Firewall

Firewall general :Operating system : SonicOS 6.5.1Security processing cores : 8Interfaces : 2 x 10-GbE SFP+,4 x 1-GbE SFP,12 x 1-GbE,1 GbE Management,1 ConsoleExpansion:1 Expansion Slot (Rear)*, SD Card*Management : CLI, SSH, Web UI, Capture Security Center, GMS, REST APIsSSO users : 50,000 Maximum access points supported : 64 Logging : Analyzer, Local Log, Syslog Firewall/VPN Performance:Firewall inspection throughput : 6.0 GbpsFull DPI throughput : 800 MbpsApplication inspection throughput : 2.0 GbpsIPS throughput : 2.0 GbpsAnti-malware inspection throughput : 1.1 GbpsIMIX throughput : 1.6 GbpsTLS/SSL decryption and inspection (DPI SSL) : 500 MbpsVPN throughput : 3.0 GbpsConnections per second : 40,000/secMaximum connections (SPI) : 1,000,000Maximum connections (DPI) : 500,000Default/Maximum connections (DPI SSL) : 3,000/4,500 VPN :Site-to-site VPN tunnels : 3,000IPSec VPN clients (max) : 500 (3,000)SSL VPN NetExtender clients (max) : 2 (500)Encryption/Authentication :DES, 3DES, AES (128, 192, 256-bit)/MD5, SHA-1, Suite B CryptographyKey exchange : Diffie Hellman Groups 1, 2, 5, 14vRoute-based VPN : RIP, OSPF, BGP Networking :IP address assignment : Static (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP RelayNAT modes : 1:1, many:1, 1:many, flexible NAT (overlapping IPS), PAT, transparent modeVLAN interfaces : 256Routing protocols : BGP, OSPF, RIPv1/v2, static routes, policy-based routingQoS : Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1pAuthentication : LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC)VoIP : Full H323-v1-5, SIPStandards : TCP/IP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3Certifications : ICSA Firewall, ICSA Anti-Virus, FIPS 140-2, Common Criteria NDPP (Firewall and IPS), UC APLHigh availability : Active/Passive with State Sync, Active/Active Clustering Hardware :Power supply : Single, Fixed 250WFans : Dual, FixedInput power : 100-240 VAC, 60-50 HzMaximum power consumption (W) : 86.7MTBF @25ºC in hours : 139,783 MTBF @25ºC in years : 15.96 Form factor : 1U Rack MountableDimensions : 1.75 x 19.1 x 17 in (4.5 x 48.5 x 43 cm)Weight : 13.56 lb (6.15 kg)WEEE weight : 14.24 lb (6.46 kg) Shipping weight : 20.79lb (9.43 kg)Major regulatory : FCC Class A, CE (EMC, LVD, RoHS), C-Tick, VCCI Class A, MSIP/KCC Class A, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE , REACH, ANATEL, BSMI, CUEnvironment (Operating/Storage) : 32°-105° F (0°-40° C)/-40° to 158° F (-40° to 70° C)Humidity : 10-90% non-condensing

Simplified management and lower costs : Get visibility into and control over activity across your network. Gain insight into users, apps, devices, threats, files, and vulnerabilities.   Unified security services and task automation : Our integrated approach to threat defense reduces capital and operating costs as well as administrative complexity by consolidating multiple security services in a single platform. Automate security tasks to increase agility and speed remediation.   Wide range of sizes and form factors : We have the platform for you: standalone options for small and midsize businesses, ruggedized appliances for extreme environments, midsize appliances for security at the Internet edge, and high-performance appliances for enterprise data centers.   Highly effective in threat protection : Highly effective threat prevention and a full contextual awareness of users, infrastructure, applications, and content help you detect multi vector threats and automate the defense response.   Low cost of ownership : Effective breach detection with low total cost of ownership offers protection value. Discover, understand, and stop malware and emerging threats missed by other security layers.

Overview: Up to 8 Gbps firewall throughput, 2.6 Gbps UTM throughput Because smaller companies are generally less protected and easier to break into, small business has become the new big target for cyber attacks. The Firebox® M270 and M370 firewalls are specifically engineered to defend all types of small businesses against attacks that are no less fierce than those targeting larger organizations. Our unique product architecture enables SMBs to leverage best-in-class security services – from URL filtering and intrusion prevention to application control and data loss prevention - without the cost and complexity of running multiple single-point solutions. The M270 and M370 are part of WatchGuard’s award-winning Firebox security platform. The platform not only provides the most complete suite of unified security controls on the market today, it has consistently been the first to offer solutions for addressing new and evolving network threats including advanced malware and ransomware.   Blazing Fast Performance Firebox M270 and M370 Unified Threat Management (UTM) solutions are up to 3 times faster than competing products with all security layers turned on, and up to 94 percent faster performing HTTPS inspection, according to the independent test lab Miercom. This ensures you never have to compromise network security for performance.   Quick And Simple Deployment SMBs usually have smaller, less technical staff, which can make network expansion challenging. RapidDeploy – a powerful, cloud-based deployment and configuration tool – comes standard with WatchGuard Firebox appliances. With it, IT staff can create and store configuration data in the cloud – public or private – and have the appliance directly shipped to its destination. Once the device arrives, it can connect to the cloud for a secure download of its configuration settings, saving your staff travel time and money.   Easy To Manage And Understand The M270 and M370 are not only easy to initially configure and deploy, they are also designed with an emphasis on centralized management, making ongoing policy and network management simple and straightforward. WatchGuard Dimension, included with purchase, provides a suite of big data visibility and reporting tools that instantly identify and distill key network security threats, issues and trends so you can take immediate preventive or corrective action. Security is complex, running it doesn’t have to be.

Overview: Get Industry-leading Performance with the Firebox T70 Many organizations today are dependent on fast, reliable and secure Internet connectivity, but are struggling to find network security solutions that can keep up with their ever growing needs. While many rack-mount solutions can keep up with today’s fastest fiber-to-the-premises speeds, there are not currently any tabletop security appliances available that have this capability, especially when running with additional security services enabled. This makes it difficult for SMBs and distributed enterprises to harness these powerful Internet speeds with the complete UTM protection they require.   The Fastest Tabletop Available The WatchGuard Firebox T70 is the fastest performing tabletop appliance available on the market today. The T70 is the only tabletop appliance that is capable of running full UTM services at over 1 gigabit per second, enabling you to keep up with lightning-fast fiber broadband speeds.   The WatchGuard Firebox T70 will make network slowdown concerns a thing of the past, with blazing-fast performance capable of delivering full UTM protection at over 1 gigabit per second. With the release of the WatchGuard Firebox T70 tabletop network security appliance, customers can now enjoy the fast throughput that they want, with the industry-leading security that they need. The WatchGuard T70 is also one of the only tabletop appliances available today that provides users two Power-over-Ethernet (PoE) ports enabling power to peripheral devices, such as wireless access points and security cameras.

