Mix: IPS Throughput : 300 Mbps NGFW Throughput : 200 Mbps Threat Protection Throughput : 150 Mbps System Performance : Firewall Throughput : 950 Mbps Firewall Latency (64 byte UDP packets) : 130 μs Firewall Throughput (Packets Per Second) : 180 Kpps Concurrent Sessions (TCP) : 900,000 New Sessions/Second (TCP) : 15,000 Firewall Policies : 5,000 IPsec VPN Throughput (512 byte) : 75 Mbps Gateway-to-Gateway IPsec VPN Tunnels: 200 Client-to-Gateway IPsec VPN Tunnels : 250 SSL-VPN Throughput : 35 Mbps Concurrent SSL-VPN Users(Recommended Maximum, Tunnel Mode) : 100 SSL Inspection Throughput (IPS, avg. HTTPS) : 125 Mbps SSL Inspection CPS (IPS, avg. HTTPS) : 120 SSL Inspection Concurrent Session(IPS, avg. HTTPS) : 45,000 Application Control Throughput (HTTP 64K) : 400 Mbps CAPWAP Throughput (HTTP 64K) : 850 Mbps Virtual Domains (Default / Maximum) : 5 / 5 Maximum Number of FortiSwitches Supported : 8 Maximum Number of FortiAPs (Total / Tunnel Mode) : 2 / 2 Maximum Number of FortiTokens : 500 High Availability Configurations : Active/Active, Active/Passive, Clustering FORTIGATE 30E:  Dimensions: Height x Width x Length (inches) 1.61 x 8.27 x 5.24 Height x Width x Length (mm) 41 x 210 x 133 Weight 1.982 lbs (0.899 kg)  FORTIWIFI 30E: Dimensions: Height x Width x Length (inches) 1.61 x 8.27 x 5.24 Height x Width x Length (mm) 41 x 210 x 133 Weight 2.008 lbs (0.911 kg) Form Factor : Desktop Environment : Input Rating : 12Vdc, 2A Power Required Powered by External DC Power Adapter : 100–240V AC, 50–60 Hz Maximum Current : 100V / 0.6A, 240V / 0.4A Power Consumption (Average / Maximum) : 13 / 15 W  16 / 19 W Heat Dissipation : 52 BTU/h 66 BTU/h Operating Temperature : 32–104°F (0–40°C) Storage Temperature : -31–158°F (-35–70°C) Humidity  : 10–90% non-condensing Noise Level : Fan-less 0 dBA Operating Altitude Up to : 7,400 ft (2,250 m) Compliance : Regulatory Compliance : FCC, ICES, CE, RCM, VCCI, BSMI, UL/cUL, CB Certifications ICSA Labs: Firewall, IPsec, IPS, Antivirus, SSL-VPN

FORTIGATE 60E  Hardware Specifications : GE RJ45 WAN / DMZ Ports : 2 / 1  GE RJ45 Internal Ports : 7  GE RJ45 PoE/+ Ports : 0  Wireless Interface : 0 USB Ports : 1 Console (RJ45 ) : 1  Internal Storage : 0 FORTIGATE 60E-POE  Hardware Specifications : GE RJ45 WAN / DMZ Ports :  2  GE RJ45 Internal Ports  : 0  GE RJ45 PoE/+ Ports  : 8  Wireless Interface : 0 USB Ports : 1  Console (RJ45) : 1  Internal Storage : 0  FORTIWIFI 60E  Hardware Specifications : GE RJ45 WAN / DMZ Ports  :2 / 1  GE RJ45 Internal Ports  : 7  GE RJ45 PoE/+ Ports  : 0 Wireless Interface : 802.11 a/b/g/n/ac  USB Ports : 1  Console (RJ45) : 1  Internal Storage  : 0  FORTIGATE 61E  Hardware Specifications : GE RJ45 WAN / DMZ Ports : 2 / 1 GE RJ45 Internal Ports : 7 GE RJ45 PoE/+ Ports  : 0 Wireless Interface  : 0 USB Ports : 1  Console (RJ45) : 1  Internal Storage :  1x 128 GB SSD FORTIWIFI 61E Hardware Specifications : GE RJ45 WAN / DMZ Ports :  2 / 1 GE RJ45 Internal Ports : 7 GE RJ45 PoE/+ Ports  : 0 Wireless Interface : 802.11 a/b/g/n/ac USB Ports : 1  Console (RJ45) : 1 Internal Storage : 1x 128 GB SSD System Performance — Enterprise Traffic Mix : IPS Throughput : 400 Mbps NGFW Throughput : 250 Mbps Threat Protection Throughput : 200 Mbps System Performance: Firewall Throughput (1518 / 512 / 64 byte UDP packets) : 3 / 3 / 3 Gbps Firewall Latency (64 byte UDP packets) : 3 μs Firewall Throughput (Packets Per Second) : 4.5 Mpps Concurrent Sessions (TCP) : 1.3 Million New Sessions/Second (TCP) : 30,000 Firewall Policies : 5,000 IPsec VPN Throughput (512 byte) : 2 Gbps Gateway-to-Gateway IPsec VPN Tunnels : 200 Client-to-Gateway IPsec VPN Tunnels : 500 SSL-VPN Throughput : 150 Mbps Concurrent SSL-VPN Users (Recommended Maximum, Tunnel Mode) : 200 SSL Inspection Throughput (IPS, avg. HTTPS) : 135 Mbps SSL Inspection CPS (IPS, avg. HTTPS) : 135 SSL Inspection Concurrent Session (IPS, avg. HTTPS) : 75,000 Application Control Throughput (HTTP 64K) : 650 Mbps CAPWAP Throughput (HTTP 64K) : 890 Mbps Virtual Domains (Default / Maximum) : 10 / 10 Maximum Number of FortiSwitches Supported : 16 Maximum Number of FortiAPs (Total / Tunnel Mode) : 30 / 10 Maximum Number of FortiTokens : 500 High Availability Configurations : Active / Active, Active / Passive, Clustering Dimensions Height x Width x Length (inches) 1.5 x 8.5 x 6.3 Height x Width x Length (mm) 38 x 216 x 160 Weight 1.9 lbs (0.9 kg)  Form Factor : Desktop

Interfaces and Modules:10 GE SFP+ Slots : 2GE RJ45 Interfaces : 8GE SFP Slots : 8GE RJ45 Management Ports : 2USB Ports : 2RJ45 Console Port : 1Local Storage : 2x 240 GB SSDIncluded Transceivers : 2x SFP (SX 1 GE) System Performance — Enterprise Traffic Mix:IPS Throughput : 10 GbpsNGFW Throughput : 9.5 GbpsThreat Protection Throughput : 7 Gbps System Performance and Capacity:IPv4 Firewall Throughput(1518 / 512 / 64 byte, UDP):36 / 36 / 27 GbpsIPv6 Firewall Throughput(1518 / 512 / 64 byte, UDP):36 / 36 / 27 GbpsFirewall Latency (64 byte, UDP) : 2 μsFirewall Throughput (Packet per Second) : 40.5 MppsConcurrent Sessions (TCP) : 8 MillionNew Sessions/Second (TCP) : 450,000Firewall Policies : 10,000IPsec VPN Throughput (512 byte) : 20 GbpsGateway-to-Gateway IPsec VPN Tunnels : 2,000Client-to-Gateway IPsec VPN Tunnels : 50,000SSL-VPN Throughput : 7 GbpsConcurrent SSL-VPN Users(Recommended Maximum, Tunnel Mode) :10,000SSL Inspection Throughput (IPS, avg. HTTPS) : 8 GbpsSSL Inspection CPS (IPS, avg. HTTPS) : 5,500SSL Inspection Concurrent Session(IPS, avg. HTTPS) : 800,000Application Control Throughput (HTTP 64K) : 15 GbpsCAPWAP Throughput (HTTP 64K) : 18 GbpsVirtual Domains (Default / Maximum) : 10 / 10Maximum Number of FortiSwitches Supported : 96Maximum Number of FortiAPs (Total / Tunnel) : 1,024 / 512Maximum Number of FortiTokens : 5,000High Availability Configurations : Active-Active, Active-Passive, Clustering Dimensions and Power :Height x Width x Length (inches) : 1.75 x 17.0 x 15.0Height x Width x Length (mm) : 44.45 x 432 x 380Weight : 16.1 lbs (7.3 kg)Form Factor (supports EIA / non-EIA standards) : Rack Mount, 1 RUPower Consumption (Average / Maximum) : 129 W / 244 WPower Source : 100–240V 50–60HzCurrent (Maximum) : 6A @ 100VHeat Dissipation : 832 BTU/hRedundant Power Supplies (Hot Swappable) : optional Operating Environment and Certifications:Operating Temperature : 32–104°F (0–40°C)Storage Temperature : -31–158°F (-35–70°C)Humidity : 10–90% non-condensingNoise Level : 59 dBAOperating Altitude Up to : 9,843 ft (3,000 m)Compliance : FCC Part 15 Class A, RCM, VCCI, CE, UL/cUL, CBCertifications ICSA Labs: Firewall, IPsec, IPS, Antivirus, SSL-VPN; USGv6/IPv6

FORTIGATE 500E FORTIGATE 501EInterfaces and Modules:10 GE SFP+ Slots : 2GE RJ45 Interfaces : 8GE SFP Slots : 8GE RJ45 Management Ports : 2USB Ports : 2RJ45 Console Port : 1Local Storage : 2x 240 GB SSDIncluded Transceivers : 2x SFP (SX 1 GE) System Performance — Enterprise Traffic Mix:IPS Throughput : 7.9 GbpsNGFW Throughput : 5 GbpsThreat Protection Throughput : 4.7 Gbps System Performance and Capacity:IPv4 Firewall Throughput(1518 / 512 / 64 byte, UDP) : 36 / 36 / 22 GbpsIPv6 Firewall Throughput(1518 / 512 / 64 byte, UDP) : 36 / 36 / 22 GbpsFirewall Latency (64 byte, UDP) : 2 μsFirewall Throughput (Packet per Second) : 33 MppsConcurrent Sessions (TCP) : 8 MillionNew Sessions/Second (TCP) : 300,000Firewall Policies : 10,000IPsec VPN Throughput (512 byte) : 20 GbpsGateway-to-Gateway IPsec VPN Tunnels : 2,000Client-to-Gateway IPsec VPN Tunnels : 50,000SSL-VPN Throughput : 5 GbpsConcurrent SSL-VPN Users(Recommended Maximum, Tunnel Mode):10,000SSL Inspection Throughput (IPS, avg. HTTPS) : 5.7 GbpsSSL Inspection CPS (IPS, avg. HTTPS) : 3,500SSL Inspection Concurrent Session(IPS, avg. HTTPS) : 800,000Application Control Throughput (HTTP 64K) : 14 GbpsCAPWAP Throughput (1444 byte, UDP) : 18 GbpsVirtual Domains (Default / Maximum) : 10 / 10Maximum Number of FortiSwitches Supported : 72Maximum Number of FortiAPs (Total / Tunnel) : 512 / 256Maximum Number of FortiTokens : 5,000Maximum Number of Registered Endpoints : 2,000High Availability Configurations : Active-Active, Active-Passive, ClusteringFORTIGATE 500E FORTIGATE 501EDimensions and Power :Height x Width x Length (inches) : 1.75 x 17.0 x 15.0Height x Width x Length (mm) : 44.45 x 432 x 380Weight : 16.1 lbs (7.3 kg)Form Factor (supports EIA / non-EIA standards) : Rack Mount, 1 RUPower Consumption (Average / Maximum) : 95 W / 193 W 105 W / 200 WPower Input : 100–240V, 50–60HzCurrent (Maximum) : 6AHeat Dissipation : 613 BTU/hRedundant Power Supplies (Hot Swappable) : optional Operating Environment and Certifications:Operating Temperature : 32–104°F (0–40°C)Storage Temperature : -31–158°F (-35–70°C)Humidity : 10–90% non-condensingNoise Level : 43 dBAOperating Altitude Up to : 7,400 ft (2,250 m)Compliance : FCC Part 15 Class A, RCM, VCCI, CE, UL/cUL, CBCertifications ICSA Labs: Firewall, IPsec, IPS, Antivirus, SSL-VPN; USGv6/IPv6

FORTIGATE 400E FORTIGATE 401EInterfaces and Modules:GE RJ45 Interfaces : 16GE SFP Slots : 16GE RJ45 Management Ports : 2USB Ports : 2RJ45 Console Port : 1Local Storage : 2x 240 GB SSDIncluded Transceivers : 2x SFP (SX 1 GE) System Performance — Enterprise Traffic Mix:IPS Throughput : 7.8 GbpsNGFW Throughput : 6 GbpsThreat Protection Throughput : 5 Gbps System Performance and Capacity:IPv4 Firewall Throughput(1518 / 512 / 64 byte, UDP) : 32 / 32 / 24 GbpsIPv6 Firewall Throughput(1518 / 512 / 64 byte, UDP) : 32 / 32 / 24 GbpsFirewall Latency (64 byte, UDP) : 3 μsFirewall Throughput (Packet per Second) : 36 MppsConcurrent Sessions (TCP) : 4 MillionNew Sessions/Second (TCP) : 450,000Firewall Policies : 10,000IPsec VPN Throughput (512 byte) : 20 GbpsGateway-to-Gateway IPsec VPN Tunnels : 2,000Client-to-Gateway IPsec VPN Tunnels : 50,000SSL-VPN Throughput : 4.5 GbpsConcurrent SSL-VPN Users (Recommended Maximum, Tunnel Mode) : 5,000SSL Inspection Throughput (IPS, avg. HTTPS) : 4.8 GbpsSSL Inspection CPS (IPS, avg. HTTPS) : 4,000SSL Inspection Concurrent Session (IPS, avg. HTTPS) : 300,000Application Control Throughput (HTTP 64K) : 12 GbpsCAPWAP Throughput (1444 byte, UDP) : 14.8 GbpsVirtual Domains (Default / Maximum) : 10 / 10Maximum Number of FortiSwitches Supported : 72Maximum Number of FortiAPs (Total / Tunnel) : 512 / 256Maximum Number of FortiTokens : 5,000High Availability Configurations : Active-Active, Active-Passive, Clustering FORTIGATE 400E FORTIGATE 401EDimensions and Power:Height x Width x Length (inches) : 1.75 x 17.0 x 15.0Height x Width x Length (mm) : 44.45 x 432 x 380Weight : 16.4 lbs (7.4 kg) 16.9 lbs (7.9 kg)Form Factor (supports EIA / non-EIA standards) : Rack Mount, 1 RUPower Consumption (Average / Maximum) : 109 W / 214 W 115 W / 221 WPower Input : 100–240V, 50–60HzCurrent (Maximum) : 6AHeat Dissipation : 730 BTU/h 754 BTU/hRedundant Power Supplies (Hot Swappable) : optional Operating Environment and Certifications:Operating Temperature : 32–104°F (0–40°C)Storage Temperature : -31–158°F (-35–70°C)Humidity : 10–90% non-condensingNoise Level : 48 dBAOperating Altitude Up to : 7,400 ft (2,250 m)Compliance : FCC Part 15 Class A, RCM, VCCI, CE, UL/cUL, CBCertifications ICSA Labs: Firewall, IPsec, IPS, Antivirus, SSL-VPN; USGv6/IPv6

