GPZ Next Generation UTM Appliances

Size: px

Start display at page:

Download "GPZ Next Generation UTM Appliances"

Gertrude Shelton
5 years ago
Views:

GPZ 1000 - Next Generation UTM Appliances The gateprotect GPZ 1000 next generation fi rewall appliance has been designed as an entry-level product for the redundant Enterprise series for larger

1 GPZ Next Generation UTM Appliances The gateprotect GPZ 1000 next generation fi rewall appliance has been designed as an entry-level product for the redundant Enterprise series for larger networks. The next generation fi rewall integrates state-of-the-art security features such as VLAN, Single Sign On, Bridging, VPN SSL via x.509 certifi cates and VPN IPSec, IDS/ IPS, Traffi c Shaping, anti-virus, Zero Hour Mail Protection, web fi lter as well as Application Control in one single system. Comprehensive protection of a company division or the entire company combined with maximum performance: The GPZ 1000 offers reliable protection against internal or external attacks without compromising work processes. The latest hardware has been designed for mounting in server cabinets and is especially powerful and extremely stable even in larger networks in day-to-day business thanks to the consequent use of high-quality redundant server components. Based on a hot-swap-capable hardware raid with 24/7 server hard drives, redundant power adapters and the powerful HA mode, the appliance assures a high failure safety. Furthermore, the GPZ 1000 is equipped with 4 SFP ports for even faster LWL/ fiber optic connections. For larger companies that wish to protect their network environments in a reliable manner without compromising work processes, the GPZ 1000 is a competitively priced, stable and secure solution. Specifi cations GPZ 1000 Interfaces GbE Ports SFP (Mini GBIC) Ports Redundant - HDD (Raid) IPMI - Remote management 2xRJ45 Intel (rear), 8x RJ45 Intel 82580EB (front) 4x SFP Intel 82576EB (front) System Performance* Firewall throughput (Mbps) VPN IPSec throughput (Mbps) UTM throughput (Mbps) IDS/IPS throughput (Mbps) Concurrent sessions New sessions pr. Second Dimensions H x W x D (mms) 88 x 430 x 633 Gross Weights (kgs) app. 18 Power Input Voltage (V) AC Redundant Power Supply 600 W Environmental Operating Temperature ( C) 10 ~ 40 Storage Temperature ( C) -40 ~ 65 Relative Humidity (Non condensing) 10 ~ 85% Hardware Certifi cation * System performance depends on activated proxies, IDS, application level and number of active VPN connections. We do not offer an express or implied warranty for the correctness /up-to-dateness of the information contained here (which may be change at any time). Future products or functions will be made available at the appropriate time gateprotect AG Germany. All rights reserved. gateprotect AG Germany has been a leading, globally acting provider of IT security solutions in the area of network security for more than ten years. These solutions comprise Next Generation UTM Firewall with all commonly used UTM functionalities, managed security as well as VPN client systems. Reputable companies and institutions in more than 80 countries worldwide trust gateprotect as their partner for IT network security. Since 2010, gateprotect has been listed in the renowned Gartner Magic Quadrant for UTM fi rewall appliances. For the easy operability and comprehensive security of the Next Generation UTM Firewall solutions, gateprotect was the fi rst German company to be honored with the Frost & Sullivan Excellence Award. gateprotect AG Germany Valentinskamp Hamburg / Germany Hotline Phone +49 (0) Internet

GPZ 1000 - Next Generation Firewall Appliances The Next Generation Firewall Appliances from gateprotect are characterized by optimal scalability, security and performance.

gateprotect s egui Technology raises operating security and effi ciency to a previously unattained level.

