| Stateful Inspection Firewall |
|
 |
Layer 8 (User - Identity) Firewall |
|
|
Multiple Security Zones |
|
|
Access Control Criteria (ACC) - User-Identity, Source & Destination Zone, MAC and IP address, Service |
|
|
UTM policies - IPS, Web Filtering, Application Filtering, Antivirus, Anti-spam and Bandwidth Management |
|
|
Layer 7 (Application) Control & Visibility |
|
|
Access Scheduling |
|
|
Policy based Source & Destination NAT |
|
|
H.323 NAT Traversal |
|
|
802.1q VLAN Support |
|
|
DoS & DDoS attack prevention |
|
|
MAC & IP-MAC filtering and Spoof prevention |
|
| |
|
|
| Gateway Anti-Virus & Anti-Spyware |
|
|
Virus, Worm, Trojan Detection & Removal |
|
|
Spyware, Malware, Phishing protection |
|
|
Automatic virus signature database update |
|
|
Scans HTTP, FTP, SMTP, POP3, IMAP, IM, VPN tunnels |
|
|
Customize individual user scanning |
|
|
Self Service Quarantine area |
|
|
Scan and deliver by file size |
|
|
Block by file types |
|
|
Add disclaimer/signature |
|
| |
|
|
| Gateway Anti-Spam |
|
|
Real-time Blacklist (RBL), MIME header check |
|
|
Filter based on message header, size, sender, recipient |
|
|
Subject line tagging |
|
|
Redirect spam mails to dedicated email address |
|
|
Image-spam filtering using RPD Technology |
|
|
Zero hour Virus Outbreak Protection |
|
|
Self Service Quarantine area |
|
|
IP address Black list/White list |
|
|
Spam Notification through Digest |
|
|
IP Reputation-based Spam filtering |
|
| |
|
|
| Intrusion Prevention System |
|
|
Signatures: Default (3000+), Custom |
|
|
IPS Policies: Multiple, Custom |
|
|
User-based policy creation |
|
|
Automatic real-time updates from CRProtect networks |
|
|
Protocol Anomaly Detection |
|
|
DDoS attack prevention |
|
| |
|
|
| Web Filtering |
|
|
Inbuilt Web Category Database |
|
|
URL, keyword, File type block |
|
|
Web Categories: Default(82+), Custom |
|
|
Protocols supported: HTTP, HTTPS |
|
|
Block Malware, Phishing, Pharming URLs |
|
|
Category-based Bandwidth allocation and prioritization |
|
|
Block Java Applets, Cookies, Active X |
|
|
CIPA Compliant |
|
|
Data leakage control via HTTP, HTTPS upload |
|
|
Schedule-based access control |
|
|
Custom block messages per category |
|
| |
|
|
| Application Filtering |
|
|
Inbuilt Application Category Database |
|
|
Application Categories e.g. Gaming, IM, P2P, Proxy: 11+ |
|
|
Schedule-based access control |
|
|
Block |
|
|
P2P applications e.g. Skype |
|
|
Anonymous proxies e.g. UItra surf |
|
|
"Phone home" activities |
|
|
Keylogger |
|
|
Layer 7 (Applications) & Layer 8 (User - Identity) Visibility |
|
| |
|
|
| Virtual Private Network |
|
|
IPSec, L2TP, PPTP |
|
|
Encryption - 3DES, DES, AES, Twofish, Blowfish, Serpent |
|
|
Hash Algorithms - MD5, SHA-1 |
|
|
Authentication: Preshared key, Digital certificates |
|
|
IPSec NAT Traversal |
|
|
Dead peer detection and PFS support |
|
|
Diffie Hellman Groups - 1,2,5,14,15,16 |
|
|
External Certificate Authority support |
|
|
Export Road Warrior connection configuration |
|
|
Domain name support for tunnel end points |
|
|
VPN connection redundancy |
|
|
Overlapping Network support |
|
| |
|
|
| SSL VPN |
|
|
TCP & UDP Tunneling |
|
|
Authentication - Active Directory, LDAP, RADIUS, Cyberoam |
|
|
Multi-layered Client Authentication - Certificate, Username/Password |
|
|
User & Group policy enforcement |
|
|
Network access - Split and Full tunneling |
|
|
Browser-based (Portal) Access - Clientless access |
|
|
Lightweight SSL VPN Tunneling Client |
|
|
Granular access control to all the Enterprise Network resources |
|
|
Administrative controls - Session timeout, Dead Peer Detection, Portal customization |
|
|
TCP-based Application Access - HTTP, HTTPS, RDP, TELNET, SSH |
|
| |
|
|
| Instant Messaging (IM) Management |
|
|
Yahoo and Windows Live Messenger |
|
|
Virus Scanning for IM traffic |
|
|
Allow/Block Login |
|
|
Allow/Block File Transfer |
|
|
Allow/Block Webcam |
|
|
Allow/Block one-to-one/group Chat |
|
|
Content-based blocking |
