Aker Firewall UTM. Maximum protection and security for network connections.

Transcription

1 6. Enterprise Maximum protection and security for network connections. is a complete security solution for the coorporate environment ensuring total control over the information transfered in the network. This solution integrates hardware and software running with antimalware modules, security system against intruders, web content classification and antispam protection. Among others implementations that have excelled in Brazil s market, we highlight its ability to work together with other softwares supplying new security needs. The appliances within Enterprise group aggregate more technology and inovative features compared to previous models. The Enterprise appliances allow a speed of up to 40 Gbits/second, memory up to 96 Gbytes and also up to 64 network interfaces. Larger models contain new characteristics such as detachable coolers, redundant source power distribution, detachable network modules and interface options of up to 10Gbits fiber. With a centralized management, the equipment allows the inclusion of aditional security layers such as antivirus, antispam and web filters. is availabe for sell and leasing. Contact a reseller today! *Some features allow the installation in external devices for a better distribution of processing. Products adapted to your needs: High security readiness, flexibility and scalability; Automated and centralized management; ing, QoS and link balancing; Low maintanence cost; Powerful auditing; Integration with third party systems; VPN Server and Client; WEB, antivirus and AntiSPAM filters; Product in Portuguese and English; Differentiated support level; Software developed in Brazill; Secure remote access. Business models Physical Appliances for small, medium and large enterprises; Virtual Appliances (VMware/Virtual Box); Third-party hardware.

2 6. Hardware FRONT BACK Minibox Models: 37 W and 337 W Minibox Models: 37 and 337 Minibox Model: 437 e 37 Enterprise Box Models: 37, 1137, and 137 Enterprise Box Models: 137 and 1137 Enterprise Box Model: 0037 Enterprise Box Model: e 60137

3 6. Small companies Minibox/Box Caracteristcs Simultaneous connections Connections per second (¹) UTM speed (http/http+av/https) (¹) Throughput (Mbps) (¹)(²) VPN Throughput (3DES/DES/AES/Blowfish) (Mbps) (¹)(²) IPS Throughput (Mbps) (¹)(²) Number of VPN tunnels(¹) Model /60/ /0/9/111 (7) Model 37 W /60/ /0/9/111 Model /10/6 0 33/0/9/ (7) Model 337 W /10/6 0 33/0/9/ on licensing Ips Roaming / VPN SSL Links balancing Usb (data / serial / 3G/4G) Serial (DB9/RJ4/compatible) LED activity (network, drive, On, Off) Network interface card RJ4 (10 / 100 / 1000) LAN RJ4 Bypass Network interface wireless card (A/B/G/N) Internal storage Power supply Replacement modules RAM memory Solid-state drive Power Supply Subscription options Subscription: Anti-Spam (ASM) Base IDS/IPS Base Web Content Filtering Base Antivirus Base Warranty and updates () Extended Warranty Firmware updates plan (6) Dimensions Physical characteristics Height, Width, Length (cm) Weight (Kg) MTBF (Mean Time Between Failures) Maximum Consumption Operation Temperature Humidity 3/3/1,1, % - 90% 3/3/1,1, % - 90% 3/3/1,1, % - 90% 3/3/1,1, % - 90% 1-Maximum values obtained in laboratory with product optimization. Other variables such as traffic type or system usage type may alter these values. -Input and Output traffic are summed up. 3-Medium values as of products standard use. Greater simultaneous use of proxies may require greater memory values. 4-Software Licencing with mandatory annual renewal. -Maximum warranty limit of 36 months. 6-Regards only the software part of the product. 7-Wireless Module AP -.4/GHz 0.11a/b/g/n - up tp 3mW Customization: The models above are supply standards. WAN cards, VPN Accelerators, accelerators in general, VOIP or other devices may integrate the equipment according to project necessities and availability.

