 With the adoption of wireless LANs (WLANs), people in distributed departments within medium to large organizations benefit from the ability to access information when away from a desk. Staff can respond to requests while in the warehouse or conference room improving efficiency and customer service. This is true whether it's marketing, sales, finance or HR. The benefits of WLANs are not restricted to medium to large businesses but local data access mobility is very useful in healthcare, retail, finance, and hospitality and manufacturing. Today timely and secure data transactions are critical. If inventory, patient test results, financial reports and other sensitive data are not available when and where needed, it can seriously impact business success. Today many businesses also place staff where the business is generated. Therefore mobile employees, satellite and temporary offices are very common for long and short-term projects.
| Recommended for: | • | Branch offices of medium enterprises
| • | Complementary VPN endpoint for Secure Computing Sidewinder and SecureWire (SSL-VPN) appliances | • | Wireless Campus (University or Corporate)
| • | Suitable for routing ADSL/Cable up to T1 & E1 | • | Temporary offices - complete network | • | VoIP applications (SIP proxy with QoS Controls) | | • | Mobile and remote workers | • | Wired or wireless online access (wireless needs must be enabled) | |
|
Create an instant secure office network The SnapGear model SG565 is an all-in-one wired or wireless workgroup security and data access appliance. It is a feature-rich, desktop, network security and data access device designed for today's business that requires access to and collection of time-critical data wherever their staff or customers may be. The SG565 allows businesses to create a unique wireless and wired local network. Not only does it provide a wireless access point with secure Internet access and site-site access to the central office, it also supports network attached file storage and network printing - all in one appliance. In effect the SG565 creates the instant office network using off the shelf peripherals. Providing network storage via the SG565 is a simple as plugging in a USB hard drive or USB flash device into one of the two available USB ports. Printing is just as easy using USB printers and standard desktop network printing services. This in many cases eliminates a number of server computers. It enables enterprises to deploy remote or temporary office networks with major IT infrastructure instantly available to carry on secure business. Leveraging the SG565 within a home office or small business is common. Many users take advantage of the SG565s VLAN capabilities to separate a port for their VoIP phone, another port for their DMZ, and yet other ports for their work and home computers. The quality of service (QoS) capabilities will always ensure your VoIP phone calls always get higher priority than the colleague spamming the office with pictures from his vacation last weekend. Comprehensive Security and Internet Uptime The SG565 is well suited to protecting branch offices of medium sized enterprises as well as other sites such as gas stations, retail stores, medical clinics, hotels and so on. The SG565 enables small office networks to easily connect their wired desktop or wireless notebook PCs to the Internet via broadband (ADSL, cable, SHDSL, T-1 and T-2 circuits, etc.) or narrow-band (modem or ISDN). Should the broadband connection fail the SG565 can fail over to a second broadband connection or the narrowband backup connection, ensuring uptime. By providing five separate security zones, the SG565 can support DMZs, guest networks, multiple LANs and WANs. The SG565 unifies defenses to combat blended threats into a single device converging firewall, intrusion protection, threat containment (vulnerability scanning/blocking), with the capability of performing gateway anti-virus e-mail scanning. High availability is achievable by installing a pair of SG565 appliances for load balancing or hot standby. Secure Computing’s TrustedSource electronic mail scanning is available on the SG565 to cut the majority of SPAM entering your local network. VPN capabilities for Remote Access and Multi-site Access A remote office network can safely become part of a central office network, as the SG565 is also a cost-effective VPN end point device. The SG565 includes industry-standard secure VPN access methods (IPSec, PPTP, L2TP) with hardware-accelerated encryption. It is complementary to the SnapGear SG710 and CyberGuard TSP families of firewall/VPN appliances for medium to large-scale branch office to head office VPN deployments. | Features | | - Robust steel casing for medium enterprise and retail environments