|
|
IM activities Log |
|
|
Archive files transferred |
|
|
Custom Alerts |
|
| |
|
|
| Wireless WAN |
|
|
IEEE 802.11 n/b/g (WEP, WPA, WPA2, 802.11i , TKIP, AES, PSK, 802.1x EAP |
|
|
Detachable 2x3 MIMO antenna |
|
|
Up to 8 bssid Access Points |
|
|
EIRP Transmit power : 11n HT40 : +17dBm, 11b CCK: +19dBm, 11g OFDM:+17dBm |
|
|
Receiver sensitivity : -65dBm at 300Mbps, -70dBm at 54Mbps, -86dBm at 11Mbps |
|
|
Frequency : USA (FCC): 2.412GHz ~ 2.462GHz, Europe (ETSI): 2.412GHz ~ 2.472 GHz, Japan (TELEC): 2.412GHz ~ 2.483GHz |
|
|
USB port, 3G and WiMax Support with optional modem |
|
|
Primary WAN link |
|
|
WAN Backup link |
|
| |
|
|
| Bandwidth Management |
|
|
Application and User Identity based Bandwidth Management |
|
|
Category-based Bandwidth restriction |
|
|
Guaranteed & Burstable bandwidth policy |
|
|
Application & User Identity based Traffic Discovery |
|
|
Multi WAN bandwidth reporting |
|
| |
|
|
| User Identity & Group Based Controls |
|
|
Access time restriction |
|
|
Time and Data Quota restriction |
|
|
Schedule based Committed and Burstable Bandwidth |
|
|
Schedule based P2P and IM Controls |
|
| |
|
|
| Networking |
|
|
Failover - Automated Failover/Failback, Multi-WAN failover, 3G Modem failover |
|
|
WRR based Load balancing |
|
|
Policy routing based on Application and User |
|
|
IP Address Assignment - Static, PPPoE, L2TP, PPTP & DDNS Client, Proxy ARP, DHCP server, DHCP relay |
|
|
Support for HTTP Proxy |
|
|
Dynamic Routing: RIP v1 & v2, OSPF, BGP, Multicast Forwarding |
|
|
Parent Proxy support with FQDN |
|
|
IPv6 Ready Gold Logo |
|
| |
|
|
| High Availability |
|
|
Active-Active |
|
|
Active-Passive with state synchronization |
|
|
Stateful Failover |
|
|
Alerts on Appliance Status change |
|
| |
|
|
| Administration & System Management |
|
|
Web-based configuration wizard |
|
|
Role-based Access control |
|
|
Firmware Upgrades viaWebUI |
|
|
Web 2.0 compliant UI (HTTPS) |
|
|
UI Color Styler |
|
|
Commandline interface (Serial, SSH, Telnet) |
|
|
SNMP(v1, v2c, v3) |
|
|
Multi-lingual support: Chinese, Hindi, French, Korean |
|
|
Cyberoam Central Console (Optional) |
|
|
NTP Support |
|
| |
|
|
| User Authentication |
|
|
Internal database |
|
|
Active Directory Integration |
|
|
Automatic Windows Single Sign On |
|
|
External LDAP/RADIUS database Integration |
|
|
Thin Client support - Microsoft Windows Server 2003 Terminal Services and Citrix XenApp |
|
|
RSA SecurID support |
|
|
External Authentication - Users and Administrators |
|
|
User/MAC Binding |
|
|
Multiple Authentication servers |
|
| |
|
|
| Logging / Monitoring |
|
|
Graphical real-time and historical Monitoring |
|
|
Email notification of reports, viruses and attacks |
|
|
Syslog support |
|
|
Log Viewer - IPS, Web filter, Anti Virus, Anti Spam, Authentication, System and Admin Events |
|
| |
|
|
| On-ApplianceCyberoam i-View Reporting |
|
|
Integrated Web-based Reporting tool - Cyberoam-iView |
|
|
1000+ drilldown reports |
|
|
45+ Compliance reports |
|
|
Historical and Real-time reports |
|
|
Multiple Dashboards |
|
|
Username, Host, Email ID specific Monitoring Dashboard |
|
|
Reports - Security, Spam, Virus, Traffic, Policy violations, VPN, Search Engine keywords |
|
|
Multi-format reports - tabular, graphical |
|
|
Exportable formats - PDF, Excel |
|
|
Automated Report Scheduling |
|
| |
|
|
| IPSec VPN Client |
|
|
Inter-operability with major IPSec VPN Gateways |
|
|
Supported platforms: Windows 2000, WinXP 32/64-bit, Windows 2003 32-bit, Windows 2008 32/64-bit, Windows Vista 32/64-bit, Windows 7 RC1 32/64-bit |
|
|
Import Connection configuration |
|
| |
|
|
| Certification |
|
|
ICSA Firewall - Corporate |
|
|
Checkmark UTM Level 5 Certification |
|
|
VPNC - Basic and AES interoperability |
|
|
IPv6 Ready Gold Logo |
|
| |
|
|
| Physical details |
|
|
Dimensions - 4.4 x 15.3 x 23.2 cm (HxWxD) |
|
|
Weight - 2.3kg |
|
| |
|
|
| Power |
|
|
100-240VAC, 33.5W |
|
|
114 BTU Total Heat Dissipation |
|