4 6. Small companies Minibox/Box Caracteristcs Simultaneous connections Connections per second (¹) UTM speed (http/http+av/https) (¹) Throughput (Mbps) (¹)(²) VPN Throughput (3DES/DES/AES/Blowfish) (Mbps) (¹)(²) OpenVPN Throughput (Blowfish) (Mbps) (¹)(²) IPS Throughput (Mbps) (¹)(²) Number of VPN tunnels(¹) on licensing Ips Roaming / VPN SSL Links balancing Usb (data / serial / 3G/4G) Serial (DB9/RJ4/compatible) LED activity (network, drive, On, Off) Network interface card RJ4 (10 / 100 / 1000) LAN RJ4 Bypass Network interface wireless card (A/B/G/N) Internal storage Power supply Replacement modules RAM memory Solid-state drive Power Supply Subscription options Subscription: Anti-Spam (ASM) Base IDS/IPS Base Web Content Filtering Base Antivirus Base Warranty and updates () Extended Warranty Firmware updates plan Dimensions Physical characteristics Height, Width, Length (cm) Weight (Kg) MTBF (Mean Time Between Failures) Maximum Consumption Operation Temperature Humidity (6) Model // /10/4/ Gb 4/6,/14, % - 9% Model // /10/4/ /6,/14, % - 9% 1-Maximum values obtained in laboratory with product optimization. Other variables such as traffic type or system usage type may alter these values. -Input and Output traffic are summed up. 3-Medium values as of products standard use. Greater simultaneous use of proxies may require greater memory values. 4-Software Licencing with mandatory annual renewal. -Maximum warranty limit of 36 months. 6-Regards only the software part of the product. 7-Wireless Module AP -.4/GHz 0.11a/b/g/n - up tp 3mW Customization: The models above are supply standards. WAN cards, VPN Accelerators, accelerators in general, VOIP or other devices may integrate the equipment according to project necessities and availability.

5 6. Mid-sized companies Box Caracteristics Simultaneous connections (¹) Connections per second (¹) UTM speed (http/http+av/https) (¹) Throughput (Mbps) (¹)(²) VPN Throughput (3DES/DES/AES/Blowfish) (Mbps) (¹)(²) OpenVPN Throughput (Blowfish) (Mbps) (¹)(²) IPS Throughput (Mbps) (¹)(²) Number of VPN tunnels(¹) Model /00/ /7/1.00/ Model /1.000/ /7/1.00/ Model /1.100/ /7/1.00/ Model /1.100/ /7/1.00/ Model /1.100/ /7/1.00/ on licensing Ips Roaming / VPN SSL Links balancing Report Usb (data / serial / 3G/4G) Serial (DB9/RJ4/compatible) LED activity (network, drive, On, Off) LCD Front Display Network interface card RJ4 (10 / 100 / 1000) Hard drive Power supply 4 30 Gb Automatic Internal 4 30 Gb Automatic Internal 4 30 Gb Automatic Internal 30 Gb Automatic Internal 30 Gb Automatic Internal Optional Modules (Expansion Slots) Slot 1 - Adicional (only one of the options below) AKHWMO Eight Interfaces Giga Rj4 Module AKHWMO Four Interfaces Giga SFP Module AKHWMO Two Interfaces 10 Giga SFP+ Module Replacement module RAM memory Solid-state drive Gb 0 Gb ou 40 Gb Gb 0 Gb ou 40 Gb Gb 0 Gb ou 40 Gb 16 Gb 0 Gb ou 40 Gb 16 Gb 0 Gb ou 40 Gb (4) Subscription options Subscription: Anti-Spam (ASM) Base IDS/IPS Base Web Content Filtering Base Antivirus Base Warranty and updates () Extended Warranty Firmware updates plan (6 Dimensions Physical characteristics Height, Width, Length (cm) Weight (Kg) MTBF (Mean Time Between Failures) Maximum Consumption Operation Temperature Humidity 4,4/43,/41, W % - 90% 4,4/43,/41, W % - 90% 4,4/43,/41, W % - 90% 1Uf or rack 19 4,4/43,/41, W % - 90% 4,4/43,/41, W % - 90% 1-Maximum values obtained in laboratory with product optimization. Other variables such as traffic type or system usage type may alter these values. -Input and Output traffic are summed up. 3-Medium values as of products standard use. Greater simultaneous use of proxies may require greater memory values. 4-Software Licencing with mandatory annual renewal. -Maximum warranty limit of 36 months. 6-Regards only the software part of the product. - Automatic internal power supply V / -60 Hz 10- Mini Gbic modules are included in the card acquisition - Mini GBIC Finisar RoHS-6 Compliant 1G/10G nm Multimode Datacom SFP+ Transceiver (FTLX71D3BCV). Customization: The models above are supply standards. WAN cards, VPN Accelerators, accelerators in general, VOIP or other devices may integrate the equipment according to project necessities and availability.