FORTIGATE 300E FORTIGATE 301EInterfaces and Modules:GE RJ45 Interfaces : 16GE SFP Slots : 16GE RJ45 Management Ports : 2USB Ports : 2RJ45 Console Port : 1Local Storage : 2x 240 GB SSDIncluded Transceivers : 2x SFP (SX 1 GE) System Performance — Enterprise Traffic Mix:IPS Throughput : 5 GbpsNGFW Throughput : 3.5 GbpsThreat Protection Throughput : 3 Gbps System Performance and Capacity:IPv4 Firewall Throughput(1518 / 512 / 64 byte, UDP) : 32 / 32 / 20 GbpsIPv6 Firewall Throughput(1518 / 512 / 64 byte, UDP) : 32 / 32 / 20 GbpsFirewall Latency (64 byte, UDP) : 3 μsFirewall Throughput (Packet per Second) : 30 MppsConcurrent Sessions (TCP) : 4 MillionNew Sessions/Second (TCP) : 300,000Firewall Policies : 10,000IPsec VPN Throughput (512 byte) : 20 GbpsGateway-to-Gateway IPsec VPN Tunnels : 2,000Client-to-Gateway IPsec VPN Tunnels : 50,000SSL-VPN Throughput : 2.5 GbpsConcurrent SSL-VPN Users(Recommended Maximum, Tunnel Mode):5,000SSL Inspection Throughput (IPS, avg. HTTPS) : 3.9 GbpsSSL Inspection CPS (IPS, avg. HTTPS) : 2,500SSL Inspection Concurrent Session (IPS, avg. HTTPS) : 340,000Application Control Throughput (HTTP 64K) : 7 GbpsCAPWAP Throughput (1444 byte, UDP) : 5 GbpsVirtual Domains (Default / Maximum) : 10 / 10Maximum Number of FortiSwitches Supported : 72Maximum Number of FortiAPs (Total / Tunnel) : 512 / 256Maximum Number of FortiTokens : 5,000High Availability Configurations : Active-Active, Active-Passive, Clustering Dimensions and Power:Height x Width x Length (inches) : 1.75 x 17.0 x 15.0Height x Width x Length (mm) : 44.45 x 432 x 380Weight : 16.1 lbs (7.3 kg) 16.6 lbs (7.6 kg)Form Factor (supports EIA / non-EIA standards) : Rack Mount, 1 RUPower Consumption (Average / Maximum) : 90 W / 173 W 95 W / 180 WPower Input : 100V–240V AC, 50–60HzCurrent (Maximum) : 6AHeat Dissipation : 570 BTU/h 614 BTU/hRedundant Power Supplies (Hot Swappable) : optional Operating Environment and Certifications:Operating Temperature : 32–104°F (0–40°C)Storage Temperature : -31–158°F (-35–70°C)Humidity : 10–90% non-condensingNoise Level : 48 dBAOperating Altitude Up to : 7,400 ft (2,250 m)Compliance : FCC Part 15 Class A, RCM, VCCI, CE, UL/cUL, CBCertifications ICSA Labs: Firewall, IPsec, IPS, Antivirus, SSL-VPN; USGv6/IPv6

FORTIGATE 200E FORTIGATE 201EHardware Specifications:GE RJ45 WAN Interfaces : 2GE RJ45 Management/HA Ports : 2GE RJ45 Ports : 14GE SFP Slots : 4USB port : 1Console (RJ45): 1Local Storage : 1x 480 GB SSDIncluded Transceivers : 0 System Performance — Enterprise Traffic Mix:IPS Throughput : 2.2 GbpsNGFW Throughput : 1.8 GbpsThreat Protection Throughput : 1.2 Gbps System Performance:Firewall Throughput(1518 / 512 / 64 byte UDP packets) : 20 / 20 / 9 GbpsFirewall Latency (64 byte UDP packets) : 3 μsFirewall Throughput (Packets Per Second) : 13.5 MppsConcurrent Sessions (TCP) : 2 MillionNew Sessions/Second (TCP) : 135,000Firewall Policies : 10,000IPsec VPN Throughput (512 byte) : 7.2 GbpsGateway-to-Gateway IPsec VPN Tunnels : 2,000Client-to-Gateway IPsec VPN Tunnels : 10,000SSL-VPN Throughput : 900 MbpsConcurrent SSL-VPN Users(Recommended Maximum, Tunnel Mode) : 500SSL Inspection Throughput (IPS, avg. HTTPS) : 820 MbpsSSL Inspection CPS (IPS, avg. HTTPS) : 1,000SSL Inspection Concurrent Session(IPS, avg. HTTPS) : 240,000Application Control Throughput (HTTP 64K) : 3.5 GbpsCAPWAP Throughput (1444 byte, UDP) : 1.5 GbpsVirtual Domains (Default / Maximum) : 10 / 10Maximum Number of FortiSwitches Supported : 64Maximum Number of FortiAPs (Total / Tunnel Mode) : 256 / 128Maximum Number of FortiTokens : 5,000High Availability Configurations : Active / Active, Active / Passive, Clustering Dimensions:Height x Width x Length (inches) : 1.75 x 17.0 x 11.9Height x Width x Length (mm) : 44.45 x 432 x 301Weight : 11.9 lbs (5.4 kg) 12.12 lbs (5.5 kg)Form Factor (supports EIA / non-EIA standards) : Rack Mount, 1 RU Environment:Power Input :100–240V AC, 50–60 HzMaximum Current : 110 V / 3 A, 220 V / 0.42 APower Consumption (Average / Maximum) : 70.98 / 109.9 WHeat Dissipation : 374.9 BTU/hOperating Temperature : 32–104°F (0–40°C)Storage Temperature : -31–158°F (-35–70°C)Humidity : 10–90% non-condensingNoise Level : 31.1 dBAOperating Altitude Up to : 7,400 ft (2,250 m)Compliance : FCC Part 15B, Class A, CE, RCM, VCCI, UL/cUL, CB, BSMICertifications ICSA Labs: Firewall, IPsec, IPS, Antivirus, SSL-VPN; IPv6

FORTIGATE 100F FORTIGATE 101FHardware Specifications:GE RJ45 Ports : 12GE RJ45 Management/HA/DMZ Ports : 1 / 2 / 1GE SFP Slots : 410 GE SFP+ Slots : 2GE RJ45 WAN Ports : 2GE RJ45 or SFP Shared Ports : 4USB Port : 1Console Port : 1Internal Storage : 1x 480 GB SSDIncluded Transceivers : 0 System Performance — Enterprise Traffic Mix:IPS Throughput : 2.6 GbpsNGFW Throughput : 1.6 GbpsThreat Protection Throughput : 1 Gbps System Performance:Firewall Throughput(1518 / 512 / 64 byte UDP packets) : 20 / 18 / 10 GbpsFirewall Latency (64 byte UDP packets) : 5 μsFirewall Throughput (Packets Per Second) : 15 MppsConcurrent Sessions (TCP) : 1.5 MillionNew Sessions/Second (TCP) : 56,000Firewall Policies : 10,000IPsec VPN Throughput (512 byte) : 11.5 GbpsGateway-to-Gateway IPsec VPN Tunnels : 2,500Client-to-Gateway IPsec VPN Tunnels : 16,000SSL-VPN Throughput : 1 GbpsConcurrent SSL-VPN Users(Recommended Maximum, Tunnel Mode) : 500SSL Inspection Throughput (IPS, avg. HTTPS) : 1 GbpsSSL Inspection CPS (IPS, avg. HTTPS) : 1,800SSL Inspection Concurrent Session(IPS, avg. HTTPS) : 135,000Application Control Throughput (HTTP 64K) : 2.2 GbpsCAPWAP Throughput (HTTP 64K) : 15 GbpsVirtual Domains (Default / Maximum) : 10 / 10Maximum Number of FortiSwitches Supported : 24Maximum Number of FortiAPs(Total / Tunnel Mode) : 128 / 64Maximum Number of FortiTokens : 5,000High Availability Configurations : Active / Active, Active / Passive, Clustering Dimensions:Height x Width x Length (inches) : 1.73 x 17 x 10Height x Width x Length (mm) : 44 x 432 x 254Form Factor (supports EIA / non-EIA standards) : Rack Mount, 1 RUWeight : 7.25 lbs (3.29 kg) 7.56 lbs (3.43 kg) Environment:Power Required : 100–240V AC, 50-60Maximum Current : 100V / 1A, 240V / 0.5APower Consumption (Average / Maximum) : 35.1 W / 38.7 W 35.3 W / 39.1 WHeat Dissipation : 119.77 BTU/h 121.13 BTU/hRedundant Power Supplies : Yes Environment:Operating Temperature : 32–104°F (0–40°C)Storage Temperature : -31–158°F (-35–70°C)Operating Altitude Up to : 7,400 ft (2,250 m)Humidity : 10–90% non-condensingNoise Level : 40.4 dBACompliance : FCC Part 15B, Class A, CE, RCM, VCCI, UL/cUL, CB, BSMICertifications ICSA Labs: Firewall, IPsec, IPS, Antivirus, SSL-VPN; IPv6

SpecificationsFORTIGATE 100E Hardware Specifications:GE RJ45 Ports : 14 GE RJ45 Management/HA/DMZ Ports : 1 / 2 GE SFP Slots : 0 GE RJ45 PoE/+ Ports : 0GE RJ45 WAN Ports : 2 GE RJ45 or SFP Shared Ports : 2 USB Port : 1 Console Port : 1 Internal Storage : 0Included Transceivers : 0 System Performance — Enterprise Traffic Mix:IPS Throughput : 500 MbpsNGFW Throughput : 360 MbpsThreat Protection Throughput : 250 Mbps System Performance:Firewall Throughput (1518 / 512 / 64 byte UDP packets) : 7.4 / 7.4 / 4.4 GbpsFirewall Latency (64 byte UDP packets) : 3 μsFirewall Throughput (Packets Per Second) : 6.6 MppsConcurrent Sessions (TCP) : 2 MillionNew Sessions/Second (TCP) : 30,000Firewall Policies : 10,000IPsec VPN Throughput (512 byte) : 4 GbpsGateway-to-Gateway IPsec VPN Tunnels : 2,000Client-to-Gateway IPsec VPN Tunnels : 10,000SSL-VPN Throughput : 250 MbpsConcurrent SSL-VPN Users(Recommended Maximum, Tunnel Mode) : 500SSL Inspection Throughput (IPS, avg. HTTPS) : 130 MbpsSSL Inspection CPS (IPS, avg. HTTPS) : 130SSL Inspection Concurrent Session (IPS, avg. HTTPS) : 125,000Application Control Throughput (HTTP 64K) : 1 GbpsCAPWAP Throughput (1444 byte, UDP) : 1.5 GbpsVirtual Domains (Default / Maximum) : 10 / 10Maximum Number of FortiSwitches Supported : 24Maximum Number of FortiAPs (Total / Tunnel Mode) : 64 / 32Maximum Number of FortiTokens : 5,000High Availability Configurations : Active / Active, Active / Passive, Clustering Dimensions:Height x Width x Length (inches) : 1.75 x 17 x 10 1.75 x 17 x 10 1.75 x 17 x 10 1.75 x 17 x 15.5Height x Width x Length (mm) : 44.45 x 432 x 254 44.45 x 432 x 254 44.45 x 432 x 254 44.45 x 432 x 394Form Factor (supports EIA / non-EIA standards) : Rack Mount, 1 RU Rack Mount, 1 RU Rack Mount, 1 RU Rack Mount, 1 RUWeight : 7.28 lbs (3.3 kg) 7.28 lbs (3.3 kg) 7.28 lbs (3.3 kg) 12.4 lbs (5.6 kg) Environment:Power Input : 100–240V AC, 50–60 HzMaximum Current : 100V / 0.52A, 240V / 0.22A 100V / 0.59A, 240V / 0.25A 100V / 0.52A, 240V / 0.22A 100V / 5ATotal Available PoE Power Budget* — — — 400 WPower Consumption (Average / Maximum) : 23.0 W / 28.6 W; 51.9 VA 24.8 W / 33.8 W; 59.2 VA 24.4 W / 28.6 W; 51.9 VA 477.1 W / 500.0 WHeat Dissipation : 97.6 BTU/h 115.3 BTU/h 97.6 BTU/h 1706.07 BTU/h

