| Recommended for: |
|
•
|
Networks with mobile and remote workers |
•
|
Complementary VPN endpoint for Secure Computing TSP and Classic Family appliances |
|
•
|
Branch office VPN endpoint |
•
|
Suitable for routing ADSL and Cable up to T1, DS1 and E1 |
|
•
|
Central VPN for small multi-site networks |
•
|
Suitable for VPN up to 30Mbps (broadband and LAN-to-LAN) |
| • |
Small branch offices |
|
|
 A powerful stateful-inspection firewall, service-based intrusion detection blocking and advanced Internet connection sharing protect the branch office network from the Internet. The SG560 provides three security zones (DMZ, Guest, and LAN) on separate Ethernet segments.These have appropriate default security policies. The DMZ segment can be used for publicly accessible servers (e-mail, file download etc.) the Guest segment enables mobile staff or visitors to have general Internet access only, while the LAN segment connects the entire office network. These security zones can be reconfigured as required. For example, if only one WAN connection is in use, the other can be configured as a fourth security zone.
The SnapGear SG560 is also a cost-effective VPN endpoint device that can safely connect a remote office to a central office network using secure, industry-standard VPN access methods (IPSec, PPTP, L2TP) with hardware-accelerated encryption.
 The SnapGear SG560 is complementary to the SG710 and SG710+ firewall/VPN appliances for mid- to large-scale branch office to head office VPN deployments. For small multi-site VPN deployments, the SG560 provides a cost-effective head office solution thanks to its encryption acceleration and expanded internal resources. In this deployment scenario, an SG300 will typically be installed as the VPN endpoint device at the remote office locations. Mobile and remote workers can also gain access to the central location across the Internet by using an SG300 device or using VPN client software.
| Features |
|
- Steel casing for SME environments
- IPSec, L2TP & PPTP VPN client and server
- Link fail -over & load balancing
- Fully interoperable with CyberGuard appliances and other standards-based security devices
- DMZ, Guest and LAN security zones
- No per-user licensing or restrictions
- Web management console
- No third-party client software required
- Central management with Global Command Center
VPN - IPSec
- VPNC-certified interoperability
- Peer-to-peer (initiate and terminate)
- ESP and AH payloads
- Supports aggressive mode
- Dead peer detection
- Compression (deflate / gzip type algorithm)
- DES 56-bit, 3DES 168-bit, AES 256-bit encryption
- Hashes HMAC - MD5 and SHA-1 authentication
- IKE/ISAKMP Diffie-Hellman key exchange
- Diffie-Hellman Groups (1,2,5) and Oakley Groups (14,15,16) to 4096-bits
- X.509 certificates DER, PEM formats
- Pre-shared secrets
- Dynamic IP address endpoints
- Dynamic DNS IPSec support
- Authentication up to 2048-bit for RSA key signatures
- Multiple subnets
- NAT traversal
- Up to 100 IPSec tunnels
- 30 Mbps IPSec 3DES(VPN/firewall)
- 35 Mbps IPSec AES (VPN/firewall) VPN - L2TP
- IPSec config Wizard
- L2TP over IPSec
- Autonomous L2TP
- Client: NAT, default route via L2TP
- Server: specify client IP address range VPN - PPTP
- v2 client and server
- Pass-through mode also
- MPPE 40 to 128-bit RC4 encryption
- PAP/CHAP/MS CHAPv2 authentication
- L2TP & GRE tunneling extensions
- Up to 10 PPTP client tunnels
- Up to 20 PPTP server tunnels
- Up to 7 Mbps RC4 throughput
Firewall
- Dynamic stateful inspection firewall
- ICSA-certified
- NAT - static and dynamic
- NAPT/PAT - port forwarding
- Connection sharing
- Anti-intrusion
- 120 Mbps firewall performance
|
Network
- Traffic shaping (QoS)
- IP aliases
- DHCP - client and server
- PPPoE (for ADSL support)
- Bridging (802.1d)
- RIP, RIPv2
- RAS (dial-in)
- Dial on demand
- Fail-over / high availability (req v3.0 firmware)
- DNS enhanced caching, masquerading, proxy, multiple DNS server proxying
- 120 Mbps routed throughput
- 110 Mbps PPPoE throughput
Management
- Logging (local and remote)
- NTP client and server
- Web management
- CLI (Telnet) management
- Initial set-up via either static IP address or dynamic IP address (DHCP client)
- Administration user accounts
- RADIUS / TACACS+
Hardware
- Status LEDs
- WAN port - 1x10/100BaseT
- LAN ports - 4x10/100BaseT - WAN2, DMZ, Guest, LAN
- Serial ports - 1 (dial-in, or dial-on-demand)
- Memory - 8MB Flash, 16MB RAM
- Real-time clock
- Power - 5V 1.5A
- Weight - 1lb (500g)
- Dimensions - 6.5"x4.5"x1" (168mmx115mmx26mm)
- Operating temperature 0C to 40C
- Storage temperature -20C to 70C
- Humidity 0 to 95%, non-condensing
- Certification - home and office
- Warranty - 1 year*, optional Extended Four Year Warranty
|
|
