Вижте каталожна информация!

Вижте каталожна информация!
SG-4800
Gigabit SSL VPN Security Router
As Internet becomes essential for business, the crucial solution to prevent your
Internet connection from failure is to have more than one connection. PLANET
SG-4800 is the Gigabit SSL VPN Security Router ideal to help the SMBs
increase the broadband network performance and reduce the risks of potential
shutdown if one of the Internet connections fails. The SG-4800 can monitor
each WAN link status and automatically activate backup links when a failure is
detected. The detection is based on the configurable target Internet addresses.
Network Efficiency Improvement with Load-Balancing
The SG-4800 allows you to perform load-balancing by distributing the traffic through three or four WAN connections. In Outbound Load Balancing, the
network sessions are assigned based on the user configurable load balancing mode, including “Auto Load Balance”, “Unbinding WAN Balance” and “Strategy
Routing”. Users can also configure which IP or TCP/UDP type of traffic use which WAN port to connect. The Inbound Load Balancing is for enterprise’s internal
server to reduce the server loading and the risks of system crash so that the SG-4800 helps to improve the server working efficiency.
Strong Protection for Network Security
In addition to providing Multi-Homing functions, the SG-4800 Gigabit SSL VPN Security Router integrates a complete security solution in one box. It provides
the policy-based firewall, content filtering function and VPN connectivity including SSL, IPSec, and PPTP VPN. The SSL VPN function supports up to 60 SSL
VPN connection tunnels. The IPSec VPN feature provides with 3DES and AES encryption make it a perfect product for your network security. By applying the
SG-4800, there is no need of integrating different security products on the network and worry free from complicated connections and settings.
QoS Bandwidth Management
Besides offering easy yet powerful bandwidth management functions, the SG-4800 features Smart QoS with dynamic bandwidth management to automatically
control P2P, video downloading and other bandwidth hogging in order to avoid bandwidth insufficiency. It helps the network administrators better allocate
network resources based on business priorities, as well as to shape and control bandwidth usage by prioritizing different persons/groups or applications.
Easy Remote Management
The SG-4800 provides embedded Mirror Port to connect with the monitoring devices for online behavior monitoring. It also supports secure remote
management via web browser with protection of user authentication.
Key Features
Physical Port
Firewall Security
•• 8 x 10/100/1000 Base-T RJ-45, configurable with LAN 1 (Mirror
Port)
•• Stateful Packet Inspection (SPI) Firewall
•• 4 x 10/100/1000 Base-T RJ-45 WAN port
•• 1 x 10/100/1000 Base-T RJ-45 DMZ port
•• Denial of Service (DoS) prevention
•• IP & Port filtering
•• Block Website by Keyword, Content Filter
Multi-WAN Function
•• Firewall detection: Ping of Death, SYN Flooding, Land attack, IP
Spoofing
•• Inbound / Outbound Load Balance: by session and by IP
•• Supports DMZ Host to protect your network
•• Bandwidth expansion with 4 Gigabit WAN ports
•• Prevents ARP Attack on LAN
•• Multi-WAN auto line backup
IP Routing feature
VPN Feature
•• Dynamic Route RIP v1/v2
•• Configure Concurrent Tunnels: 200 IPSec + 60 PPTP + 60 SSL
VPN or other combinations within the memory’s limitation
•• Static Route
•• IPSec, PPTP and L2TP Pass through
•• Strategy Routing
•• Supports IPSec
–– IPSec Hardware acceleration
Bandwidth Management
•• Guaranteed Bandwidth
•• Max. Bandwidth
•• Session Limit
•• Port-Based QoS
Data Sheet
1
–– IPSec Encryption DES / 3DES / AES128 / AES192 / AES256
–– IPSec Authentication MD5 / SHA1
–– VPN Hub
SG-4800
•• Supports SSL VPN
•• PPPoE / Static IP / DHCP Client
–– 10 full set SSL VPN tunnel / 50 Virtual Passage SSL VPN Client
•• Protocol: TCP/IP, ARP, ICMP, FTP/TFTP, IPv4, IPv6
–– Remote Desktop Access
•• NAT with port forwarding (Virtual Server)
–– Terminal Access: Telnet, SSH
•• DNS Relay
•• DDNS: supports DynDNS, 3322
–– Authentication: Radius, LDAP, Microsoft Active Directory and NT
Domain Name
•• Password protected configuration or management sessions for
web access
–– SSL Encryptions: 128bit SHA1 (DES-CBC-SHA)
•• Port Management – Speed / Duplex / Auto Negotiation / VLAN
–– Certificate Server: RSA, PKI, Digital Certificate
•• Transparent Bridge
–– Host Check: Virus Scan, Personal Firewalls, OS Patch
Network Management
–– Logging and monitoring: Syslog logging of SSL VPN events by
user, service and type of event
•• Comprehensive web based management and policy setting
•• SNMP v1/v2c
Networking
•• Monitoring, Logging, and Alarms of system activities
•• DHCP Server (supports class C), client, dynamic IP, static IP, IP
Grouping support
•• Firmware upgrade through Web browser
•• Multiple DHCP Servers support multiple Subnet (supports 4 sets
of Class C)
Applications
PLANET Multi-Homing VPN Security Router, SG-4800 has the powerful firewall functions including SPI Firewall DoS prevention, IPSec and PPTP VPN
solutions. The SG-4800 provides a flexible way of secured data communication for Branches, Venders, and/or mobile workers to connect to the
corporate headquarter.
