optional Features

Firewall and Router

·  Stateful Packet Inspection (SPI)

·  GeoIP blocking

·  Anti-Spoofing

·  Time based rules

·  Connection limits

·  Dynamic DNS

·  Reverse proxy

·  Captive portal guest network

·  Supports concurrent IPv4 and IPv6

·  NAT mapping (inbound/outbound)

·  VLAN support (802.1q)

·  Configurable static routing

·  IPv6 network prefix translation

·  IPv6 router advertisements

·  Multiple IP addresses per interface

·  DHCP server

·  DNS forwarding

·  Wake-on-LAN

·  PPPoE Server

VPN

·                     IPsec and OpenVPN

·                     Site-to-site and remote access VPN support

·                     SSL encryption

·                     VPN client for multiple operating systems

·                     L2TP/IPsec for mobile devices

·                     Multi-WAN for failover

·                     IPv6 support

·                     Split tunneling

·                     Multiple tunnels

·                     VPN tunnel failover

·                     NAT support

·                     Automatic or custom routing

·                     Local user authentication or RADIUS/LDAP

Intrusion Prevention System

·                     Snort-based packet analyzer

·                     Layer 7 application detection

·                     Multiple rules sources and categories

·                     Emerging threats database

·                     IP blacklist database

·                     Pre-set rule profiles

·                     Per-interface configuration

·                     Suppressing false positive alerts

·                     Deep Packet Inspection (DPI)

·                     Optional open-source packages for application blocking

Enterprise Reliability

·  Optional multi-node High Availability Clustering

·  Multi-WAN load balancing

·  Automatic connection failover

·  Bandwidth throttling

·  Traffic shaping wizard

·  Reserve or restrict bandwidth based on traffic priority

·  Fair sharing bandwidth

·  User data transfer quotas

User Authentication

·  Local user and group database

·  User and group-based privileges

·  Optional automatic account expiration

·  External RADIUS and AAA authentication

·  Automatic lockout after repeated attempts

Proxy and Content Filtering

·  HTTP and HTTPS proxy

·  Non Transparent or Transparent caching proxy

·  Domain/URL filtering

·  Anti-virus filtering

·  SafeSearch for search engines

·  HTTPS URL and content screening

·  Website access reporting

·  Domain Name blacklisting (DNSBL)

·  Usage reporting for daily, monthly, etc.

·  HTTP and HTTPS proxy

·  Non Transparent or Transparent caching proxy

·  Domain/URL filtering

·  Anti-virus filtering

·  SafeSearch for search engines

·  HTTPS URL and content screening

·  Website access reporting

·  Domain Name blacklisting (DNSBL)

·  Usage reporting for daily, monthly, etc.

WIFI Access Controller

·  Supports IETF.

·  Can work as  a WIFI Gateway.

·  Support > 25000 clients.

·  Scalable.

·  Support 802.11e

·  WPA/WPA2/WEP encryption

·  Captive portal support.

·  Support dynamic VLAN Assignment.

·  Support active/standby connection to network elements.

·  Support LACP.

·  Management and Maintenance support: AP grup configuration and auto-upgrade,

·  Multilevel user login, HTTPS based web management, SSH/Tenet/Console based CLI

·  Mutual discovery and authentication with APs.

Administration

Configuration

·  Web-based configuration

·  Setup wizard for initial configuration

·  Remote web-based administration

·  Cloud Manager administration

·  Customizable dashboard

·  Easy configuration backup/restore

·  Configuration export/import

·  Encrypted automatic backup to Galgus server

·  Variable level administrative rights

·  Multi-language support

·  Simple updates

·  Forward-compatible configuration

·  Serial console for shell access and recovery options

System Security

·  Web interface security protection

·  CSRF protection

·  HTTP Referer enforcement

·  DNS Rebinding protection

·  HTTP Strict Transport Security

·  Frame protection

·  Optional key-based SSH access

Reporting & Monitoring

·  Dashboard with configurable widgets

·  Local logging

·  Remote logging

·  Local monitoring graphs

·  Real-time interface traffic graphs

·  SNMP monitoring

·  Notifications via web interface, SMTP, or Growl

·  Hardware monitoring
·  Networking diagnostic tools

Specifications