Stateful Inspection Firewall

• Layer 8 (User - Identity) Firewall
• Multiple Security Zones
• Location-aware and Device-aware Identity-based Access Control Policy
• Access Control Criteria (ACC): User-Identity, Source and Destination Zone, MAC and IP address, Service
• Security policies - IPS, Web Filtering, Application Filtering, Anti-virus, Anti-spam and QoS
• Country-based Traffic Control
• Access Scheduling
• Policy based Source and Destination NAT, Gateway Specific NAT Policy
• H.323, SIP NAT Traversal
• DoS and DDoS attack prevention
• MAC and IP-MAC filtering
• Spoof Prevention

Intrusion Prevention System

• Signatures: Default (4500+), Custom
• IPS Policies: Pre-configured Zone-based multiple policies, Custom
• Filter based selection: Category, Severity, Platform and Target (Client/Server)
• IPS actions: Recommended, Allow Packet, Drop Packet, Disable, Drop Session, Reset, Bypass Session
• User-based policy creation
• Automatic signature updates via Cyberoam Threat Research Labs
• Protocol Anomaly Detection
• SCADA-aware IPS with pre-defined category for ICS and SCADA signatures

Application Filtering

• Layer 7 (Applications) " " Layer 8 (User - Identity) Control and Visibility
• Inbuilt Application Category Database
• Control 2,000+ Applications, classified in 21 Categories
• Filter based selection: Category, Risk Level, Characteristics and Technology
• Schedule-based access control
• Securing SCADA Networks
• SCADA/ICS Signature-based Filtering for Protocols Modbus, DNP3, IEC, Bacnet, Omron FINS, Secure DNP3, Longtalk
• Control various Commands and Functions Administration " " System Management
• Web-based configuration wizard
• Role-based Access control
• Support of API
• Firmware Upgrades via Web UI
• Web 2.0 compliant UI (HTTPS)
• Command Line Interface (Serial, SSH, Telnet)
• SNMP (v1, v2, v3)
• Multi-lingual : English, Chinese, Hindi, French, Japanese
• Cyberoam Central Console (Optional) User Authentication
• Internal database
• AD Integration and OU-based Security Policies
• Automatic Windows Single Sign On
• External LDAP/LDAPS/RADIUS database Integration
• Thin Client support
• ***** - 2-factor authentication: 3rd party support
• SMS (Text-based) Authentication

Layer 8 Identity over IPv6

• Secure Authentication – AD, LDAP, Radius
• Clientless Users
• Authentication using Captive Portal

Logging/Monitoring

• Real-time and historical Monitoring
• Log Viewer - IPS, Web filter, WAF, Anti-Virus, AntiSpam, Authentication, System and Admin Events
• Forensic Analysis with quick identification of network attacks and other traffic anomalies
• Syslog support
• 4-eye Authentication

High Availability

• Active-Active
• Active-Passive with state synchronization
• Stateful Failover with LAG Support

IPSec VPN Client

• Inter-operability with major IPSec VPN Gateways
• Import Connection configuration

Certification

• Common Criteria - EAL4+
• ICSA Firewall - Corporate
• Checkmark Certification
• VPNC - Basic and AES interoperability
• IPv6 Ready Gold Logo
• Global Support Excellence - ITIL compliance (ISO 20000)

Hardware Specifications

• Memory 16GB
• Compact Flash 4GB
• HDD 250GB or higher

Power

• Input Voltage 90-260 VAC
• Consumption 258 W
• Total Heat Dissipation (BTU) 881Redundant Power Supply Yes

Environmental

• Operating Temperature 0 to 40 °CStorage Temperature 0 to 70 °C Relative Humidity (Non condensing) 10 to 90%