6 Enterprise 6. Box Caracteristics Simultaneous connections (¹) Connections per second (¹) UTM speed (http/http+av/https) (¹) Throughput (Mbps) (¹)(²) VPN Throughput (3DES/DES/AES/Blowfish) (Mbps) (¹)(²) OpenVPN Throughput (Blowfish) (Mbps) (¹)(²) IPS Throughput (Mbps) (¹)(²) Number of VPN tunnels(¹) on licensing Ips Roaming / VPN SSL Links balancing Report Usb (data / serial / 3G/4G) Serial (DB9/RJ4/compatible) LED activity (network, drive, On, Off) LCD Front Display Network interface card RJ4 (10 / 100 / 1000) Hard drive SSD Cooling system Power supply Optional Modules (Expansion Slots) Slot - Adicional (only one of the options below) AKHWMO Eight Interfaces Giga Rj4 Module AKHWMO Four Interfaces Giga SFP Module AKHWMO Two Interfaces 10 Giga SFP+ Module Extras Slots (Expansion Slots) Slot 1 - Additional (only one of the options below) Type 01 - VPN accelerator(3des/des/aes) Type 0 - VPN accelerator(3des/des/aes) Type 03 - VPN accelerator(3des/des/aes) Replacement modules Slot 1 - (only one of the options below) AKHWMO Four Interfaces Giga SFP Module AKHWMO Two Interfaces 10 Giga SFP+ Module (4) Subscription options Subscription: Anti-Spam (ASM) Base IDS/IPS Base Web Content Filtering Base Antivirus Base Warranty and updates () Extended Warranty Firmware updates plan Dimensions Physical characteristics Height, Width, Length (cm) Weight (Kg) MTBF (Mean Time Between Failures) Maximum Consumption Operation Temperature Humidity (6 Model /3.000/ /1.700/3.0/ Gb Automatic Internal, (9) Redundant/ Hot-Swapping 1.400/.000/ /.000/ /.000/ Gb 4,3/43,1/4, W % - 9% Model /3.000/ /1.700/3.0/ Gb Automatic Internal, Redundant/ Hot-Swapping (9) 1.400/.000/ /.000/ /.000/ Gb 4,3/43,1/4, W % - 9% 1-Maximum values obtained in laboratory with product optimization. Other variables such as traffic type or system usage type may alter these values. -Input and Output traffic are summed up. 3-Medium values as of products standard use. Greater simultaneous use of proxies may require greater memory values. 4-Software Licencing with mandatory annual renewal. -Maximum warranty limit of 36 months. 6-Regards only the software part of the product. 9- Automatic Internal, Redundant/ Hot-Swapp V / -60 Hz 10- Mini Gbic modules are included in the card acquisition - Mini GBIC Finisar RoHS-6 Compliant 1G/10G nm Multimode Datacom SFP+ Transceiver (FTLX71D3BCV). **(DPI/AV/IPS/HTTP/HTTPS/SSL) Customization: The models above are supply standards. WAN cards, VPN Accelerators, accelerators in general, VOIP or other devices may integrate the equipment according to project necessities and availability.

