Description

Falcon-EYE-27 goes beyond traditional firewall and brings a new approach to the way administrators define their firewalls with 6 gigabit Ethernet ports including one management port and 5 user-defined ports (LAN, WAN or DMZ). To enhance internal security, Falcon-EYE-27 unifies and deploys consistent security policies across networks. In a single click, delivering exceptional performance, superior multi-layered threat protection, and role-based administration to medium and large businesses.

Falcon-EYE-27

Specifications

  •    Firewall & Network Management  
    • Stateful & Deep Packet Inspection Firewall
    • Deployment in Gateway and Transparent Mode
    • Stops all DoS; Prevents DNS Spoofing & Flooding, SYN flooding
    • Block ARP spoofing、MAC & IP collision
    • NAT & Access Rules, FQDN, DNS Forwarder, DNS Proxy, Port Forwarding
    • Supports IP v4 & v6
    • Route – Static/Dynamic, RIPv2、BGP、OSPF
    • Object-oriented policy
  •    Access/Interface Management  
    • Static, DHCP, PPPoE, 3G/4G Support
    • Integration of Radius、AD、IMAP、POP3 server for authentication
    • Setup multiple VLAN, Zones, 802.1Q, 802.3ad
    • Manager IP address bind, MAC Whitelist/Blacklist
    • Admin/Users 2FA via Google Authenticator, Microsoft Authenticator
  •    High Availability & Load balancing  
    • Support Active/passive mode
    • Inbound/outbound Load balancing
    balance mode : Session、Source IP address、Destination IP address、Minimum First
  •    URL Filtering  
    • Add IP address(IPv4、IPv6)/URL/Domain to blacklist/whitelist
    • Built-in default black list including malicious、suspicious、aggressive website
    • Block Log  
  •    Application Control  • Multiple application categories e.g. P2P, IM, VOIP, Web, Webmail, game, video, spyware, stock, and others
    • Administrators can use policies to prohibit their users from accessing applications 
  •    Bandwidth/Traffic Management  • Support Qos by source IP address & policy
    • Bandwidth policy on a user/ip/mac/subnet/user group
    • Qos on using a certain application
    • Anomaly IP analysis, detect & block any suspicious flow 
  •    Mail Security  • Employs multiple spam mechanisms: ST-IP network rating, fingerprinting, Bayesian filtering, auto learning, auto-whitelist, system and personal Blacklist/Whitelist and spam characteristics filtering
    • Offers Email content and spam filtering
    • Shared spam signatures
    • Email Auditing module for advanced filtering and quarantine
    • Data loss prevention by set Personal information filter in Mail Audit
    • Client-side spam mail search is available on the web-based interface
    • Additional actions such as quarantine, delete, blocking IP, and carbon copies can be performed to all mail
    • Searching recorded email  
  •    Anti-Virus & Advance Threat Protection  • Uses Clam AV engine with huge database includes millions of signatures which get updated regularly and requires no yearly subscription fees
    • Optional Kaspersky module
    • Virus, Worms, Trojan detection & Removal
    • Zero Day Protect : Sandstorm
    • Automatic Virus Signature Database Update
    • Scans HTTP, HTTPS, SMTP/S, POP3, IMAP
    • SSL Inspection 
  •    Intrusion Detection & Prevention
      • Signatures : Default (31900 +)
    • IPS action : Log & block
    • Automatic / USB offline update signature database 
  •    Performance
    • UTM throughput (1518, TCP) – 15 Gbps 
    • IPS throughput – 700 Mbps
    • IPsec VPN throughput – 850 Mbps
    • Concurrent session – 3,400,000
    • New session per sec – 120,000
    • No. of IPsec VPN Tunnels - 3000
    • No. of SSL VPN peers - 1200 
  •    Hardware 
    • Memory – 4GB, 480G SSD
    • Gbps Ethernet Ports – 1 MGMT. Giga port、5 Giga ports、2 10G SFP+ ports
    • 2USB ports, 1 console, LCD panel 
  •    System Management  
    • Integrated wizards for user-friendly setup
    • Auto backup configuration file
    • Supports hardware interrupts to the CPU
    • Uninterruptible Power System (UPS)
    • Offers HTTPs web management
    • Supports DDNS service, DNS service, and SNMP service
    • LCD panel 
  •    Virtual Private Network  
    • Support SSL VPN、PPTP、L2TP ; IPsec VPN tunnel
    • Agent based SSL VPN supporting 2FA
    • SSL Authentication – local、AD、Radius、IMAP、POP3 server
    • IPsec encryption – 3DES、DES、AES ; Hash Algorithm – MD5、SHA-1、SHA-256、SHA-512
    • IPsec Authentication - Preshared key
    • Diffie Hellman Groups - 2, 5, 14, 15, 16, 17, 18
    • Dead Peer Detection, PFS Support
    • AutoVPN for admin deploy site-site VPN in easily way
    • Granular Access Control to all network resources
    • Certificate Management  

ORDERING OPTION

Falcon-EYE-27 1 MGMT Giga port、5 Giga ports、2*10G SFP+ ports, 2USB ports.