PERFORMANCE* U30S U70S U150S U250S U500S U800S NG1000-A NG5000-AFirewall + IPS (Mbps) 400 800 1,000 1,800 2,400 3,500 10,800 17,500IPSec VPN (AES Mbps)25 concurrent tunnels, total throughput 100 200 250 350 450 550 1,500 3,000

Concurrent connections 75,000 150,000 250,000 600,000 1,200,000 1,500,000 1,200,000 3,000,000New connections per second 5,000 8,000 10,000 12,000 16,000 22,000 75,000 100,000

Unlimited user license

NETWORK CONNECTIVITY U30S U70S U150S U250S U500S U800S NG1000-A NG5000-A

10/100/1000 interfaces 5 (1+2x2 ports switch) 8 8 12 12 12 8/14 16/22

Optional interfaces (copper or fi ber) - - - - 2x 1Gb2x 1Gb

or 2x 10Gb4x or 6x 10/100/1000

2x or 4x 1Gb fi ber - 2x 10Gb fi ber

3G Modem Optional Optional Optional Optional Optional Optional Optional Optional

PROTECTION U30S U70S U150S U250S U500S U800S NG1000-A NG5000-AASQ protection engine - Application detection and monitoring - Inspection of application traffi c - Web 2.0 advanced protection - SSL inspection Application inventory & vulnerability assessment (NVM) Optional Optional Optional Optional Optional Optional Optional Optional

CONTENT FILTERING U30S U70S U150S U250S U500S U800S NG1000-A NG5000-A

Built-in Antivirus - Antispam - URL fi ltering (16 categories)Kaspersky Antivirus - NETASQ Extended Web Control (65 categories) Options Options Options Options Options Options Options Options

USERS U30S U70S U150S U250S U500S U800S NG1000-A NG5000-A

Integration with Active Directory - Internal or external directory (LDAP) - Transparent authentication - Multi-level PKI and certifi cate authority

HIGH AVAILABILITY (HA) U30S U70S U150S U250S U500S U800S NG1000-A NG5000-A

Active / passive -

Synchronization of sessions / users -

Hardware failure detection - < 1 second < 1 second < 1 second < 1 second < 1 second < 1 second < 1 second

Redundant system partition

CAPACITIES U30S U70S U150S U250S U500S U800S NG1000-A NG5000-AIPSec VPN tunnels (Max) 50 100 500 1,000 1,000 2,000 5,000 10,000Concurrent SSL VPN connections 20 50 75 150 300 500 1,024 2,048No. of VLANs (Max) 64 64 256 512 512 512 512 1,024Local log storage SD Card Option SD Card Option

WAN link redundancy (max) 4 4 8 8 8 8 12 12Simultaneous PPTP clients (max) 48 48 96 96 96 96 192 192

NETWORK – ROUTING – QOS U30S U70S U150S U250S U500S U800S NG1000-A NG5000-A

Transparent, routed, hybrid modes - Policy-based routing (PBR) - Dynamic routing - Bandwidth guarantee/limitation

IPSEC VPN U30S U70S U150S U250S U500S U800S NG1000-A NG5000-AHardware acceleration - 3DES, AES, Blowfi sh / MD5, SHA1, SHA2 - IPSec NAT Traversal - Dead Peer Detection

HARDWARE U30S U70S U150S U250S U500S U800S NG1000-A NG5000-AMTBF in years (hours) More than 9 years (78,895) More than 6 years (52,596)Racking 1U (1/2 width) 1U – 19’’ 1U – 19" 2U – 19"Height x Width x Depth (mm)** 44.45 x 210 x 195 44.45 x 485 x 310 44.45 x 431 x 660 89 x 431 x 660Weight 1.3kg (2.9lbs) 4.3kg (9.5lbs) 12kg (26.5lbs) 17kg (37.5lbs)Packaged Height x Width x Depth (mm) 105 x 385 x 290 170 x 570 x 430 250 x 550 x 780Packaged weight 2.4kg (5.3lbs) 6.3kg (13.9lbs) 18.5kg (40.8lbs) 24.5 kg (54.1lbs)Power supply (AC) 100-240V, 60-50Hz 2x 110-240V, 60-50HzPower consumption (230V 50Hz) 21W 0.19A 30W 0.25A 54W 0.36A 77W 0.43A 77W 0.54A 98W 0.54A 230W 1.35A 300W 1.75AThermal dissipation (maximum, BTU per hour) 70 103 185 263 263 332 785 1 025

Noise level Fanless 22db (A) 55db (A) 55db (A) 65db (A) 65db (A) N/A N/AEthernet energy saving mode (IEEE 802.3az) LAN, DMZ - -

