ALLO Unified Threat Manager, Shield UTM appliances

Advanced state full firewall integrated with L7 application control, intrusion prevention, SSLVPN, IPSec VPN, web filtering, users authentication functionalities.

Shield UTM appliances comes with four 1Gbps LAN ports & two 1Gbps WAN ports, one auxiliary console port & One USB port.

Firewall

• State full firewall with connections tracking capabilities
• Dynamic/static NAT, port forwarding
• Prevention of DOS, DDOS & IP spoofing
• Bandwidth control
• Multicast forwarding
• TCP syn cookies
• MAC filtering
• QOS/diffserv marking
• Content filtering - Blocking java/activeX/proxy/cookies
• L7 application control with 70+ protocols support
• Transparent firewall/routed firewall mode
• Use of policy objects for firewall/NAT policies configuration
• Support for multiple firewall zones & zone based security policies

Intrusion Prevention System (IPS)

• Snort 2.9 based intrusion prevention enabling both signature based detection and detailed protocol decoders.
• Support for automatic signature updates
• Support for custom signatures with intuitive signature configuration wizard
• Supporting the signatures from emerging threats/snort VRT

SSLVPN

• OpenVPN based SSLVPN solution - Access gateway mode & P2P mode support
• Locally managed SSLVPN client profiles
• Two factor authentication enabling password/certificates based authentication for SSLVPN clients
• Use of pre shared keys/certificates for P2P authentication
• TCP/UDP based tunnels
• AES/DES/BF/CAST5/RC2 encryption
• Traffic compression
• Tunnel all traffic mode support on the client side.
• Supporting up to 20 VPN clients
• Support for mobile VPN clients
• Easy to use VPN user profiles/P2P policies configuration.

IPSec

• Tunnel/transport mode
• IKE exchange - Main/aggressive/base mode
• DES/3DES/blowfish/cast128/AES encryption
• MD5/SHA digest
• Pre shared keys/certificates authentication
• IKE/Diffe hellman group
• AH/ESP support
• IPSec/PFS group support
• Traffic compression
• Dead peer detection

Web Filtering

• Web filtering with squid proxy – support for URLs/Regular expression based filtering
• Categories based filtering with URL blacklist service
• Users/User Groups based web filtering policies
• SSL proxy
• Explicit/transparent proxy mode support
• Limiting http connections per network/users/user groups
• Filtering based on web request/response size
• SSL control
• Digest based authentication for locally managed users
• Web caching with USB based storage
• Localization support for web filtering blocking pages.

Network

• DHCP
• DNS
• Static routes
• Virtual IP
• DDNS
• VLAN/801.q
• Dual WAN with wan failover/load balancing (Only available in SMB)
• Firewall zones/port mapping
• PPPoE/xDSL support

Device Management

• WebUI accessible via SSL
• SSH CLI access
• NTP
• SNMP v1/v2/v3 support
• Syslog
• Provision to update firmware via WebUI
• Factory Reset
• Diagnostic utilities
• Certificates management for web proxy/SSLVPN/IPSec services

Reports

• Log viewer for accessing syslog logs/security alerts
• Firewall connections monitoring
• DHCL clients status
• VPN connections monitoring
• Graphical reports on system resources usage/FW connections monitoring/IPS alerts
• Web filtering reports

Tech Specs

No of Interfaces	Two 1Gbps WAN port & four 1Gbps LAN ports, 1 console interface, 1 USB port
Status Firewall Inspection	Yes
Deep Packet Inspection	Yes
Signatures Support	~4000 active signatures from snort VRT/emerging threats
Application Protocols Detection	70+
Maximum No of Connections	20000
Maximum No of New Connections Per Second	1800
Maximum No of SSLVPN Clients	100
Authentication	X509 certificates, internal user DB
Logging	Local log viewer, syslog
Device Management	HTTPS GUI, SNMP
Hardware	Cavium Octeon II 63xx, 2cores 800MHz
RAM	1 GB