Overview Small businesses and remote locations have long been thought of as soft targets for attackers. The WatchGuard T55 Firebox Firewall tabletop appliance bring enterprise-level network security to those small office/branch office and small retail environments that matches the reality of today's distributed work style.Perfect as stand-alone solutions for a small office, The WatchGuard T55 Firebox Firewall are ideal for larger organizations that want to extend easy-to-use, full UTM protection for remote workers and smaller sites. With WatchGuard Total Security Services, this appliance are small-footprint, cost-effective security powerhouses that deliver nearly every feature present in WatchGuard’s higher end UTM appliances, including all security capabilities such as ransomware protection and data loss prevention.   Key Features Includes a one (1) year standard support licence subscription. Boosts five (5) Gigabit Ethernet RJ45 LAN interfaces. No need to compromise protection for strong performance or vice versa. Support high-speed LAN backbone infrastructures and Gigabit WAN connections. Best-of-breed security components into one platform for stronger security at big cost savings. Firewall throughput up to 1Gbps and VPN throughput upto 360Mbps to keep traffic moving. Brings enterprise-level network security to small offices and retail environments. Cloud-based RapidDeploy technology taking the delay out of the firewall deployment process. Allows small businesses to have access to enterprise-grade security.

Overview WatchGuard Firebox T15 delivers complete enterprise-level network security for small office/home office and retail environments. Offering optional web filtering, intrusion prevention, antivirus and more. It can be used as a stand-alone solution or centrally managed from corporate headquarters. Flexible management tools and WatchGuard’s RapidDeploy technology enable administrators to quickly set up the Firebox T15 at remote locations so businesses can ensure that they protect where they connect. Firebox T15 provides 400 Mbps firewall throughput and three 1-Gigabit Ethernet ports. WatchGuard Dimension provides visibility into network activity and security events at no additional cost. Wireless models are available.   Details The WatchGuard Firebox T Series appliances bring enterprise-level network security to the small office/branch office and small retail environments that matches the reality of today's distributed work style. They can be used as a stand-alone solution or centrally managed from corporate headquarters. Flexible management tools and WatchGuard's RapidDeploy technology enable administrators to quickly set up a T Series device at remote locations so businesses can ensure that they protect everywhere they connect. T Series appliances sustain up to 1.2 Gbps firewall throughput and come in wired and wireless versions. WatchGuard Dimension, which provides real-time visibility into network activity and security events, is included at no additional cost. Ideal for Small office/home office and small retail environments Recommended User Count: 5 Firewall Throughput: 400 Mbps VPN Throughput: 150 Mbps UTM Throughput: 90 Mbps Concurrent Sessions: 100,000 1 Year Standard Support

Firewall general :Operating system : SonicOS 6.5.1Security processing cores : 10Interfaces : 2 x 10-GbE SFP+,4 x 1-GbE SFP,12 x 1-GbE,1 GbE Management,1 ConsoleExpansion:1 Expansion Slot (Rear)*, SD Card*Management : CLI, SSH, Web UI, Capture Security Center, GMS, REST APIsSSO users : 60,000 Maximum access points supported : 96 Logging : Analyzer, Local Log, Syslog Firewall/VPN Performance:Firewall inspection throughput : 9.0 GbpsFull DPI throughput : 1.6 GbpsApplication inspection throughput : 3.0 GbpsIPS throughput : 3.0 GbpsAnti-malware inspection throughput : 1.7 GbpsIMIX throughput : 2.4 GbpsTLS/SSL decryption and inspection (DPI SSL) : 800 MbpsVPN throughput : 4.5 GbpsConnections per second : 60,000/secMaximum connections (SPI) : 1,500,000Maximum connections (DPI) : 1,000,000Default/Maximum connections (DPI SSL) : 4,000/8,500 VPN :Site-to-site VPN tunnels : 4,000IPSec VPN clients (max) : 2,000 (4,000)SSL VPN NetExtender clients (max) : 2 (1,000)Encryption/Authentication :DES, 3DES, AES (128, 192, 256-bit)/MD5, SHA-1, Suite B CryptographyKey exchange : Diffie Hellman Groups 1, 2, 5, 14vRoute-based VPN : RIP, OSPF, BGP Networking :IP address assignment : Static (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP RelayNAT modes : 1:1, many:1, 1:many, flexible NAT (overlapping IPS), PAT, transparent modeVLAN interfaces : 400Routing protocols : BGP, OSPF, RIPv1/v2, static routes, policy-based routingQoS : Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1pAuthentication : LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC)VoIP : Full H323-v1-5, SIPStandards : TCP/IP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3Certifications : ICSA Firewall, ICSA Anti-Virus, FIPS 140-2, Common Criteria NDPP (Firewall and IPS), UC APLHigh availability : Active/Passive with State Sync, Active/Active DPI with State Sync, Active/Active Clustering Hardware :Power supply : Single, Fixed 250WFans : Dual, FixedInput power : 100-240 VAC, 60-50 HzMaximum power consumption (W) : 90.9MTBF @25ºC in hours : 134,900 MTBF @25ºC in years : 15.40 Form factor : 1U Rack MountableDimensions : 1.75 x 19.1 x 17 in (4.5 x 48.5 x 43 cm)Weight : 13.56 lb (6.15 kg)WEEE weight : 14.24 lb (6.46 kg) Shipping weight : 20.79lb (9.43 kg)Major regulatory : FCC Class A, CE (EMC, LVD, RoHS), C-Tick, VCCI Class A, MSIP/KCC Class A, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE , REACH, ANATEL, BSMI, CUEnvironment (Operating/Storage) : 32°-105° F (0°-40° C)/-40° to 158° F (-40° to 70° C)Humidity : 10-90% non-condensing

Interfaces and Modules:Hardware Accelerated 10 GE SFP+ Slots : 2Hardware Accelerated GE SFP Slots : 8Hardware Accelerated GE RJ45 Ports : 20Accelerated GE RJ45 Bypass Interfaces : 4GE RJ45 Management / HA Ports : 2USB Ports (Client / Server) : 1 / 2Console Port : 1Onboard Storage : 1x 240 GB SSDIncluded Transceivers : 2x SFP (SX 1 GE) System Performance — Enterprise Traffic Mix:IPS Throughput : 4.2 GbpsNGFW Throughput : 4 GbpsThreat Protection Throughput : 3 Gbps System Performance and Capacity:IPv4 Firewall Throughput(1518 / 512 / 64 byte, UDP):36 / 36 / 22 GbpsIPv6 Firewall Throughput(1518 / 512 / 86 byte, UDP):36 / 36 / 22 GbpsFirewall Latency (64 byte, UDP) : 3 μsFirewall Throughput (Packet per Second) : 33 MppsConcurrent Sessions (TCP) : 5 MillionNew Sessions/Second (TCP) : 280,000Firewall Policies : 10,000IPsec VPN Throughput (512 byte) : 20 GbpsGateway-to-Gateway IPsec VPN Tunnels: 2,000Client-to-Gateway IPsec VPN Tunnels : 50,000SSL-VPN Throughput : 2.2 GbpsConcurrent SSL-VPN Users(Recommended Maximum, Tunnel Mode) : 5,000SSL Inspection Throughput (IPS, avg. HTTPS) : 3.9 GbpsSSL Inspection CPS (IPS, avg. HTTPS) : 2,400SSL Inspection Concurrent Session(IPS, avg. HTTPS) : 380,000Application Control Throughput (HTTP 64K) : 9 GbpsCAPWAP Throughput (1444 byte, UDP) : 5.5 GbpsVirtual Domains (Default / Maximum) : 10 / 10Maximum Number of FortiSwitches Supported : 64Maximum Number of FortiAPs (Total / Tunnel) : 1024 / 512Maximum Number of FortiTokens : 5,000High Availability Configurations : Active-Active, Active-Passive, Clustering Dimensions and Power:Height x Width x Length (inches) : 1.75 x 17.0 x 16.4Height x Width x Length (mm): 44.45 x 432 x 416Weight : 19.0 lbs (8.6 kg)Form Factor (supports EIA / non-EIA standards) : Rack Mount, 1 RUWall Mountable : NoPower Input : 100–240V AC, 50–60 HzPower Consumption (Average / Maximum) : 128 W / 187 WCurrent (Maximum) : 110V/7A, 220V/3.5AHeat Dissipation : 636 BTU/hRedundant Power Supplies (Hot Swappable) optional Operating Environment and Certifications:Operating Temperature : 32–104°F (0–40°C)Storage Temperature : -31–158°F (-35–70°C)Humidity : 10–90% non-condensingNoise Level : 55 dBAOperating Altitude Up to : 7,400 ft (2,250 m)Compliance : FCC Part 15 Class A, RCM, VCCI, CE, UL/cUL, CBCertifications ICSA Labs: Firewall, IPsec, IPS, Antivirus, SSL-VPN; USGv6/IPv6