7 Enterprise 6. Box Caracteristics Simultaneous connections (¹) Connections per second (¹) UTM speed (http/http+av/https) (¹) Throughput (Mbps) (¹)(²) VPN Throughput (3DES/DES/AES/Blowfish) (Mbps) (¹)(²) IPS Throughput (Mbps) (¹)(²) Number of VPN tunnels(¹) Model /6.000/ /.40/.300/ Modelo /.000/ /.40/.300/ Modelo /.000/ /.40/.300/ on licensing Ips Roaming / VPN SSL Links balancing Report Usb (data / serial / 3G/4G) Serial (DB9/RJ4/compatible) LED activity (network, drive, On, Off) LCD Front Display IPMI.0 compliant Network interface card RJ4 (10 / 100 / 1000) Network interface card SFP+ 10Gbps Hard Drive Cooling system Power supply Optional Modules (Expansion Slots) Slot 1 - Adicional (only one of the options below) AKHWMO Eight Interfaces Giga Rj4 Module AKHWMO Four Interfaces Giga SFP Module AKHWMO Two Interfaces 10 Giga SFP+ Module Slot - Additional (only one of the options below) AKHWMO Four Interfaces Giga Rj4 Module AKHWMO Eight Interfaces Giga Rj4 Module AKHWMO Four Interfaces Giga SFP Module AKHWMO Two Interfaces 10 Giga SFP+ Module Slot 3 - Additional (only one of the options below) AKHWMO Four Interfaces Giga Rj4 Module AKHWMO Eight Interfaces Giga Rj4 Module AKHWMO Four Interfaces Giga SFP Module AKHWMO Two Interfaces 10 Giga SFP+ Module Slot 4 - Additional (only one of the options below) AKHWMO Four Interfaces Giga Rj4 Module AKHWMO Eight Interfaces Giga Rj4 Module AKHWMO Four Interfaces Giga SFP Module AKHWMO Two Interfaces 10 Giga SFP+ Module 16 x (1 Gb SSD) RAID 0,1 Redundant/Hot-Swapping Automatic Internal, Redundant/Hot-Swapping (9) 16 (11) Gb SSD Redundant/Hot-Swapping Automatic Internal, Redundant/Hot-Swapping (9) 16 (11) Gb SSD Redundant/Hot-Swapping Automatic Internal, Redundant/Hot-Swapping (9) Extras Slots (Expansion Slots) Slot 1 - Additional (only one of the options below) AKHWMO VPN Accelerator(3DES/DES/AES) Slot - Additional (only one of the options below) AKHWMO VPN Accelerator(3DES/DES/AES) Replacement modules (4) Subscription options Subscription: Anti-Spam (ASM) Base IDS/IPS Base Web Content Filtering Base Antivirus Base Warranty and updates () Extended Warranty Firmware updates plan Dimensions Physical characteristics Height, Width, Length (cm) Weight (Kg) MTBF (Mean Time Between Failures) Maximum Consumption Operation Temperature Humidity (6 4 Gb or 3 Gb/ 64 Gb or 96 Gb U for rack 19,77/44,4/ W % - % 6 Gb 4U for rack 19 17,6/43/6, ºC 10% - % 6 Gb 4U for rack 19 17,6/43/6, ºC 10% - % 1-Maximum values obtained in laboratory with product optimization. Other variables suchas traffic type or system usage type may alter these values. -Input and Output traffic are summed up. 3-Medium values as of products standard use. Greater simultaneous use of proxies may require greater memory values. 4-Software Licencing with mandatory annual renewal. -Maximum warranty limit of 36months. 6-Regards only the software part ofthe product. 9- Automatic Internal, Redundant/ Hot-Swapp V / -60 Hz 10- Mini Gbic modules are included in the card acquisition - Mini GBIC Finisar RoHS-6 Compliant 1G/10G nm Multimode Datacom SFP+ Transceiver (FTLX71D3BCV) Max 1 GbE Copper/Fiber ports **(DPI/AV/IPS/HTTP/HTTPS/SSL) Customization: The models above are supply standards. WAN cards, VPN Accelerators, accelerators in general, VOIP or other devices may integrate the equipment according to project necessities and availability.

