GPX 650 - Next Generation UTM Appliance

The IT Security solutions from gateprotect offer a very high level of flexibility. There are suitable products available for use in a wide range of different networks and they offer all current security features. All gateprotect Firewall Appliances employ cutting edge security technology, without sacrificing ease of use on a daily basis. All of this thanks to the process-oriented operator navigation system, which offers a very high level of clarity into the overall network and services distribution. gateprotects eGUI technology increases operating security and efficiency to a previously unattained level. The GPX 650 Next Generation UTM Appliances have extensive features including VLAN, Layer-8 technology, single sign-on, bridging, VPN SSL via x.509 certificates & VPN IPSec, IDS/ IPS, traffic shaping, antivirus, zero hour mail protection, Web filtering as well as Application Control and the very latest process-oriented eGUI technology.

Specifications
Interfaces 1 GbE Ports System Performance* Firewall throughput (MBit/s) VPN IPSec throughput (MBit/s) UTM throughput (MBit/s) IPS throughput (MBit/s) Dimensions H x W x D (mms) Gross Weights (kgs) Power Input Voltage (V) Full load power consumption (W) Environmental Operating Temperature (C) Storage Temperature (C) Relative Humidity (Non condensing) Hardware Certification

GPX 650
8xRJ45 (front)

6 000 700 450 1 200

44 x 426 x 365 6

AC 100-240 66 W

0 ~ 40 -10 ~ 70 20 ~ 90%

* System performance depends on application level and number of active VPN connections. We do not offer an express or implied warranty for the correctness /up-to-dateness of the information contained here (which may be change at any time). Future products or functions will be made available at the appropriate time. 2013 gateprotect AG Germany. All rights reserved.

gateprotect AG Germany is one of the worlds leading producers of IT-security solutions for effective network security. Our primary products are Next Gene ration Firewalls and Managed Security Systems. They protect small to large companies, nonprofit organisations and govern ment networks from threats and attacks coming from the Internet. gateprotects IT security solutions are used on the whole globe. The confidence in gateprotect is now demonstrated through 40,000 installations worldwide at client sites of all industries. Its UTM firewalls are listed in the Magic Quadrant of the international renowned market research company Gartner. Gartner only positions companies in its Magic Quadrant that meet their ambitious criteria, which include technological performance, a certain level of annual revenue and active customer references as well as the necessary functionality.

gateProtect AG Germany Valentinskamp 24 20354 Hamburg / Germany Hotline Phone +49 (0) 40 278 850 Internet www.gateprotect.com

FEatuRE OVERViEW Next Generation UTM Appliances

The Next Generation UTM Appliances from gateprotect are characterized by optimal scalability, security and performance. Thanks to a unique and patented eGUI Technology, gateprotect sets standards when it comes to the configuration of modern security systems. gateprotects eGUI Technology raises operating security and efficiency to a previously unattained level. Furthermore, gateprotect is the only manufacturer worldwide to implement the ISO NORM 9241 standard. gateprotect was recently honored with the Frost & Sullivan Best Practices Award 2011.

2011
GLOBAL UNIFIED THREAT MANAGEMENT PRODUCT DIFFERENTIATION EXCELLENCE AWARD

gateprotect provides UTM products that stand-out from the competition due to their ease-of-use and security effectiveness. The gateProtect ergonomic graphical user interface (eGUI) provides the most intuitive and effective visual UTM management interface available in the marketplace.
Frost & Sullivan, August 2011

Feature Specifications
Management
- Role based Firewall Administration - SSH-CLI - Desktop configuration saved / restored separately from backup - Object oriented firewall configuration - Direct Client Update function

LAN / WAN-support
- Ethernet 10/100 MBits/s - Gigabit Ethernet - MTU changeable (Ethernet/DSL) - PPP-PAP, PPP-CHAP authentication - Inactivity timeout / Forced disconnect time - xDSL - Multi WAN support - WAN failover - Loadbalancing - Time controlled internet connections - Manual and automatic DNS assignment - Multiple dynDNS support - Source based routing - Routing protocols RIP, OSPF - DHCP - DMZ VLAN