Specifications : FORTIGATE 60E : Hardware Specifications: GE RJ45 WAN / DMZ Ports : 2 / 1  GE RJ45 Internal Ports : 7  GE RJ45 PoE/+ Ports : 0  Wireless Interface : 0  USB Ports : 1  Console (RJ45) : 1  Internal Storage : 0  FORTIGATE 60E-POE :  Hardware Specifications GE RJ45 WAN / DMZ Ports : 2  GE RJ45 Internal Ports : 0  GE RJ45 PoE/+ Ports : 8 Wireless Interface  : 0  USB Ports : 1 Console (RJ45) : 1  Internal Storage : 0 FORTIWIFI 60E :  Hardware Specifications : GE RJ45 WAN / DMZ Ports : 2 / 1  GE RJ45 Internal Ports : 7  GE RJ45 PoE/+ Ports  : 0  Wireless Interface : 802.11 a/b/g/n/ac  USB Ports : 1  Console (RJ45) : 1  Internal Storage : 0  FORTIGATE 61E  Hardware Specifications GE RJ45 WAN / DMZ Ports :  2 / 1 GE RJ45 Internal Ports  : 7 GE RJ45 PoE/+ Ports  : 0 Wireless Interface  : 0 USB Ports : 1  Console (RJ45) : 1  Internal Storage :  1x 128 GB SSD FORTIWIFI 61E Hardware Specifications GE RJ45 WAN / DMZ Ports :  2 / 1 GE RJ45 Internal Ports  : 7 GE RJ45 PoE/+ Ports  : 0 Wireless Interface  : 802.11 a/b/g/n/ac USB Ports : 1 Console (RJ45) :  1 Internal Storage :  1x 128 GB SSD System Performance — Enterprise Traffic Mix : IPS Throughput : 400 Mbps NGFW Throughput : 250 Mbps Threat Protection Throughput : 200 Mbps System Performance: Firewall Throughput (1518 / 512 / 64 byte UDP packets) : 3 / 3 / 3 Gbps Firewall Latency (64 byte UDP packets) : 3 μs Firewall Throughput (Packets Per Second) : 4.5 Mpps Concurrent Sessions (TCP) : 1.3 Million New Sessions/Second (TCP) : 30,000 Firewall Policies : 5,000 IPsec VPN Throughput (512 byte) :2Gbps Gateway-to-Gateway IPsec VPN Tunnels : 200 Client-to-Gateway IPsec VPN Tunnels :  500 SSL-VPN Throughput : 150 Mbps Concurrent SSL-VPN Users (Recommended Maximum, Tunnel Mode) : 200 SSL Inspection Throughput (IPS, avg. HTTPS) : 135 Mbps SSL Inspection CPS (IPS, avg. HTTPS) : 135 SSL Inspection Concurrent Session (IPS, avg. HTTPS) : 75,000 Application Control Throughput (HTTP 64K) : 650 Mbps CAPWAP Throughput (HTTP 64K) : 890 Mbps Virtual Domains (Default / Maximum) : 10 / 10 Maximum Number of FortiSwitches Supported : 16 Maximum Number of FortiAPs (Total / Tunnel Mode) : 30 / 10 Maximum Number of FortiTokens : 500 High Availability Configurations : Active / Active, Active / Passive, Clustering Dimensions : Height x Width x Length (inches) : 1.5 x 8.5 x 6.3 Height x Width x Length (mm) : 38 x 216 x 160 Weight  :1.9 lbs (0.9 kg)  Form Factor : Desktop

Hardware Specifications GE RJ45 Switch Ports : 5 GE RJ45 WAN Ports : 2 USB Ports : 1 Console (RJ45) : 1 System Performance — Enterprise Traffic Mix : IPS Throughput : 350 Mbps NGFW Throughput : 220 Mbps Threat Protection Throughput : 160 Mbps System Performance : Firewall Throughput : 2.5 Gbps Firewall Latency (64 byte UDP packets) : 180 μs Firewall Throughput (Packets Per Second): 375 Kpps Concurrent Sessions (TCP) : 1.8 Million New Sessions/Second (TCP) : 21,000 Firewall Policies : 5,000 IPsec VPN Throughput (512 byte) : 90 Mbps Gateway-to-Gateway IPsec VPN Tunnels : 200 Client-to-Gateway IPsec VPN Tunnels : 250 SSL-VPN Throughput : 100 Mbps Concurrent SS-VPN Users (Recommended Maximum, Tunnel Mode) : 200 SSL Inspection Throughput (IPS, avg. HTTPS) : 150 Mbps SSL Inspection CPS (IPS, avg. HTTPS) : 140 SSL Inspection Concurrent Session (IPS, avg. HTTPS) : 75,000 Application CoLntrol Throughput (HTTP 64K) : 450 Mbps CAPWAP Throughput (HTTP 64K) : 1.2 Gbps Virtual Domains (Default / Maximum) : 5 / 5 Maximum Number of FortiSwitches Supported : 8 Maximum Number of FortiAPs (Total / Tunnel Mode) : 10 / 5 Maximum Number of FortiTokens : 500 High Availability Configurations : Active/Active, Active/Passive, Clustering Dimensions : Height x Width x Length (inches) : 1.44 x 8.52 x 5.5 Height x Width x Length (mm) : 36.5 x 216 x 140 Weight  : 2.015 lbs(0.914 kg) Form Factor : Desktop