FG-6300F/6301F Interfaces and Modules:40/100 GE QSFP28 Slots : 41/10/25 GE SFP28 Slots : 2410 GE SFP+ Slots : 3GE RJ45 Management Ports : 2USB Ports : 1Console Port : 1Internal Storage : 2x 1 TB NVMe (for 6301F and 6501F only)Included Transceivers : 2x SFP+ (SR 10 GE) System Performance — Enterprise Traffic Mix :IPS Throughput : 110 Gbps NGFW Throughput : 90 Gbps Threat Protection Throughput : 60 Gbps System Performance and Capacity:Firewall Throughput (1518 / 512 / 64 byte, UDP) : 239 / 238 / 135 Gbps Firewall Latency (64 byte, UDP) : 5 μs Firewall Throughput (Packet per Second): 202.5 Mpps Concurrent Sessions (TCP) 120 Million : 200 MillionNew Sessions/Sec (TCP) : 2 Million Firewall Policies : 200,000 IPsec VPN Throughput (512 byte) : 96 Gbps Gateway-to-Gateway IPsec VPN Tunnels : 16,000 Client-to-Gateway IPsec VPN Tunnels : 90,000 SSL-VPN Throughput : 9 Gbps Concurrent SSL-VPN Users(Recommended Maximum, Tunnel Mode) : 30,000SSL Inspection Throughput (IPS, avg. HTTPS) : 66 Gbps SSL Inspection CPS (IPS, avg. HTTPS) : 30,000 SSL Inspection Concurrent Session(IPS, avg. HTTPS) : 10 Million Application Control Throughput (HTTP 64K) : 150 Gbps CAPWAP Throughput (1444 byte, UDP) : N/A Virtual Domains (Default / Maximum) : 10 / 500Maximum Number of FortiSwitches Supported : 256Maximum Number of FortiAPs (Total / Tunnel Mode) : N/AHigh Availability Configurations : Supported Dimensions and Power:Height x Width x Length (inches) : 5.20 x 17.20 x 26.185.3 x 17.2 x 27.3Height x Width x Length (mm) : 132 x 437 x 665 Weight : 67.68 lbs (30.7 kg) Form Factor (supports EIA/non-EIA standards) : Rack Mount, 3 RUAC Power Supply : 100–240V AC, 50–60 HzRedundant Power Supplies : 2+1 Redundant, Hot Swappable Operating Environment and Certifications:Operating Temperature : 32–104°F (0–40°C)Storage Temperature : -31–158°F (-35–70°C)Humidity : 10–90% non-condensingNoise Level : 57.43 dBAOperating Altitude Up to : 7,400 ft (2,250 m)Compliance : FCC Part 15 Class A, RCM, VCCI, CE, UL/cUL, CB

FG-6500F/6501FInterfaces and Modules:40/100 GE QSFP28 Slots : 41/10/25 GE SFP28 Slots : 2410 GE SFP+ Slots : 3GE RJ45 Management Ports : 2USB Ports : 1Console Port : 1Internal Storage : 2x 1 TB NVMe (for 6301F and 6501F only)Included Transceivers : 2x SFP+ (SR 10 GE) System Performance — Enterprise Traffic Mix:IPS Throughput : 170 GbpsNGFW Throughput : 150 GbpsThreat Protection Throughput : 100 Gbps System Performance and Capacity :Firewall Throughput(1518 / 512 / 64 byte, UDP) : 239 / 238 / 135 GbpsFirewall Latency (64 byte, UDP) : 5 μsFirewall Throughput (Packet per Second) : 202.5 MppsConcurrent Sessions (TCP) : 200 MillionNew Sessions/Sec (TCP) : 3 MillionFirewall Policies : 200,000IPsec VPN Throughput (512 byte) : 160 GbpsGateway-to-Gateway IPsec VPN Tunnels : 16,000Client-to-Gateway IPsec VPN Tunnels : 90,000SSL-VPN Throughput :9 GbpsConcurrent SSL-VPN Users(Recommended Maximum, Tunnel Mode) : 30,000SSL Inspection Throughput (IPS, avg. HTTPS) : 110 GbpsSSL Inspection CPS (IPS, avg. HTTPS) : 50,000SSL Inspection Concurrent Session(IPS, avg. HTTPS) : 18 MillionApplication Control Throughput (HTTP 64K) : 220 GbpsCAPWAP Throughput (1444 byte, UDP) : N/AVirtual Domains (Default / Maximum) : 10 / 500Maximum Number of FortiSwitches Supported : 256Maximum Number of FortiAPs(Total / Tunnel Mode) : N/AHigh Availability Configurations : Supported Dimensions and Power:Height x Width x Length (inches): 5.20 x 17.20 x 26.18 5.3 x 17.2 x 27.3Height x Width x Length (mm) : 132 x 437 x 665 133 x 437 x 694Weight : 78.26 lbs (35.5 kg) / 79.59 lbs (36.1 kg) Form Factor (supports EIA/non-EIA standards) : Rack Mount, 3 RUAC Power Supply : 100–240V AC, 50–60 HzPower Consumption (Average / Maximum) : (1,308 / 1,548 W) / (1,328 / 1,568 W)Current (Maximum) : 20A@240VACRedundant Power Supplies : 2+1 Redundant, Hot Swappable Operating Environment and Certifications:Operating Temperature : 32–104°F (0–40°C)Storage Temperature : -31–158°F (-35–70°C)Humidity : 10–90% non-condensingNoise Level : 57.43 dBAOperating Altitude Up to : 7,400 ft (2,250 m)Compliance : FCC Part 15 Class A, RCM, VCCI, CE, UL/cUL, CB

Firewall general :Operating system : SonicOS 6.5.1Security processing cores : 6Interfaces : 2 x 10-GbE SFP+,4 x 1-GbE SFP,12 x 1-GbE,1 GbE Management,1 ConsoleExpansion:1 Expansion Slot (Rear)*, SD Card*Management : CLI, SSH, Web UI, Capture Security Center, GMS, REST APIsSSO users : 40,000 Maximum access points supported : 48 Logging : Analyzer, Local Log, Syslog Firewall/VPN Performance:Firewall inspection throughput : 3.4 GbpsFull DPI throughput : 500 MbpsApplication inspection throughput : 1.1 GbpsIPS throughput : 1.1 GbpsAnti-malware inspection throughput : 600 MbpsIMIX throughput : 900 MbpsTLS/SSL decryption and inspection (DPI SSL) : 300 MbpsVPN throughput : 1.5 Gbps Connections per second : 20,000/secMaximum connections (SPI) : 750,000Maximum connections (DPI) : 375,000Default/Maximum connections (DPI SSL) : 2,000/2,750 VPN :Site-to-site VPN tunnels : 1,000IPSec VPN clients (max) : 50 (1,000)SSL VPN NetExtender clients (max) : 2 (350)Encryption/Authentication :DES, 3DES, AES (128, 192, 256-bit)/MD5, SHA-1, Suite B CryptographyKey exchange : Diffie Hellman Groups 1, 2, 5, 14vRoute-based VPN : RIP, OSPF, BGP Networking :IP address assignment : Static (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP RelayNAT modes : 1:1, many:1, 1:many, flexible NAT (overlapping IPS), PAT, transparent modeVLAN interfaces : 256Routing protocols : BGP, OSPF, RIPv1/v2, static routes, policy-based routingQoS : Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1pAuthentication : LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC)VoIP : Full H323-v1-5, SIPStandards : TCP/IP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3Certifications : ICSA Firewall, ICSA Anti-Virus, FIPS 140-2, Common Criteria NDPP (Firewall and IPS), UC APLHigh availability : Active/Passive with State Sync, Active/Active Clustering Hardware :Power supply : Single, Fixed 250WFans : Dual, FixedInput power : 100-240 VAC, 60-50 HzMaximum power consumption (W) : 74.3MTBF @25ºC in hours : 146,789 MTBF @25ºC in years : 16.76 Form factor : 1U Rack MountableDimensions : 1.75 x 19.1 x 17 in (4.5 x 48.5 x 43 cm)Weight : 13.56 lb (6.15 kg)WEEE weight : 14.24 lb (6.46 kg) Shipping weight : 20.79lb (9.43 kg)Major regulatory : FCC Class A, CE (EMC, LVD, RoHS), C-Tick, VCCI Class A, MSIP/KCC Class A, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE , REACH, ANATEL, BSMI, CUEnvironment (Operating/Storage) : 32°-105° F (0°-40° C)/-40° to 158° F (-40° to 70° C)Humidity : 10-90% non-condensing

Firewall general :Operating system : SonicOS 6.5.1Security processing cores : 4Interfaces : 8 x 1-GbE,1 GbE Management,1 ConsoleExpansion:1 Expansion Slot (Rear)*, SD Card*Management : CLI, SSH, Web UI, Capture Security Center, GMS, REST APIsSSO users : 30,000 Maximum access points supported : 32 Logging : Analyzer, Local Log, Syslog Firewall/VPN Performance:Firewall inspection throughput : 1.9 GbpsFull DPI throughput : 300 MbpsApplication inspection throughput : 700 MbpsIPS throughput : 700 MbpsAnti-malware inspection throughput : 400 MbpsIMIX throughput : 600 MbpsTLS/SSL decryption and inspection (DPI SSL) : 200 MbpsVPN throughput : 1.1 GbpsConnections per second : 15,000/secMaximum connections (SPI) : 500,000Maximum connections (DPI) : 250,000Default/Maximum connections (DPI SSL) : 1,000/1,000 VPN :Site-to-site VPN tunnels : 250IPSec VPN clients (max) : 10 (250)SSL VPN NetExtender clients (max) : 2 (250)Encryption/Authentication :DES, 3DES, AES (128, 192, 256-bit)/MD5, SHA-1, Suite B CryptographyKey exchange : Diffie Hellman Groups 1, 2, 5, 14vRoute-based VPN : RIP, OSPF, BGP Networking :IP address assignment : Static (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP RelayNAT modes : 1:1, many:1, 1:many, flexible NAT (overlapping IPS), PAT, transparent modeVLAN interfaces : 256Routing protocols : BGP, OSPF, RIPv1/v2, static routes, policy-based routingQoS : Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1pAuthentication : LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC)VoIP : Full H323-v1-5, SIPStandards : TCP/IP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3Certifications : ICSA Firewall, ICSA Anti-Virus, FIPS 140-2, Common Criteria NDPP (Firewall and IPS), UC APLHigh availability : Active/Passive with State Sync Hardware :Power supply : Single, Fixed 200WFans : Dual, FixedInput power : 100-240 VAC, 60-50 HzMaximum power consumption (W) : 49.4MTBF @25ºC in hours : 176,540 MTBF @25ºC in years : 20.15 Form factor : 1U Rack MountableDimensions : 1.75 x 10.25 x 17 in(4.5 x 26 x 43 cm)Weight : 10.1 lb (4.6 kg)WEEE weight : 11.0 lb (5.0 kg)Shipping weight : 14.3 lb (6.5 kg)Major regulatory : FCC Class A, CE (EMC, LVD, RoHS), C-Tick, VCCI Class A, MSIP/KCC Class A, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE , REACH, ANATEL, BSMI, CUEnvironment (Operating/Storage) : 32°-105° F (0°-40° C)/-40° to 158° F (-40° to 70° C)Humidity : 10-90% non-condensing

Performance Overview: Operating system : SonicOS 5.9.x – Wired / SonicOS 6.2.x – WirelessSecurity Processor: 2x400 MHz (Wired) / 2x800 MHz (Wireless) Memory (RAM): 512 MB (Wired) /1 GB (Wireless) 1 GbE Copper interfaces : 5 Expansion : USB Firewall inspection throughput: 300 Mbps Full DPI throughput:50 Mbps Application inspection throughput:0 IPS throughput : 100 Mbps Anti-malware inspection throughput : 50 Mbps IMIX throughput : 60 Mbps SSL Inspection and Decryption (DPI SSL) :15 Mbps VPN throughput : 100 Mbps Connections per second : 1,800 Maximum connections (SPI) : 10,000 Maximum connections (DPI) : 10,000 Single Sign-On (SSO) Users :250 VLAN interfaces : 25 SonicPoints supported (Maximum) : 2 VPN :Site-to-Site VPN Tunnels : 10 IPSec VPN clients (Maximum) : 1 (5) SSL VPN licenses (Maximum) : 1 (10) Virtual assist bundled (Maximum) : No Encryption/Authentication : DES, 3DES, AES (128, 192, 256-bit), MD5, SHA-1, Suite B CryptographyKey exchange : Diffie Hellman Groups 1, 2, 5, 14Route-based VPN : RIP, OSPFCertificate support : Verisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWall-to-SonicWall VPN, SCEPVPN features : Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPNGlobal VPN client platforms supported : Microsoft® Windows Vista 32/64-bit, Windows 7 32/64-bit, Windows 8.0 32/64-bit, Windows 8.1 32/64-bitNetExtender : Microsoft Windows Vista 32/64-bit, Windows 7, Windows 8.0 32/64-bit, Windows 8.1 32/64-bit, Mac OS X 10.4+, Linux FC3+/Ubuntu 7+/OpenSUSEMobile Connect : Apple® iOS, Mac OS X, Google® Android™, Kindle Fire, Windows 8.1 (Embedded) Security Services:Deep Packet Inspection services : Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSLContent Filtering Service (CFS) : HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid listsEnforced Client Anti-Virus and Anti-Spyware : McAfee®Comprehensive Anti-Spam Service : SupportedApplication Intelligence and Control : Yes Application Visualization : No Networking:IP address assignment : Static, (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relayNAT modes : 1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent modeRouting protocols : OSPF, RIPv1/v2, static routes, policy-based routing, multicast QoS : Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1e (WMM)Authentication : XAUTH/RADIUS, Active Directory, SSO, LDAP, Novell, internal user database, Terminal Services, CitrixLocal user database : 150 VoIP : Full H.323v1-5, SIPStandards : TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3Certifications : VPNC, IPv6 (Phase 2)Certifications pending : Common Criteria NDPP, FIPS 140-2 (with Suite B) Level 2, ICSA Firewall, ICSA Anti-virus, UC APLCommon Access Card (CAC) : SupportedHigh Availability : No Hardware:Form factor : Desktop Power Supply (W) : 24W external Maximum power consumption (W) : 6.4 / 11.3Input power : 100 to 240 VAC, 50-60 Hz, 1 ATotal heat dissipation : 21.8 / 38.7 BTU Dimensions : 3.6x14.1x19cm Weight : 0.34 Kg / 0.75 lbs & 0.48 Kg / 1.06 lbs WEEE weight : 0.80 Kg / 1.76 lbs & 0.94 Kg / 2.07 lbs Shipping weight : 1.20 Kg / 2.64 lbs & 1.34 Kg / 2.95 lbs MTBF (Years) : 30 / 15 Environment : 40-105° F, 0-40° CHumidity : 5-95% non-condensing

