Key Features

Identity-Based Firewall

Automatically assigns firewall rules, VLAN tags, traffic shaping, and bandwidth limits for each user class

Intrusion Prevention

Protects critical network resources from the latest threats and vulnerabilities

Auto VPN

Securely connects branch locations in mesh or hub-and-spoke topologies

Provides simple VPN access to Amazon Web Services and Microsoft Azure

Content Filtering

Blocks undesirable web content across 70+ categories

Leverages cloud lookups to filter billions of URLs

Advanced Malware Protection (AMP)

Defends the network using the latest threat intelligence

Identifies previously unknown malicious files with retrospective detection

High Availability & Failover

Ensures device and connection integrity with multiple uplinks, warm spare failover, and self-healing VPN

Application Visibility & Control

Identifies network applications and prioritizes critical apps while limiting recreational apps

Centralized Management

Manage campus-wide WiFi deployments and multi-site networks from a single, web-based dashboard

Specifications

Network & Security Services

Stateful firewall, 1:1 NAT, DHCP, DMZ, static routing

Identity-based policies

Auto VPN self-configuring site-to-site VPN

Client VPN (IPsec)

User and device quarantine

VLAN support and DHCP services

Advanced Security Services

Content filtering (Webroot BrightCloud CIPA-compliant database)

Web search filtering (Google & Bing SafeSearch)

YouTube for Schools

Intrusion prevention (SourceFire Snort-based)

Cisco Advanced Malware Protection (AMP)

Requires Advanced Security License

WAN Performance Management

WAN link aggregation

Layer 7 application traffic analysis and shaping

Automatic Layer 3 failover (including VPN connections)

WAN uplink selection based on traffic type

Monitoring & Management

Web-based management and configuration

Real-time monitoring of throughput, connectivity, and alerts

Network asset discovery and user identification

Built-in reporting, monitoring, and centralized policy management

Diagnostic and troubleshooting tools

Automatic firmware upgrades and security patches

Searchable network-wide event logs

Interfaces

WAN: 2 × 1 GbE

LAN: 10 × 1 GbE (2 × PoE+)

Wireless: 802.11ac WiFi

USB: 1 × USB 2.0 for 3G/4G failover

Performance

Stateful firewall throughput: 450 Mbps

VPN throughput: 200 Mbps

Recommended for small branches (up to 50 users)

Power & Environment

Single 18W power supply

Operating temperature: 32°F to 104°F (0°C to 40°C)

Humidity: 5% to 95% non-condensing