Performance Overview: Operating system : SonicOS 5.9.x – Wired / SonicOS 6.2.x – WirelessSecurity Processor: 2x400 MHz (Wired) / 2x800 MHz (Wireless) Memory (RAM): 512 MB (Wired) /1 GB (Wireless) 1 GbE Copper interfaces : 5 Expansion : USB Firewall inspection throughput: 300 Mbps Full DPI throughput:50 Mbps Application inspection throughput:0 IPS throughput : 100 Mbps Anti-malware inspection throughput : 50 Mbps IMIX throughput : 60 Mbps SSL Inspection and Decryption (DPI SSL) :15 Mbps VPN throughput : 100 Mbps Connections per second : 1,800 Maximum connections (SPI) : 10,000 Maximum connections (DPI) : 10,000 Single Sign-On (SSO) Users :250 VLAN interfaces : 25 SonicPoints supported (Maximum) : 2 VPN :Site-to-Site VPN Tunnels : 10 IPSec VPN clients (Maximum) : 1 (5) SSL VPN licenses (Maximum) : 1 (10) Virtual assist bundled (Maximum) : No Encryption/Authentication : DES, 3DES, AES (128, 192, 256-bit), MD5, SHA-1, Suite B CryptographyKey exchange : Diffie Hellman Groups 1, 2, 5, 14Route-based VPN : RIP, OSPFCertificate support : Verisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWall-to-SonicWall VPN, SCEPVPN features : Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPNGlobal VPN client platforms supported : Microsoft® Windows Vista 32/64-bit, Windows 7 32/64-bit, Windows 8.0 32/64-bit, Windows 8.1 32/64-bitNetExtender : Microsoft Windows Vista 32/64-bit, Windows 7, Windows 8.0 32/64-bit, Windows 8.1 32/64-bit, Mac OS X 10.4+, Linux FC3+/Ubuntu 7+/OpenSUSEMobile Connect : Apple® iOS, Mac OS X, Google® Android™, Kindle Fire, Windows 8.1 (Embedded) Security Services:Deep Packet Inspection services : Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSLContent Filtering Service (CFS) : HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid listsEnforced Client Anti-Virus and Anti-Spyware : McAfee®Comprehensive Anti-Spam Service : SupportedApplication Intelligence and Control : Yes Application Visualization : No Networking:IP address assignment : Static, (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relayNAT modes : 1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent modeRouting protocols : OSPF, RIPv1/v2, static routes, policy-based routing, multicast QoS : Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1e (WMM)Authentication : XAUTH/RADIUS, Active Directory, SSO, LDAP, Novell, internal user database, Terminal Services, CitrixLocal user database : 150 VoIP : Full H.323v1-5, SIPStandards : TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3Certifications : VPNC, IPv6 (Phase 2)Certifications pending : Common Criteria NDPP, FIPS 140-2 (with Suite B) Level 2, ICSA Firewall, ICSA Anti-virus, UC APLCommon Access Card (CAC) : SupportedHigh Availability : No Hardware:Form factor : Desktop Power Supply (W) : 24W external Maximum power consumption (W) : 6.4 / 11.3Input power : 100 to 240 VAC, 50-60 Hz, 1 ATotal heat dissipation : 21.8 / 38.7 BTU Dimensions : 3.6x14.1x19cm Weight : 0.34 Kg / 0.75 lbs & 0.48 Kg / 1.06 lbs WEEE weight : 0.80 Kg / 1.76 lbs & 0.94 Kg / 2.07 lbs Shipping weight : 1.20 Kg / 2.64 lbs & 1.34 Kg / 2.95 lbs MTBF (Years) : 30 / 15 Environment : 40-105° F, 0-40° CHumidity : 5-95% non-condensing

Performance Overview: Operating system : SonicOS 5.9.x – Wired / SonicOS 6.2.x – WirelessSecurity Processor: 2x400 MHz (Wired) / 2x800 MHz (Wireless) Memory (RAM): 512 MB (Wired) /1 GB (Wireless) 1 GbE Copper interfaces : 5 Expansion : USB Firewall inspection throughput: 300 Mbps Full DPI throughput:50 Mbps Application inspection throughput:0 IPS throughput : 100 Mbps Anti-malware inspection throughput : 50 Mbps IMIX throughput : 60 Mbps SSL Inspection and Decryption (DPI SSL) :15 Mbps VPN throughput : 100 Mbps Connections per second : 1,800 Maximum connections (SPI) : 10,000 Maximum connections (DPI) : 10,000 Single Sign-On (SSO) Users :250 VLAN interfaces : 25 SonicPoints supported (Maximum) : 2 VPN :Site-to-Site VPN Tunnels : 10 IPSec VPN clients (Maximum) : 1 (5) SSL VPN licenses (Maximum) : 1 (10) Virtual assist bundled (Maximum) : No Encryption/Authentication : DES, 3DES, AES (128, 192, 256-bit), MD5, SHA-1, Suite B CryptographyKey exchange : Diffie Hellman Groups 1, 2, 5, 14Route-based VPN : RIP, OSPFCertificate support : Verisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWall-to-SonicWall VPN, SCEPVPN features : Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPNGlobal VPN client platforms supported : Microsoft® Windows Vista 32/64-bit, Windows 7 32/64-bit, Windows 8.0 32/64-bit, Windows 8.1 32/64-bitNetExtender : Microsoft Windows Vista 32/64-bit, Windows 7, Windows 8.0 32/64-bit, Windows 8.1 32/64-bit, Mac OS X 10.4+, Linux FC3+/Ubuntu 7+/OpenSUSEMobile Connect : Apple® iOS, Mac OS X, Google® Android™, Kindle Fire, Windows 8.1 (Embedded) Security Services:Deep Packet Inspection services : Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSLContent Filtering Service (CFS) : HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid listsEnforced Client Anti-Virus and Anti-Spyware : McAfee®Comprehensive Anti-Spam Service : SupportedApplication Intelligence and Control : Yes Application Visualization : No Networking:IP address assignment : Static, (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relayNAT modes : 1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent modeRouting protocols : OSPF, RIPv1/v2, static routes, policy-based routing, multicast QoS : Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1e (WMM)Authentication : XAUTH/RADIUS, Active Directory, SSO, LDAP, Novell, internal user database, Terminal Services, CitrixLocal user database : 150 VoIP : Full H.323v1-5, SIPStandards : TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3Certifications : VPNC, IPv6 (Phase 2)Certifications pending : Common Criteria NDPP, FIPS 140-2 (with Suite B) Level 2, ICSA Firewall, ICSA Anti-virus, UC APLCommon Access Card (CAC) : SupportedHigh Availability : No Hardware:Form factor : Desktop Power Supply (W) : 24W external Maximum power consumption (W) : 6.4 / 11.3Input power : 100 to 240 VAC, 50-60 Hz, 1 ATotal heat dissipation : 21.8 / 38.7 BTU Dimensions : 3.6x14.1x19cm Weight : 0.34 Kg / 0.75 lbs & 0.48 Kg / 1.06 lbs WEEE weight : 0.80 Kg / 1.76 lbs & 0.94 Kg / 2.07 lbs Shipping weight : 1.20 Kg / 2.64 lbs & 1.34 Kg / 2.95 lbs MTBF (Years) : 30 / 15 Environment : 40-105° F, 0-40° CHumidity : 5-95% non-condensing

