Advanced state full firewall integrated with L7 application control, intrusion prevention, SSLVPN, IPSec VPN, web filtering, users authentication functionalities.
Shield UTM appliances comes with four 1Gbps LAN ports & two 1Gbps WAN ports, one auxiliary console port & One USB port.
Firewall
- State full firewall with connections tracking capabilities
- Dynamic/static NAT, port forwarding
- Prevention of DOS, DDOS & IP spoofing
- Bandwidth control
- Multicast forwarding
- TCP syn cookies
- MAC filtering
- QOS/diffserv marking
- Content filtering - Blocking java/activeX/proxy/cookies
- L7 application control with 70+ protocols support
- Transparent firewall/routed firewall mode
- Use of policy objects for firewall/NAT policies configuration
- Support for multiple firewall zones & zone based security policies
Intrusion Prevention System (IPS)
- Snort 2.9 based intrusion prevention enabling both signature based detection and detailed protocol decoders.
- Support for automatic signature updates
- Support for custom signatures with intuitive signature configuration wizard
- Supporting the signatures from emerging threats/snort VRT
SSLVPN
- OpenVPN based SSLVPN solution - Access gateway mode & P2P mode support
- Locally managed SSLVPN client profiles
- Two factor authentication enabling password/certificates based authentication for SSLVPN clients
- Use of pre shared keys/certificates for P2P authentication
- TCP/UDP based tunnels
- AES/DES/BF/CAST5/RC2 encryption
- Traffic compression
- Tunnel all traffic mode support on the client side.
- Supporting up to 20 VPN clients
- Support for mobile VPN clients
- Easy to use VPN user profiles/P2P policies configuration.
IPSec
- Tunnel/transport mode
- IKE exchange - Main/aggressive/base mode
- DES/3DES/blowfish/cast128/AES encryption
- MD5/SHA digest
- Pre shared keys/certificates authentication
- IKE/Diffe hellman group
- AH/ESP support
- IPSec/PFS group support
- Traffic compression
- Dead peer detection
Web Filtering
- Web filtering with squid proxy – support for URLs/Regular expression based filtering
- Categories based filtering with URL blacklist service
- Users/User Groups based web filtering policies
- SSL proxy
- Explicit/transparent proxy mode support
- Limiting http connections per network/users/user groups
- Filtering based on web request/response size
- SSL control
- Digest based authentication for locally managed users
- Web caching with USB based storage
- Localization support for web filtering blocking pages.
Network
- DHCP
- DNS
- Static routes
- Virtual IP
- DDNS
- VLAN/801.q
- Dual WAN with wan failover/load balancing (Only available in SMB)
- Firewall zones/port mapping
- PPPoE/xDSL support
Device Management
- WebUI accessible via SSL
- SSH CLI access
- NTP
- SNMP v1/v2/v3 support
- Syslog
- Provision to update firmware via WebUI
- Factory Reset
- Diagnostic utilities
- Certificates management for web proxy/SSLVPN/IPSec services
Reports
- Log viewer for accessing syslog logs/security alerts
- Firewall connections monitoring
- DHCL clients status
- VPN connections monitoring
- Graphical reports on system resources usage/FW connections monitoring/IPS alerts
- Web filtering reports
Tech Specs
| No of Interfaces |
Two 1Gbps WAN port & four 1Gbps LAN ports, 1 console interface, 1 USB port |
| Status Firewall Inspection |
Yes |
| Deep Packet Inspection |
Yes |
| Signatures Support |
~4000 active signatures from snort VRT/emerging threats |
| Application Protocols Detection |
70+ |
| Maximum No of Connections |
20000 |
| Maximum No of New Connections Per Second |
1800 |
| Maximum No of SSLVPN Clients |
100 |
| Authentication |
X509 certificates, internal user DB |
| Logging |
Local log viewer, syslog |
| Device Management |
HTTPS GUI, SNMP |
| Hardware |
Cavium Octeon II 63xx, 2cores 800MHz |
| RAM |
1 GB |
User Interface
Access to GUI Demo - Click Here
Username: admin
Password: admin
Documents & User Guides
Datasheet - Download Now
Quick Installation Guide - Download Now
User Manual -
Download Now
| Item weight: |
1,50 kg
|
|
PN:
|
aUTM
|
Product safety information
Manufacturer information:
allo.com
Ground Floor #176
Bangalore
Whitefield, Indien, 66
info@allo.com
https://www.allo.com
Responsible person:
VoIPDistri, Mathias Gottensträter
Im Hagen 3
Nordrhein-Westfalen
Halle, Deutschland, 33790
info@voipdistri.com
https://voipdistri.com
There are no reviews yet.