2 GPZ Next Generation Firewall Appliances The Next Generation Firewall Appliances from gateprotect are characterized by optimal scalability, security and performance. Thanks to a unique and patented egui Technology, gateprotect sets standards when it comes to the confi guration of modern security systems. gateprotect s egui Technology raises operating security and effi ciency to a previously unattained level. Furthermore, gateprotect is the only manufacturer worldwide to implement the ISO NORM 9241 standard. gateprotect was recently honored with the Frost & Sullivan Best Practices Award GLOBAL UNIFIED THREAT MANAGEMENT PRODUCT DIFFERENTIATION EXCELLENCE AWARD gateprotect provides UTM products that stand-out from the competition due to their ease-of-use and security effectiveness. The gateprotect ergonomic graphical user interface (egui) provides the most intuitive and effective visual UTM management interface available in the marketplace. Frost & Sullivan, August 2011 Feature Specifi cations MANAGEMENT LAN / WAN-SUPPORT UNIFIED THREAT MANAGEMENT - Role based Firewall Administration - SSH-CLI - Desktop confi guration saved / restored separately from backup - Object oriented fi rewall confi guration - Direct Client Update function Ergonomic Graphic User Interface - ISO 9241 compliant - Immediate visual feedback for each setting - Self-explanatory functions - Overview of all active services - Overview of the whole network - Layer and zoom function USER AUTHENTICATION - Active Directory / OpenLDAP support - Local User database - Web-interface authentication - Windows-client authentication - Single sign on with Kerberos - Single- and Multi login - Web Landing page - Ethernet 10/100 MBits/s - Gigabit and 10 Gigabit Ethernet - SFP and SFP+ Fibre optics support - MTU changeable (Ethernet/DSL) - PPP-PAP, PPP-CHAP authentication - Inactivity timeout / Forced disconnect time - xdsl - Multi WAN support - WAN failover - Loadbalancing - Time controlled internet connections - Manual and automatic DNS assignment - Multiple dyndns support - Source based routing - Routing protocols RIP, OSPF - DHCP - DMZ VLAN VLAN per interface q ethernet header tagging - Combinable with bridging Bridge-mode - OSI-Layer 2 fi rewall function - Spanning tree (bride-id, port-cost) - Unlimited interfaces per bridge - Combinable with VPN-SSL Web-fi lter - URL-Filter with safe search enforcement - Content Filter - Block rules up to user-level - Black-/ White lists - Import / Export of URL lists - File Extension blocking - Category based website-blocking - Self defi nable categories - Scan technology with online-database - Intransparent HTTP-proxy support Application Control - Layer 7 Packet fi lter (DPI) - Filter Applications instead of ports - Detection & Control of Skype, Bittorrent and others as well as Web 2.0 Applications like Facebook Antivirus - Kaspersky Anti-Virus Engine - Complete Protection from all malware - HTTP, HTTPS - FTP, POP3, SMTP - Manual and automatic updates Antispam - Scan-level adjustable - Real-time Spam Detection - GlobalView Cloud using Recurrent Pattern Detection (RPD) - Mail Filter - Black- / White lists - Automatically reject/delete s - AD address import Intrusion Prevention - Individual custom rules - Security-level adjustable - Rule groups selectable - Scanning of all interfaces - DoS, portscan protection - Malicious network packet protection Proxies - HTTP (transparent or intransparent) - HTTPS - Support for Radius server, AD server, local user database - FTP, POP3, SMTP, SIP - Time-controlled TRAFFIC SHAPING / QOS LOGS, REPORTS, STATISTICS VPN COMMAND CENTER - Multiple Internet connections separately shapeable - All services separately shapeable - Maximum and guaranteed bandwidth adjustable - QoS with TOS-fl ags support - QoS inside VPN connection support HIGH AVAILABILITY - Active-passive HA - State synchronization - Single and Multiple dedicated links support - Stateful Failover BACKUP & RECOVERY - Small backup fi les - Remote backup & restore - Restore backup on installation - Automatic and time based backups - Automatic upload of backups on FTPor SCP-Server - USB Drive recovery option - Reporting - Logging to multiple syslog-servers - Logs in admin-client (with fi lter) - Export to CSV-fi les - IP and IP-group statistics - Separate services - Single user / groups - TOP-lists (Surfcontrol) - IDS- / Traffi c-statistics - Application Control traffi c statistics - Antivirus- / Antispam-statistics - Defence statistics MONITORING - System Info (CPU, HDD, RAM) - Network (interfaces, routing, traffi c, errors) - Processes - VPN - User Authentication SNMP - SNMPv2c - SNMP-traps - HA - VPN wizard - Certificate wizard - Site-to-Site - Client-to-Site (Road Warrior) - PPTP - Export to One-Click-Connection X.509 certifi cates - CRL - OCSP - Multi CA support - Multi Host-cert support IPSec - Tunnel mode - IKEv1, IKEv2 - PSK / Certifi cates - DPD (Dead Peer Detection) - NAT-T - XAUTH, L2TP SSL - Routing mode VPN - Bridge mode VPN - TCP/UDP - Specify WINS- and DNS-Servers - Monitor & Active Confi guration of 500+ fi rewalls - Central Confi guration and Monitoring of VPN Connections - Single and group backup - Plan automatic backup in groups - Single and group update & licensing - Create confi guration templates and apply on multiple fi rewalls - Certificate Authority - Certificate based 4096 bit encrypted connections to the fi rewalls - Display settings of all fi rewalls - Role based User Management

