Mô tả sản phẩm: Draytek VigorPro 5510 UTM Firewall
VigorPro 5510 - Specification
Security Features :
- Security Firewall with dedicated UTM Co-Processor
- Unified Threat Management:
- Scans in realtime (no proxy) including inside compressed files
- Scan's inbound and outbound data packets and cross-packet boundary scanning
- Anti-Virus - Scanning of recognised signatures of viruses and trojans
- Anti-Spam - Detects incoming spam email received via POP3, IMAP or SMTP
- Intrusion Detection featuring DrayTek's MSSI™ (Multi-Stack Stateful Inspection)
- DoS (Denial of Service) and DDoS Attack Blocking and Detection
- Stateful Packet Inspection
- Deep Packet Inspection
- Blocking of non-HTTP content on Port 80 (switchable)
- DrayTek MSSI™ (Multi-Stack Stateful Scanning)
- IDP - Inline Intrusion Detection System
- Unlimited File Size scanning
- Rule-Based Packet Filtering
- Selectable Web Content Filtering:
- Web URL Keyword Filtering - Blacklist or Whitelist of web site URLs
- Block Browsing by IP Address
- Blocking download of Java applets and ActiveX controls
- Blocking of web site cookies
- Block http downloads of file types :
- Binary Executable : .EXE / .COM / .BAT / .SCR / .PIF
- Compressed : .ZIP / .SIT / .ARC / .CAB/. ARJ / .RAR
- Multimedia : .MOV / .MP3 / .MPEG / .MPG / .WMV / .WAV / .RAM / .RA / .RM / .AVI / .AU
- Time Schedules for enabling/disabling the content restrictions
- Block P2P (Peer-to-Peer) file sharing programs
- Block Instant Messaging programs (e.g. ICQ, MSN/Yahoo Messenger)
- Parental Control using Surfcontrol™ Database - block/allow specific web categories, for example block adult or uncategorised sites from your workplace or home.
- Logging of Web Activity to Syslog for audit trail purposes
- Automatic Emailing to Administrator of detected/foiled attacks/threats
- Secure (SSL) Local & Remote Management and Status monitoring
- Ethernet Port Mirroring for Sniffing/Diagnostic (VigorPro 5510 only)
Connectivity Features
- Firewall Throughput up to 90Mb/s (VigorPro 5510) 60Mb/s (VigorPro 5300)
- VPN Throughput up to 50Mb/s (VigorPro 5510) 40Mb/s (VigorPro 5300)
- Twin-WAN Ports:
- Load-balancing - Connect two broadband feeds and distribute your traffic between them either automatically or according to your chosen rule-set.
- Redundant failover - switch to secondary feed when primary fails
- Bandwidth-on-Demand (BoD)- use secondary WAN based on demand
- Ethernet LAN ports with auto-crossover/uplink
- Four Flexible LAN ports:
- VLAN - Segement ports into inclusive or exclusive groups
- Five Gigabit Ethernet LAN Ports (VigorPro5510 only)
- Four 10/100BaseT Ethernet LAN Ports (Vigor 5300)
- 10/100BaseT with auto-crossover/uplink
VPN Features
- Up to 200 simultaneous VPN tunnels ( VigorPro5510 only )
- Dial-in or dial-out, LAN-to-LAN or Teleworker-to-LAN
- Protocol support for PPTP, L2TP, IPSec, L2TP over IPSec
- MD-5 & SHA-1 Authentication (Hardware processed)
- Encryption : MPPE, DES/3DES & AES
- PFS (Perfect Forward Secrecy)
- Pre-shared/IKE keying and PKI (X.509) certificate support
- IKE Phase 1 Agressive/Standard Modes & Phase 2 Selectable lifetimes
- Radius Support for dial-in teleworker profiles
- Compatible with other leading 3rd party vendor VPN devices
Quality of Service Assurance
- Guarantee Available bandwidth for priority services
- For example, ensure VoIP traffic always has bandwidth available
- Class-based policy by user-defined traffic categories
- Support for DiffServ™ CodePoint classifying
