Innominate mGuard smart/533 w/VPN-10 BD-101020 User Manual

Product codes

BD-101020

protecting industrial networks

Innominate Security Technologies AG · Albert-Einstein-Str. 14 · D-12489 Berlin · Tel. +49(0)30-63 92 33 00 · Fax +49(0)30-63 92 33 07 · www.innominate.com

Innominate

Security Technologies AG

Innominate mGuard is a registered trademark of Innominate Security Technologies AG. Several national and international patents have been registered or are pending for the mGuard technology. All other trademarks, brands and names are property of the corresponding firms.

Product specifications are subject to change. Errors and omissions excepted. Status 01.2007

Technical overview

Power supply

Via USB interface (5 V at 500 mA);

optional:

ext. power adapter (110–230V)

Operating temperature

0 to 40 °C

Relative humidity

20 to 90 %, non-condensing

Dimensions (W x H x D)

27 x 77 x 115 mm

Weight

158 g

mGuard Software Options

Innominate mGuard VPN-10

IPSec VPN Gateway, max. 10 VPN tunnels

Innominate mGuard VPN-250

IPSec VPN Gateway, max. 250 VPN tunnels

Innominate mGuard Anti-Virus-50

50 appliances, perpetual license for

CLAM AV ™

virus patterns

Innominate mGuard Anti-Virus-200

200 appliances, perpetual license for

CLAM AV ™

virus patterns

Innominate mGuard Anti-Virus-1000

1000 appliances, perpetual license for

CLAM AV™

virus patterns

Innominate mGuard Redundant Firewall Option

Requires two mGuard Security Appliances

Firewall

Firewall data throughput

99 Mbit/s

User licenses

unlimited

Stateful Inspection Firewall

•

NAT, 1:1 NAT

•

Port forwarding

•

MAC-Filtering

•

Firewall rules in VPN connections

•

IP spoofing protection

•

Syn flood protection

•

Configurable DoS protection

•

Redundant Firewall (VRRP)

optional

Hardware performance features

CPU

RAM / Flash

1 LAN / 1 WAN port

MAU management

Internet

Internet support

Network services

DHCP support

DNS cache / Dyn. DNS

NTP client

LLDP (Link Layer Discovery Protocol)

VLAN (802.1Q)

Internet updates

Remote syslog logging

User based configuration profiles

Multi language

Virtual Private Network

VPN data throughput (3DES)

Max. number of VPN tunnels

Encryption procedure

Hardware-based encryption

IPsec mode

Authentication

Data integrity

Internet Key Exchange (IKE)

IPsec L2TP Server

VPN in Stealth Mode

1:1 NAT in the VPN

IPsec NAT Traversal

Dead Peer Detection (RFC 3706)

Dyn. DNS VPN support

System management

Web-based management (HTTPS)

Command line interface (SSH)

SNMP v1, v2, v3

Innominate Security Configuration Manager

Innominate Device Manager

Anti-virus protection*

Integrated scan engine

Scans HTTP, FTP, POP3, SMTP, HTTP proxy

Block by file size

Automated pattern file updates

mGuard smart / 266

mGuard smart / 533

Intel IXP 42x with 266 / 533 MHz

64 MB SDRAM / 16 MB Flash

Ethernet IEEE 802.3 10 / 100 BaseTX,

RJ45, full-duplex, Auto-MDIX

•

PPPoE, PPTP, Static IP, DHCP client,

Stealth / Multi Stealth

Server or relay agent

• / •

•

German, English and Japanese

•

optional

* For anti-virus software option the use of an 533 MHz appliance is recommended.

mGuard smart / 266 VPN

mGuard smart / 533 VPN

Intel IXP 42x with 266 / 533 MHz

64 MB SDRAM / 16 MB Flash

Ethernet IEEE 802.3 10 / 100 BaseTX,

RJ45, full-duplex, Auto-MDIX

•

PPPoE, PPTP, Static IP, DHCP client,

Stealth / Multi Stealth

Server or relay agent

• / •

•

German, English and Japanese

35 / 70 Mbit/s

DES, 3DES, AES-128, -192, -256

•

ESP tunnel / ESP transport

X.509v3 certificates with RSA or

pre-shared keys (PSK)

MD5, SHA-1

Quick mode, main mode, PFS

•

optional