Performance Overview: Operating system : SonicOS 5.9.x – Wired / SonicOS 6.2.x – WirelessSecurity Processor: 2x400 MHz (Wired) / 2x800 MHz (Wireless) Memory (RAM): 512 MB (Wired) /1 GB (Wireless) 1 GbE Copper interfaces : 5 Expansion : USB Firewall inspection throughput: 300 Mbps Full DPI throughput:50 Mbps Application inspection throughput:0 IPS throughput : 100 Mbps Anti-malware inspection throughput : 50 Mbps IMIX throughput : 60 Mbps SSL Inspection and Decryption (DPI SSL) :15 Mbps VPN throughput : 100 Mbps Connections per second : 1,800 Maximum connections (SPI) : 10,000 Maximum connections (DPI) : 10,000 Single Sign-On (SSO) Users :250 VLAN interfaces : 25 SonicPoints supported (Maximum) : 2 VPN :Site-to-Site VPN Tunnels : 10 IPSec VPN clients (Maximum) : 1 (5) SSL VPN licenses (Maximum) : 1 (10) Virtual assist bundled (Maximum) : No Encryption/Authentication : DES, 3DES, AES (128, 192, 256-bit), MD5, SHA-1, Suite B CryptographyKey exchange : Diffie Hellman Groups 1, 2, 5, 14Route-based VPN : RIP, OSPFCertificate support : Verisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWall-to-SonicWall VPN, SCEPVPN features : Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPNGlobal VPN client platforms supported : Microsoft® Windows Vista 32/64-bit, Windows 7 32/64-bit, Windows 8.0 32/64-bit, Windows 8.1 32/64-bitNetExtender : Microsoft Windows Vista 32/64-bit, Windows 7, Windows 8.0 32/64-bit, Windows 8.1 32/64-bit, Mac OS X 10.4+, Linux FC3+/Ubuntu 7+/OpenSUSEMobile Connect : Apple® iOS, Mac OS X, Google® Android™, Kindle Fire, Windows 8.1 (Embedded) Security Services:Deep Packet Inspection services : Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSLContent Filtering Service (CFS) : HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid listsEnforced Client Anti-Virus and Anti-Spyware : McAfee®Comprehensive Anti-Spam Service : SupportedApplication Intelligence and Control : Yes Application Visualization : No Networking:IP address assignment : Static, (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relayNAT modes : 1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent modeRouting protocols : OSPF, RIPv1/v2, static routes, policy-based routing, multicast QoS : Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1e (WMM)Authentication : XAUTH/RADIUS, Active Directory, SSO, LDAP, Novell, internal user database, Terminal Services, CitrixLocal user database : 150 VoIP : Full H.323v1-5, SIPStandards : TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3Certifications : VPNC, IPv6 (Phase 2)Certifications pending : Common Criteria NDPP, FIPS 140-2 (with Suite B) Level 2, ICSA Firewall, ICSA Anti-virus, UC APLCommon Access Card (CAC) : SupportedHigh Availability : No Hardware:Form factor : Desktop Power Supply (W) : 24W external Maximum power consumption (W) : 6.4 / 11.3Input power : 100 to 240 VAC, 50-60 Hz, 1 ATotal heat dissipation : 21.8 / 38.7 BTU Dimensions : 3.6x14.1x19cm Weight : 0.34 Kg / 0.75 lbs & 0.48 Kg / 1.06 lbs WEEE weight : 0.80 Kg / 1.76 lbs & 0.94 Kg / 2.07 lbs Shipping weight : 1.20 Kg / 2.64 lbs & 1.34 Kg / 2.95 lbs MTBF (Years) : 30 / 15 Environment : 40-105° F, 0-40° CHumidity : 5-95% non-condensing

Performance Overview: Operating system : SonicOS 5.9.x – Wired / SonicOS 6.2.x – WirelessSecurity Processor: 2x400 MHz (Wired) / 2x800 MHz (Wireless) Memory (RAM): 512 MB (Wired) /1 GB (Wireless) 1 GbE Copper interfaces : 5 Expansion : USB Firewall inspection throughput: 300 Mbps Full DPI throughput:50 Mbps Application inspection throughput:0 IPS throughput : 100 Mbps Anti-malware inspection throughput : 50 Mbps IMIX throughput : 60 Mbps SSL Inspection and Decryption (DPI SSL) :15 Mbps VPN throughput : 100 Mbps Connections per second : 1,800 Maximum connections (SPI) : 10,000 Maximum connections (DPI) : 10,000 Single Sign-On (SSO) Users :250 VLAN interfaces : 25 SonicPoints supported (Maximum) : 2 VPN :Site-to-Site VPN Tunnels : 10 IPSec VPN clients (Maximum) : 1 (5) SSL VPN licenses (Maximum) : 1 (10) Virtual assist bundled (Maximum) : No Encryption/Authentication : DES, 3DES, AES (128, 192, 256-bit), MD5, SHA-1, Suite B CryptographyKey exchange : Diffie Hellman Groups 1, 2, 5, 14Route-based VPN : RIP, OSPFCertificate support : Verisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWall-to-SonicWall VPN, SCEPVPN features : Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPNGlobal VPN client platforms supported : Microsoft® Windows Vista 32/64-bit, Windows 7 32/64-bit, Windows 8.0 32/64-bit, Windows 8.1 32/64-bitNetExtender : Microsoft Windows Vista 32/64-bit, Windows 7, Windows 8.0 32/64-bit, Windows 8.1 32/64-bit, Mac OS X 10.4+, Linux FC3+/Ubuntu 7+/OpenSUSEMobile Connect : Apple® iOS, Mac OS X, Google® Android™, Kindle Fire, Windows 8.1 (Embedded) Security Services:Deep Packet Inspection services : Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSLContent Filtering Service (CFS) : HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid listsEnforced Client Anti-Virus and Anti-Spyware : McAfee®Comprehensive Anti-Spam Service : SupportedApplication Intelligence and Control : Yes Application Visualization : No Networking:IP address assignment : Static, (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relayNAT modes : 1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent modeRouting protocols : OSPF, RIPv1/v2, static routes, policy-based routing, multicast QoS : Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1e (WMM)Authentication : XAUTH/RADIUS, Active Directory, SSO, LDAP, Novell, internal user database, Terminal Services, CitrixLocal user database : 150 VoIP : Full H.323v1-5, SIPStandards : TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3Certifications : VPNC, IPv6 (Phase 2)Certifications pending : Common Criteria NDPP, FIPS 140-2 (with Suite B) Level 2, ICSA Firewall, ICSA Anti-virus, UC APLCommon Access Card (CAC) : SupportedHigh Availability : No Hardware:Form factor : Desktop Power Supply (W) : 24W external Maximum power consumption (W) : 6.4 / 11.3Input power : 100 to 240 VAC, 50-60 Hz, 1 ATotal heat dissipation : 21.8 / 38.7 BTU Dimensions : 3.6x14.1x19cm Weight : 0.34 Kg / 0.75 lbs & 0.48 Kg / 1.06 lbs WEEE weight : 0.80 Kg / 1.76 lbs & 0.94 Kg / 2.07 lbs Shipping weight : 1.20 Kg / 2.64 lbs & 1.34 Kg / 2.95 lbs MTBF (Years) : 30 / 15 Environment : 40-105° F, 0-40° CHumidity : 5-95% non-condensing

Performance Overview: Operating system : SonicOS 5.9.x – Wired / SonicOS 6.2.x – WirelessSecurity Processor: 2x400 MHz (Wired) / 2x800 MHz (Wireless) Memory (RAM): 512 MB (Wired) /1 GB (Wireless) 1 GbE Copper interfaces : 5 Expansion : USB Firewall inspection throughput: 300 Mbps Full DPI throughput:50 Mbps Application inspection throughput:0 IPS throughput : 100 Mbps Anti-malware inspection throughput : 50 Mbps IMIX throughput : 60 Mbps SSL Inspection and Decryption (DPI SSL) :15 Mbps VPN throughput : 100 Mbps Connections per second : 1,800 Maximum connections (SPI) : 10,000 Maximum connections (DPI) : 10,000 Single Sign-On (SSO) Users :250 VLAN interfaces : 25 SonicPoints supported (Maximum) : 2 VPN :Site-to-Site VPN Tunnels : 10 IPSec VPN clients (Maximum) : 1 (5) SSL VPN licenses (Maximum) : 1 (10) Virtual assist bundled (Maximum) : No Encryption/Authentication : DES, 3DES, AES (128, 192, 256-bit), MD5, SHA-1, Suite B CryptographyKey exchange : Diffie Hellman Groups 1, 2, 5, 14Route-based VPN : RIP, OSPFCertificate support : Verisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWall-to-SonicWall VPN, SCEPVPN features : Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPNGlobal VPN client platforms supported : Microsoft® Windows Vista 32/64-bit, Windows 7 32/64-bit, Windows 8.0 32/64-bit, Windows 8.1 32/64-bitNetExtender : Microsoft Windows Vista 32/64-bit, Windows 7, Windows 8.0 32/64-bit, Windows 8.1 32/64-bit, Mac OS X 10.4+, Linux FC3+/Ubuntu 7+/OpenSUSEMobile Connect : Apple® iOS, Mac OS X, Google® Android™, Kindle Fire, Windows 8.1 (Embedded) Security Services:Deep Packet Inspection services : Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSLContent Filtering Service (CFS) : HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid listsEnforced Client Anti-Virus and Anti-Spyware : McAfee®Comprehensive Anti-Spam Service : SupportedApplication Intelligence and Control : Yes Application Visualization : No Networking:IP address assignment : Static, (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relayNAT modes : 1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent modeRouting protocols : OSPF, RIPv1/v2, static routes, policy-based routing, multicast QoS : Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1e (WMM)Authentication : XAUTH/RADIUS, Active Directory, SSO, LDAP, Novell, internal user database, Terminal Services, CitrixLocal user database : 150 VoIP : Full H.323v1-5, SIPStandards : TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3Certifications : VPNC, IPv6 (Phase 2)Certifications pending : Common Criteria NDPP, FIPS 140-2 (with Suite B) Level 2, ICSA Firewall, ICSA Anti-virus, UC APLCommon Access Card (CAC) : SupportedHigh Availability : No Hardware:Form factor : Desktop Power Supply (W) : 24W external Maximum power consumption (W) : 6.4 / 11.3Input power : 100 to 240 VAC, 50-60 Hz, 1 ATotal heat dissipation : 21.8 / 38.7 BTU Dimensions : 3.6x14.1x19cm Weight : 0.34 Kg / 0.75 lbs & 0.48 Kg / 1.06 lbs WEEE weight : 0.80 Kg / 1.76 lbs & 0.94 Kg / 2.07 lbs Shipping weight : 1.20 Kg / 2.64 lbs & 1.34 Kg / 2.95 lbs MTBF (Years) : 30 / 15 Environment : 40-105° F, 0-40° CHumidity : 5-95% non-condensing

Performance Overview: Operating system : SonicOS 5.9.x – Wired / SonicOS 6.2.x – WirelessSecurity Processor: 2x400 MHz (Wired) / 2x800 MHz (Wireless) Memory (RAM): 512 MB (Wired) /1 GB (Wireless) 1 GbE Copper interfaces : 5 Expansion : USB Firewall inspection throughput: 300 Mbps Full DPI throughput:50 Mbps Application inspection throughput:0 IPS throughput : 100 Mbps Anti-malware inspection throughput : 50 Mbps IMIX throughput : 60 Mbps SSL Inspection and Decryption (DPI SSL) :15 Mbps VPN throughput : 100 Mbps Connections per second : 1,800 Maximum connections (SPI) : 10,000 Maximum connections (DPI) : 10,000 Single Sign-On (SSO) Users :250 VLAN interfaces : 25 SonicPoints supported (Maximum) : 2 VPN :Site-to-Site VPN Tunnels : 10 IPSec VPN clients (Maximum) : 1 (5) SSL VPN licenses (Maximum) : 1 (10) Virtual assist bundled (Maximum) : No Encryption/Authentication : DES, 3DES, AES (128, 192, 256-bit), MD5, SHA-1, Suite B CryptographyKey exchange : Diffie Hellman Groups 1, 2, 5, 14Route-based VPN : RIP, OSPFCertificate support : Verisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWall-to-SonicWall VPN, SCEPVPN features : Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPNGlobal VPN client platforms supported : Microsoft® Windows Vista 32/64-bit, Windows 7 32/64-bit, Windows 8.0 32/64-bit, Windows 8.1 32/64-bitNetExtender : Microsoft Windows Vista 32/64-bit, Windows 7, Windows 8.0 32/64-bit, Windows 8.1 32/64-bit, Mac OS X 10.4+, Linux FC3+/Ubuntu 7+/OpenSUSEMobile Connect : Apple® iOS, Mac OS X, Google® Android™, Kindle Fire, Windows 8.1 (Embedded) Security Services:Deep Packet Inspection services : Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSLContent Filtering Service (CFS) : HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid listsEnforced Client Anti-Virus and Anti-Spyware : McAfee®Comprehensive Anti-Spam Service : SupportedApplication Intelligence and Control : Yes Application Visualization : No Networking:IP address assignment : Static, (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relayNAT modes : 1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent modeRouting protocols : OSPF, RIPv1/v2, static routes, policy-based routing, multicast QoS : Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1e (WMM)Authentication : XAUTH/RADIUS, Active Directory, SSO, LDAP, Novell, internal user database, Terminal Services, CitrixLocal user database : 150 VoIP : Full H.323v1-5, SIPStandards : TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3Certifications : VPNC, IPv6 (Phase 2)Certifications pending : Common Criteria NDPP, FIPS 140-2 (with Suite B) Level 2, ICSA Firewall, ICSA Anti-virus, UC APLCommon Access Card (CAC) : SupportedHigh Availability : No Hardware:Form factor : Desktop Power Supply (W) : 24W external Maximum power consumption (W) : 6.4 / 11.3Input power : 100 to 240 VAC, 50-60 Hz, 1 ATotal heat dissipation : 21.8 / 38.7 BTU Dimensions : 3.6x14.1x19cm Weight : 0.34 Kg / 0.75 lbs & 0.48 Kg / 1.06 lbs WEEE weight : 0.80 Kg / 1.76 lbs & 0.94 Kg / 2.07 lbs Shipping weight : 1.20 Kg / 2.64 lbs & 1.34 Kg / 2.95 lbs MTBF (Years) : 30 / 15 Environment : 40-105° F, 0-40° CHumidity : 5-95% non-condensing