8 Caracteristics Virtualização Number of supported VLANs (0.1q) Number of supported ALIAS Operation Modules Router/ Gateway Bridge NAT (Network Address Translation) NAPT/PAT (Network Address Port Translation) Virtual IP Users per port Routing RIP, RIPv, OSPF, BGP, RIP IPv6, OSPF Ipv6 Static routes Source IP and Destination IP/Port routes Multicast: DVMRP and PIM IPS IDS - IPS Signatures / Application Filter Basic Enterprise Automatic Update Protection against DoS and DDoS Protection against malformed packages Protection against malicious URL's Protection against network atacks Configured by zone Unicode decoding Protocol anomaly detection Encryption Manual Key, IKE v1 e v, PKI (X.9) Algorithm AES (1-bit, 6-bit), DES (6-bit), 3DES (16-bit), Blowfish (1-bit, 6-bit) Groups DH VPN Dynamic IP Star network topology (hub and spoke) Full Mesh Network topology PSEC Redundant VPN Gateways VPN - SSL / LTP / PPTP VPN Failover OpenVPN PSEC authentication S-1 / S- Md PKI Certificate requirements (PKCS 7 and 10) C.A. x9 supported Verisign CA Entrust CA Microsoft CA RSA Keon CA iplanet (Netscape) CA Baltimore CA DOD PKI CA ICP Brasil Traffic management Bandwidth limiting Traffic prioritization Mapping (DiffServ-DSCP)) 4096 per interface 30 per interface (Cooperative) Unrestricted / / (11) (11) 0,1,,3,4,,14,1,16,17,1 User authentication: Firewall /VPN Internal database RADIUS RSA SecurID LDAP Browser Windows NT/Microsoft AD Client Less Single Sign on Terminal Service/CITRIX ing H.A. (High availability) Cooperative (load balancing) Device failure detection Link failure detection System managment Remote Interface (Aker Control Center) Command Line Interface (Console) Secure Command Shell (SSH.0 ou +) SNMP (MIB II) Administration Multiple Administrators Administration user base Administrative Networks Administration Levels Updates, Correction and Backups Scheduling Log/Monitoring Syslog SNMP LogWatch WebTrends Local Antivirus module HTTP/HTTPS/FTP protection SMTP, POP3, IMAPprotection CIFS protection Automatic Update Heuristics Malware Signatures Kaspersky Clamav Multi-link Balanced (Different weight) Round-robin (Same weight) Persistent (Persistent connection) Enforced (Mandatory) Performace (Latency) Percentage (%) Other Caracteristics Licencing Anti-Spam (ASM) Web content filtering (AWCA - 7 categories ad 1 customized) Hierarchical caching - Web Filter URLs classification Deep Packet Inspection (DPI) Proxy Firewall Layer 7 protection Link Aggregation (0.1ax/0.3ad) WDS (Wireless Distribution System) WIDS (Wireless intrusion detection system) AP-Isolation DDNS (up to providers) Timeout by Service (External) (External) (External) (1) Per IP range (Optional) (Optional) Are minimal values pre-set, they may change to higher values by Aker or the user, according to the product usage. 1- IP ranges of 1 -, 6 -, 1-100, , 01-0, , , and unlimited. Supported protocol: ARP (RFC 6), TCP/IP (RFC 110), TCP (RFC 793), UDP (RFC 76), ICMP(RFC 76), IGMPv1, IGMPv, HTTP (RFC 616 and RFC 194), HTTPS (RFC 660), FTP (RFC 99), TFTP (RFC 73 and RFC 13), POP (RFC 937),POP3 (RFC 1939), IMAP (RFC 060 and RFC 31), SMTP (RFC 1), ECHO (RFC 6), SYSTAT, CRGEN, SSH (RFC 4716), TELNET (RFC 4), DNS (RCF 36, 36, 397, 349, 3491 and 344),WHOIS (RFC 134), NNTP (RFC 977), RADIUS (RFC 6 and RFC 66), NAT/NAPT (RFC 30), NAT Transversal (RFC 3947), GOPHER (RFC 1436), DCE, NETBIOS (RCF 1001 and 100), NAMP, GRE (RFC 74 and 170), SIP (RFC 361 and 36), H33,LDAP (RFC 1), MD (RFC 131), S1 (RFC 3174), DES, 3DES (RFC 337 and 11), BLOWFISH (RFC 41), AES (RFC 36 and 36), IKE v1 and v (RFC 409 and 4306), IPSEC (RFC 401), AH (RFC 40), ESP (RFC 406), RIPv1/RIPv (RFC 13/43), OSPF v1 and v (RFC 3), SNMP v.1, v. and v.3 (RFC 117), X.9 (RFC 60 and 30), NTP (RFC 9 and RFC 130), BGP (RFC 1771). Note: Some features are optionals. Consult your authorized reseller. Specifications contained in this folder may be altered without previous warning.

