Products Center
Unified Security Firewall
VigorPro5500 |
|
|
1.
Anti-Virus
- Scan SMTP, POP3, HTTP, IMAP, FTP
- Scan ZIP / GZIP / BZIP2
- Scan encrypted VPN tunnels
- Automatic virus signature update
- Automatic alert when signature update
service expires
- Real-time e-mail/syslog alert when
virus is detected
|
2.
Anti-Intrusion
- Rule-based detection list
- Pass/block/reset when intrusion is
detected
- Automatic intrusion signature update
- Automatic alert when signature update
service expires
- Real-time e-mail/syslog alert when
under attack
|
3.
Dual-WAN
- Outbound Policy-Based Load-Balance
- BoD ( Bandwidth on Demand )
- WAN Connection Fail-over
|
4.
WAN Protocol
- DHCP Client
- Static IP
- PPPoE
- PPTP
- L2TP *
- BPA
|
5.
VPN
- Up to 200 VPN Tunnels
- Protocol : PPTP, IPSec, L2TP, L2TP
over IPSec
- Encryption : MPPE and Hardware-Based
AES / DES / 3DES
- Authentication : Hardware-Based
MD5, SHA-1
- IKE Authentication : Pre-Shared
Key and Digital Signature ( X.509
)
- LAN-to-LAN, Teleworker-to-LAN
- DHCP over IPSec
- NAT-Traversal ( NAT-T )
- Dead Peer Detection ( DPD )
- VPN Pass-Through
|
6.
Firewall Facilities
- SPI ( Stateful Packet Inspection
)
- CSM ( Content Security Management
) for IM/P2P Application
- Multi-NAT, DMZ Host, Port Redirection
and Open Port
- Policy-Based IP Packet Filter
- DoS / DDoS Prevention
- IP Address Anti-Spoofig
- E-Mail Alert and Logging via Syslog
- Bind IP to MAC Address
|
7.
Network Features
- DHCP Client / Relay / Server
- Dynamic DNS
- NTP Client
- Call Scheduling
- RADIUS Client
- DNS Cache/Proxy
- UPnP
- Port-ased VLAN
- Routing Protocol : Static Routing
, RIP V2
|
8.
Network Management
- Web-Based User Interface ( HTTP/
HTTPS )
- Quick Start Wizard
- CLI ( Command Line Interface, Telnet
/ SSH * )
- Administration Access Control
- Configuration Backup / Restore
- Built-in Diagnostic Function
- Firmware Upgrade via TFTP/FTP
- Logging via Syslog
- SNMP Management with MIB-II
|
9.
Content Filter
- URL Keyword Blocking ( White List
and Black List )
- Java Applet, Cookies, Active X,
Compressed, Executable, Multimedia
File Blocking
- Web Content Filter ( SurfControl
)
- Time Schedule Control
|
10.
Bandwidth Management
- Class-based Bandwidth Guarantee
by User-Defined Traffic categories
- DiffServ Code Point Classifying
- 4-level Priority for Each Direction
( Inbound / Outbound )
- Bandwidth Borrowed
- Bandwidth / Session Limitation
|
|
|
|
Technical
Specifications of VigorPro5500 |
| Hardware
Interface |
WAN |
2-port 10/100
Base-Tx Ethernet switch |
| LAN |
5-port 10/100/1000
Base-Tx Ethernet switch |
| Anti-Virus
|
Scan SMTP, POP3,
HTTP, IMAP, FTP |
| Automatic virus
signature update |
| Automatic alert
when signature update service expires
|
| Real-time e-mail/syslog
alert when virus is detected |
| Anti-Intrusion |
Rule-based detection
list |
| Pass/block/reset
when intrusion is detected |
| Automatic intrusion
signature update |
| Automatic alert
when signature update service expires
|
| Real-time e-mail/syslog
alert when under attack |
| QoS |
Class-based bandwidth
guarantee by user-defined traffic categories
|
| Support four priority-levels
|
| Support DiffServ
Codepoint classifying |
| Port-based rate
throttling capability |
| VPN |
Up to 200 VPN tunnels
|
| LAN-to-LAN, Teleworker-to-LAN
|
| Protocol |
PPTP |
| IPSec |
| L2TP |
| L2TP over IPSec |
| Encryption |
AES |
| MPPE and hardware-based |
| DES / 3DES |
| Authentication |
MD5 |
| SHA-1 |
| IKE
authentication |
Pre-shared key |
| Digital signature ( X.509
) |
| Firewall
Facilities |
IM/P2P blocking
|
| Multi-NAT, DMZ
host, port-redirect/open port |
| Rule-based packet
filtering |
| SPI ( Stateful Packet
Inspection ) |
| DoS/DDoS protection
|
