SG560

The SG560 is a feature-rich, compact, network security device, which is well suited to protecting small branch offices of mid-sized enterprises. It is also a great choice for cost-effectively protecting satellite offices, gas stations and restaurants, as well as SCADA installations.

The SG560 enables remote office networks to easily connect their PCs and servers to the Internet via broadband (ADSL, cable, SHDSL, T-1 and T-2 circuits, etc.) or narrow-band (modem or ISDN). The SG560 provides connectivity and security features normally found in enterprise-class solutions. With the inclusion of five Fast Ethernet ports, link fail-over and Internet session load balancing as well as multiple security zones, the SG560 can be deployed in a myriad of environments. Should the primary broadband connection fail, the SG560 can fail over to a second broadband link, ensuring uninterrupted service. Internet traffic can also be load balanced between links, increasing bandwidth for web surfing. And if there is a complete broadband failure, the SG560 can automatically restore Internet connectivity with a dial-up connection.

A powerful stateful-inspection firewall, service-based intrusion detection blocking and advanced Internet connection sharing protect the branch office network from the Internet. The SG560 provides three security zones (DMZ, Guest, and LAN) on separate Ethernet segments..

Features

* Steel casing for SME environments
* IPSec, L2TP & PPTP VPN client and server
* Link fail -over & load balancing
* DMZ, Guest and LAN security zones
* No per-user licensing or restrictions
* Web management console
* Fully interoperable with CyberGuard appliances and other standards-based security devices
* No third-party client software required

Recommended for:

* Small branch offices
* Branch office VPN endpoint
* Central VPN for small multi-site networks
* Networks with mobile and remote workers
* Complementary VPN endpoint for CyberGuard TSP and Classic Family appliances
* Suitable for routing ADSL and Cable up to T1, DS1 and E1
* Suitable for VPN up to 30Mbps (broadband and LAN-to-LAN)

Specifications

*VPN - IPSEC

*VPNC-certified interoperability
* Peer-to-peer (initiate and terminate)
* ESP and AH payloads
* Supports aggressive mode
* Dead peer detection
* Compression (deflate / gzip type algorithm)
* DES 56-bit, 3DES 168-bit, AES 256-bit encryption
* Hashes HMAC - MD5 and SHA-1 authentication
* IKE/ISAKMP Diffie-Hellman key exchange
* Diffie-Hellman Groups (1,2,5) and Oakley Groups (14,15,16) to 4096-bits
* X.509 certificates DER, PEM formats
* Pre-shared secrets
* Dynamic IP address endpoints
* Dynamic DNS IPSec support
* Authentication up to 2048-bit for RSA key signatures
* Multiple subnets
* NAT traversal
* Up to 100 IPSec tunnels
* 30 Mbps IPSec 3DES(VPN/firewall)
* 35 Mbps IPSec AES (VPN/firewall) VPN - L2TP
* IPSec config Wizard
* L2TP over IPSec
* Autonomous L2TP
* Client: NAT, default route via L2TP
* Server: specify client IP address range VPN - PPTP
* v2 client and server
* Pass-through mode also
* MPPE 40 to 128-bit RC4 encryption
* PAP/CHAP/MS CHAPv2 authentication
* L2TP & GRE tunneling extensions
* Up to 10 PPTP client tunnels
* Up to 20 PPTP server tunnels
* Up to 7 Mbps RC4 throughput

Firewall

* Dynamic stateful inspection firewall
* ICSA-certified
* NAT - static and dynamic
* NAPT/PAT - port forwarding
* Connection sharing
* Anti-intrusion
* 120 Mbps firewall performance

Network

* Traffic shaping (QoS)
* IP aliases
* DHCP - client and server
* PPPoE (for ADSL support)
* Bridging (802.1d)
* RIP, RIPv2
* RAS (dial-in)
* Dial on demand
* Fail-over / high availability (req v3.0 firmware)
* DNS enhanced caching, masquerading, proxy, multiple DNS server proxying
* 120 Mbps routed throughput
* 110 Mbps PPPoE throughput

Management

* Logging (local and remote)
* NTP client and server
* Web management
* CLI (Telnet) management
* Initial set-up via either static IP address or dynamic IP address (DHCP client)
* Administration user accounts
* RADIUS / TACACS+

Hardware

* Status LEDs
* WAN port - 1x10/100BaseT
* LAN ports - 4x10/100BaseT - WAN2, DMZ, Guest, LAN
* Serial ports - 1 (dial-in, or dial-on-demand)
* Memory - 8MB Flash, 16MB RAM
* Real-time clock
* Power - 5V 1.5A
* Weight - 1lb (500g)
* Dimensions - 6.5"x4.5"x1" (168mmx115mmx26mm)
* Operating temperature 0C to 40C
* Storage temperature -20C to 70C
* Humidity 0 to 95%, non-condensing
* Certification - home and office
* Warranty - 1 year*, optional Extended Four Year Warranty