Performance Overview: Operating system : SonicOS 5.9.x – Wired / SonicOS 6.2.x – WirelessSecurity Processor: 2x400 MHz (Wired) / 2x800 MHz (Wireless) Memory (RAM): 512 MB (Wired) /1 GB (Wireless) 1 GbE Copper interfaces : 5 Expansion : USB Firewall inspection throughput: 300 Mbps Full DPI throughput:50 Mbps Application inspection throughput:0 IPS throughput : 100 Mbps Anti-malware inspection throughput : 50 Mbps IMIX throughput : 60 Mbps SSL Inspection and Decryption (DPI SSL) :15 Mbps VPN throughput : 100 Mbps Connections per second : 1,800 Maximum connections (SPI) : 10,000 Maximum connections (DPI) : 10,000 Single Sign-On (SSO) Users :250 VLAN interfaces : 25 SonicPoints supported (Maximum) : 2 VPN :Site-to-Site VPN Tunnels : 10 IPSec VPN clients (Maximum) : 1 (5) SSL VPN licenses (Maximum) : 1 (10) Virtual assist bundled (Maximum) : No Encryption/Authentication : DES, 3DES, AES (128, 192, 256-bit), MD5, SHA-1, Suite B CryptographyKey exchange : Diffie Hellman Groups 1, 2, 5, 14Route-based VPN : RIP, OSPFCertificate support : Verisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWall-to-SonicWall VPN, SCEPVPN features : Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPNGlobal VPN client platforms supported : Microsoft® Windows Vista 32/64-bit, Windows 7 32/64-bit, Windows 8.0 32/64-bit, Windows 8.1 32/64-bitNetExtender : Microsoft Windows Vista 32/64-bit, Windows 7, Windows 8.0 32/64-bit, Windows 8.1 32/64-bit, Mac OS X 10.4+, Linux FC3+/Ubuntu 7+/OpenSUSEMobile Connect : Apple® iOS, Mac OS X, Google® Android™, Kindle Fire, Windows 8.1 (Embedded) Security Services:Deep Packet Inspection services : Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSLContent Filtering Service (CFS) : HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid listsEnforced Client Anti-Virus and Anti-Spyware : McAfee®Comprehensive Anti-Spam Service : SupportedApplication Intelligence and Control : Yes Application Visualization : No Networking:IP address assignment : Static, (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relayNAT modes : 1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent modeRouting protocols : OSPF, RIPv1/v2, static routes, policy-based routing, multicast QoS : Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1e (WMM)Authentication : XAUTH/RADIUS, Active Directory, SSO, LDAP, Novell, internal user database, Terminal Services, CitrixLocal user database : 150 VoIP : Full H.323v1-5, SIPStandards : TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3Certifications : VPNC, IPv6 (Phase 2)Certifications pending : Common Criteria NDPP, FIPS 140-2 (with Suite B) Level 2, ICSA Firewall, ICSA Anti-virus, UC APLCommon Access Card (CAC) : SupportedHigh Availability : No Hardware:Form factor : Desktop Power Supply (W) : 24W external Maximum power consumption (W) : 6.4 / 11.3Input power : 100 to 240 VAC, 50-60 Hz, 1 ATotal heat dissipation : 21.8 / 38.7 BTU Dimensions : 3.6x14.1x19cm Weight : 0.34 Kg / 0.75 lbs & 0.48 Kg / 1.06 lbs WEEE weight : 0.80 Kg / 1.76 lbs & 0.94 Kg / 2.07 lbs Shipping weight : 1.20 Kg / 2.64 lbs & 1.34 Kg / 2.95 lbs MTBF (Years) : 30 / 15 Environment : 40-105° F, 0-40° CHumidity : 5-95% non-condensing

Performance Overview: Operating system : SonicOS 5.9.x – Wired / SonicOS 6.2.x – WirelessSecurity Processor: 2x400 MHz (Wired) / 2x800 MHz (Wireless) Memory (RAM): 512 MB (Wired) /1 GB (Wireless) 1 GbE Copper interfaces : 5 Expansion : USB Firewall inspection throughput: 300 Mbps Full DPI throughput:50 Mbps Application inspection throughput:0 IPS throughput : 100 Mbps Anti-malware inspection throughput : 50 Mbps IMIX throughput : 60 Mbps SSL Inspection and Decryption (DPI SSL) :15 Mbps VPN throughput : 100 Mbps Connections per second : 1,800 Maximum connections (SPI) : 10,000 Maximum connections (DPI) : 10,000 Single Sign-On (SSO) Users :250 VLAN interfaces : 25 SonicPoints supported (Maximum) : 2 VPN :Site-to-Site VPN Tunnels : 10 IPSec VPN clients (Maximum) : 1 (5) SSL VPN licenses (Maximum) : 1 (10) Virtual assist bundled (Maximum) : No Encryption/Authentication : DES, 3DES, AES (128, 192, 256-bit), MD5, SHA-1, Suite B CryptographyKey exchange : Diffie Hellman Groups 1, 2, 5, 14Route-based VPN : RIP, OSPFCertificate support : Verisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWall-to-SonicWall VPN, SCEPVPN features : Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPNGlobal VPN client platforms supported : Microsoft® Windows Vista 32/64-bit, Windows 7 32/64-bit, Windows 8.0 32/64-bit, Windows 8.1 32/64-bitNetExtender : Microsoft Windows Vista 32/64-bit, Windows 7, Windows 8.0 32/64-bit, Windows 8.1 32/64-bit, Mac OS X 10.4+, Linux FC3+/Ubuntu 7+/OpenSUSEMobile Connect : Apple® iOS, Mac OS X, Google® Android™, Kindle Fire, Windows 8.1 (Embedded) Security Services:Deep Packet Inspection services : Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSLContent Filtering Service (CFS) : HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid listsEnforced Client Anti-Virus and Anti-Spyware : McAfee®Comprehensive Anti-Spam Service : SupportedApplication Intelligence and Control : Yes Application Visualization : No Networking:IP address assignment : Static, (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relayNAT modes : 1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent modeRouting protocols : OSPF, RIPv1/v2, static routes, policy-based routing, multicast QoS : Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1e (WMM)Authentication : XAUTH/RADIUS, Active Directory, SSO, LDAP, Novell, internal user database, Terminal Services, CitrixLocal user database : 150 VoIP : Full H.323v1-5, SIPStandards : TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3Certifications : VPNC, IPv6 (Phase 2)Certifications pending : Common Criteria NDPP, FIPS 140-2 (with Suite B) Level 2, ICSA Firewall, ICSA Anti-virus, UC APLCommon Access Card (CAC) : SupportedHigh Availability : No Hardware:Form factor : Desktop Power Supply (W) : 24W external Maximum power consumption (W) : 6.4 / 11.3Input power : 100 to 240 VAC, 50-60 Hz, 1 ATotal heat dissipation : 21.8 / 38.7 BTU Dimensions : 3.6x14.1x19cm Weight : 0.34 Kg / 0.75 lbs & 0.48 Kg / 1.06 lbs WEEE weight : 0.80 Kg / 1.76 lbs & 0.94 Kg / 2.07 lbs Shipping weight : 1.20 Kg / 2.64 lbs & 1.34 Kg / 2.95 lbs MTBF (Years) : 30 / 15 Environment : 40-105° F, 0-40° CHumidity : 5-95% non-condensing

Performance Overview: Operating system : SonicOS 5.9.x – Wired / SonicOS 6.2.x – WirelessSecurity Processor: 2x400 MHz (Wired) / 2x800 MHz (Wireless) Memory (RAM): 512 MB (Wired) /1 GB (Wireless) 1 GbE Copper interfaces : 5 Expansion : USB Firewall inspection throughput: 300 Mbps Full DPI throughput:50 Mbps Application inspection throughput:0 IPS throughput : 100 Mbps Anti-malware inspection throughput : 50 Mbps IMIX throughput : 60 Mbps SSL Inspection and Decryption (DPI SSL) :15 Mbps VPN throughput : 100 Mbps Connections per second : 1,800 Maximum connections (SPI) : 10,000 Maximum connections (DPI) : 10,000 Single Sign-On (SSO) Users :250 VLAN interfaces : 25 SonicPoints supported (Maximum) : 2 VPN :Site-to-Site VPN Tunnels : 10 IPSec VPN clients (Maximum) : 1 (5) SSL VPN licenses (Maximum) : 1 (10) Virtual assist bundled (Maximum) : No Encryption/Authentication : DES, 3DES, AES (128, 192, 256-bit), MD5, SHA-1, Suite B CryptographyKey exchange : Diffie Hellman Groups 1, 2, 5, 14Route-based VPN : RIP, OSPFCertificate support : Verisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWall-to-SonicWall VPN, SCEPVPN features : Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPNGlobal VPN client platforms supported : Microsoft® Windows Vista 32/64-bit, Windows 7 32/64-bit, Windows 8.0 32/64-bit, Windows 8.1 32/64-bitNetExtender : Microsoft Windows Vista 32/64-bit, Windows 7, Windows 8.0 32/64-bit, Windows 8.1 32/64-bit, Mac OS X 10.4+, Linux FC3+/Ubuntu 7+/OpenSUSEMobile Connect : Apple® iOS, Mac OS X, Google® Android™, Kindle Fire, Windows 8.1 (Embedded) Security Services:Deep Packet Inspection services : Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSLContent Filtering Service (CFS) : HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid listsEnforced Client Anti-Virus and Anti-Spyware : McAfee®Comprehensive Anti-Spam Service : SupportedApplication Intelligence and Control : Yes Application Visualization : No Networking:IP address assignment : Static, (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relayNAT modes : 1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent modeRouting protocols : OSPF, RIPv1/v2, static routes, policy-based routing, multicast QoS : Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1e (WMM)Authentication : XAUTH/RADIUS, Active Directory, SSO, LDAP, Novell, internal user database, Terminal Services, CitrixLocal user database : 150 VoIP : Full H.323v1-5, SIPStandards : TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3Certifications : VPNC, IPv6 (Phase 2)Certifications pending : Common Criteria NDPP, FIPS 140-2 (with Suite B) Level 2, ICSA Firewall, ICSA Anti-virus, UC APLCommon Access Card (CAC) : SupportedHigh Availability : No Hardware:Form factor : Desktop Power Supply (W) : 24W external Maximum power consumption (W) : 6.4 / 11.3Input power : 100 to 240 VAC, 50-60 Hz, 1 ATotal heat dissipation : 21.8 / 38.7 BTU Dimensions : 3.6x14.1x19cm Weight : 0.34 Kg / 0.75 lbs & 0.48 Kg / 1.06 lbs WEEE weight : 0.80 Kg / 1.76 lbs & 0.94 Kg / 2.07 lbs Shipping weight : 1.20 Kg / 2.64 lbs & 1.34 Kg / 2.95 lbs MTBF (Years) : 30 / 15 Environment : 40-105° F, 0-40° CHumidity : 5-95% non-condensing

Performance Overview: Operating system : SonicOS 6.2.xSecurity Processor: 2x 800 MHzMemory (RAM): 1 GB 1 GbE Copper interfaces : 5 Expansion : USB Firewall inspection throughput: 750 Mbps Full DPI throughput:100 Mbps Application inspection throughput:300 Mbps IPS throughput : 300 Mbps Anti-malware inspection throughput : 100 Mbps IMIX throughput : 200 Mbps SSL Inspection and Decryption (DPI SSL) :45 Mbps VPN throughput : 300 Mbps Connections per second : 5,000 Maximum connections (SPI) : 50,000 Maximum connections (DPI) : 50,000 Single Sign-On (SSO) Users :500 VLAN interfaces : 25 SonicPoints supported (Maximum) : 8 VPN :Site-to-Site VPN Tunnels : 10 IPSec VPN clients (Maximum) : 1 (10) SSL VPN licenses (Maximum) : 1 (50) Virtual assist bundled (Maximum) : 1 (30-day trial) Encryption/Authentication : DES, 3DES, AES (128, 192, 256-bit), MD5, SHA-1, Suite B CryptographyKey exchange : Diffie Hellman Groups 1, 2, 5, 14Route-based VPN : RIP, OSPFCertificate support : Verisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWall-to-SonicWall VPN, SCEPVPN features : Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPNGlobal VPN client platforms supported : Microsoft® Windows Vista 32/64-bit, Windows 7 32/64-bit, Windows 8.0 32/64-bit, Windows 8.1 32/64-bitNetExtender : Microsoft Windows Vista 32/64-bit, Windows 7, Windows 8.0 32/64-bit, Windows 8.1 32/64-bit, Mac OS X 10.4+, Linux FC3+/Ubuntu 7+/OpenSUSEMobile Connect : Apple® iOS, Mac OS X, Google® Android™, Kindle Fire, Windows 8.1 (Embedded) Security Services:Deep Packet Inspection services : Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSLContent Filtering Service (CFS) : HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid listsEnforced Client Anti-Virus and Anti-Spyware : McAfee®Comprehensive Anti-Spam Service : SupportedApplication Intelligence and Control : Yes Application Visualization : Yes Networking:IP address assignment : Static, (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relayNAT modes : 1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent modeRouting protocols : OSPF, RIPv1/v2, static routes, policy-based routing, multicast QoS : Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1e (WMM)Authentication : XAUTH/RADIUS, Active Directory, SSO, LDAP, Novell, internal user database, Terminal Services, CitrixLocal user database : 150 VoIP : Full H.323v1-5, SIPStandards : TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3Certifications : VPNC, IPv6 (Phase 2)Certifications pending : Common Criteria NDPP, FIPS 140-2 (with Suite B) Level 2, ICSA Firewall, ICSA Anti-virus, UC APLCommon Access Card (CAC) : SupportedHigh Availability : Active/Standby Hardware:Form factor : Desktop Power Supply (W) : 24W external Maximum power consumption (W) : 6.9 / 12.0Input power : 100 to 240 VAC, 50-60 Hz, 1 ATotal heat dissipation : 23.5 / 40.9 BTU Dimensions : 3.5x13.4x19cm Weight : 0.73 Kg / 1.61 lbs & 0.84 Kg / 1.85 lbsWEEE weight : 1.15 Kg / 2.53 lbs & 1.26 Kg / 2.78 lbs Shipping weight : 1.37 Kg / 3.02 lbs & 1.48 Kg / 3.26 lbs MTBF (Years) : 28 / 14Environment : 40-105° F, 0-40° CHumidity : 5-95% non-condensing