| IP address anti-spoofing
|
| E-mail alert and
logging via syslog |
| Flexible
Web Filtering |
Block URL ( web-site
) by user-defined keywords |
| Preclude web surfing
from using directly IP address |
| Block automatic
download of Java applets and Active X
controls |
| Block web site cookies
and proxy |
| Block http downloads
of file type : Executable/Compressed/Multi-media
|
| Support time schedule
to control the restrictions and regular
Internet access |
| Web content filter
( SurfControl ) |
| Management |
Web-based user interface
( HTTP / HTTPS ) |
| Quick Start Wizard |
| CLI ( Command
Line Interface , Telnet ) |
| Administration access
control |
| Configuration backup
/ restore |
| Build-in diagnostic
function |
| Firmware upgrade
via TFTP / FTP |
| Syslog |
| SNMP management
MIB-II |
| Max. Power |
15 Watt |
| Dimension |
L273 * W166 * H44.6
( mm ) |
| Power |
AC 100~240V, 50/60Hz |
|
|
|
Legacy firewall devices have their limitations on networking protection and are often dedicated.
The vulnerabilities of contemporary networks ranging from Web surfing, e-mail, FTP, tovarious instant messaging
and P2P softwares, present a heavy burden for network administrators.
VigorPro5500, serving as UTM equipment of the new generation, can fulfill your requirements for secure networks.
|
| All-in-one Unified Security Firewall |
Conventional firewalls are blind to today's attacks, and also cannot detect inappropriate e-mail and Web
content. The most common solution is complex, costly collection of independent systems to deal with each
of these threats along with network-level intrusions and attacks. The VigorPro5500 is capable of providing
a complete complement of integrated services including :
Anti-Virus
Intrusion prevention
Intrusion detection
Web Content Filter ( power by SurfControl )
VPN
SPI Firewall
|
| Hardware-accelerated, Real-time
Response |
The VigorPro5500 employs a unique, hardware-accelerated
architecture the provides the ability to perform real-time
security without slowing critical network applications,
such as Web traffic. Software-based anti-virus systems,
which are designed for scanning non-real-time email
messages, are too slow to be used to scan Web traffic
or other real-time network applications.
|
| Network-level Protection |
Conventional way to protection against virus or
malicious program, it required each host to install
software on the host. To install software on a large
number of hosts is a time consuming process. To evaluate
for vulnerabilities, both scan engine and virus database
needs constant upgrade. It is very costly and annoying
for IT personnel with high maintenance. While VigorPro5500
works as firewall as well as internet gateway, so
by nature VigorPro5500 blocks any attacks at the point
of network entry. Through the user interface, the
security administrator can monitor and instruct the
VigorPro5500 to look for any vulnerability in network-level.
Provide protection of all hosts inside network edge
before threats intrude.
|
| Content-based Inline Inspection |
Conventional firewalls only inspect packets connection
behavior to against any connection-based attack. While
the content-based threats today. such as virus, worms,
Trojans or banned content, which spread faster and
do more damage. Conventional firewalls bypass the
widely spread content-based threat and expose internal
network to outside world. VigorPro5500 deploys DrayTek's
unique MSSI™ ( Multi-stack Stateful Inspection)
mechanism. With MSSI™ , VigorPro5500 inspects
packet streams, compares any suspected content or
behavior with build-in database in real-time, and
provide inline anti-virus and anti-intrusion protection.
|
| |
|
|
|
Page last modified : 07 November 2010 |