Vendor
Branch Offices
Firewall Gateway
Firewall Gateway
PC
ADSL
IPSec VPN Tunnel
IPSec VPN Tunnel
PC Group
ADSL
Modem
Modem
Internet
VDSL2
N
Access Point
Laptop
ADSL
VDSL2
Modem
Modem
Firewall
Firewall
SSL VPN Tunnel
PC
PPTP VPN Tunnel
Web-Server
PC
SG-4800
DMZ
Mail-Server
Action Office
PC
Finance-Server
Mobile Office
Headquarters
ADSL 2/2+
ADSL
VDSL2
VDSL2
100Base-TX UTP
1000Base-T UTP
N
Data Sheet
2
2.4GHz 802.11n
PLANET Technology Corporation
11F, No. 96, Min Chuan Road, Hsin Tien, Taipei, Taiwan, R.O.C.
Tel: 886-2-2219-9518 Fax: 886-2-2219-9528
Email: [email protected] www.planet.com.tw
VoIP Gateway: vip.planet.com.tw
PLANET reserves the right to change specifications without prior notice. All brand names and trademarks are property of
their respective owners. Copyright © 2008 PLANET Technology Corp. All rights reserved.
SG-4800
The SG-4800 can connect the multiple WANs by different ISPs. It can create a stable and qualified VPN connection for many important applications
such as VoIP, Video Conference and data transmission.
Branch Office
Lobby
Fisheye IP Camera
Computer Room
Meeting Room
PSTN
PoE
FAX
PC Group
NVR
PoE
H.264 IP Camera
Switch
Phone
PoE
SG-4800
Modem
VPN Tunnel
Modem
ISP1
VoIP Gateway
PoE Switch
ISP2
VPN Tunnel
Internet
ISP3
Headquarters
Modem
ISP4
SG-4800
Modem
Core Switch
PBX
VoIP Gateway
Switch
CMS
DMZ
Phone
PSTN
Management
FAX
Office
Security Center
100Base-TX UTP
1000Base-T UTP
Data Sheet
3
Web or Mail Server
Central
Telephone wire
PoE
100Base-TX UTP with PoE
PLANET Technology Corporation
11F, No. 96, Min Chuan Road, Hsin Tien, Taipei, Taiwan, R.O.C.
Tel: 886-2-2219-9518 Fax: 886-2-2219-9528
Email: [email protected] www.planet.com.tw
VoIP Gateway: vip.planet.com.tw
01-08
C-POE-100SK
PLANET reserves the right to change specifications without prior notice. All brand names and trademarks are property of
their respective owners. Copyright © 2008 PLANET Technology Corp. All rights reserved.