Performance Overview: Security Processor: 4x 800 MHz Memory (RAM): 1 GB 1 GbE Copper interfaces : 7 Expansion : USB Firewall inspection throughput: 1.3 Gbps Full DPI throughput:300Mbps Application inspection throughput:900Mbps IPS throughput : 900Mbps Anti-malware inspection throughput : 300Mbps IMIX throughput : 500Mbps SSL Inspection and Decryption (DPI SSL) : 100Mbps VPN throughput : 900 Mbps Connections per second : 6,000Maximum connections (SPI) : 100,000 Maximum connections (DPI) : 90,000 Single Sign-On (SSO) Users :500 VLAN interfaces : 50 SonicPoints supported (Maximum) : 16 VPN :Site-to-Site VPN Tunnels : 20 IPSec VPN clients (Maximum) : 2 (25) SSL VPN licenses (Maximum) : 2 (100) Virtual assist bundled (Maximum) : 1 (30-day trial) Encryption/Authentication : DES, 3DES, AES (128, 192, 256-bit), MD5, SHA-1, Suite B CryptographyKey exchange : Diffie Hellman Groups 1, 2, 5, 14Route-based VPN : RIP, OSPFCertificate support : Verisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWall-to-SonicWall VPN, SCEPVPN features : Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPNGlobal VPN client platforms supported : Microsoft® Windows Vista 32/64-bit, Windows 7 32/64-bit, Windows 8.0 32/64-bit, Windows 8.1 32/64-bitNetExtender : Microsoft Windows Vista 32/64-bit, Windows 7, Windows 8.0 32/64-bit, Windows 8.1 32/64-bit, Mac OS X 10.4+, Linux FC3+/Ubuntu 7+/OpenSUSEMobile Connect : Apple® iOS, Mac OS X, Google® Android™, Kindle Fire, Windows 8.1 (Embedded) Security Services:Deep Packet Inspection services : Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSLContent Filtering Service (CFS) : HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid listsEnforced Client Anti-Virus and Anti-Spyware : McAfee®Comprehensive Anti-Spam Service : SupportedApplication Intelligence and Control : Yes Application Visualization : Yes Networking:IP address assignment : Static, (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relayNAT modes : 1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent modeRouting protocols : BGP, OSPF, RIPv1/v2, static routes, policy-based routing, multicast QoS : Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1e (WMM)Authentication : XAUTH/RADIUS, Active Directory, SSO, LDAP, Novell, internal user database, Terminal Services, CitrixLocal user database : 250 VoIP : Full H.323v1-5, SIPStandards : TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3Certifications : VPNC, IPv6 (Phase 2)Certifications pending : Common Criteria NDPP, FIPS 140-2 (with Suite B) Level 2, ICSA Firewall, ICSA Anti-virus, UC APLCommon Access Card (CAC) : SupportedHigh Availability : Active/Standby Hardware:Form factor : Desktop Power Supply (W) : 24W external Maximum power consumption (W) : 9.2 / 13.8Input power : 100 to 240 VAC, 50-60 Hz, 1 ATotal heat dissipation : 31.3 / 47.1 BTU Dimensions : 3.6x14.1x19cm Weight : 0.73 Kg / 1.61 lbs & 0.84 Kg / 1.85 lbs WEEE weight : 1.15 Kg / 2.53 lbs & 1.26 Kg / 2.78 lbs Shipping weight : 1.37 Kg / 3.02 lbs & 1.48 Kg / 3.26 lbs MTBF (Years) : 27 / 13Environment : 40-105° F, 0-40° CHumidity : 5-95% non-condensing

Performance Overview: Security Processor: 4x 1 GHz Memory (RAM): 1 GB 1 GbE Copper interfaces : 8 Expansion : USB Firewall inspection throughput: 1.4 Gbps Full DPI throughput: 400 Mbps Application inspection throughput:1.0 Gbps IPS throughput : 1.0 Gbps Anti-malware inspection throughput : 400 Mbps IMIX throughput : 700 Mbps SSL Inspection and Decryption (DPI SSL) :150 Mbps VPN throughput : 1.0 Gbps Connections per second : 8,000Maximum connections (SPI) : 125,000Maximum connections (DPI) : 100,000 Single Sign-On (SSO) Users : 500 VLAN interfaces : 50SonicPoints supported (Maximum) : 16 VPN :Site-to-Site VPN Tunnels : 25 IPSec VPN clients (Maximum) : 2 (25) SSL VPN licenses (Maximum) : 2 (150) Virtual assist bundled (Maximum) : 1 (30-day trial) Encryption/Authentication : DES, 3DES, AES (128, 192, 256-bit), MD5, SHA-1, Suite B CryptographyKey exchange : Diffie Hellman Groups 1, 2, 5, 14Route-based VPN : RIP, OSPFCertificate support : Verisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWall-to-SonicWall VPN, SCEPVPN features : Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPNGlobal VPN client platforms supported : Microsoft® Windows Vista 32/64-bit, Windows 7 32/64-bit, Windows 8.0 32/64-bit, Windows 8.1 32/64-bitNetExtender : Microsoft Windows Vista 32/64-bit, Windows 7, Windows 8.0 32/64-bit, Windows 8.1 32/64-bit, Mac OS X 10.4+, Linux FC3+/Ubuntu 7+/OpenSUSEMobile Connect : Apple® iOS, Mac OS X, Google® Android™, Kindle Fire, Windows 8.1 (Embedded) Security Services:Deep Packet Inspection services : Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSLContent Filtering Service (CFS) : HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid listsEnforced Client Anti-Virus and Anti-Spyware : McAfee®Comprehensive Anti-Spam Service : SupportedApplication Intelligence and Control : Yes Application Visualization : Yes Networking:IP address assignment : Static, (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relayNAT modes : 1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent modeRouting protocols : BGP, OSPF, RIPv1/v2, static routes, policy-based routing, multicast QoS : Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1e (WMM)Authentication : XAUTH/RADIUS, Active Directory, SSO, LDAP, Novell, internal user database, Terminal Services, CitrixLocal user database : 150 VoIP : Full H.323v1-5, SIPStandards : TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3Certifications : VPNC, IPv6 (Phase 2)Certifications pending : Common Criteria NDPP, FIPS 140-2 (with Suite B) Level 2, ICSA Firewall, ICSA Anti-virus, UC APLCommon Access Card (CAC) : SupportedHigh Availability : Active/Standby with stateful synchronization Hardware:Form factor : Desktop Power Supply (W) : 36W external Maximum power consumption (W) : 13.4 / 17.7Input power : 100 to 240 VAC, 50-60 Hz, 1 ATotal heat dissipation : 45.9 / 60.5 BTU Dimensions : 3.5x15x22.5cm Weight : 0.92 Kg / 2.03 lbs & 1.05 Kg / 2.31 lbs WEEE weight : 1.34 Kg / 2.95 lbs & 1.48 Kg / 3.26 lbs Shipping weight : 1.93 Kg / 4.25 lbs & 2.07 Kg / 4.56 lbs MTBF (Years) : 20 / 12Environment : 40-105° F, 0-40° CHumidity : 5-95% non-condensing

Performance Overview: Security Processor: 4x 1.4 GHzMemory (RAM): 1 GB 1 GbE Copper interfaces : 10 Expansion : Expansion Slot (Rear), 2 USB Firewall inspection throughput: 1.5 Gbps Full DPI throughput: 500 Mbps Application inspection throughput:1.1 Gbps IPS throughput : 1.1 Gbps Anti-malware inspection throughput : 500 Mbps IMIX throughput : 900 Mbps SSL Inspection and Decryption (DPI SSL) :200 Mbps VPN throughput : 1.1 Gbps Connections per second : 12,000Maximum connections (SPI) : 150,000Maximum connections (DPI) : 125,000 Single Sign-On (SSO) Users : 500 VLAN interfaces : 50SonicPoints supported (Maximum) : 24 VPN :Site-to-Site VPN Tunnels : 50 IPSec VPN clients (Maximum) : 2 (25) SSL VPN licenses (Maximum) : 2 (200) Virtual assist bundled (Maximum) : 1 (30-day trial) Encryption/Authentication : DES, 3DES, AES (128, 192, 256-bit), MD5, SHA-1, Suite B CryptographyKey exchange : Diffie Hellman Groups 1, 2, 5, 14Route-based VPN : RIP, OSPFCertificate support : Verisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWall-to-SonicWall VPN, SCEPVPN features : Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPNGlobal VPN client platforms supported : Microsoft® Windows Vista 32/64-bit, Windows 7 32/64-bit, Windows 8.0 32/64-bit, Windows 8.1 32/64-bitNetExtender : Microsoft Windows Vista 32/64-bit, Windows 7, Windows 8.0 32/64-bit, Windows 8.1 32/64-bit, Mac OS X 10.4+, Linux FC3+/Ubuntu 7+/OpenSUSEMobile Connect : Apple® iOS, Mac OS X, Google® Android™, Kindle Fire, Windows 8.1 (Embedded) Security Services:Deep Packet Inspection services : Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSLContent Filtering Service (CFS) : HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid listsEnforced Client Anti-Virus and Anti-Spyware : McAfee®Comprehensive Anti-Spam Service : SupportedApplication Intelligence and Control : Yes Application Visualization : Yes Networking:IP address assignment : Static, (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relayNAT modes : 1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent modeRouting protocols : BGP, OSPF, RIPv1/v2, static routes, policy-based routing, multicast QoS : Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1e (WMM)Authentication : XAUTH/RADIUS, Active Directory, SSO, LDAP, Novell, internal user database, Terminal Services, CitrixLocal user database : 150 VoIP : Full H.323v1-5, SIPStandards : TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3Certifications : VPNC, IPv6 (Phase 2)Certifications pending : Common Criteria NDPP, FIPS 140-2 (with Suite B) Level 2, ICSA Firewall, ICSA Anti-virus, UC APLCommon Access Card (CAC) : SupportedHigh Availability : Active/Standby with stateful synchronization Hardware:Form factor : Desktop Power Supply (W) : 36W external Maximum power consumption (W) : 13.4 / 17.7Input power : 100 to 240 VAC, 50-60 Hz, 1 ATotal heat dissipation : 45.9 / 60.5 BTU Dimensions : 3.5x15x22.5cm Weight : 0.92 Kg / 2.03 lbs & 1.05 Kg / 2.31 lbs WEEE weight : 1.34 Kg / 2.95 lbs & 1.48 Kg / 3.26 lbs Shipping weight : 1.93 Kg / 4.25 lbs & 2.07 Kg / 4.56 lbs MTBF (Years) : 20 / 12Environment : 40-105° F, 0-40° CHumidity : 5-95% non-condensing

Performance Overview: Operating system : SonicOS 5.9.x – Wired / SonicOS 6.2.x – WirelessSecurity Processor: 2x400 MHz (Wired) / 2x800 MHz (Wireless) Memory (RAM): 512 MB (Wired) /1 GB (Wireless) 1 GbE Copper interfaces : 5 Expansion : USB Firewall inspection throughput: 300 Mbps Full DPI throughput:50 Mbps Application inspection throughput:0 IPS throughput : 100 Mbps Anti-malware inspection throughput : 50 Mbps IMIX throughput : 60 Mbps SSL Inspection and Decryption (DPI SSL) :15 Mbps VPN throughput : 100 Mbps Connections per second : 1,800 Maximum connections (SPI) : 10,000 Maximum connections (DPI) : 10,000 Single Sign-On (SSO) Users :250 VLAN interfaces : 25 SonicPoints supported (Maximum) : 2 VPN :Site-to-Site VPN Tunnels : 10 IPSec VPN clients (Maximum) : 1 (5) SSL VPN licenses (Maximum) : 1 (10) Virtual assist bundled (Maximum) : No Encryption/Authentication : DES, 3DES, AES (128, 192, 256-bit), MD5, SHA-1, Suite B CryptographyKey exchange : Diffie Hellman Groups 1, 2, 5, 14Route-based VPN : RIP, OSPFCertificate support : Verisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWall-to-SonicWall VPN, SCEPVPN features : Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPNGlobal VPN client platforms supported : Microsoft® Windows Vista 32/64-bit, Windows 7 32/64-bit, Windows 8.0 32/64-bit, Windows 8.1 32/64-bitNetExtender : Microsoft Windows Vista 32/64-bit, Windows 7, Windows 8.0 32/64-bit, Windows 8.1 32/64-bit, Mac OS X 10.4+, Linux FC3+/Ubuntu 7+/OpenSUSEMobile Connect : Apple® iOS, Mac OS X, Google® Android™, Kindle Fire, Windows 8.1 (Embedded) Security Services:Deep Packet Inspection services : Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSLContent Filtering Service (CFS) : HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid listsEnforced Client Anti-Virus and Anti-Spyware : McAfee®Comprehensive Anti-Spam Service : SupportedApplication Intelligence and Control : Yes Application Visualization : No Networking:IP address assignment : Static, (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relayNAT modes : 1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent modeRouting protocols : OSPF, RIPv1/v2, static routes, policy-based routing, multicast QoS : Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1e (WMM)Authentication : XAUTH/RADIUS, Active Directory, SSO, LDAP, Novell, internal user database, Terminal Services, CitrixLocal user database : 150 VoIP : Full H.323v1-5, SIPStandards : TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3Certifications : VPNC, IPv6 (Phase 2)Certifications pending : Common Criteria NDPP, FIPS 140-2 (with Suite B) Level 2, ICSA Firewall, ICSA Anti-virus, UC APLCommon Access Card (CAC) : SupportedHigh Availability : No Hardware:Form factor : Desktop Power Supply (W) : 24W external Maximum power consumption (W) : 6.4 / 11.3Input power : 100 to 240 VAC, 50-60 Hz, 1 ATotal heat dissipation : 21.8 / 38.7 BTU Dimensions : 3.6x14.1x19cm Weight : 0.34 Kg / 0.75 lbs & 0.48 Kg / 1.06 lbs WEEE weight : 0.80 Kg / 1.76 lbs & 0.94 Kg / 2.07 lbs Shipping weight : 1.20 Kg / 2.64 lbs & 1.34 Kg / 2.95 lbs MTBF (Years) : 30 / 15 Environment : 40-105° F, 0-40° CHumidity : 5-95% non-condensing

