Innominate mGuard PCI/266 HW-102020 Benutzerhandbuch

Produktcode

HW-102020

Innominate mGuard is a registered trademark of Innominate Security Technologies AG. Several national and international patents have been registered or are pending for the mGuard technology. All other trademarks, brands and names are property of the corresponding firms.

Product specifications are subject to change. Errors and omissions excepted. Status 09.2008

* For anti-virus software option the use of an 533 MHz appliance is recommended.

protecting industrial networks

Innominate Security Technologies AG · Albert-Einstein-Str. 14 · D-12489 Berlin · Tel. +49(0)30-63 92 33 00 · Fax +49(0)30-63 92 33 07 · www.innominate.com

Innominate

Security Technologies AG

Technical overview

Serial interface

RS232, optional

Power supply

3,3 V or 5 V PCI bus

Operating temperature

0 to 70 °C

Relative humidity

20 to 90 %, non-condensing

MTBF

102.3 years

Dimensions

low profile PCI

Operational mode

with driver or without driver via PoPCI

(Power over PCI) mode

Approval / conformity

CE, FCC, UL 508

mGuard Software Options

Innominate mGuard VPN-10

IPSec VPN Gateway, max. 10 VPN tunnels

Innominate mGuard VPN-250

IPSec VPN Gateway, max. 250 VPN tunnels

Innominate mGuard Anti-Virus-50

50 appliances, perpetual license for

CLAM AV ™

virus patterns

Innominate mGuard Anti-Virus-200

200 appliances, perpetual license for

CLAM AV ™

virus patterns

Innominate mGuard Anti-Virus-1000

1000 appliances, perpetual license for

CLAM AV ™

virus patterns

Innominate mGuard Redundant Firewall Option

Requires two mGuard Security Appliances

Firewall

Firewall data throughput

99 Mbit/s

User licenses

unlimited

Stateful Inspection Firewall

•

NAT, 1:1 NAT

•

Port forwarding

•

MAC-Filtering

•

Firewall rules in VPN connections

•

IP spoofing protection

•

Syn flood protection

•

Configurable DoS protection

•

Redundant Firewall (VRRP)

optional

Hardware performance features

CPU

RAM / Flash

1 LAN / 1 WAN port

MAU management

Internet

Internet support

Network services

DHCP support

DNS cache

Dyn. DNS

NTP client

LLDP (Link Layer Discovery Protocol)

VLAN (802.1Q)

Internet updates

Remote syslog logging

User based configuration profiles

Multi language

Virtual Private Network (optional)

VPN data throughput (3DES)

Max. number of VPN tunnels

Encryption procedure

Hardware-based encryption

IPsec mode

Authentication

Data integrity

Internet Key Exchange (IKE)

IPsec L2TP Server

VPN in Stealth Mode

1:1 NAT in the VPN

IPsec NAT Traversal

Dead Peer Detection (RFC 3706)

Dyn. DNS VPN support

System management

Web-based management (HTTPS)

Command line interface (SSH)

SNMP v1, v2, v3

Innominate Device Manager

Anti-virus protection*

Integrated scan engine

Scans HTTP, FTP, POP3, SMTP, HTTP proxy

Block by file size

Automated pattern file updates

mGuard PCI / 266

mGuard PCI / 533

Intel IXP 42x with 266 / 533 MHz

64 MB SDRAM / 16 MB Flash

Ethernet IEEE 802.3 10 / 100 BaseTX,

RJ45, full-duplex, Auto-MDIX

•

PPPoE, PPTP, Static IP, DHCP client, Stealth / Multi Stealth

Server or relay agent

•

German, English and Japanese

•

optional

mGuard PCI / 266 VPN

mGuard PCI / 533 VPN

Intel IXP 42x with 266 / 533 MHz

64 MB SDRAM / 16 MB Flash

Ethernet IEEE 802.3 10 / 100 BaseTX,

RJ45, full-duplex, Auto-MDIX

•

PPPoE, PPTP, Static IP, DHCP client, Stealth / Multi Stealth

Server or relay agent

•

German, English and Japanese

35 / 70 Mbit/s

10 or 250

DES, 3DES, AES-128, -192, -256

•

ESP tunnel / ESP transport

X.509v3 certificates with RSA or PSK

MD5, SHA-1

Quick mode, main mode, PFS

•

optional