3 GPZ Next Generation Firewall Appliances For large networks, the gateprotect GPZ 2500 next generation fi rewall appliance with its 4 SFP ports and a fi rewall throughput of 10 Gigabit per second (Gbps) is an ideal solution. The easy-to-use graphic user interface with egui technology provides for highly effi cient management, which is effectively supported by the monitoring and analyzing functions of the gateprotect Command Center. The extremely high failure safety is assured at any time by hardware raid (hot-swap-capable) with 24/7-server hard drives, redundant power adapters and a powerful HA mode. The latest hardware has been designed for mounting in server cabinets and is especially powerful even in larger networks in day-to-day business thanks to the consequent use of high-quality redundant server components. Specifi cations GPZ 2500 Interfaces GbE Ports SFP (Mini GBIC) Ports Redundant - HDD (Raid) IPMI - Remote management 2xRJ45 Intel (rear), 16x RJ45 Intel 82580EB (front) 4x SFP Intel 82576EB (front) System Performance* Firewall throughput (Mbps) VPN IPSec throughput (Mbps) UTM throughput (Mbps) IDS/IPS throughput (Mbps) Concurrent sessions New sessions pr. Second Dimensions H x W x D (mms) 88 x 430 x 633 Gross Weights (kgs) app. 18 Power Input Voltage (V) AC Redundant Power Supply 600 W Environmental Operating Temperature ( C) 10 ~ 40 Storage Temperature ( C) -40 ~ 65 Relative Humidity (Non condensing) 10 ~ 85% Hardware Certifi cation * System performance depends on activated proxies, IDS, application level and number of active VPN connections. We do not offer an express or implied warranty for the correctness /up-to-dateness of the information contained here (which may be change at any time). Future products or functions will be made available at the appropriate time gateprotect AG Germany. All rights reserved. gateprotect AG Germany is one of the world s leading producers of IT-security solutions for effective network security. Our primary products are Next Gene ration Firewalls and Managed Security Systems. They protect small to large companies, nonprofi t organisations and govern ment networks from threats and attacks coming from the Internet. gateprotects IT security solutions are used on the whole globe. The confi dence in gateprotect is now demonstrated through 40,000 installations worldwide at client sites of all industries. Its UTM fi rewalls are listed in the Magic Quadrant of the international renowned market research company Gartner. Gartner only positions companies in its Magic Quadrant that meet their ambitious criteria, which include technological performance, a certain level of annual revenue and active customer references as well as the necessary functionality. gateprotect AG Germany Valentinskamp Hamburg / Germany Hotline Phone +49 (0) Internet