Performance Overview: Operating system : SonicOS 6.2.xSecurity Processor: 2x 800 MHzMemory (RAM): 1 GB 1 GbE Copper interfaces : 5 Expansion : USB Firewall inspection throughput: 750 Mbps Full DPI throughput:100 Mbps Application inspection throughput:300 Mbps IPS throughput : 300 Mbps Anti-malware inspection throughput : 100 Mbps IMIX throughput : 200 Mbps SSL Inspection and Decryption (DPI SSL) :45 Mbps VPN throughput : 300 Mbps Connections per second : 5,000 Maximum connections (SPI) : 50,000 Maximum connections (DPI) : 50,000 Single Sign-On (SSO) Users :500 VLAN interfaces : 25 SonicPoints supported (Maximum) : 8 VPN :Site-to-Site VPN Tunnels : 10 IPSec VPN clients (Maximum) : 1 (10) SSL VPN licenses (Maximum) : 1 (50) Virtual assist bundled (Maximum) : 1 (30-day trial) Encryption/Authentication : DES, 3DES, AES (128, 192, 256-bit), MD5, SHA-1, Suite B CryptographyKey exchange : Diffie Hellman Groups 1, 2, 5, 14Route-based VPN : RIP, OSPFCertificate support : Verisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWall-to-SonicWall VPN, SCEPVPN features : Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPNGlobal VPN client platforms supported : Microsoft® Windows Vista 32/64-bit, Windows 7 32/64-bit, Windows 8.0 32/64-bit, Windows 8.1 32/64-bitNetExtender : Microsoft Windows Vista 32/64-bit, Windows 7, Windows 8.0 32/64-bit, Windows 8.1 32/64-bit, Mac OS X 10.4+, Linux FC3+/Ubuntu 7+/OpenSUSEMobile Connect : Apple® iOS, Mac OS X, Google® Android™, Kindle Fire, Windows 8.1 (Embedded) Security Services:Deep Packet Inspection services : Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSLContent Filtering Service (CFS) : HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid listsEnforced Client Anti-Virus and Anti-Spyware : McAfee®Comprehensive Anti-Spam Service : SupportedApplication Intelligence and Control : Yes Application Visualization : Yes Networking:IP address assignment : Static, (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relayNAT modes : 1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent modeRouting protocols : OSPF, RIPv1/v2, static routes, policy-based routing, multicast QoS : Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1e (WMM)Authentication : XAUTH/RADIUS, Active Directory, SSO, LDAP, Novell, internal user database, Terminal Services, CitrixLocal user database : 150 VoIP : Full H.323v1-5, SIPStandards : TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3Certifications : VPNC, IPv6 (Phase 2)Certifications pending : Common Criteria NDPP, FIPS 140-2 (with Suite B) Level 2, ICSA Firewall, ICSA Anti-virus, UC APLCommon Access Card (CAC) : SupportedHigh Availability : Active/Standby Hardware:Form factor : Desktop Power Supply (W) : 24W external Maximum power consumption (W) : 6.9 / 12.0Input power : 100 to 240 VAC, 50-60 Hz, 1 ATotal heat dissipation : 23.5 / 40.9 BTU Dimensions : 3.5x13.4x19cm Weight : 0.73 Kg / 1.61 lbs & 0.84 Kg / 1.85 lbsWEEE weight : 1.15 Kg / 2.53 lbs & 1.26 Kg / 2.78 lbs Shipping weight : 1.37 Kg / 3.02 lbs & 1.48 Kg / 3.26 lbs MTBF (Years) : 28 / 14Environment : 40-105° F, 0-40° CHumidity : 5-95% non-condensing

Performance Overview: Security Processor: 4x 800 MHz Memory (RAM): 1 GB 1 GbE Copper interfaces : 7 Expansion : USB Firewall inspection throughput: 1.3 Gbps Full DPI throughput:300Mbps Application inspection throughput:900Mbps IPS throughput : 900Mbps Anti-malware inspection throughput : 300Mbps IMIX throughput : 500Mbps SSL Inspection and Decryption (DPI SSL) : 100Mbps VPN throughput : 900 Mbps Connections per second : 6,000Maximum connections (SPI) : 100,000 Maximum connections (DPI) : 90,000 Single Sign-On (SSO) Users :500 VLAN interfaces : 50 SonicPoints supported (Maximum) : 16 VPN :Site-to-Site VPN Tunnels : 20 IPSec VPN clients (Maximum) : 2 (25) SSL VPN licenses (Maximum) : 2 (100) Virtual assist bundled (Maximum) : 1 (30-day trial) Encryption/Authentication : DES, 3DES, AES (128, 192, 256-bit), MD5, SHA-1, Suite B CryptographyKey exchange : Diffie Hellman Groups 1, 2, 5, 14Route-based VPN : RIP, OSPFCertificate support : Verisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWall-to-SonicWall VPN, SCEPVPN features : Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPNGlobal VPN client platforms supported : Microsoft® Windows Vista 32/64-bit, Windows 7 32/64-bit, Windows 8.0 32/64-bit, Windows 8.1 32/64-bitNetExtender : Microsoft Windows Vista 32/64-bit, Windows 7, Windows 8.0 32/64-bit, Windows 8.1 32/64-bit, Mac OS X 10.4+, Linux FC3+/Ubuntu 7+/OpenSUSEMobile Connect : Apple® iOS, Mac OS X, Google® Android™, Kindle Fire, Windows 8.1 (Embedded) Security Services:Deep Packet Inspection services : Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSLContent Filtering Service (CFS) : HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid listsEnforced Client Anti-Virus and Anti-Spyware : McAfee®Comprehensive Anti-Spam Service : SupportedApplication Intelligence and Control : Yes Application Visualization : Yes Networking:IP address assignment : Static, (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relayNAT modes : 1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent modeRouting protocols : BGP, OSPF, RIPv1/v2, static routes, policy-based routing, multicast QoS : Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1e (WMM)Authentication : XAUTH/RADIUS, Active Directory, SSO, LDAP, Novell, internal user database, Terminal Services, CitrixLocal user database : 250 VoIP : Full H.323v1-5, SIPStandards : TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3Certifications : VPNC, IPv6 (Phase 2)Certifications pending : Common Criteria NDPP, FIPS 140-2 (with Suite B) Level 2, ICSA Firewall, ICSA Anti-virus, UC APLCommon Access Card (CAC) : SupportedHigh Availability : Active/Standby Hardware:Form factor : Desktop Power Supply (W) : 24W external Maximum power consumption (W) : 9.2 / 13.8Input power : 100 to 240 VAC, 50-60 Hz, 1 ATotal heat dissipation : 31.3 / 47.1 BTU Dimensions : 3.6x14.1x19cm Weight : 0.73 Kg / 1.61 lbs & 0.84 Kg / 1.85 lbs WEEE weight : 1.15 Kg / 2.53 lbs & 1.26 Kg / 2.78 lbs Shipping weight : 1.37 Kg / 3.02 lbs & 1.48 Kg / 3.26 lbs MTBF (Years) : 27 / 13Environment : 40-105° F, 0-40° CHumidity : 5-95% non-condensing

Performance Overview: Security Processor: 4x 1 GHz Memory (RAM): 1 GB 1 GbE Copper interfaces : 8 Expansion : USB Firewall inspection throughput: 1.4 Gbps Full DPI throughput: 400 Mbps Application inspection throughput:1.0 Gbps IPS throughput : 1.0 Gbps Anti-malware inspection throughput : 400 Mbps IMIX throughput : 700 Mbps SSL Inspection and Decryption (DPI SSL) :150 Mbps VPN throughput : 1.0 Gbps Connections per second : 8,000Maximum connections (SPI) : 125,000Maximum connections (DPI) : 100,000 Single Sign-On (SSO) Users : 500 VLAN interfaces : 50SonicPoints supported (Maximum) : 16 VPN :Site-to-Site VPN Tunnels : 25 IPSec VPN clients (Maximum) : 2 (25) SSL VPN licenses (Maximum) : 2 (150) Virtual assist bundled (Maximum) : 1 (30-day trial) Encryption/Authentication : DES, 3DES, AES (128, 192, 256-bit), MD5, SHA-1, Suite B CryptographyKey exchange : Diffie Hellman Groups 1, 2, 5, 14Route-based VPN : RIP, OSPFCertificate support : Verisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWall-to-SonicWall VPN, SCEPVPN features : Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPNGlobal VPN client platforms supported : Microsoft® Windows Vista 32/64-bit, Windows 7 32/64-bit, Windows 8.0 32/64-bit, Windows 8.1 32/64-bitNetExtender : Microsoft Windows Vista 32/64-bit, Windows 7, Windows 8.0 32/64-bit, Windows 8.1 32/64-bit, Mac OS X 10.4+, Linux FC3+/Ubuntu 7+/OpenSUSEMobile Connect : Apple® iOS, Mac OS X, Google® Android™, Kindle Fire, Windows 8.1 (Embedded) Security Services:Deep Packet Inspection services : Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSLContent Filtering Service (CFS) : HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid listsEnforced Client Anti-Virus and Anti-Spyware : McAfee®Comprehensive Anti-Spam Service : SupportedApplication Intelligence and Control : Yes Application Visualization : Yes Networking:IP address assignment : Static, (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relayNAT modes : 1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent modeRouting protocols : BGP, OSPF, RIPv1/v2, static routes, policy-based routing, multicast QoS : Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1e (WMM)Authentication : XAUTH/RADIUS, Active Directory, SSO, LDAP, Novell, internal user database, Terminal Services, CitrixLocal user database : 150 VoIP : Full H.323v1-5, SIPStandards : TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3Certifications : VPNC, IPv6 (Phase 2)Certifications pending : Common Criteria NDPP, FIPS 140-2 (with Suite B) Level 2, ICSA Firewall, ICSA Anti-virus, UC APLCommon Access Card (CAC) : SupportedHigh Availability : Active/Standby with stateful synchronization Hardware:Form factor : Desktop Power Supply (W) : 36W external Maximum power consumption (W) : 13.4 / 17.7Input power : 100 to 240 VAC, 50-60 Hz, 1 ATotal heat dissipation : 45.9 / 60.5 BTU Dimensions : 3.5x15x22.5cm Weight : 0.92 Kg / 2.03 lbs & 1.05 Kg / 2.31 lbs WEEE weight : 1.34 Kg / 2.95 lbs & 1.48 Kg / 3.26 lbs Shipping weight : 1.93 Kg / 4.25 lbs & 2.07 Kg / 4.56 lbs MTBF (Years) : 20 / 12Environment : 40-105° F, 0-40° CHumidity : 5-95% non-condensing

Performance Overview: Security Processor: 4x 1.4 GHzMemory (RAM): 1 GB 1 GbE Copper interfaces : 10 Expansion : Expansion Slot (Rear), 2 USB Firewall inspection throughput: 1.5 Gbps Full DPI throughput: 500 Mbps Application inspection throughput:1.1 Gbps IPS throughput : 1.1 Gbps Anti-malware inspection throughput : 500 Mbps IMIX throughput : 900 Mbps SSL Inspection and Decryption (DPI SSL) :200 Mbps VPN throughput : 1.1 Gbps Connections per second : 12,000Maximum connections (SPI) : 150,000Maximum connections (DPI) : 125,000 Single Sign-On (SSO) Users : 500 VLAN interfaces : 50SonicPoints supported (Maximum) : 24 VPN :Site-to-Site VPN Tunnels : 50 IPSec VPN clients (Maximum) : 2 (25) SSL VPN licenses (Maximum) : 2 (200) Virtual assist bundled (Maximum) : 1 (30-day trial) Encryption/Authentication : DES, 3DES, AES (128, 192, 256-bit), MD5, SHA-1, Suite B CryptographyKey exchange : Diffie Hellman Groups 1, 2, 5, 14Route-based VPN : RIP, OSPFCertificate support : Verisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWall-to-SonicWall VPN, SCEPVPN features : Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPNGlobal VPN client platforms supported : Microsoft® Windows Vista 32/64-bit, Windows 7 32/64-bit, Windows 8.0 32/64-bit, Windows 8.1 32/64-bitNetExtender : Microsoft Windows Vista 32/64-bit, Windows 7, Windows 8.0 32/64-bit, Windows 8.1 32/64-bit, Mac OS X 10.4+, Linux FC3+/Ubuntu 7+/OpenSUSEMobile Connect : Apple® iOS, Mac OS X, Google® Android™, Kindle Fire, Windows 8.1 (Embedded) Security Services:Deep Packet Inspection services : Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSLContent Filtering Service (CFS) : HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid listsEnforced Client Anti-Virus and Anti-Spyware : McAfee®Comprehensive Anti-Spam Service : SupportedApplication Intelligence and Control : Yes Application Visualization : Yes Networking:IP address assignment : Static, (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relayNAT modes : 1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent modeRouting protocols : BGP, OSPF, RIPv1/v2, static routes, policy-based routing, multicast QoS : Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1e (WMM)Authentication : XAUTH/RADIUS, Active Directory, SSO, LDAP, Novell, internal user database, Terminal Services, CitrixLocal user database : 150 VoIP : Full H.323v1-5, SIPStandards : TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3Certifications : VPNC, IPv6 (Phase 2)Certifications pending : Common Criteria NDPP, FIPS 140-2 (with Suite B) Level 2, ICSA Firewall, ICSA Anti-virus, UC APLCommon Access Card (CAC) : SupportedHigh Availability : Active/Standby with stateful synchronization Hardware:Form factor : Desktop Power Supply (W) : 36W external Maximum power consumption (W) : 13.4 / 17.7Input power : 100 to 240 VAC, 50-60 Hz, 1 ATotal heat dissipation : 45.9 / 60.5 BTU Dimensions : 3.5x15x22.5cm Weight : 0.92 Kg / 2.03 lbs & 1.05 Kg / 2.31 lbs WEEE weight : 1.34 Kg / 2.95 lbs & 1.48 Kg / 3.26 lbs Shipping weight : 1.93 Kg / 4.25 lbs & 2.07 Kg / 4.56 lbs MTBF (Years) : 20 / 12Environment : 40-105° F, 0-40° CHumidity : 5-95% non-condensing

Better security, faster speeds, smaller footprint : Stop more threats with our fully integrated next-generation firewall (NGFW) platform. The 4100 Series’ 1-rack-unit size is ideal at the Internet edge and in high-performance environments. It shows you what’s happening on your network, detects attacks earlier so you can act faster, and reduces management complexity.   Performance and density optimized : Key capabilities include support for 1/10/40 Gigabit Ethernet interfaces, up to 60 Gbps stateful firewall throughput, low latency, and a 1 RU form factor.   Unified management : Reduce complexity and simplify operations. Consolidate all security functions in a single management interface. It automatically prioritizes security events, recommends tailored security protections, and tracks and contains malware infections.

Modular security platform for service providers  : This carrier-grade platform is ideal for data centers and other high-performance settings that require low latency and high throughput. Deliver scalable, consistent security to workloads and data flows across physical, virtual, and cloud environments. With tightly integrated services, the Firepower 9000 Series lowers costs and supports open, programmable networks.    Scalable multiservice security : Eliminate security gaps. Integrate and provision multiple Cisco and Cisco partner security services dynamically across the network fabric. See and correlate policy, traffic, and events across multiple services.    Expandable security modules : Flexibly scale your security performance. Meet business agility needs and enable rapid provisioning.    Carrier-grade performance : NEBS-compliant configurations available. Elevate threat defense and network performance with low-latency, large flow handling, and orchestration of security services. Protect Evolved Programmable Network, Evolved Services Platform, and Application Centric Infrastructure architectures.