9 6. Screenshots 6. QoS Limiting and prioritizing your link's bandwidth. Aker Client Integrated authentication and roaming tool (VPN). VPN-SSL A strong encryption using the browser as Client (roaming). Server Balancing Transforming several servers into one virtual machine. Web Content Filter Filtering of undesired websites. Link Load Balancing Fault-tolerant mechanism with multiple links: 3G, ADSL and Failover and active clustering, up to 64 firewalls in parallel. ANTISPAM SPAM detection solution aker@aker.com.br

10 s 6. AKHWFM-00 MiniBox 37 Usb, 4 RJ4(10/100/1000), 1 Gb of RAM, HD 160 GB, Automatic External Power Supply., Roaming/VPN SSL,, links AKHWFM-003 MiniBox 37 W Usb, 4 RJ4(10/100/1000), 1 Wirelles A/B/G, 1 Gb of RAM, HD 160 GB, Automatic External Power Supply., Roaming/VPN SSL,, links balancing, report, WIDS. AKHWFM-004 MiniBox 337 Usb, 4 RJ4(10/100/1000), 1 Gb of RAM, HD 160 GB, Automatic External Power Supply., Roaming/VPN SSL,, links AKHWFM-00 MiniBox 337 W Usb, 4 RJ4(10/100/1000), 1 Wirelles A/B/G, 1 Gb of RAM, HD 160 GB, Automatic External Power Supply., Roaming/VPN SSL,, links balancing, report, WIDS. AKHWFBE-0093 Enterprise Box 437 Usb, 6 RJ4(10/100/1000), 1 Gb of RAM, HD 160 GB, Display frontal, Automatic External Power Supply., Roaming/VPN SSL,, links balancing, report. AKHWFM-04 Enterprise Box 37 Usb, 6 RJ4(10/100/1000), 4 Gb of RAM, HD 160 GB, Display frontal, Automatic External Power Supply., Roaming/VPN SSL,, links balancing, report. AKHWFBE-0 Enterprise Box 37 Usb, RJ4(10/100/1000), 4 Gb of RAM, HD 30 GB, Front Display, Automatic/Internal Power Supply., Roaming/VPN SSL,, links balancing, report. AKHWFBE-03 Enterprise Box 1137 Usb, RJ4(10/100/1000), 4 Gb of RAM, HD 30 GB, Front Display, Automatic/Internal Power Supply., Roaming/VPN SSL,, links AKHWFBE-04 Enterprise Box 137 Usb, RJ4(10/100/1000), 4 Gb of RAM, HD 30 GB, Front Display, Automatic/Internal Power Supply., Roaming/VPN SSL,, links AKHWFBE-0 Enterprise 3137 Usb, RJ4(10/100/1000), Gb of RAM, HD 30 GB, Front Display, Automatic/Internal Power Supply., Roaming/VPN SSL,, links AKHWFBE-06 Enterprise Box 137 Usb, RJ4(10/100/1000), Gb of RAM, HD 30 GB, Front Display, Automatic/Internal Power Supply., Roaming/VPN SSL,, links balancing, report. AKHWFBE-07 Enterprise Box 137 Usb, 4 RJ4(10/100/1000), Gb of RAM, HD 0 GB, Front Display, Automatic/Internal Redundant Power Supply., Roaming/VPN SSL,, links AKHWFBE-0 Enterprise Box 1137 Usb, 4 RJ4(10/100/1000), 16 Gb of RAM, HD 0 GB, Front Display, Automatic/Internal Redundant Power Supply., Roaming/VPN SSL,, links AKHWFBE-0101 Enterprise Box 0037 Usb, RJ4(10/100/1000), 16 SFP+, 16 Gb of RAM, HD 0 GB, Front Display, Automatic/Internal Redundant Power Supply., Roaming/VPN SSL,, links AKHWFBE-0330 Enterprise Box Usb, 16 RJ4(10/100/1000), 16 SFP+, 1 Gb of RAM, HD 0 GB, Front Display, Automatic/Internal Redundant Power Supply., Roaming/VPN SSL,, links AKHWFBE-033 Enterprise Box Usb, 16 RJ4(10/100/1000), 16 SFP+, 1 Gb of RAM, HD 0 GB, Front Display, Automatic/Internal Redundant Power Supply., Roaming/VPN SSL,, links