ENVIRONMENT U30S U70S U150S U250S U500S U800S NG1000-A NG5000-AOperational temperature 5° to 40°C (41° to 104°F) 10° to 35°C (50° to 95°F)Storage temperature -30° to 65°C (-22° to 149°F) -20° to 65°C (-4° to 149°F)Relative humidity, operating (without condensation) 20% to 90% @40°C (104°F) 20% to 80%

CERTIFICATIONS U30S U70S U150S U250S U500S U800S NG1000-A NG5000-A

CE, EN60950, RoHS, EAL4+

NETASQ CENTRALIZED MANAGER (NCM)SIMPLIFY THE WAY YOU MANAGE MULTIPLE SITES

NETASQ Centralized Manager provides the tools to achieve this, saving you considerable time and resource. Supervision is maintained with three levels of services from the tracking of operational status to alerts by e-mail. Maintenance of appliances is simplifi ed through task scheduling. Central policy management provides for the automatic deployment of modifi cations across multiple sites. Global policy with local control ensures overall visibility without loss of granularity.

NETASQ VULNERABILITY MANAGER (NVM)BOOSTING YOUR NETWORK SECURITY

NETASQ Vulnerability Manager is the leading-edge, innovative solution to keeping your network and information secure. It gives you the fl exibility and control you need to succeed in today’s 24/7 business environment. As soon as a threat or vulnerability is identifi ed on your network, NETASQ Vulnerability Manager will let you know and make sure that you have the right tools to correct it.

NETASQ EVENT ANALYZER (NEA)DECISION SUPPORT TOOL

NETASQ Event Analyzer is a truly helpful decision-making tool for the security manager, the network administrator or the technical team. Network event management must allow traffi c passing through the information system to be analyzed and understood. It also enables the archival of information in compliance with legal requirements (HIPAA, SOX, BASEL II, PCI-DSS or even ISO27000).

Up-to the minute applications inventory

Instant severity classification

Around the clock vulnerability detection

Quick-linkto corrective patch

Time saved on a daily basis

Alertsin real time

Central configuration point

Scalable to the needs of MSSPs

Several levelsof supervision

Time-saving Effective ‘information-based’decision-making

Compliance with archivinglegislation

Task automation

Non-contractual document. In order to improve the quality of its products, NETASQ reserves the right to make modifi cations without prior notice. All trademarks are the property of their respective companies.

NETASQ © Copyright 2013

About NETASQ With over 80,000 unifi ed threat management fi rewalls deployed to business, government and defence organisations of all sizes, NETASQ delivers solutions of unrivalled performance, protection and control and the most comprehensive EU and NATO certifi cations of any fi rewall. For further information: www.netasq.com

EUROPEFRANCE Paris+33 1 46 21 82 [email protected]

BENELUX & NORDICS Breda+31 76 [email protected]

DACH München+49 89 20 300 [email protected]

IBERICA Madrid+34 91 761 21 76 [email protected]

ITALIA Milano+39 02 7253 [email protected]

UK London+44 207 092 [email protected]

ASIA PACIFIC CHINA Shanghai City+86 400 011 4313

INDIA Hyderabad+91 99495 55806

SINGAPORE Singapore+65 6333 9077

MIDDLE EAST & AFRICAUAE Dubai+971 55 5511 337

INTERNATIONAL [email protected]

FOR SERVERS VS5 VS10Protected IP addresses 5 10

NETASQ Vulnerability Manager

Concurrent connections 1,000,000 2,000,000

802.1Q VLANs (max) 512 512

IPSEC VPN Tunnels (max) 10,000 10,000

Simultaneous SSL VPN clients 2,048 2,048

FOR ENTERPRISES V50 V100 V200 V500 VUProtected IP addresses 50 100 200 500 Unlimited

Concurrent connections 100,000 200,000 400,000 600,000 3,000,000

802.1Q VLANs (max) 32 128 128 128 512

IPSEC VPN Tunnels (max) 100 500 1,000 1,000 10,000

Simultaneous SSL VPN clients 50 256 512 512 2 048

SECURITY WITHOUT COMPROMISEFOR VIRTUAL ENVIRONMENTS

A WELL-TRIED TECHNOLOGY

NATO secrecy accredited VPN and Firewall Mailguard

to the level of NATO Restricted.

EU RESTRICTED Certification

EAL3+ & EAL4+ Certifications (Common Criteria v 3.1)

Non-contractual document. The features mentioned are those in version 9.1. * Performance is measured in a laboratory and under conditions ideal for version 9.1. Results may vary according to test conditions and the software version.** Product without its non-slip rubber feet

The WEEE Directive imposes obligations upon manufacturers of EU Member

States to recycle the waste from electrical and electronic product. The RoHS Directive restricts the use of 6

hazardous materials in the manufacture of various types of electronic and

electrical equipment.

NETWORK SECURITY WITHOUT COMPROMISE

Documents

Transcript of NETWORK SECURITY WITHOUT COMPROMISE