4 Feature overview - Next Generation Firewall Appliances The Next Generation Firewall Appliances from gateprotect are characterized by optimal scalability, security and performance. Thanks to a unique and patented egui Technology, gateprotect sets standards when it comes to the confi guration of modern security systems. gateprotect s egui Technology raises operating security and effi ciency to a previously unattained level. Furthermore, gateprotect is the only manufacturer worldwide to implement the ISO NORM 9241 standard. gateprotect was recently honored with the Frost & Sullivan Best Practices Award The GPZ 2500 is quite possibly the be-all and end-all of perimeter network security. No negative points were found. SC Magazin March 2012 Feature Specifi cations MANAGEMENT LAN / WAN-SUPPORT UNIFIED THREAT MANAGEMENT - Role based Firewall Administration - SSH-CLI - Desktop confi guration saved / restored separately from backup - Object oriented fi rewall confi guration - Direct Client Update function Ergonomic Graphic User Interface - ISO 9241 compliant - Immediate visual feedback for each setting - Self-explanatory functions - Overview of all active services - Overview of the whole network - Layer and zoom function USER AUTHENTICATION - Active Directory / OpenLDAP support - Local User database - Web-interface authentication - Windows-client authentication - Single sign on with Kerberos - Single- and Multi login - Web Landing page - Ethernet 10/100 MBits/s - Gigabit and 10 Gigabit Ethernet - SFP and SFP+ Fibre optics support - MTU changeable (Ethernet/DSL) - PPP-PAP, PPP-CHAP authentication - Inactivity timeout / Forced disconnect time - xdsl - Multi WAN support - WAN failover - Loadbalancing - Time controlled internet connections - Manual and automatic DNS assignment - Multiple dyndns support - Source based routing - Routing protocols RIP, OSPF - DHCP - DMZ VLAN VLAN per interface q ethernet header tagging - Combinable with bridging Bridge-mode - OSI-Layer 2 fi rewall function - Spanning tree (bride-id, port-cost) - Unlimited interfaces per bridge - Combinable with VPN-SSL Web-fi lter - URL-Filter with safe search enforcement - Content Filter - Block rules up to user-level - Black-/ White lists - Import / Export of URL lists - File Extension blocking - Category based website-blocking - Self defi nable categories - Scan technology with online-database - Intransparent HTTP-proxy support Application Control - Layer 7 Packet fi lter (DPI) - Filter Applications instead of ports - Detection & Control of Skype, Bittorrent and others as well as Web 2.0 Applications like Facebook Antivirus - Kaspersky Anti-Virus Engine - Complete Protection from all malware - HTTP, HTTPS - FTP, POP3, SMTP - Manual and automatic updates Antispam - Scan-level adjustable - Real-time Spam Detection - GlobalView Cloud using Recurrent Pattern Detection (RPD) - Mail Filter - Black- / White lists - Automatically reject/delete s - AD address import Intrusion Prevention - Individual custom rules - Security-level adjustable - Rule groups selectable - Scanning of all interfaces - DoS, portscan protection - Malicious network packet protection Proxies - HTTP (transparent or intransparent) - HTTPS - Support for Radius server, AD server, local user database - FTP, POP3, SMTP, SIP - Time-controlled TRAFFIC SHAPING / QOS LOGS, REPORTS, STATISTICS VPN COMMAND CENTER - Multiple Internet connections separately shapeable - All services separately shapeable - Maximum and guaranteed bandwidth adjustable - QoS with TOS-fl ags support - QoS inside VPN connection support HIGH AVAILABILITY - Active-passive HA - State synchronization - Single and Multiple dedicated links support - Stateful Failover BACKUP & RECOVERY - Small backup fi les - Remote backup & restore - Restore backup on installation - Automatic and time based backups - Automatic upload of backups on FTPor SCP-Server - USB Drive recovery option - Reporting - Logging to multiple syslog-servers - Logs in admin-client (with fi lter) - Export to CSV-fi les - IP and IP-group statistics - Separate services - Single user / groups - TOP-lists (Surfcontrol) - IDS- / Traffi c-statistics - Application Control traffi c statistics - Antivirus- / Antispam-statistics - Defence statistics MONITORING - System Info (CPU, HDD, RAM) - Network (interfaces, routing, traffi c, errors) - Processes - VPN - User Authentication SNMP - SNMPv2c - SNMP-traps - HA - VPN wizard - Certificate wizard - Site-to-Site - Client-to-Site (Road Warrior) - PPTP - Export to One-Click-Connection X.509 certifi cates - CRL - OCSP - Multi CA support - Multi Host-cert support IPSec - Tunnel mode - IKEv1, IKEv2 - PSK / Certifi cates - DPD (Dead Peer Detection) - NAT-T - XAUTH, L2TP SSL - Routing mode VPN - Bridge mode VPN - TCP/UDP - Specify WINS- and DNS-Servers - Monitor & Active Confi guration of 500+ fi rewalls - Central Confi guration and Monitoring of VPN Connections - Single and group backup - Plan automatic backup in groups - Single and group update & licensing - Create confi guration templates and apply on multiple fi rewalls - Certificate Authority - Certificate based 4096 bit encrypted connections to the fi rewalls - Display settings of all fi rewalls - Role based User Management

