C613-22104-00 REV B Selecting a UTM Firewall | Page 29
Selecting a Security Solution Advanced Network Protection
internal hosts. This method of security is inherently more secure than stream-based scanning.
However, this reduces the number of concurrent connections per second and the recommended
number of users.
Features required for each scenario
The following table shows the features to use to support each scenario, and the licenses that
contain each feature:
Performance guidelines
When deciding which scenario best matches your requirements, consider:
The number of concurrent users.
Other network functions or services the UTM Firewall is performing (for instance, BGP or AMF
Master), as these could affect the available CPU resources.
Whether to configure UTM Offload, which can potentially double WAN connection throughput for
real-time threat protection.
The level of protection your network really requires. While enabling all licensed features may give
the strongest protection to the network, it will also give it the lowest throughput. Therefore, please
consider the needs of your network carefully before selecting a specific platform and security
feature combination.
LICENSE VPN
AGGREGATION
APPLICATION-
AWARE
FIREWALL AND
WEB CONTROL
REAL-TIME
THREAT
PROTECTION
HIGH
SECURITY
GATEWAY
VPN Unlicensed Yes Optional Optional Optional
Application Control Advanced
firewall
license
- Yes - -
Web Control -Yes--
URL Filtering - - Yes -
IP Reputation Advanced
threat
protection
license
--Yes-
Malware Protection - - Yes -
Anti-virus ---Yes
UTM Offload
a
a. UTM Offload enables the router to offload processing of IP Reputation, Malware Protection, URL
Filtering and IDS/IPS to a secondary physical or virtual machine that is automatically managed by
an AR4050S. It is supported from version 5.4.8-1.2 onwards on AR4050S only. Use of UTM offload
is not recommended with Web Control or Anti-virus.
UTM
Offload
- - Optional -
To Next Page
Loading...
Need help?
General