Unified Threat Management

Web-filter - - - - - - - - - - URL-Filter with safe search enforcement Content Filter Block rules up to user-level Black-/ White lists Import / Export of URL lists File Extension blocking Category based website-blocking Self definable categories Scan technology with online-database Intransparent HTTP-proxy support Antispam - Scan-level adjustable - Real-time Spam Detection - GlobalView Cloud using Recurrent Pattern Detection (RPD) - Mail Filter - Black- / White lists - Automatically reject/delete emails - AD Email address import Intrusion Prevention - - - - - - - Individual custom rules Security-level adjustable Rule groups selectable Exceptions definable Scanning of all interfaces DoS, portscan protection Malicious network packet protection

Ergonomic Graphic User Interface - ISO 9241 compliant - Immediate visual feedback for each setting - Self-explanatory functions - Overview of all active services - Overview of the whole network - Layer and zoom function

Application Control - - - Layer 7 Packet filter (DPI) Filter Applications instead of ports Detection & Control of Skype, Bittorrent and others as well as Web 2.0 Applications like Facebook

User authentication
- - - - - - - Active Directory / OpenLDAP support Local User database Web-interface authentication Windows-client authentication Single sign on with Kerberos Single- and Multi login Web Landing page

- 4094 VLAN per interface - 802.1q ethernet header tagging - Combinable with bridging Bridge-mode - - - - OSI-Layer 2 firewall function Spanning tree (bride-ID, port-cost) Unlimited interfaces per bridge Combinable with VPN-SSL

Antivirus - - - - - - Kaspersky Anti-Virus Engine Complete Protection from all malware HTTP, HTTPS FTP, POP3, SMTP Exceptions definable Manual and automatic updates

Proxies - HTTP (transparent or intransparent) - HTTPS - Support for Radius server, AD server, local user database - FTP, POP3, SMTP, SIP - Time-controlled

Traffic shaping / QOS

- Multiple Internet connections separately shapeable - All services separately shapeable - Maximum and guaranteed bandwidth adjustable - QoS with TOS-flags support - QoS inside VPN connection support

LOGS, Reports, Statistics

- - - - - - - - - - - - Email Reporting Logging to multiple syslog-servers Logs in admin-client (with filter) Export to CSV-files IP and IP-group statistics Separate services Single user / groups TOP-lists (Surfcontrol) IDS- / Traffic-statistics Application Control traffic statistics Antivirus- / Antispam-statistics Defence statistics

VPN
- VPN wizard - Certificate wizard - Site-to-Site - Client-to-Site (Road Warrior) - PPTP - Export to One-Click-Connection X.509 certificates - CRL - OCSP - Multi CA support - Multi Host-cert support IPSec

Command Center
- - - - - - - - - - Monitor & Active Configuration of 500+ firewalls Central Configuration and Monitoring of VPN Connections Single and group backup Plan automatic backup in groups Single and group update & licensing Create configuration templates and apply on multiple firewalls Certificate Authority Certificate based 4096 bit encrypted connections to the firewalls Display settings of all firewalls Role based User Management

High availability
- - - - Active-passive HA State synchronization Single and Multiple dedicated links support Stateful Failover

Monitoring
- System Info (CPU, HDD, RAM) - Network (interfaces, routing, traffic, errors) - Processes - VPN - User Authentication SNMP - SNMPv2c - SNMP-traps - HA*

Backup & Recovery

- - - - - - Small backup files Remote backup & restore Restore backup on installation Automatic and time based backups Automatic upload of backups on FTPor SCP-Server USB Drive recovery option

- Tunnel mode - IKEv1, IKEv2 - PSK / Certificates - DPD (Dead Peer Detection) - NAT-T - XAUTH, L2TP SSL - Routing mode VPN - Bridge mode VPN - TCP/UDP - Specify WINS- and DNS-Servers