Features

Identity-Based Firewall
Automatically assigns firewall and traffic shaping rules, VLAN tags, and bandwidth limits to enforce the right policies for each class of users.

Intrusion Prevention
Protects critical network resources from the latest security threats and vulnerabilities.

Auto VPN
Securely connects branch locations using mesh or hub-and-spoke topologies. Provides simple VPN access into Amazon Web Services (AWS) and Microsoft Azure.

Content Filtering
Blocks undesirable web content across 70+ categories, leveraging cloud lookups to filter billions of URLs.

Advanced Malware Protection (AMP)
Protects your network against malware using the latest threat intelligence, and identifies previously unknown malicious files with retrospective detection.

High Availability & Failover
Ensures device and connection integrity through multiple uplinks, warm spare failover, and self-healing VPN capabilities.

Application Visibility & Control
Identifies which applications are being used and allows prioritization of critical apps while limiting recreational ones.

Centralized Management
Seamlessly manage campus-wide WiFi deployments and distributed multi-site networks from a single, cloud-based dashboard.

Specifications

Network and Security Services

• Stateful firewall, 1:1 NAT, DHCP, DMZ, static routing

• Identity-based policies

• Auto VPN self-configuring site-to-site VPN

• Client VPN (IPsec)

• User and device quarantine

• VLAN support and DHCP services

Advanced Security Services

• Content filtering (Webroot BrightCloud CIPA-compliant URL database)

• Web search filtering (including Google and Bing SafeSearch)

• YouTube for Schools

• Intrusion prevention (SourceFire Snort-based)

• Cisco Advanced Malware Protection (AMP)

• Requires Advanced Security License

WAN Performance Management

• WAN link aggregation

• Application-level (Layer 7) traffic analysis and shaping

• Automatic Layer 3 failover (including VPN connections)

• WAN uplink selection based on traffic type

Monitoring and Management

• Web-based management and configuration

• Throughput and connectivity monitoring with alerts

• Network asset discovery and user identification

• Built-in network-wide reporting, monitoring, and alerts

• Centralized policy management

• Real-time diagnostics and troubleshooting via the web

• Automatic firmware upgrades and security patches

• Searchable network-wide event logs

Interfaces

• WAN: 2 × 1 GbE

• LAN: 10 × 1 GbE (2 × PoE+)

• Wireless: 802.11ac WiFi

• USB: 1 × USB 2.0 for 3G/4G failover

Performance

• Stateful firewall throughput: 450 Mbps

• VPN throughput: 200 Mbps

• Recommended for small branches (up to 50 users)

Power

• Single 18W power supply

Environment

• Operating temperature: 32°F to 104°F (0°C to 40°C)

• Humidity: 5% to 95% non-condensing