- Full IPSec and PPTP VPN
- Intrusion Protection and Anti-virus (V 2.3)
- Network file storage and printing (USB)
- No per-user licensing or restrictions
- Wi-Fi WLAN and/or wired 10/100 LAN
- Highly interoperable with leading brands
- No third-party client software required
- Central management with Global Command Center
VPN - IPSec - IPSec configuration Wizard
- VPNC-certified interoperability
- Peer-to-peer (initiate and terminate)
- ESP payload (AH manual config)
- Supports aggressive mode
- Dead peer detection
- Compression (deflate / gzip type algorithm)
- DES 56-bit, 3DES 168-bit, AES 256-bit encryption
- Hashes HMAC -MD5 and SHA-1 authentication
- IKE/ISAKMP Diffie-Hellman key exchange
- Diffie-Hellman Groups (1,2,5) and Oakley Groups (14,15,16) to 4096-bits
- X.509 certificates DER, PEM formats
- Pre-shared secrets
- Dynamic IP address end-points
- Dynamic DNS IPSec support
- Authentication up to 2048-bit for RSA key signatures
- Multiple subnets
- NAT traversal
VPN -L2TP - L2TP over IPSec
- Autonomous L2T
- Client: NAT, default route via L2TP
- Server: specify client IP address range
VPN - PPTP - v2 client and server
- Pass-through mode also
- MPPE 40 to 128-bit RC4 encryption
- PAP/CHAP/MS CHAPv2 authentication
- L2TP & GRE tunneling extensions
Anti-Virus - Anti-virus e-mail scanning
- Anti-virus (ClamAV)
Firewall - Dynamic Stateful inspection firewall\
- ICSA-certified
- NAT -static and dynamic
- NAPT/PAT -port forwarding
- Connection sharing
- Intrusion Protection (Snort)
- Threat Containment (Nessus based)
- Vulnerability Scan/Block
| Network - Traffic shaping (QoS)
- IP aliasesDHCP -client and server
- PPPoE (for ADSL support)
- Bridging (802.1d)
- RIP, RIPv2, OSPF, BGP
- RAS (dial-in)
- Dial on demand (dial out)
- Fail-over (link-link) / high availability (device-device)
- DNS enhanced caching, masquerading, proxy, multiple DNS server proxying
- SIP Proxy
- URL filtering subscriptions available
- Anti-SPAM subscriptions available (TrustedSource)
- VLANs
Management - Logging (local and remote)
- NTP client and server
- Web management
- * SNMP MIB-II (partial)
- CLI (Telnet) management
- Initial set-up via static IP address or dynamic IP address (DHCP client)
- Administration user accounts
- RADIUS / TACACS+
Wifi - 802.11 b/g
- WEP 64/128
- WPA TKIP/AES Preshared Key (Personal)
- WPA X.509 / Enterprise (future firmware release)
- Access control list (allow or deny specified MACs)
- Option to limit bridging between clientsBridged or routed mode for
- Access Point Mode
- Client Mode (future firmware release)
NAS (Network Attached Storage) - Samba 3.0 based
- USB HD or USB-key (flash) storage supported
- Advertise storage to LAN as Windows shares (public or per user)
- Easy to use, always on, file-server for a small office.
- CLI tools to format and partition USB hard drives
- Rsync (backup management), ftp
- USB storage can be used for web-cache (squid), print spooling, logging, shared file system, etc.
Printing - Supports business (network aware) USB printers
- Provide centralized print services to a small office
- Flexible spooling options (network & USB disk)
Hardware - Status LEDs
- WAN port -10/100BaseT
- WAN port-External USB DSL modems
- LAN ports -4x10/100BaseT -DMZ, LAN zones, 2nd WAN, etc.
- WLAN -IEEE802.11b/g Access Point -802.11b:CCK, DQPSK,
- DBPSK -802.11g:OFDM
- Dual Dipole Antennae
- 2.4GHz -2.4385GHz
- RF Power -19dBm@11Mbps -15dBm@54Mbps
- Radio Sensitivity -70dBm@54Mbps -83dBm@11Mbps
- Serial ports -1 (dial-in, or on-demand)
- Memory -16MB Flash, 64MB RAM
- USB External Storage (HHD or Flash)
- USB printers (Host drivers)
- Real time clock
- Power -5V 1.5A
- Weight -1lb (500g)
- Dimensions -8.1"x4.7"x1" (206mmx120mmx26mm)
- Operating temperature 0C to 40C
- Storage temperature -20C to 70C
- Humidity 0 to 95%, non-condensing
- Certification -home and office
- Warranty -1 year*, extended 3 year warranty available
Other Snapgear models and links: SG300
SG560
SG565
SG580
SG720
SG640 |
|
