Cyberoam CR35wi Wireless UTM Appliance

Listing description

CR35wiNG is the Next-Generation Unified Threat Management appliance with Wi-Fi access points that offer “the fastest UTMs made for SMBs” to small offices, with high performance security over WLAN. CR35wiNG appliances come with 3x3 MIMO technology that greatly enhances wireless range and performance. It supports 802.11n/b/g wireless standards. Combined with security over wired networks offered by its range of UTM appliances, Cyberoam enables organizations to overcome the physical limitations of securely accessing network resources and offers more user flexibility, user productivity and lower network ownership costs.

The best-in-class hardware along with software to match, enables the NG series to offer unmatched throughput speeds, compared to any other UTM appliance in this market segment. This assures support for future IT trends in organizations like high-speed Internet and rising number of devices in organizations – offering future-ready security for small office networks.

Cyberoam's Layer 8 technology that treats user-identity as the 8th Layer or the HUMAN layer in the protocol stack, works even in WLAN environments, to allow Identity-based security policies in dynamic IP environment.

Technical Details
Specification
Interfaces

Copper GbE Ports Configurable 6
Internal/DMZ/WAN Ports Yes
Console Ports (RJ45/DB9) 1
USB Ports 2

Built-in Wireless LAN

Wireless Standards IEEE 802.11 a/b/g/n (WEP, WPA,
WPA2, 802.11i , TKIP, AES, PSK)
Antenna Detachable 3x3 MIMO
Access Points Up to 8 bssid
Transmit Power (EIRP) 11n HT40 : +15dBm
11b CCK: +15dBm
11g OFDM:+15dBm
Receiver Sensitivity -68dBm at 300Mbps
-70dBm at 54Mbps
-88dBm at 6Mbps
Frequency Range 2.412 GHz - 2.472 GHz
5.200 GHz - 5.825 GHz
Number of Selectable Channels USA (FCC) - 11 channels,
EU (ETSI) / Japan (TELEC) - 13
channels
Data Rate 802.11n: up to 450Mbps,
802.11b: 1, 2, 5,5, 11Mbps,
802.11g: 6, 9, 12, 18, 24, 36, 48,
54Mbps

System Performance*

Firewall Throughput (UDP) 2,300 (Mbps)
Firewall Throughput (TCP) 2,000 (Mbps)
New sessions/second 12,000
Concurrent sessions 350,000
IPSec VPN Throughput 250 (Mbps)
No. of IPSec Tunnels 150
SSL VPN Throughput 100 (Mbps)
WAF Protected Throughput 65 (Mbps)
Anti-Virus Throughput 525 (Mbps)
IPS Throughput 350 (Mbps)
UTM Throughput 210 (Mbps)
Stateful Inspection Firewall

- Layer 8 (User - Identity) Firewall
- Multiple Security Zones
- Access Control Criteria (ACC) - User - Identity, Source & Destination Zone, MAC and IP address, Service
- UTM policies - IPS, Web Filtering, Application Filtering, Anti-Virus, Anti-Spam and Bandwidth Management
- Layer 7 (Application) Control &Visibility
- Access Scheduling
- Policy based Source &DestinationNAT
- H.323, SIPNATTraversal
- 802.1q VLAN Support
- DoS &DDoSAttack prevention
- MAC&IP-MAC filtering and Spoof prevention

GatewayAnti-Virus & Anti-Spyware

-Virus,Worm,Trojan Detection &Removal
- Spyware, Malware, Phishing protection
-Automatic virus signature database update
- Scans HTTP, HTTPS, FTP, SMTP, POP3, IMAP, IM, VPN Tunnels
- Customize individual user scanning
- Scan and deliver by file size
- Block by file types
-Add disclaimer/signature

GatewayAnti-Spam

- Inbound/Outbound Scanning
- Real-time Blacklist (RBL), MIME header check
- Filter based on message header, size, sender, recipient
- Subject line tagging
- IP address Black list/White list
- Redirect Spam mails to dedicated email address
- Image-based Spam filtering usingRPDTechnology
- Zero hour Virus Outbreak Protection
- IP Reputation-based Spam filtering

Intrusion Prevention System

- Signatures: Default (4500+), Custom
- IPS Policies: Multiple, Custom
- User-based policy creation
-Automatic real-time updates from CRProtect networks
- ProtocolAnomaly Detection
-DDoS attack prevention

Web Filtering

- InbuiltWeb Category Database
- URL, keyword, File type block
- Categories: Default(82+), Custom
- Protocols supported: HTTP, HTTPS
- Block Malware, Phishing, Pharming URLs
- Schedule-based access control
- Custom block messages per category
- Block JavaApplets, Cookies,Active x
- CIPA Compliant
- Data leakage control via HTTP, HTTPS upload

Application Filtering

- Inbuilt Application Category Database
- 11+ Application Categories: e.g. Gaming, IM, P2P, Proxy
- Schedule-based access control
- Block

- P2Papplications e.g. Skype
-Anonymous proxies e.g. UItra surf
- “Phone home” activities
- Keylogger
- Layer 7 (Applications) & Layer 8 (User - Identity) Visibility
Web Application Firewall

- Positive Protection model
- Unique "Intuitive Website Flow Detector" technology
- Protection against SQL Injections, Cross-site Scripting (xSS), Session Hijacking, URL Tampering, Cookie Poisoning
- Support for HTTP 0.9/1.0/1.1
- Extensive Logging & Reporting