Performance Overview: Operating system : SonicOS 5.9.x – Wired / SonicOS 6.2.x – WirelessSecurity Processor: 2x400 MHz (Wired) / 2x800 MHz (Wireless) Memory (RAM): 512 MB (Wired) /1 GB (Wireless) 1 GbE Copper interfaces : 5 Expansion : USB Firewall inspection throughput: 300 Mbps Full DPI throughput:50 Mbps Application inspection throughput:0 IPS throughput : 100 Mbps Anti-malware inspection throughput : 50 Mbps IMIX throughput : 60 Mbps SSL Inspection and Decryption (DPI SSL) :15 Mbps VPN throughput : 100 Mbps Connections per second : 1,800 Maximum connections (SPI) : 10,000 Maximum connections (DPI) : 10,000 Single Sign-On (SSO) Users :250 VLAN interfaces : 25 SonicPoints supported (Maximum) : 2 VPN :Site-to-Site VPN Tunnels : 10 IPSec VPN clients (Maximum) : 1 (5) SSL VPN licenses (Maximum) : 1 (10) Virtual assist bundled (Maximum) : No Encryption/Authentication : DES, 3DES, AES (128, 192, 256-bit), MD5, SHA-1, Suite B CryptographyKey exchange : Diffie Hellman Groups 1, 2, 5, 14Route-based VPN : RIP, OSPFCertificate support : Verisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWall-to-SonicWall VPN, SCEPVPN features : Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPNGlobal VPN client platforms supported : Microsoft® Windows Vista 32/64-bit, Windows 7 32/64-bit, Windows 8.0 32/64-bit, Windows 8.1 32/64-bitNetExtender : Microsoft Windows Vista 32/64-bit, Windows 7, Windows 8.0 32/64-bit, Windows 8.1 32/64-bit, Mac OS X 10.4+, Linux FC3+/Ubuntu 7+/OpenSUSEMobile Connect : Apple® iOS, Mac OS X, Google® Android™, Kindle Fire, Windows 8.1 (Embedded) Security Services:Deep Packet Inspection services : Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSLContent Filtering Service (CFS) : HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid listsEnforced Client Anti-Virus and Anti-Spyware : McAfee®Comprehensive Anti-Spam Service : SupportedApplication Intelligence and Control : Yes Application Visualization : No Networking:IP address assignment : Static, (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relayNAT modes : 1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent modeRouting protocols : OSPF, RIPv1/v2, static routes, policy-based routing, multicast QoS : Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1e (WMM)Authentication : XAUTH/RADIUS, Active Directory, SSO, LDAP, Novell, internal user database, Terminal Services, CitrixLocal user database : 150 VoIP : Full H.323v1-5, SIPStandards : TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3Certifications : VPNC, IPv6 (Phase 2)Certifications pending : Common Criteria NDPP, FIPS 140-2 (with Suite B) Level 2, ICSA Firewall, ICSA Anti-virus, UC APLCommon Access Card (CAC) : SupportedHigh Availability : No Hardware:Form factor : Desktop Power Supply (W) : 24W external Maximum power consumption (W) : 6.4 / 11.3Input power : 100 to 240 VAC, 50-60 Hz, 1 ATotal heat dissipation : 21.8 / 38.7 BTU Dimensions : 3.6x14.1x19cm Weight : 0.34 Kg / 0.75 lbs & 0.48 Kg / 1.06 lbs WEEE weight : 0.80 Kg / 1.76 lbs & 0.94 Kg / 2.07 lbs Shipping weight : 1.20 Kg / 2.64 lbs & 1.34 Kg / 2.95 lbs MTBF (Years) : 30 / 15 Environment : 40-105° F, 0-40° CHumidity : 5-95% non-condensing

Performance Overview: Operating system : SonicOS 6.2.xSecurity Processor: 2x 800 MHzMemory (RAM): 1 GB 1 GbE Copper interfaces : 5 Expansion : USB Firewall inspection throughput: 750 Mbps Full DPI throughput:100 Mbps Application inspection throughput:300 Mbps IPS throughput : 300 Mbps Anti-malware inspection throughput : 100 Mbps IMIX throughput : 200 Mbps SSL Inspection and Decryption (DPI SSL) :45 Mbps VPN throughput : 300 Mbps Connections per second : 5,000 Maximum connections (SPI) : 50,000 Maximum connections (DPI) : 50,000 Single Sign-On (SSO) Users :500 VLAN interfaces : 25 SonicPoints supported (Maximum) : 8 VPN :Site-to-Site VPN Tunnels : 10 IPSec VPN clients (Maximum) : 1 (10) SSL VPN licenses (Maximum) : 1 (50) Virtual assist bundled (Maximum) : 1 (30-day trial) Encryption/Authentication : DES, 3DES, AES (128, 192, 256-bit), MD5, SHA-1, Suite B CryptographyKey exchange : Diffie Hellman Groups 1, 2, 5, 14Route-based VPN : RIP, OSPFCertificate support : Verisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWall-to-SonicWall VPN, SCEPVPN features : Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPNGlobal VPN client platforms supported : Microsoft® Windows Vista 32/64-bit, Windows 7 32/64-bit, Windows 8.0 32/64-bit, Windows 8.1 32/64-bitNetExtender : Microsoft Windows Vista 32/64-bit, Windows 7, Windows 8.0 32/64-bit, Windows 8.1 32/64-bit, Mac OS X 10.4+, Linux FC3+/Ubuntu 7+/OpenSUSEMobile Connect : Apple® iOS, Mac OS X, Google® Android™, Kindle Fire, Windows 8.1 (Embedded) Security Services:Deep Packet Inspection services : Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSLContent Filtering Service (CFS) : HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid listsEnforced Client Anti-Virus and Anti-Spyware : McAfee®Comprehensive Anti-Spam Service : SupportedApplication Intelligence and Control : Yes Application Visualization : Yes Networking:IP address assignment : Static, (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relayNAT modes : 1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent modeRouting protocols : OSPF, RIPv1/v2, static routes, policy-based routing, multicast QoS : Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1e (WMM)Authentication : XAUTH/RADIUS, Active Directory, SSO, LDAP, Novell, internal user database, Terminal Services, CitrixLocal user database : 150 VoIP : Full H.323v1-5, SIPStandards : TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3Certifications : VPNC, IPv6 (Phase 2)Certifications pending : Common Criteria NDPP, FIPS 140-2 (with Suite B) Level 2, ICSA Firewall, ICSA Anti-virus, UC APLCommon Access Card (CAC) : SupportedHigh Availability : Active/Standby Hardware:Form factor : Desktop Power Supply (W) : 24W external Maximum power consumption (W) : 6.9 / 12.0Input power : 100 to 240 VAC, 50-60 Hz, 1 ATotal heat dissipation : 23.5 / 40.9 BTU Dimensions : 3.5x13.4x19cm Weight : 0.73 Kg / 1.61 lbs & 0.84 Kg / 1.85 lbsWEEE weight : 1.15 Kg / 2.53 lbs & 1.26 Kg / 2.78 lbs Shipping weight : 1.37 Kg / 3.02 lbs & 1.48 Kg / 3.26 lbs MTBF (Years) : 28 / 14Environment : 40-105° F, 0-40° CHumidity : 5-95% non-condensing