SG-4800
Specification
Product
Gigabit SSL VPN Security Router
Model
Hardware
SG-4800
Ethernet
Button
LAN
WAN
DMZ
Reset
Power
Operating Environment
Dimension (W x D x H)
Power
Regulatory
Software
Multi-WAN Function
Inbound / Outbound Load Balance: by session and by IP
Protocol Binding
Network Service Detection
Routing
Dynamic Route RIP v1/v2
Static Route
System Performance
Bandwidth Management
Networking
Network Management
Data Sheet
Concurrent session: 50000
Firewall performance: 1Gbps
Corporation Size: SMB (clients 200~250)
3DES performance: 270Mbps
Guaranteed Bandwidth
Max Bandwidth
Session Limit
Port-Based QoS
NAT
One-to-One NAT
Multiple-to-One NAT
Stateful Packet Inspection (SPI) Firewall
Denial of Service (DoS) prevention
IP & Port filtering
Block Website by Keyword, Content Filter
Firewall detection: Ping of Death, SYN Flooding, Land attack, IP Spoofing
Email Alert for Hacker Attack
IP&MAC Binding
Supports DMZ Host to protect your network
Prevents ARP Attack on LAN
Firewall Security
4
8 x 10/100/1000Mbps RJ-45
4 x 10/100/1000Mbps RJ-45
1 x 10/100/1000Mbps RJ-45
1 x Reset button for factory default settings
1 x Power on/off switch
Temperature:
0 ~ 50 Degree C
Relative Humidity: 10~85% (non-condensing)
440 x 254 x 43.5 mm
100~240V AC, 50~60 Hz, max 0.8A
FCC Class A, CE
Configurable DMZ
DHCP Server (supports class C), client, dynamic IP, static IP, IP Grouping support
Multiple DHCP Server (supports 4 sets of Class C)
PPPoE / Static IP / DHCP Client
Multiple Subnet
Protocol: TCP/IP, ARP, ICMP, FTP/TFTP, IPv4, IPv6
NAT with port forwarding (Virtual Server)
DNS Relay
DDNS: Supports DynDNS, 3322
Password protected configuration or management sessions for web access
Port Management – Speed / Duplex / Auto Negotiation / VLAN
Transparent Bridge
Comprehensive web based management and policy setting
SNMP v1/v2c
Monitoring, Logging, and Alarms of system activities
Firmware upgrade through Web browser
PLANET Technology Corporation
11F, No. 96, Min Chuan Road, Hsin Tien, Taipei, Taiwan, R.O.C.
Tel: 886-2-2219-9518 Fax: 886-2-2219-9528
Email: [email protected] www.planet.com.tw
VoIP Gateway: vip.planet.com.tw
01-08
C-POE-100SK
PLANET reserves the right to change specifications without prior notice. All brand names and trademarks are property of
their respective owners. Copyright © 2008 PLANET Technology Corp. All rights reserved.
SG-4800
Network Management
PPTP VPN
IPSec VPN
Comprehensive web based management and policy setting
SNMP v1/v2c
Monitoring, Logging, and Alarms of system activities
Firmware upgrade through Web browser
60 PPTP VPN Tunnels
200 IPSec VPN Tunnels
IPSec Hardware acceleration
Up to 2 Group VPNs support
Friendly VPN Tunnel Management
IKE: Pre-Shared keys
IPSec Encryption DES / 3DES / AES128 / AES192 / AES256
IPSec Authentication MD5 / SHA1
Supports PMTU
NAT Traversal
Connects on Demand
DPD detection
VPN Hub
IP by DNS Resolved
View Log
10 full set SSL VPN tunnel / 50 Virtual Passage SSL VPN Client
SSL Hardware acceleration
Remote Desktop Access
HTTP and HTTPs Proxy
FTP and Windows Network File Sharing
Terminal Access: Telnet, SSH
Authentication: Radius, LDAP, Microsoft Active Directory and NT Domain Name
Platform supports Windows / Linux / MAC
SSL Encryptions: 128bit SHA1 (DES-CBC-SHA)
Encrypted cookies
Web cache cleaner
Certificate Server: RSA, PKI, Digital Certificate
Host Check: Virus Scan, Personal Firewalls, OS Patch
Role based management
Access Policy Management
Logging and monitoring: Syslog logging of SSL VPN events by user, service and type of event
Customized User Portal: Allows Portal Layout, Available Services to be customized
Single sign-on: Allows Single Sign-On for accessing multiple private network resources
Group and Global Bookmark Support: Enables users to access resources without needing to
remember hostnames or IP addresses
■ Tunnel quantity upgrade mechanism
■
■
■
■
■
■
■
■
■
■
■
■
■
■
■
■
■
■
■
VPN
Support
SSL VPN
VPN Pass through IPSec, PPTP, L2TP Pass through
Ordering Information
SG-4800
Gigabit SSL VPN Security Router
Related Products
VRT-311S
Broadband VPN Router
VRT-402N
VRT-420N
MH-3400
SG-1000
CS-1000
CS-2001
802.11n Wireless VPN/Firewall Router
802.11n Multi-Homing Broadband Router
Gigabit Multi-Homing VPN Security Router
VPN Security Gateway
Multi-Homing Content Security Gateway
UTM Content Security Gateway
Data Sheet
5
05-12
PLANET Technology Corporation
11F., No.96, Minquan Rd., Xindian Dist., New Taipei City 231,
Taiwan (R.O.C.)
Tel: 886-2-2219-9518 Fax: 886-2-2219-9528
Email: [email protected] www.planet.com.tw
C-SG-4800
PLANET reserves the right to change specifications without prior notice. All brand names and trademarks are property of
their respective owners. Copyright © 2012 PLANET Technology Corp. All rights reserved.
Was this manual useful for you? yes no
Thank you for your participation!

* Your assessment is very important for improving the work of artificial intelligence, which forms the content of this project

Download PDF

advertisement