Innominate mGuard delta w/VPN-10 BD-201000 User Manual

Product codes

BD-201000

protecting industrial networks

Innominate Security Technologies AG · Albert-Einstein-Str. 14 · D-12489 Berlin · Tel. +49(0)30-63 92 33 00 · Fax +49(0)30-63 92 33 07 · www.innominate.com

Innominate

Security Technologies AG

Innominate mGuard is a registered trademark of Innominate Security Technologies AG. Several national and international patents have been registered or are pending for the mGuard technology. All other trademarks, brands and names are property of the corresponding firms.

Product specifications are subject to change. Errors and omissions excepted. Status 01.2007

Technical overview

Serial interface

RS232, internal

Network interfaces

4-Ports Ethernet 10 /100 TX,

1 Port WAN 10 /100 TX

Power supply

5V, 3A

LED displays

Power x1, Status x1,

link / active LAN Ports

Operating temperature

0 to 40 °C

Storage temperature

–20 to +70 °C

Relative humidity

5 to 95 %, non-condensing

Dimensions (W x H x D)

239 x 156 x 30 mm

Weight

1.200 g

Certification

CE, FCC

mGuard Software Options

Innominate mGuard VPN-10

IPSec VPN Gateway, max. 10 VPN tunnels

Innominate mGuard VPN-250

IPSec VPN Gateway, max. 250 VPN tunnels

Innominate mGuard Anti-Virus-50

50 appliances, perpetual license for

CLAM AV ™

virus patterns

Innominate mGuard Anti-Virus-200

200 appliances, perpetual license for

CLAM AV ™

virus patterns

Innominate mGuard Anti-Virus-1000

1000 appliances, perpetual license for

CLAM AV™

virus patterns

Innominate mGuard Redundant Firewall Option

Requires two mGuard Security Appliances

Firewall

Firewall data throughput

99 Mbit/s

User licenses

unlimited

Stateful Inspection Firewall

•

NAT, 1:1 NAT

•

Port forwarding

•

MAC-Filtering

•

Firewall rules in VPN connections

•

IP spoofing protection

•

Syn flood protection

•

Configurable DoS protection

•

Redundant Firewall (VRRP)

optional

Hardware performance features

CPU

RAM / Flash

4 LAN / 1 WAN port

MAU management

Internet

Internet support

Network services

DHCP support

DNS cache

Dyn. DNS

NTP client

LLDP (Link Layer Discovery Protocol)

VLAN (802.1Q)

Internet updates

Remote syslog logging

User-based configuration profiles

Multi language

Virtual private network

VPN data throughput (3DES)

Max. number of VPN tunnels

Encryption procedure

Hardware-based encryption

IPsec mode

Authentication

Data integrity

Internet Key Exchange (IKE)

IPsec L2TP Server

VPN in Stealth Mode

1:1 NAT in the VPN

IPsec NAT Traversal

Dead Peer Detection (RFC 3706)

Dyn. DNS VPN support

System management

Web-based management (HTTPS)

Command line interface (SSH)

SNMP v1, v2, v3

Innominate Security Configuration Manager

Innominate Device Manager

Anti-virus protection

Integrated scan engine

Scans HTTP, FTP, POP3, SMTP, HTTP proxy

Block by file size

Automated pattern file updates

mGuard delta

Intel IXP 42x with 533 MHz

128 MB SDRAM / 16 MB Flash

Ethernet IEEE 802.3 10 / 100 BaseTX,

RJ45, full duplex, Auto-MDIX

•

PPPoE, PPTP, Static IP, DHCP client,

Stealth / Multi Stealth

Server or relay agent

•

English, German and Japanese

•

optional

mGuard delta VPN

Intel IXP 42x with 533 MHz

128 MB SDRAM / 16 MB Flash

Ethernet IEEE 802.3 10 / 100 BaseTX,

RJ45, full duplex, Auto-MDIX

•

PPPoE, PPTP, Static IP, DHCP client,

Stealth / Multi Stealth

Server or relay agent

•

English, German and Japanese

70 Mbit/s

DES, 3DES, AES-128, -192, -256

•

ESP tunnel / ESP transport

X.509v3 certificates with RSA or

PreShared Keys (PSK)

MD5, SHA-1

Quick mode, main mode, PFS

•

optional