Performance Overview: Security Processor: 4x 800 MHz Memory (RAM): 1 GB 1 GbE Copper interfaces : 7 Expansion : USB Firewall inspection throughput: 1.3 Gbps Full DPI throughput:300Mbps Application inspection throughput:900Mbps IPS throughput : 900Mbps Anti-malware inspection throughput : 300Mbps IMIX throughput : 500Mbps SSL Inspection and Decryption (DPI SSL) : 100Mbps VPN throughput : 900 Mbps Connections per second : 6,000Maximum connections (SPI) : 100,000 Maximum connections (DPI) : 90,000 Single Sign-On (SSO) Users :500 VLAN interfaces : 50 SonicPoints supported (Maximum) : 16 VPN :Site-to-Site VPN Tunnels : 20 IPSec VPN clients (Maximum) : 2 (25) SSL VPN licenses (Maximum) : 2 (100) Virtual assist bundled (Maximum) : 1 (30-day trial) Encryption/Authentication : DES, 3DES, AES (128, 192, 256-bit), MD5, SHA-1, Suite B CryptographyKey exchange : Diffie Hellman Groups 1, 2, 5, 14Route-based VPN : RIP, OSPFCertificate support : Verisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWall-to-SonicWall VPN, SCEPVPN features : Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPNGlobal VPN client platforms supported : Microsoft® Windows Vista 32/64-bit, Windows 7 32/64-bit, Windows 8.0 32/64-bit, Windows 8.1 32/64-bitNetExtender : Microsoft Windows Vista 32/64-bit, Windows 7, Windows 8.0 32/64-bit, Windows 8.1 32/64-bit, Mac OS X 10.4+, Linux FC3+/Ubuntu 7+/OpenSUSEMobile Connect : Apple® iOS, Mac OS X, Google® Android™, Kindle Fire, Windows 8.1 (Embedded) Security Services:Deep Packet Inspection services : Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSLContent Filtering Service (CFS) : HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid listsEnforced Client Anti-Virus and Anti-Spyware : McAfee®Comprehensive Anti-Spam Service : SupportedApplication Intelligence and Control : Yes Application Visualization : Yes Networking:IP address assignment : Static, (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relayNAT modes : 1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent modeRouting protocols : BGP, OSPF, RIPv1/v2, static routes, policy-based routing, multicast QoS : Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1e (WMM)Authentication : XAUTH/RADIUS, Active Directory, SSO, LDAP, Novell, internal user database, Terminal Services, CitrixLocal user database : 250 VoIP : Full H.323v1-5, SIPStandards : TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3Certifications : VPNC, IPv6 (Phase 2)Certifications pending : Common Criteria NDPP, FIPS 140-2 (with Suite B) Level 2, ICSA Firewall, ICSA Anti-virus, UC APLCommon Access Card (CAC) : SupportedHigh Availability : Active/Standby Hardware:Form factor : Desktop Power Supply (W) : 24W external Maximum power consumption (W) : 9.2 / 13.8Input power : 100 to 240 VAC, 50-60 Hz, 1 ATotal heat dissipation : 31.3 / 47.1 BTU Dimensions : 3.6x14.1x19cm Weight : 0.73 Kg / 1.61 lbs & 0.84 Kg / 1.85 lbs WEEE weight : 1.15 Kg / 2.53 lbs & 1.26 Kg / 2.78 lbs Shipping weight : 1.37 Kg / 3.02 lbs & 1.48 Kg / 3.26 lbs MTBF (Years) : 27 / 13Environment : 40-105° F, 0-40° CHumidity : 5-95% non-condensing

Performance Overview: Security Processor: 4x 1.4 GHzMemory (RAM): 1 GB 1 GbE Copper interfaces : 10 Expansion : Expansion Slot (Rear), 2 USB Firewall inspection throughput: 1.5 Gbps Full DPI throughput: 500 Mbps Application inspection throughput:1.1 Gbps IPS throughput : 1.1 Gbps Anti-malware inspection throughput : 500 Mbps IMIX throughput : 900 Mbps SSL Inspection and Decryption (DPI SSL) :200 Mbps VPN throughput : 1.1 Gbps Connections per second : 12,000Maximum connections (SPI) : 150,000Maximum connections (DPI) : 125,000 Single Sign-On (SSO) Users : 500 VLAN interfaces : 50SonicPoints supported (Maximum) : 24 VPN :Site-to-Site VPN Tunnels : 50 IPSec VPN clients (Maximum) : 2 (25) SSL VPN licenses (Maximum) : 2 (200) Virtual assist bundled (Maximum) : 1 (30-day trial) Encryption/Authentication : DES, 3DES, AES (128, 192, 256-bit), MD5, SHA-1, Suite B CryptographyKey exchange : Diffie Hellman Groups 1, 2, 5, 14Route-based VPN : RIP, OSPFCertificate support : Verisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWall-to-SonicWall VPN, SCEPVPN features : Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPNGlobal VPN client platforms supported : Microsoft® Windows Vista 32/64-bit, Windows 7 32/64-bit, Windows 8.0 32/64-bit, Windows 8.1 32/64-bitNetExtender : Microsoft Windows Vista 32/64-bit, Windows 7, Windows 8.0 32/64-bit, Windows 8.1 32/64-bit, Mac OS X 10.4+, Linux FC3+/Ubuntu 7+/OpenSUSEMobile Connect : Apple® iOS, Mac OS X, Google® Android™, Kindle Fire, Windows 8.1 (Embedded) Security Services:Deep Packet Inspection services : Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSLContent Filtering Service (CFS) : HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid listsEnforced Client Anti-Virus and Anti-Spyware : McAfee®Comprehensive Anti-Spam Service : SupportedApplication Intelligence and Control : Yes Application Visualization : Yes Networking:IP address assignment : Static, (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relayNAT modes : 1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent modeRouting protocols : BGP, OSPF, RIPv1/v2, static routes, policy-based routing, multicast QoS : Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1e (WMM)Authentication : XAUTH/RADIUS, Active Directory, SSO, LDAP, Novell, internal user database, Terminal Services, CitrixLocal user database : 150 VoIP : Full H.323v1-5, SIPStandards : TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3Certifications : VPNC, IPv6 (Phase 2)Certifications pending : Common Criteria NDPP, FIPS 140-2 (with Suite B) Level 2, ICSA Firewall, ICSA Anti-virus, UC APLCommon Access Card (CAC) : SupportedHigh Availability : Active/Standby with stateful synchronization Hardware:Form factor : Desktop Power Supply (W) : 36W external Maximum power consumption (W) : 13.4 / 17.7Input power : 100 to 240 VAC, 50-60 Hz, 1 ATotal heat dissipation : 45.9 / 60.5 BTU Dimensions : 3.5x15x22.5cm Weight : 0.92 Kg / 2.03 lbs & 1.05 Kg / 2.31 lbs WEEE weight : 1.34 Kg / 2.95 lbs & 1.48 Kg / 3.26 lbs Shipping weight : 1.93 Kg / 4.25 lbs & 2.07 Kg / 4.56 lbs MTBF (Years) : 20 / 12Environment : 40-105° F, 0-40° CHumidity : 5-95% non-condensing