5 GPZ Next Generation Firewall Appliances For complex company networks with highest demands in terms of throughput, fl exibility and failure safety, the gateprotect GPZ 5000 next generation fi rewall appliance is a reliable, easy-to-use choice. The extensive combination of state-of-the-art security features from the areas of anti-virus, Intrusion Prevention, web fi lter and Application Control provides for comprehensive protection against complex network threats internally and externally. Thanks to the applied egui technology, even complex, multi-layered IT systems may be administered quickly and easily. The result: A maximum level of security and reliability. The latest hardware has been designed for mounting in server cabinets and is especially powerful and stable in day-to-day business thanks to the consequent use of high-quality redundant server components. Based on a hot-swap-capable hardware raid with 24/7 server hard drives, redundant power adapters and the powerful HA mode, the appliance assures a high failure safety. Furthermore, the GPZ 5000 is equipped with 4 SFP ports and 2 10G ports for even faster LWL/fiber optic connections and an option for backbone connection. Specifi cations GPZ 5000 Interfaces GbE Ports SFP / SFP+ (Mini GBIC) Ports Redundant - HDD (Raid) IPMI - Remote management 2xRJ45 Intel (rear), 16x RJ45 Intel 82580EB (front) 4x SFP Intel 82576EB (front), 2x SFP+ Intel 82599EB (front) System Performance* Firewall throughput (Mbps) VPN IPSec throughput (Mbps) UTM throughput (Mbps) IDS/IPS throughput (Mbps) Concurrent sessions New sessions pr. Second Dimensions H x W x D (mms) 88 x 430 x 633 Gross Weights (kgs) app. 18 Power Input Voltage (V) AC Redundant Power Supply 600 W Environmental Operating Temperature ( C) 10 ~ 40 Storage Temperature ( C) -40 ~ 65 Relative Humidity (Non condensing) 10 ~ 85% Hardware Certifi cation * System performance depends on activated proxies, IDS, application level and number of active VPN connections. We do not offer an express or implied warranty for the correctness /up-to-dateness of the information contained here (which may be change at any time). Future products or functions will be made available at the appropriate time gateprotect AG Germany. All rights reserved. gateprotect AG Germany has been a leading, globally acting provider of IT security solutions in the area of network security for more than ten years. These solutions comprise Next Generation UTM Firewall with all commonly used UTM functionalities, managed security as well as VPN client systems. Reputable companies and institutions in more than 80 countries worldwide trust gateprotect as their partner for IT network security. Since 2010, gateprotect has been listed in the renowned Gartner Magic Quadrant for UTM fi rewall appliances. For the easy operability and comprehensive security of the Next Generation UTM Firewall solutions, gateprotect was the fi rst German company to be honored with the Frost & Sullivan Excellence Award. gateprotect AG Germany Valentinskamp Hamburg / Germany Hotline Phone +49 (0) Internet

