SG-1000

VPN Security Gateway

 
 

Overview

The innovation of the Internet has created a tremendous worldwide venue for E-business and information sharing, but it also creates network security issues. The security request will be the primary concerned for the enterprise. New model of PLANET’s VPN Security Gateway SG-1000, a special designed of VPN security gateway, provides SSL, IPSec, and PPTP VPN. The SSL VPN function supports up to 50 SSL VPN connection tunnels. The IPSec VPN feature provides IPSec VPN Trunk and IKE, SHA-1, and MD5 Authentication. The PPTP VPN function supports PPTP server and client.

The SG-1000 provides Content Blocking feature to block specific URL, Script, IM, P2P, and download file. Also, it is built-in Anomaly Flow IP function. This function supports Hacker and Blaster Alerts. An administrator could use this function to watch and track an attacker. 

This product is built-in two WAN ports. It supports WAN Load Balance and Fail-Over Feature. Also, the QoS function provides Guaranteed Bandwidth and Priority Bandwidth Utilization.
 
Ordering Information
SG-1000 VPN Security Gateway (2 x WAN, 1 x LAN, 1 x DMZ)

Application

VPN Security Gateway
The SG-1000 provides SSL, IPSec, and PPTP VPN. The SSL VPN function supports up to 50 SSL VPN connection tunnels. Remote access clients could build the VPN tunnels by SSL VPN function easily.
 
 
Ordering Information
SG-1000 VPN Security Gateway (2 x WAN, 1 x LAN, 1 x DMZ)

Key Features

• VPN Connectivity
　The VPN security gateway supports SSL VPN, IPSec VPN, and PPTP server/client. The 
　SSL VPN function supports up to 50 SSL VPN connection tunnels. The IPSec VPN has 
　DES, 3DES, and AES encryption and SHA-1 / MD5 authentication. The network traffic 
　over public Internet is secured
• VPN Trunk
　VPN trunk function provides VPN load balance and VPN fail-over feature to keep the 
　VPN connection more reliable
• Content Filtering
　The security gateway can block network connection based on URL, Script (The 
　Pop-up, Java Applet, cookies and Active X), P2P (eDonkey, Bit Torrent and WinMX), 
　Instant Messaging (MSN, Yahoo Messenger, ICQ, QQ and Skype) and Download. If 
　there are new updated version of P2P or IM software in client side, SG-1000 will 
　detect the difference and update the Content Filtering pattern to renew the 
　filtering mechanism
• Policy-based Firewall
　The built-in policy-based firewall prevents many known hacker attack including SYN 
　attack, ICMP flood, UDP flood, Ping of Death, etc. The access control function 
　allowed only specified WAN or LAN users to use only allowed network services on 
　specified time
• QoS
　Network packets can be classified based on IP address, IP subnet and TCP/UDP port 
　number and give guarantee and maximum bandwidth with three levels of priority
• Authentication
　Web-based authentication allows users to be authenticated by web browser. User 
　database can be configured on the devices or through external RADIUS server
• WAN Backup
　The SG-1000 can monitor each WAN link status and automatically activate backup 
　links when a failure is detected. The detection is based on the configurable 
　target Internet addresses
• Outbound Load Balancing
　The network sessions are assigned based on the user configurable load balancing 
　mode, including “Auto”, “Round-Robin”, “By Traffic”, “By Session” and “By 
　Packet”. User can also configure which IP or TCP/UDP type of traffic use which 
　WAN port to connect
• Multiple NAT
　Multiple NAT allows local port to set multiple subnet works and connect to the 
　Internet through different WAN IP addresses
 
Ordering Information
SG-1000 VPN Security Gateway (2 x WAN, 1 x LAN, 1 x DMZ)

Specification

SPECIFICATION
Product VPN Security Gateway
Recommend concurrent user 30 ~ 50
Hardware
Ethernet LAN 1 x 10/100 Based-TX RJ-45
Ethernet WAN 2 x 10/100 Based-TX RJ-45
Ethernet DMZ 1 x 10/100 Based-TX RJ-45
Software
Management Web
Network Connection Transparent mode, NAT, Multi-NAT
Routing Mode Static Route, RIPv2
Concurrent Sessions 110,000
New Session / Second 10,000
WAN to LAN Throughput 100Mbps
VPN Throughput 18Mbps
VPN 3DES Throughput 17Mbps
VPN Function SSL, IPSec, PPTP server and client
DES, 3DES, and AES encrypting
SHA-1 / MD5 authentication algorithm
Remote access VPN (Client-to-Site) and Site to Site VPN
VPN Trunk
SSL VPN Internal Subnet of Server: 10
Connection Tunnels: 50
IPSec VPN Trunk 50
VPN Connection Tunnels / Allow to Configure IPSec: 100 / 200
PPTP Serve: 32 / 32
PPTP Client: 16 / 16
Content Filtering URL Blocking
Blocks Popup, Java Applet, cookies, and Active X
P2P Application Blocking
Instant Message Blocking
Download Blocking
Firewall Policy-based Firewall rule with schedule
NAT/ NAPT, SPI Firewall
QoS Policy-based bandwidth management
Guarantee and maximum bandwidth with 3 priority levels 
Classify traffics based on IP, IP subnet, TCP/UDP port
User authentication Built-in user database with up to 200 entries
Support local database, RADIUS, and POP3 authentication
Logs Log and alarm for event and traffic
Log can be saved from web, sent by e-mail, or sent to syslog server
Accounting Report Record inbound and outbound traffic’s utilization by Source IP, Destination IP, and Service
Statistics Traffic statistic for WAN interface and policies
Graphic display
Others Dynamic DNS, NTP, DHCP server, Virtual server

Ordering Information
SG-1000 VPN Security Gateway (2 x WAN, 1 x LAN, 1 x DMZ)

Download

Datasheet

Date Version Description Download
2007-11-20 1.0 SG-1000

Firmware

Date Version Description Download
2009-12-11 4.10 a) Added to view the concurrent auth users. (Administrator can kick-out the auth user here)
b) Fixed some HTTP Dwonload of web pages can't be recorded.
2009-05-15 3.07 1. Add the feature that Syslog now can be transferred to a syslog server over VPN.
2. Improve the performance when implementing IM / P2P Blocking.
2007-12-28 1.22 Inital release
2007-12-28 2.06.14 Firmware Version 2.06
Add Diagnostic Function.
Add MAC address can be modified by admin.

User's Manual

Date Version Description Download
2007-12-28   Initial release

EC Declaration

Date Version Description Download
2008-01-28   EC Declaration
Ordering Information
SG-1000 VPN Security Gateway (2 x WAN, 1 x LAN, 1 x DMZ)