Performance Overview: Operating system : SonicOS 6.2.xSecurity Processor: 2x 800 MHzMemory (RAM): 1 GB 1 GbE Copper interfaces : 5 Expansion : USB Firewall inspection throughput: 750 Mbps Full DPI throughput:100 Mbps Application inspection throughput:300 Mbps IPS throughput : 300 Mbps Anti-malware inspection throughput : 100 Mbps IMIX throughput : 200 Mbps SSL Inspection and Decryption (DPI SSL) :45 Mbps VPN throughput : 300 Mbps Connections per second : 5,000 Maximum connections (SPI) : 50,000 Maximum connections (DPI) : 50,000 Single Sign-On (SSO) Users :500 VLAN interfaces : 25 SonicPoints supported (Maximum) : 8 VPN :Site-to-Site VPN Tunnels : 10 IPSec VPN clients (Maximum) : 1 (10) SSL VPN licenses (Maximum) : 1 (50) Virtual assist bundled (Maximum) : 1 (30-day trial) Encryption/Authentication : DES, 3DES, AES (128, 192, 256-bit), MD5, SHA-1, Suite B CryptographyKey exchange : Diffie Hellman Groups 1, 2, 5, 14Route-based VPN : RIP, OSPFCertificate support : Verisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWall-to-SonicWall VPN, SCEPVPN features : Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPNGlobal VPN client platforms supported : Microsoft® Windows Vista 32/64-bit, Windows 7 32/64-bit, Windows 8.0 32/64-bit, Windows 8.1 32/64-bitNetExtender : Microsoft Windows Vista 32/64-bit, Windows 7, Windows 8.0 32/64-bit, Windows 8.1 32/64-bit, Mac OS X 10.4+, Linux FC3+/Ubuntu 7+/OpenSUSEMobile Connect : Apple® iOS, Mac OS X, Google® Android™, Kindle Fire, Windows 8.1 (Embedded) Security Services:Deep Packet Inspection services : Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSLContent Filtering Service (CFS) : HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid listsEnforced Client Anti-Virus and Anti-Spyware : McAfee®Comprehensive Anti-Spam Service : SupportedApplication Intelligence and Control : Yes Application Visualization : Yes Networking:IP address assignment : Static, (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relayNAT modes : 1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent modeRouting protocols : OSPF, RIPv1/v2, static routes, policy-based routing, multicast QoS : Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1e (WMM)Authentication : XAUTH/RADIUS, Active Directory, SSO, LDAP, Novell, internal user database, Terminal Services, CitrixLocal user database : 150 VoIP : Full H.323v1-5, SIPStandards : TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3Certifications : VPNC, IPv6 (Phase 2)Certifications pending : Common Criteria NDPP, FIPS 140-2 (with Suite B) Level 2, ICSA Firewall, ICSA Anti-virus, UC APLCommon Access Card (CAC) : SupportedHigh Availability : Active/Standby Hardware:Form factor : Desktop Power Supply (W) : 24W external Maximum power consumption (W) : 6.9 / 12.0Input power : 100 to 240 VAC, 50-60 Hz, 1 ATotal heat dissipation : 23.5 / 40.9 BTU Dimensions : 3.5x13.4x19cm Weight : 0.73 Kg / 1.61 lbs & 0.84 Kg / 1.85 lbsWEEE weight : 1.15 Kg / 2.53 lbs & 1.26 Kg / 2.78 lbs Shipping weight : 1.37 Kg / 3.02 lbs & 1.48 Kg / 3.26 lbs MTBF (Years) : 28 / 14Environment : 40-105° F, 0-40° CHumidity : 5-95% non-condensing

Performance Overview: Security Processor: 4x 1 GHz Memory (RAM): 1 GB 1 GbE Copper interfaces : 8 Expansion : USB Firewall inspection throughput: 1.4 Gbps Full DPI throughput: 400 Mbps Application inspection throughput:1.0 Gbps IPS throughput : 1.0 Gbps Anti-malware inspection throughput : 400 Mbps IMIX throughput : 700 Mbps SSL Inspection and Decryption (DPI SSL) :150 Mbps VPN throughput : 1.0 Gbps Connections per second : 8,000Maximum connections (SPI) : 125,000Maximum connections (DPI) : 100,000 Single Sign-On (SSO) Users : 500 VLAN interfaces : 50SonicPoints supported (Maximum) : 16 VPN :Site-to-Site VPN Tunnels : 25 IPSec VPN clients (Maximum) : 2 (25) SSL VPN licenses (Maximum) : 2 (150) Virtual assist bundled (Maximum) : 1 (30-day trial) Encryption/Authentication : DES, 3DES, AES (128, 192, 256-bit), MD5, SHA-1, Suite B CryptographyKey exchange : Diffie Hellman Groups 1, 2, 5, 14Route-based VPN : RIP, OSPFCertificate support : Verisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWall-to-SonicWall VPN, SCEPVPN features : Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPNGlobal VPN client platforms supported : Microsoft® Windows Vista 32/64-bit, Windows 7 32/64-bit, Windows 8.0 32/64-bit, Windows 8.1 32/64-bitNetExtender : Microsoft Windows Vista 32/64-bit, Windows 7, Windows 8.0 32/64-bit, Windows 8.1 32/64-bit, Mac OS X 10.4+, Linux FC3+/Ubuntu 7+/OpenSUSEMobile Connect : Apple® iOS, Mac OS X, Google® Android™, Kindle Fire, Windows 8.1 (Embedded) Security Services:Deep Packet Inspection services : Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSLContent Filtering Service (CFS) : HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid listsEnforced Client Anti-Virus and Anti-Spyware : McAfee®Comprehensive Anti-Spam Service : SupportedApplication Intelligence and Control : Yes Application Visualization : Yes Networking:IP address assignment : Static, (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relayNAT modes : 1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent modeRouting protocols : BGP, OSPF, RIPv1/v2, static routes, policy-based routing, multicast QoS : Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1e (WMM)Authentication : XAUTH/RADIUS, Active Directory, SSO, LDAP, Novell, internal user database, Terminal Services, CitrixLocal user database : 150 VoIP : Full H.323v1-5, SIPStandards : TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3Certifications : VPNC, IPv6 (Phase 2)Certifications pending : Common Criteria NDPP, FIPS 140-2 (with Suite B) Level 2, ICSA Firewall, ICSA Anti-virus, UC APLCommon Access Card (CAC) : SupportedHigh Availability : Active/Standby with stateful synchronization Hardware:Form factor : Desktop Power Supply (W) : 36W external Maximum power consumption (W) : 13.4 / 17.7Input power : 100 to 240 VAC, 50-60 Hz, 1 ATotal heat dissipation : 45.9 / 60.5 BTU Dimensions : 3.5x15x22.5cm Weight : 0.92 Kg / 2.03 lbs & 1.05 Kg / 2.31 lbs WEEE weight : 1.34 Kg / 2.95 lbs & 1.48 Kg / 3.26 lbs Shipping weight : 1.93 Kg / 4.25 lbs & 2.07 Kg / 4.56 lbs MTBF (Years) : 20 / 12Environment : 40-105° F, 0-40° CHumidity : 5-95% non-condensing

