Shop

Interfaces

• 6 ports 10/100/1000Base-T

• 2 USB 2.0 ports¹

• Console port with mini-USB connector

Indicators

• Power

• Link/Activity/Speed (per port)

Buttons

• Reset Button

• Button for power on/off

Power connector

• Connector for power supply (alternating current)

Performance²

Firewall Throughput³

• 4 GB/s

VPN bandwidth⁴

• 1 GB/s

IPS throughput⁵

• 450 Mbps

Anti-virus throughput⁵

• 600 Mbps

Bandwidth control function applications⁵

• 700 Mbps

Max. number of parallel sessions

• 500 000000

How many new sessions per second

• 45 000000

Firewall policy

• 2000

Network

Type of Internet connection

• Static/dynamic IP address

• PPPoE/PPTP/L2TP

• Russia PPTP/L2TP (Dual Access)

• Russia PPPoE (Dual Access)

Firewall

• NAT, PAT

• Dynamic Routing Protocol: OSPFv2

• Application Layer Gateway

-HTTP

-FTP

-H. 323

-POP3

-SMTP

-SIP

-TFTP

-TLS 1.0 (RFC2246)

• Transparent mode (Transparent mode)

• H. 323 NAT Traversal

• Policy on a schedule

• Active network security ZoneDefense

• Authentication: the local database, RADIUS, Microsoft Active Directory, LDAP,

Network features

• DHCP Server/client

• DHCP Relay

• IP Multicast: IGMPv3

• IPv6

• Policy-based Routing

• IEEE 802 .1Q VLAN: up to 128 VLAN

• Channel Aggregation

Load balancing

• Balancing outgoing traffic

• Server load balancing

• Traffic redirection when Cliff channel (failover)

High Availability (HA)

• WAN channel Reservation

• Device failure Detection

• Sync sessions FW/VPN

• Active/Passive Mode

• Identification of breakage of the channel

A virtual private network (VPN)

• VPN tunnels: 200

• The method of encryption: DES

• IKE/IKEv2

• Redundant IPSec VPN gateway

• Hub and Spoke

• IPSec NAT Traversal

• Detect inactive nodes

• Server/client PPTP/L2TP

• SSL VPN⁶

• GRE

Intrusion detection and Prevention System (IDP/IPS) ⁷

• 12-month subscription to the service

• Automatic updating templates

• Protection against DoS, DDoS

• Warning about attacks by email

• IP blacklist (threshold or IDP/IPS)

• Extended IDP/IPS subscription (sold separately)

Content filtering ⁷

• 12-month subscription to the service

• Type of HTTP/HTTPS: white/black list URL

• Configure the list of prohibited Web pages

• The maximum size of the file

• SafeSearch Enforcement⁸

• Filtering based on the types of scripts: Java applets, JavaScript, VBScript, ActiveX, cookies

Anti-virus protection ⁷

• 12-month subscription to the service

• Real-time scanning

• Anti-virus scanning for HTTP, FTP, SMTP, POP3, IMAP

• Streaming scan

• Anti-virus protection of a virtual private network (VPN)

• Scan compressed files ZIP/GZIP up to 10 levels of nesting

• Signature Provider: Kaspersky

Managing applications ⁷

• 12-month subscription to the service

• Support 1000 + recognized applications

• Office for the schedule and on the basis of the rules of

• Application bandwidth management, policy management and prioritization

The security of e-mail

• Support for SMTP, POP3, IMAP

• White/black list by file type

• Filtering of e-mail addresses: black list of senders/recipients to exceptions list

• Check the extension and MIME type of the file

• Antispam

Office

Bandwidth management

• Guaranteed bandwidth

• Bandwidth based on priority

• Dynamic bandwidth allocation

• Maximum bandwidth

• Bandwidth management in VPN tunnel

• Traffic shaping on a schedule

• Policy-based Traffic shaping

• IDP traffic shaping

System management

• The Setup Wizard

• Command line interface (CLI)

• SNMP v1/v2c

• Email notifications

• Web interface (HTTP/HTTPS)

• Secure Shell (SSH)

• System log

• Monitor performance in real time

Physical parameters

Dimensions (l x w x h)

• 278 x 183 x 44 mm

Weight

• 1.7 kg

Operating conditions

Nutrition

• 100-240 VAC, internal power supply

Max. power consumption

• 20 W

MTBF (hours)

• 374 681

Temperature

• Operating: 0 to 40° c

• Storage: -20 up to 70° c

Humidity

• Operating: 5% to 95% non-condensing

• Storage: 5% to 95% non-condensing

Delivery Kit

• Firewall DFL-870

• Power cord

• Ethernet cable

• Console cable with mini-USB connectors and USB

• Kit for installation in 19-inch rack

• Quick install guide

Miscellaneous

EMI

• FCC Class A

• CE Class A

• VCCI

Security

• LVD (EN60950-1)