Virtual Private Network

- IPSec, L2TP, PPTP
- Encryption - 3DES, DES, AES, Twofish, Blowfish, Serpent
- HashAlgorithms - MD5, SHA-1
- Authentication - Preshared key, Digital certificates
- IPSec NAT Traversal
- Dead peer detection and PFS support
- Diffie Hellman Groups - 1,2,5,14,15,16
- External Certificate Authority support
- Export RoadWarrior connection configuration
- Domain name support for tunnel end points
- VPNconnection redundancy
- Overlapping Network support
- Hub &SpokeVPNsupport

SSL VPN

-TCP&UDPTunneling
-Authentication -Active Directory, LDAP, RADIUS, Cyberoam
- Multi-layered ClientAuthentication - Certificate, Username/Password
- User &Group policy enforcement
- Network access - Split and Full tunneling
- Browser-based (Portal)Access - Clientless access
- Lightweight SSLVPNTunneling Client
- Granular access control to all the Enterprise Network resources
-Administrative controls - Session timeout, Dead Peer Detection, Portal customization
- TCP- basedApplicationAccess - HTTP, HTTPS, RDP,TELNET,SSH

Instant Messaging (IM) Management

-Yahoo and Windows Live Messenger
-Virus Scanning for IM traffic
-Allow/Block Login
-Allow/Block FileTransfer
-Allow/BlockWebcam
-Allow/Block one-to-one/group chat
- Content-based blocking
- IM activities Log
- Archive files transferred
- CustomAlerts

WirelessWAN

-USBport 3G/4G and Wimax Support
- PrimaryWANlink
-WANBackup link

Bandwidth Management

- Application and User Identity based Bandwidth Management
- Guaranteed &Burstable bandwidth policy
- Application & User Identity based Traffic Discovery
- MultiWANbandwidth reporting
- Category-based bandwidth restriction

User Identity and Group Based Controls

- Access time restriction
-Time and Data Quota restriction
- Schedule based Committed and Burstable Bandwidth
- Schedule based P2Pand IM Controls

Networking

- Failover - Automated Failover/Failback, Multi-WAN failover,
3GModem failover
-WRRbased load balancing
- Policy routing based onApplication and User
- IP Address Assignment - Static, PPPoE, L2TP, PPTP & DDNS Client, Proxy ARP, DHCP server, DHCP relay
- Support for HTTPProxy
- Dynamic Routing: RIP v1& v2, OSPF, BGP, Multicast Forwarding
- Parent Proxy support withFQDN
- “IPv6 Ready” Gold Logo

Administration & System Management

-Web-based configuration wizard
- Role-based access control
- Firmware Upgrades viaWeb UI
-Web 2.0 compliant UI (HTTPS)
- UI Color Styler
- Command Line Interface (Serial, SSH,Telnet)
-SNMP(v1, v2c, v3)
- Multi-lingual support: Chinese, Hindi, French, Korean
- CyberoamCentral Console (Optional)
- NTPSupport

User Authentication

- Internal database
-Active Directory Integration
-Automatic Windows Single Sign On
- External LDAP/RADIUS database integration
- Thin Client support - Microsoft Windows Server 2003 Terminal Services and Citrix xenApp
- RSAsecurID support
- ExternalAuthentication - Users andAdministrators
- User/MAC Binding
- MultipleAuthentication servers

Logging/Monitoring

- Graphical real-time and historical monitoring
- Email notification of reports, viruses and attacks
- Syslog support
- Log Viewer - IPS, Web filter, Anti Virus, Anti Spam,
Authentication, System and Admin Events

On-Appliance Cyberoam-iView Reporting

- Integrated Web-based Reporting tool
- Cyberoam-iView
- 1000+ drilldown reports
- 45+ Compliance Reports
- Historical and Real-time reports
- Multiple Dashboards
- Username, Host, Email ID specific Monitoring Dashboard
- Reports - Security, Spam, Virus, Traffic, Policy violations, VPN, Search Engine keywords
- Multi-format reports - tabular, graphical
- Exportable formats - PDF, Excel
- Automated Report Scheduling

IPSecVPNClient**

- Inter-operability with major IPSecVPNGateways
- Supported platforms: Windows 2000, WinxP 32/64-bit, Windows 2003 32-bit, Windows 2008 32/64-bit, Windows Vista 32/64-bit, Windows 7 RC1 32/64-bit
- Import Connection configuration

Certification

- ICSAFirewall - Corporate
- CheckmarkUTMLevel 5 Certification
-VPNC- Basic andAESinteroperability
- “IPv6 Ready” Gold Logo

Hardware Specifications

Memory 1GB
Compact Flash 4GB
HDD 250GB or higher
Compliance

-CE
-FCC

Dimensions

HxWxD(inches) 1.7 x 6 x 9.1
HxWxD(cms) 4.4 x 15.3 x 23.2
Weight 2.3kg, 5.07 lbs

Power

Input Voltage 100-240 VAC
Consumption 47.8W
Total Heat Dissipation (BTU) 163

Environmental

OperatingTemperature 0 to 40 °C
Storage Temperature -25 to 75 °C
Relative Humidity (Non condensing) 10 to 90%

This equipment is located in AE