Overview:  Meet the industry’s first adaptive, threat-focused next-generation firewall (NGFW) designed for a new era of threat and advanced malware protection. Cisco ASA with FirePOWER Services delivers integrated threat defense for the entire attack continuum - before, during, and after an attack - by combining the proven security capabilities of the Cisco ASA firewall with the industry-leading Sourcefire threat and advanced malware protection features together in a single device. The solution uniquely extends the capabilities of the Cisco ASA 5500-X Series Next-Generation Firewalls beyond what today’s NGFW solutions are capable of.   Superior Multilayered Protection : Cisco ASA with FirePOWER Services brings distinctive threat-focused next-generation security services to the Cisco ASA 5500-X Series Next-Generation Firewalls and Cisco ASA 5585-X Adaptive Security Appliance firewall products. It provides comprehensive protection from known and advanced threats, including protection against targeted and persistent malware attacks (Figure 1). Cisco ASA with FirePOWER Services features these comprehensive capabilities: Site-to-site and remote access VPN and advanced clustering provide highly secure, high-performance access and high availability to help ensure business continuity. Granular Application Visibility and Control (AVC) supports more than 3,000 application-layer and risk-based controls that can launch tailored intrusion prevention system (IPS) threat detection policies to optimize security effectiveness. The industry-leading Cisco ASA with FirePOWER next-generation IPS (NGIPS) provides highly effective threat prevention and full contextual awareness of users, infrastructure, applications, and content to detect multivector threats and automate defense response. Reputation- and category-based URL filtering offer comprehensive alerting and control over suspicious web traffic and enforce policies on hundreds of millions of URLs in more than 80 categories. AMP provides industry-leading breach detection effectiveness, a low total cost of ownership, and superior protection value that helps you discover, understand, and stop malware and emerging threats missed by other security layers.

Unprecedented Network Visibility Cisco ASA with FirePOWER Services is centrally managed by the Cisco FireSIGHT Management Center. Management Center provides security teams with comprehensive visibility into and control over activity within the network. Such visibility includes users, devices, communication between virtual machines, vulnerabilities, threats, client-side applications, files, and websites. Holistic, actionable indications of compromise (IoCs) correlate detailed network and endpoint event information and provide further visibility into malware infections. Management Center also provides content awareness with malware file trajectory that aids infection scoping and root cause determination to speed time to remediation. Cisco Security Manager provides scalable and centralized network operations workflow management. It integrates a powerful suite of capabilities; including policy and object management, event management, reporting, and troubleshooting for Cisco ASA firewall functions. For small-scale and simple deployments, the Cisco Adaptive Security Device Manager (ASDM) is available to provide on-device, GUI-based firewall network operations management. Cisco’s enterprise-class management tools help administrators reduce complexity with unmatched visibility and control across NGFW deployments. Reduced Costs and Complexity Cisco ASA with FirePOWER Services incorporates an integrated approach to threat defense, reducing capital and operating costs and administrative complexity. It smoothly integrates with the existing IT environment, work stream, and network fabric. The purpose-built appliance family is highly scalable, performs at up to multigigabit speeds, and provides consistent and robust security across branch, Internet edge, and data centers in both physical and virtual environments. With Cisco FireSIGHT Management Center, administrators can streamline operations to correlate threats, assess their impact, automatically tune security policy, and easily attribute user identities to security events. Management Center continually monitors how the network is changing over time. New threats are automatically assessed to determine which can affect your business. Response efforts are then focused on remediation, and network defenses are adapted to changing threat conditions. Critical security activities such as policy tuning are automated, saving time and effort, while protections and countermeasures are maintained in an optimal state. Cisco FireSIGHT Management Center integrates easily with third-party security solutions through the eStreamer API to streamline operation workflows and fit existing network fabrics.

Overview: Meet the industry’s first adaptive, threat-focused next-generation firewall (NGFW) designed for a new era of threat and advanced malware protection. Cisco ASA with FirePOWER Services delivers integrated threat defense for the entire attack continuum - before, during, and after an attack - by combining the proven security capabilities of the Cisco ASA firewall with the industry-leading Sourcefire threat and advanced malware protection features together in a single device. The solution uniquely extends the capabilities of the Cisco ASA 5500-X Series Next-Generation Firewalls beyond what today’s NGFW solutions are capable of   Superior Multilayered Protection : Cisco ASA with FirePOWER Services brings distinctive threat-focused next-generation security services to the Cisco ASA 5500-X Series Next-Generation Firewalls and Cisco ASA 5585-X Adaptive Security Appliance firewall products. It provides comprehensive protection from known and advanced threats, including protection against targeted and persistent malware attacks (Figure 1). Cisco ASA with FirePOWER Services features these comprehensive capabilities: Site-to-site and remote access VPN and advanced clustering provide highly secure, high-performance access and high availability to help ensure business continuity. Granular Application Visibility and Control (AVC) supports more than 3,000 application-layer and risk-based controls that can launch tailored intrusion prevention system (IPS) threat detection policies to optimize security effectiveness. The industry-leading Cisco ASA with FirePOWER next-generation IPS (NGIPS) provides highly effective threat prevention and full contextual awareness of users, infrastructure, applications, and content to detect multivector threats and automate defense response. Reputation- and category-based URL filtering offer comprehensive alerting and control over suspicious web traffic and enforce policies on hundreds of millions of URLs in more than 80 categories. AMP provides industry-leading breach detection effectiveness, a low total cost of ownership, and superior protection value that helps you discover, understand, and stop malware and emerging threats missed by other security layers.   Reduced Costs and Complexity : Cisco ASA with FirePOWER Services incorporates an integrated approach to threat defense, reducing capital and operating costs and administrative complexity. It smoothly integrates with the existing IT environment, work stream, and network fabric. The purpose-built appliance family is highly scalable, performs at up to multigigabit speeds, and provides consistent and robust security across branch, Internet edge, and data centers in both physical and virtual environments.

Superior business resiliency and protection : Gain business resiliency through superior security with sustained performance. The Firepower 2100 Series has an innovative dual multicore CPU architecture that optimizes firewall, cryptographic, and threat inspection functions simultaneously. Now, achieving security doesn’t come at the expense of network performance.   Optimized performance and port density : Firewall throughput speeds from 2 Gbps to 8.5 Gbps. Support for sixteen (16) 1 GE ports on the low-end models. The high-end models support up to twenty-four (24) 1 GE ports or up to sixteen (16) 10 GE ports. All in a 1RU form factor.    Innovative architecture : With its unique dual-CPU, multicore architecture, the 2100 maintains throughput performance when threat inspection is activated by routing different workloads to different chips. And enabling the threat protection features does not affect the firewall throughput.   Integration adds value : Further strengthen your defenses. Share intelligence, context, and policy controls by integration with third-party and other Cisco security solutions. Enable automatic device quarantining and rapid threat containment with Cisco ISE.