As an added security feature, Chorver will manage the firewall for you,
preventing unauthorised administration over the public Internet.
We charge an additional £25 per month for this service.
| |
Feature |
High End |
Entry Level |
| Performance |
Concurrent sessions |
4,000 |
2,000 |
| |
New sessions/second |
4,000 |
2,000 |
| |
Firewall performance |
100 Mbps |
20 Mbps |
| |
3DES (168 bit) |
20 Mbps |
13 Mbps |
| |
Policies |
500 |
100 |
| |
Schedules |
256 |
256 |
| |
Interfaces |
4 10/100 Base-T |
1 10 Base-T Untrust
1 10 Base-T trust |
| Mode of
Operation |
Transparent mode (all interfaces) |
Yes |
Yes |
| |
Route mode (per interface) |
Yes |
Yes |
| |
NAT (per interface) |
Yes |
Yes |
| |
Policy-based NAT |
Yes |
Yes |
| |
PAT |
Yes |
Yes |
| |
Virtual IP |
2 |
1 |
| |
Mapped IP |
500 |
32 |
| |
Users per port, Trusted |
Unrestricted |
10 or Unrestricted |
| Routing |
Virtual routers |
2 |
2 |
| |
OSPF/BGP dynamic routing |
Yes, up to 2 instances ea. |
No |
| |
Routes |
2,000 |
|
| IP
Address Assignment |
Static |
All |
All |
| |
DHCP client |
Untrusted interface |
Untrusted interface |
| |
PPPoE client |
Untrusted interface |
Untrusted interface |
| |
Internal DHCP server |
Trusted interfaces |
Trusted interfaces |
| |
DHCP relay |
Yes |
Yes |
| Network
Attack Protections (3) |
Number of attacks detected |
31 |
31 |
| |
DoS and DDoS protections |
Yes |
Yes |
| |
Malformed packet protections |
Yes |
Yes |
| |
Malicious packet protections |
Yes |
Yes |
| |
Firewall attack protections
configurable per zone |
Yes |
Yes |
| VPN |
Dedicated VPN tunnels |
25 |
10 |
| |
Manual Key, IKE, PKI (X.509) |
Yes |
Yes |
| |
DES (56-bit), 3DES (168-bit) and
AES encryption |
Yes |
Yes |
| |
Perfect forward secrecy (DH
Groups) |
1,2,5 |
1,2,5 |
| |
Prevent replay attack |
Yes |
Yes |
| |
Remote access VPN |
Yes |
Yes |
| |
L2TP within IPSec |
Yes |
Yes |
| |
Site-to-site VPN |
Yes |
Yes |
| |
Star (hub and spoke) VPN network
topology |
Yes |
Yes |
| |
IPSec NAT traversal |
Yes |
Yes |
| |
Tunnel interfaces |
25 |
10 |
| |
Redundant VPN gateway |
Yes |
Yes |
| IPSec
Authentication |
SHA-1 |
Yes |
Yes |
| |
MD5 |
Yes |
Yes |
| |
PKI certificate requests (PKCS 7
and PKCS 10) |
Yes |
Yes |
| |
Automated certificate enrollment
(SCEP) |
Yes |
Yes |
| |
Online Certificate Status
Protocol (OCSP) |
Yes |
Yes |
| Certificate Authorities
Supported |
VeriSign CA |
|
|
| |
Entrust CA |
Yes |
Yes |
| |
Microsoft CA |
Yes |
Yes |
| |
RSA Keon CA |
Yes |
Yes |
| |
iPlanet (Netscape) CA |
Yes |
Yes |
| |
Baltimore CA |
Yes |
Yes |
| |
DOD PKI CA |
Yes |
Yes |
| Firewall
and VPN User Authentication |
Built-in (internal) database -
user limit |
250 |
100 |
| |
RADIUS (external) database |
Yes |
Yes |
| |
RSA SecureID (external) database |
Yes |
Yes |
| |
LDAP (external) database |
Yes |
Yes |
| |
RADIUS authentication accounting |
Yes |
Yes |
| |
XAUTH VPN authentication |
Yes |
Yes |
| |
Web-based authentication |
Yes |
Yes |
| Traffic
Management |
Guaranteed bandwidth |
Yes |
Yes |
| |
Maximum bandwidth |
Yes |
Yes |
| |
Priority-bandwidth utilization |
Yes |
Yes |
| |
DiffServ stamp |
Yes |
Yes |
| Management |
WebUI (HTTP and HTTPS) |
Yes |
Yes |
| |
Command Line Interface (console) |
Yes |
Yes |
| |
Command Line Interface (telnet) |
Yes |
Yes |
| |
Secure Command Shell (SSH v1.5
compatible) |
Yes |
Yes |
| |
Global PRO |
Yes (2) |
Yes (2) |
| |
Global PRO Express |
Yes (2) |
Yes (2) |
| |
All management via VPN tunnel on
any interface |
Yes |
Yes |
| |
SNMP full custom MIB |
Yes |
Yes |
| Administration |
Local administrators database |
20 |
20 |
| |
External administrator database |
|
|
| |
Restricted administrative
networks |
6 |
6 |
| |
Root admin, admin, and read only
user levels |
Yes |
Yes |
| |
Software upgrades and config
changes |
TFTP/Web UI/Global |
TFTP/Web UI/Global |
| Logging/Monitoring |
Syslog |
External |
External |
| |
E-mail (2 addresses) |
Yes |
Yes |
| |
NetIQ WebTrends |
External |
External |
| |
SNMP |
Yes |
Yes |
| |
Traceroute |
Yes |
Yes |
| |
VPN tunnel monitor |
Yes |
Yes |
| |
Websense URL filtering |
External |
External |
| External
Flash |
CompactFlash™ |
96, 128 or 512 MB options |
No |
| |
PCMCIA Flash |
No |
No |
| |
Event logs and alarms |
Yes |
No |
| |
System config script |
Yes |
No |
| |
ScreenOS software |
Yes |
No |
| Dimensions
and Power |
Height |
1.73 inches |
1.25 inches |
| |
Width |
17.5 inches |
6 inches |
| |
Length |
10.8 inches |
5 inches |
| |
Weight |
8 lbs. |
1 lb. |
| |
Rack mountable |
Yes |
Yes, with separate kit |
| |
Power Supply (AC) |
90 to 264 VAC, 45 W |
90 to 264 VAC, 7.5W |
| |
Power Supply (DC) |
-36 to -60 VDC, 50 W |
N/A |