6 GPZ Next Generation Firewall Appliances The Next Generation Firewall Appliances from gateprotect are characterized by optimal scalability, security and performance. Thanks to a unique and patented egui Technology, gateprotect sets standards when it comes to the confi guration of modern security systems. gateprotect s egui Technology raises operating security and effi ciency to a previously unattained level. Furthermore, gateprotect is the only manufacturer worldwide to implement the ISO NORM 9241 standard. gateprotect was recently honored with the Frost & Sullivan Best Practices Award GPZ 5000 ist the ultimate multifunctional security product. The egui technology renders the creation of rules easy and granular. A product that can be adjusted to individual requirements (and) offers an excellent price-performance ratio SC Magazin Firewall Review March 2013 Feature Specifi cations MANAGEMENT LAN / WAN-SUPPORT UNIFIED THREAT MANAGEMENT - Role based Firewall Administration - SSH-CLI - Desktop confi guration saved / restored separately from backup - Object oriented fi rewall confi guration - Direct Client Update function Ergonomic Graphic User Interface - ISO 9241 compliant - Immediate visual feedback for each setting - Self-explanatory functions - Overview of all active services - Overview of the whole network - Layer and zoom function USER AUTHENTICATION - Active Directory / OpenLDAP support - Local User database - Web-interface authentication - Windows-client authentication - Single sign on with Kerberos - Single- and Multi login - Web Landing page - Ethernet 10/100 MBits/s - Gigabit and 10 Gigabit Ethernet - SFP and SFP+ Fibre optics support - MTU changeable (Ethernet/DSL) - PPP-PAP, PPP-CHAP authentication - Inactivity timeout / Forced disconnect time - xdsl - Multi WAN support - WAN failover - Loadbalancing - Time controlled internet connections - Manual and automatic DNS assignment - Multiple dyndns support - Source based routing - Routing protocols RIP, OSPF - DHCP - DMZ VLAN VLAN per interface q ethernet header tagging - Combinable with bridging Bridge-mode - OSI-Layer 2 fi rewall function - Spanning tree (bride-id, port-cost) - Unlimited interfaces per bridge - Combinable with VPN-SSL Web-fi lter - URL-Filter with safe search enforcement - Content Filter - Block rules up to user-level - Black-/ White lists - Import / Export of URL lists - File Extension blocking - Category based website-blocking - Self defi nable categories - Scan technology with online-database - Intransparent HTTP-proxy support Application Control - Layer 7 Packet fi lter (DPI) - Filter Applications instead of ports - Detection & Control of Skype, Bittorrent and others as well as Web 2.0 Applications like Facebook Antivirus - Kaspersky Anti-Virus Engine - Complete Protection from all malware - HTTP, HTTPS - FTP, POP3, SMTP - Manual and automatic updates Antispam - Scan-level adjustable - Real-time Spam Detection - GlobalView Cloud using Recurrent Pattern Detection (RPD) - Mail Filter - Black- / White lists - Automatically reject/delete s - AD address import Intrusion Prevention - Individual custom rules - Security-level adjustable - Rule groups selectable - Scanning of all interfaces - DoS, portscan protection - Malicious network packet protection Proxies - HTTP (transparent or intransparent) - HTTPS - Support for Radius server, AD server, local user database - FTP, POP3, SMTP, SIP - Time-controlled TRAFFIC SHAPING / QOS LOGS, REPORTS, STATISTICS VPN COMMAND CENTER - Multiple Internet connections separately shapeable - All services separately shapeable - Maximum and guaranteed bandwidth adjustable - QoS with TOS-fl ags support - QoS inside VPN connection support HIGH AVAILABILITY - Active-passive HA - State synchronization - Single and Multiple dedicated links support - Stateful Failover BACKUP & RECOVERY - Small backup fi les - Remote backup & restore - Restore backup on installation - Automatic and time based backups - Automatic upload of backups on FTPor SCP-Server - USB Drive recovery option - Reporting - Logging to multiple syslog-servers - Logs in admin-client (with fi lter) - Export to CSV-fi les - IP and IP-group statistics - Separate services - Single user / groups - TOP-lists (Surfcontrol) - IDS- / Traffi c-statistics - Application Control traffi c statistics - Antivirus- / Antispam-statistics - Defence statistics MONITORING - System Info (CPU, HDD, RAM) - Network (interfaces, routing, traffi c, errors) - Processes - VPN - User Authentication SNMP - SNMPv2c - SNMP-traps - HA - VPN wizard - Certificate wizard - Site-to-Site - Client-to-Site (Road Warrior) - PPTP - Export to One-Click-Connection X.509 certifi cates - CRL - OCSP - Multi CA support - Multi Host-cert support IPSec - Tunnel mode - IKEv1, IKEv2 - PSK / Certifi cates - DPD (Dead Peer Detection) - NAT-T - XAUTH, L2TP SSL - Routing mode VPN - Bridge mode VPN - TCP/UDP - Specify WINS- and DNS-Servers - Monitor & Active Confi guration of 500+ fi rewalls - Central Confi guration and Monitoring of VPN Connections - Single and group backup - Plan automatic backup in groups - Single and group update & licensing - Create confi guration templates and apply on multiple fi rewalls - Certificate Authority - Certificate based 4096 bit encrypted connections to the fi rewalls - Display settings of all fi rewalls - Role based User Management

The egui is a pleasure to work with [...] We must applaud the brilliant arrangement and pedagogic approach.

The egui is a pleasure to work with [...] Dave Mitchell, SC Magazine - UTM Review 2009 We must applaud the brilliant arrangement and pedagogic approach. Lars Dobos, Tech World - UTM Review 2010 Clarity