Volgens NETGEAR is er momenteel geen andere professionele firewall op de markt die voor minder dan 400 euro gigabit-snelheden levert. De ProSafe Quad WAN Gigabit SSL VPN Firewall (SRX5308) heeft vier gigabit WAN-poorten. Het is dus mogelijk het netwerkverkeer te verdelen over vier poorten voor een betere prestatie (“session based load balancing”). Ook kunnen twee poorten gecombineerd worden en kan er ook een uitvalbescherming worden gebruikt, waarbij het netwerkverkeer van een kapotte poort automatisch wordt overgezet op een nog functionerende poort. Gecentraliseerde datatunnels via VPN kunnen worden opgezet met behulp van IP Security (IPsec) of Secure Socket Layers (SSL) beveiliging. De SRX5308 firewall ondersteunt simultaan tot 125 IPsec VPN en 50 SSL VPN tunnels. Deze firewall is verder uitgerust met denial-of-service (DoS) aanvalbescherming, Stateful Packet Inspection (SPI) om hackers buiten de deur te houden, URL zoekwoord filtering, SYSLOG support, een te configureren hardware DMZ-poort, e-mailrapportage, logboeken en real-time waarschuwingen. Deze firewall wordt volledig via het web beheerd.
Specificaties van de SRX5308
PERFORMANCE | |
LAN-to-WAN Throughput1 | 924 Mbps |
IPsec VPN (3DES) Throughput1 | 180 Mbps |
SSL VPN Throughput1 | 21 Mbps |
Maximum Concurrent Connections | 200,000 |
Maximum Number of VLANs | 254 |
Dedicated IPsec VPN Tunnels | 125 |
Dedicated SSL VPN Tunnels | 50 |
FIREWALL FEATURES | |
Stateful Packet Inspection (SPI) | Port/Service Blocking, Denial-of-service (DoS) Prevention, Stealth Mode, Block TCP Flood, Block UDP Flood, WAN/LAN Ping Response Control |
Firewall Functions | Port Range Forwarding, Port Triggering, DNS proxy, MAC Address Cloning/spoofing, NTP Support, UPnP, Auto-Uplink on Switch Ports, L3 Quality of Service (QoS),LAN-to-WAN and WAN-to-LAN(ToS), Bandwidth Profiling |
Content Filtering | Web Components (Proxy, Java, ActiveX, Cookies), Web Keyword Blocking, Trusted Domains |
User Authentication for VPN | Active Directory, LDAP, Radius, WIKID, MIAS, NT Domain, Local User Database |
PCI Compliance Two Factor Authentication Support | • |
VoIP SIP ALG Compatibility List | • |
VPN Pass Through | IPsec, PPTP, L2TP |
VPN | |
IPsec Encryption/Authentication | 56-bit DES, 168-bit 3DES, AES(128, 192, 256 bit)/SHA-1, MD5 |
Key Exchange | IKE, Manual Key, Pre-shared Key, PKI, X.509 v3 |
IPsec NAT Traversal (VPN Passthrough) | • |
IPsec Access Modes | Client-to-site, Site-to-site |
Client-to-site, Site-to-site IPsec VPN Wizard | • |
SSL Version Support | SSLv3, TLS1.0 |
SSL Encryption Support | DES, 3DES, ARC4, AES(ECB, CBC, XCBC, CNTR)128, 256 bit |
SSL Message Integrity | MD5, SHA-1, MAC-MD5/SHA-1, HMAC-MD5/SHA-1 |
SSL Certificate Support | RSA, Diffie-Hellman, Self |
SSL VPN Platforms Supported | Windows 2000/XP/Vista/Windows 7 (32, 64 bit), MAC OS X 10.4+ |
MANAGEMENT | |
Management Interface Options | HTTP/HTTPS, SNMP v2c, Telnet |
Logging | Accepted Packets, Dropped Packets, System, Source MAC filter, Session Limit, Bandwidth Limit, SSl VPN, IPsec VPN |
Log Delivery | Email Delivery, Syslog |
Diagnostics | Ping, DNS Lookup, Trace Route |
Maintenance | Save/restore Configuration, Restore to Factory Defaults, Firmware Upgrades via Web Browser, Display Statistics |
HARDWARE | |
Gigabit RJ45 Ports WAN/LAN | 4/4 |
DMZ Interfaces (Configurable) | 1 |
Flash Memory/RAM | 64 MB/512 MB |
Certifications | VPNC (Basic, AES Interop) |
Major Regulatory Compliance | Environment: RoHS, China RoHS Safety: CE/LVD, cUL EMI: FCC Part 15 Class A, CE mark commercial, C-Tick Class A, VCCI |
Storage and Operating Temperatures | Operating Temperature: 0? – 45?C (32?-113? F) Storage Temperature: -20? – 70? C (-4? – 158? F) |
Humidity | Operation 90% Maximum Relative, Storage 95% Maximum Relative |
Electrical Specifications | AC 100-240V, 50/60 Hz Universal Input, DC 5V/5A Output Internal Power Supply |
Dimensions (W x H x D) cm | 33 x 4.3 x 20.9 |
Dimensions (W x H x D) in | 13 x 1.7 x 8.2 |
Weight kg/lb | 2.1/4.6 |
System Requirements | Cable, DSL, or Wireless Broadband Modem, Internet Service, Network Card for Each Connected PC, Network Software (e.g. Windows), Internet Explorer 5.0 or Higher or Mozilla Firefox 1.0 or Higher |
Package Contents | ProSafe Quad WAN Gigabit Firewall (SRX5308), Ethernet Cable, Power Cable, Rackmount Kit, Rubber Feet, Installation Guide, Warranty/Support Information Card, Resource CD With Single User ProSafe VPN Client Software License |
Warranty | Lifetime |
ORDERING INFORMATION | |
North America | SRX5308-100NAS |
Europe | SRX5308-100EUS |
Asia | SRX5308-100AJS |
ACCESSORIES | |
ProSafe Client Software | VPN01L (1-User), VPN05L (5-User) |
ProSafe Network Management Software | NMS100 |
PROSUPPORT SERVICE PACKS | |
OnCall 24×7, Category 1 | PMB0331-100 (US), PMB0331 (non-US) |
XPressHW, Category 1 | PRR0331 |