TotalSecure Advanced Firewall Overview | | |
Deep Packet Inspection Firewall | | |
Stateful Packet Inspection Firewall | | |
Unlimited File Size Protection | | |
Protocols Scanned | | |
Threat Prevention Services Available | | |
Application Intelligence and Control | | |
Intrusion Prevention Service | | |
Gateway Anti-Virus and Anti-Spyware | | |
Content & URL Filtering (CFS) | | |
SSL Inspection (DPI SSL) | | |
Capture Advance Threat Protection | | |
Content Filtering Client (CFC)1 | Optional | Optional |
Enforced Client Anti-Virus and Anti-Spyware1 | Optional | Optional |
24x7 Support | | |
Firewall General | | |
Interfaces | 4 x 40-GbE QSFP+, 16 x 10-GbE SFP+, 1 GbE Management, 1 Console | 4 x 40-GbE QSFP+, 16 x 10-GbE SFP+, 1 GbE Management, 1 Console |
Management | CLI, SSH, Web UI, Capture Security Center, GMS | CLI, SSH, Web UI, Capture Security Center, GMS |
Nodes Supported | Unrestricted | Unrestricted |
Site-to-Site VPN Tunnels | 25,000 | 25,000 |
IPSec VPN Clients (Maximum) | 2,000 (10,000) | 2,000 (10,000) |
SSL VPN NetExtender Clients (Maximum) | 2 (3,000) | 2 (3,000) |
VLAN Interfaces | 512 | 512 |
Wireless Controller | | |
Firewall/VPN Performance | | |
Firewall Inspection Throughput2 | 58.4 Gbps | 120.3 Gbps |
Threat Prevention Throughput3 | 33.5 Gbps | 67.5 Gbps |
Application Inspection Throughput3 | 45.5 Gbps | 91.0 Gbps |
IPS Throughput3 | 36.8 Gbps | 73.0 Gbps |
Anti-Malware Inspection Throughput3 | 33.5 Gbps | 67.5 Gbps |
IMIX Throughput | 14.8 Gbps | 29.0 Gbps |
SSL DPI Throughput3 | 8.1 Gbps | 17.6 Gbps |
VPN throughput4 | 24.5 Gbps | 47.0 Gbps |
Maximum Connections (SPI) | 40,000,000 | 80,000,000 |
Maximum Connections (DPI) | 16,000,000 | 32,000,000 |
Maximum Connections (DPI SSL) | 800,000 | 1,600,000 |
New Connections/Sec | 430,000/sec | 860,000/sec |
Features | | |
Logging | Analyzer, Local Log, Syslog | Analyzer, Local Log, Syslog |
Network Traffic Visualization | | |
NetFlow/IPFIX Reporting | | |
SNMP | | |
Authentication | LDAP, XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC) | LDAP, XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC) |
Dynamic Routing | BGP, OSPF, RIP | BGP, OSPF, RIP |
Single Sign-on (SSO) | | |
Voice over IP (VoIP) Security | | |
PortShield Security | | |
Port Aggregation | | |
Link Redundancy | | |
Policy-based Routing | | |
Route-based VPN | | |
Dynamic Bandwidth Management | | |
Stateful High Availability | | |
Multi-WAN | | |
Load Balancing | | |
Object-based Management | | |
Policy-based NAT | | |
IKEv2 VPN | | |
TLS/SSL/SSH Decryption and Inspection | | |
SSL Control | | |
Auto-provision VPN | | |
Biometric Authentication | | |
DNS Proxy | | |
Hardware Failover | Active/Standby with State Sync, Active/Active DPI with State Sync, Active/Active Clustering | Active/Standby with State Sync, Active/Active DPI with State Sync, Active/Active Clustering |