Overview:  Meet the industry’s first adaptive, threat-focused next-generation firewall (NGFW) designed for a new era of threat and advanced malware protection. Cisco ASA with FirePOWER Services delivers integrated threat defense for the entire attack continuum - before, during, and after an attack - by combining the proven security capabilities of the Cisco ASA firewall with the industry-leading Sourcefire threat and advanced malware protection features together in a single device. The solution uniquely extends the capabilities of the Cisco ASA 5500-X Series Next-Generation Firewalls beyond what today’s NGFW solutions are capable of.   Superior Multilayered Protection : Cisco ASA with FirePOWER Services brings distinctive threat-focused next-generation security services to the Cisco ASA 5500-X Series Next-Generation Firewalls and Cisco ASA 5585-X Adaptive Security Appliance firewall products. It provides comprehensive protection from known and advanced threats, including protection against targeted and persistent malware attacks (Figure 1). Cisco ASA with FirePOWER Services features these comprehensive capabilities: Site-to-site and remote access VPN and advanced clustering provide highly secure, high-performance access and high availability to help ensure business continuity. Granular Application Visibility and Control (AVC) supports more than 3,000 application-layer and risk-based controls that can launch tailored intrusion prevention system (IPS) threat detection policies to optimize security effectiveness. The industry-leading Cisco ASA with FirePOWER next-generation IPS (NGIPS) provides highly effective threat prevention and full contextual awareness of users, infrastructure, applications, and content to detect multivector threats and automate defense response. Reputation- and category-based URL filtering offer comprehensive alerting and control over suspicious web traffic and enforce policies on hundreds of millions of URLs in more than 80 categories. AMP provides industry-leading breach detection effectiveness, a low total cost of ownership, and superior protection value that helps you discover, understand, and stop malware and emerging threats missed by other security layers.

Unprecedented Network Visibility Cisco ASA with FirePOWER Services is centrally managed by the Cisco FireSIGHT Management Center. Management Center provides security teams with comprehensive visibility into and control over activity within the network. Such visibility includes users, devices, communication between virtual machines, vulnerabilities, threats, client-side applications, files, and websites. Holistic, actionable indications of compromise (IoCs) correlate detailed network and endpoint event information and provide further visibility into malware infections. Management Center also provides content awareness with malware file trajectory that aids infection scoping and root cause determination to speed time to remediation. Cisco Security Manager provides scalable and centralized network operations workflow management. It integrates a powerful suite of capabilities; including policy and object management, event management, reporting, and troubleshooting for Cisco ASA firewall functions. For small-scale and simple deployments, the Cisco Adaptive Security Device Manager (ASDM) is available to provide on-device, GUI-based firewall network operations management. Cisco’s enterprise-class management tools help administrators reduce complexity with unmatched visibility and control across NGFW deployments. Reduced Costs and Complexity Cisco ASA with FirePOWER Services incorporates an integrated approach to threat defense, reducing capital and operating costs and administrative complexity. It smoothly integrates with the existing IT environment, work stream, and network fabric. The purpose-built appliance family is highly scalable, performs at up to multigigabit speeds, and provides consistent and robust security across branch, Internet edge, and data centers in both physical and virtual environments. With Cisco FireSIGHT Management Center, administrators can streamline operations to correlate threats, assess their impact, automatically tune security policy, and easily attribute user identities to security events. Management Center continually monitors how the network is changing over time. New threats are automatically assessed to determine which can affect your business. Response efforts are then focused on remediation, and network defenses are adapted to changing threat conditions. Critical security activities such as policy tuning are automated, saving time and effort, while protections and countermeasures are maintained in an optimal state. Cisco FireSIGHT Management Center integrates easily with third-party security solutions through the eStreamer API to streamline operation workflows and fit existing network fabrics.

Overview: Meet the industry’s first adaptive, threat-focused next-generation firewall (NGFW) designed for a new era of threat and advanced malware protection. Cisco ASA with FirePOWER Services delivers integrated threat defense for the entire attack continuum - before, during, and after an attack - by combining the proven security capabilities of the Cisco ASA firewall with the industry-leading Sourcefire threat and advanced malware protection features together in a single device. The solution uniquely extends the capabilities of the Cisco ASA 5500-X Series Next-Generation Firewalls beyond what today’s NGFW solutions are capable of.   Superior Multilayered Protection Cisco ASA with FirePOWER Services brings distinctive threat-focused next-generation security services to the Cisco ASA 5500-X Series Next-Generation Firewalls and Cisco ASA 5585-X Adaptive Security Appliance firewall products. It provides comprehensive protection from known and advanced threats, including protection against targeted and persistent malware attacks (Figure 1). Cisco ASA with FirePOWER Services features these comprehensive capabilities: Site-to-site and remote access VPN and advanced clustering provide highly secure, high-performance access and high availability to help ensure business continuity. Granular Application Visibility and Control (AVC) supports more than 3,000 application-layer and risk-based controls that can launch tailored intrusion prevention system (IPS) threat detection policies to optimize security effectiveness. The industry-leading Cisco ASA with FirePOWER next-generation IPS (NGIPS) provides highly effective threat prevention and full contextual awareness of users, infrastructure, applications, and content to detect multivector threats and automate defense response. Reputation- and category-based URL filtering offer comprehensive alerting and control over suspicious web traffic and enforce policies on hundreds of millions of URLs in more than 80 categories. AMP provides industry-leading breach detection effectiveness, a low total cost of ownership, and superior protection value that helps you discover, understand, and stop malware and emerging threats missed by other security layers.

Superior Multilayered Protection Cisco ASA with FirePOWER Services brings distinctive threat-focused next-generation security services to the Cisco ASA 5500-X Series Next-Generation Firewalls and Cisco ASA 5585-X Adaptive Security Appliance firewall products. It provides comprehensive protection from known and advanced threats, including protection against targeted and persistent malware attacks (Figure 1). Cisco ASA with FirePOWER Services features these comprehensive capabilities:   Site-to-site and remote access VPN and advanced clustering provide highly secure, high-performance access and high availability to help ensure business continuity. Granular Application Visibility and Control (AVC) supports more than 3,000 application-layer and risk-based controls that can launch tailored intrusion prevention system (IPS) threat detection policies to optimize security effectiveness. The industry-leading Cisco ASA with FirePOWER next-generation IPS (NGIPS) provides highly effective threat prevention and full contextual awareness of users, infrastructure, applications, and content to detect multivector threats and automate defense response. Reputation- and category-based URL filtering offer comprehensive alerting and control over suspicious web traffic and enforce policies on hundreds of millions of URLs in more than 80 categories. AMP provides industry-leading breach detection effectiveness, a low total cost of ownership, and superior protection value that helps you discover, understand, and stop malware and emerging threats missed by other security layers. Unprecedented Network Visibility Cisco ASA with FirePOWER Services is centrally managed by the Cisco FireSIGHT Management Center. Management Center provides security teams with comprehensive visibility into and control over activity within the network. Such visibility includes users, devices, communication between virtual machines, vulnerabilities, threats, client-side applications, files, and websites. Holistic, actionable indications of compromise (IoCs) correlate detailed network and endpoint event information and provide further visibility into malware infections.

Overview: Meet the industry’s first adaptive, threat-focused next-generation firewall (NGFW) designed for a new era of threat and advanced malware protection. Cisco ASA with FirePOWER Services delivers integrated threat defense for the entire attack continuum - before, during, and after an attack - by combining the proven security capabilities of the Cisco ASA firewall with the industry-leading Sourcefire threat and advanced malware protection features together in a single device. The solution uniquely extends the capabilities of the Cisco ASA 5500-X Series Next-Generation Firewalls beyond what today’s NGFW solutions are capable of   Superior Multilayered Protection : Cisco ASA with FirePOWER Services brings distinctive threat-focused next-generation security services to the Cisco ASA 5500-X Series Next-Generation Firewalls and Cisco ASA 5585-X Adaptive Security Appliance firewall products. It provides comprehensive protection from known and advanced threats, including protection against targeted and persistent malware attacks (Figure 1). Cisco ASA with FirePOWER Services features these comprehensive capabilities: Site-to-site and remote access VPN and advanced clustering provide highly secure, high-performance access and high availability to help ensure business continuity. Granular Application Visibility and Control (AVC) supports more than 3,000 application-layer and risk-based controls that can launch tailored intrusion prevention system (IPS) threat detection policies to optimize security effectiveness. The industry-leading Cisco ASA with FirePOWER next-generation IPS (NGIPS) provides highly effective threat prevention and full contextual awareness of users, infrastructure, applications, and content to detect multivector threats and automate defense response. Reputation- and category-based URL filtering offer comprehensive alerting and control over suspicious web traffic and enforce policies on hundreds of millions of URLs in more than 80 categories. AMP provides industry-leading breach detection effectiveness, a low total cost of ownership, and superior protection value that helps you discover, understand, and stop malware and emerging threats missed by other security layers.   Reduced Costs and Complexity : Cisco ASA with FirePOWER Services incorporates an integrated approach to threat defense, reducing capital and operating costs and administrative complexity. It smoothly integrates with the existing IT environment, work stream, and network fabric. The purpose-built appliance family is highly scalable, performs at up to multigigabit speeds, and provides consistent and robust security across branch, Internet edge, and data centers in both physical and virtual environments.

Unprecedented Network Visibility : Cisco ASA with FirePOWER Services is centrally managed by the Cisco FireSIGHT Management Center. Management Center provides security teams with comprehensive visibility into and control over activity within the network. Such visibility includes users, devices, communication between virtual machines, vulnerabilities, threats, client-side applications, files, and websites. Holistic, actionable indications of compromise (IoCs) correlate detailed network and endpoint event information and provide further visibility into malware infections. Management Center also provides content awareness with malware file trajectory that aids infection scoping and root cause determination to speed time to remediation. Cisco Security Manager provides scalable and centralized network operations workflow management. It integrates a powerful suite of capabilities; including policy and object management, event management, reporting, and troubleshooting for Cisco ASA firewall functions. For small-scale and simple deployments, the Cisco Adaptive Security Device Manager (ASDM) is available to provide on-device, GUI-based firewall network operations management. Cisco’s enterprise-class management tools help administrators reduce complexity with unmatched visibility and control across NGFW deployments.   Reduced Costs and Complexity : Cisco ASA with FirePOWER Services incorporates an integrated approach to threat defense, reducing capital and operating costs and administrative complexity. It smoothly integrates with the existing IT environment, work stream, and network fabric. The purpose-built appliance family is highly scalable, performs at up to multigigabit speeds, and provides consistent and robust security across branch, Internet edge, and data centers in both physical and virtual environments.   With Cisco FireSIGHT Management Center, administrators can streamline operations to correlate threats, assess their impact, automatically tune security policy, and easily attribute user identities to security events. Management Center continually monitors how the network is changing over time. New threats are automatically assessed to determine which can affect your business. Response efforts are then focused on remediation, and network defenses are adapted to changing threat conditions. Critical security activities such as policy tuning are automated, saving time and effort, while protections and countermeasures are maintained in an optimal state.   Cisco FireSIGHT Management Center integrates easily with third-party security solutions through the eStreamer API to streamline operation workflows and fit existing network fabrics.

Overview: Meet the industry’s first adaptive, threat-focused next-generation firewall (NGFW) designed for a new era of threat and advanced malware protection. Cisco ASA with FirePOWER Services delivers integrated threat defense for the entire attack continuum - before, during, and after an attack - by combining the proven security capabilities of the Cisco ASA firewall with the industry-leading Sourcefire threat and advanced malware protection features together in a single device. The solution uniquely extends the capabilities of the Cisco ASA 5500-X Series Next-Generation Firewalls beyond what today’s NGFW solutions are capable of   Superior Multilayered Protection : Cisco ASA with FirePOWER Services brings distinctive threat-focused next-generation security services to the Cisco ASA 5500-X Series Next-Generation Firewalls and Cisco ASA 5585-X Adaptive Security Appliance firewall products. It provides comprehensive protection from known and advanced threats, including protection against targeted and persistent malware attacks (Figure 1). Cisco ASA with FirePOWER Services features these comprehensive capabilities: Site-to-site and remote access VPN and advanced clustering provide highly secure, high-performance access and high availability to help ensure business continuity. Granular Application Visibility and Control (AVC) supports more than 3,000 application-layer and risk-based controls that can launch tailored intrusion prevention system (IPS) threat detection policies to optimize security effectiveness. The industry-leading Cisco ASA with FirePOWER next-generation IPS (NGIPS) provides highly effective threat prevention and full contextual awareness of users, infrastructure, applications, and content to detect multivector threats and automate defense response. Reputation- and category-based URL filtering offer comprehensive alerting and control over suspicious web traffic and enforce policies on hundreds of millions of URLs in more than 80 categories. AMP provides industry-leading breach detection effectiveness, a low total cost of ownership, and superior protection value that helps you discover, understand, and stop malware and emerging threats missed by other security layers.   Reduced Costs and Complexity : Cisco ASA with FirePOWER Services incorporates an integrated approach to threat defense, reducing capital and operating costs and administrative complexity. It smoothly integrates with the existing IT environment, work stream, and network fabric. The purpose-built appliance family is highly scalable, performs at up to multigigabit speeds, and provides consistent and robust security across branch, Internet edge, and data centers in both physical and virtual environments.

Superior business resiliency and protection : Gain business resiliency through superior security with sustained performance. The Firepower 2100 Series has an innovative dual multicore CPU architecture that optimizes firewall, cryptographic, and threat inspection functions simultaneously. Now, achieving security doesn’t come at the expense of network performance.   Optimized performance and port density : Firewall throughput speeds from 2 Gbps to 8.5 Gbps. Support for sixteen (16) 1 GE ports on the low-end models. The high-end models support up to twenty-four (24) 1 GE ports or up to sixteen (16) 10 GE ports. All in a 1RU form factor.    Innovative architecture : With its unique dual-CPU, multicore architecture, the 2100 maintains throughput performance when threat inspection is activated by routing different workloads to different chips. And enabling the threat protection features does not affect the firewall throughput.   Integration adds value : Further strengthen your defenses. Share intelligence, context, and policy controls by integration with third-party and other Cisco security solutions. Enable automatic device quarantining and rapid threat containment with Cisco ISE.