Endian UTM Mini 10 Die Neue Generation Von UTM Hardware Appliances
Total Page:16
File Type:pdf, Size:1020Kb
Secure everyThing www.endian.com Endian UTM Mini 10 Die neue Generation von UTM Hardware Appliances Mini 10 ist das neue UTM-Einstiegsgerät von Endian, das sich sowohl für Kleinunternehmen als auch das Homeoffice Performance Mini 10 eignet, mit dem aber auch große Projekte perfekt ergänzt Firewall Durchsatz 1 Gbit/s werden können. VPN Durchsatz (IPsec & SSL) 50 Mbit/s Die Mini 10 Appliance ist das ideale Gerät für Netzwerksicher- IPS Durchsatz 120 Mbit/s heit bei Betrieben mit einer begrenzten Anzahl an Mitarbeitern. Antivirus Durchsatz (Proxy) 90 Mbit/s Das Gerät garantiert alle zum Schutz des IT-Umfelds erforder- Web Security Durchsatz 250 Mbit/s lichen Features zu einem kostengünstigen Preis. Gleichzeitige Verbindungen 300.000 Mini 10 lässt sich aber auch hervorragend im Rahmen von großen und umfassenden Projekten einsetzen, in welchen neben einem Hardware Mini 10 zentralen Unified Threat Management (UTM) Gerät auch die Notwendigkeit besteht, weitere verbundene Niederlassungen Gehäuseart Desktop durch kleinere Geräte zu schützen. Maße 44mm x 232mm x 153mm Highlights Gewicht 1,1 kg 4 Ethernet Ports Arbeitsspeicher 2 GB 2 GB RAM Festplatte 8 GB 8 GB CFast Flash Speicher Networking 4x Gigabit Ethernet Desktop Lösung LAN Bypass - WiFi Upgrade verfügbar Netzteil 40W External Cooling Fans LCD Display - VGA - Hardwaregarantie included in maintenance Zertifizierungen FCC/CE/RoHS Endian UTM Mini 10 www.endian.com Endian UTM Features Network Security Virtual Private Networking BYOD / Hotspot* Bridging • Stateful packet firewall IPsec • Configurable captive portal • Firewall stealth mode • Application control (including • Encryption: Null, 3DES, CAST-128, • Use your website as portal (SurfNow • OSI layer 2 firewall functionality Facebook, Twitter, Skype, WhatsApp AES 128/192/256-bit, Button) • Spanning tree and more) • Blowfish 128/192/256-bit, • Free access to allowed sites • Unlimited interfaces per bridge • Demilitarized zone (DMZ) Twofish 128/192/256-bit, (walled garden) • Intrusion detection and prevention • Serpent 128/192/256-bit, • Wired / wireless support High Availability • Multiple public IP addresses Camellia 128/192/256-bit • Integrated RADIUS service • Hot standby (active/passive) • Multiple WAN • Hash algorithms: MD5, SHA1, SHA2 • Connection logging • Node data/configuration synchroni- • Quality of service and bandwidth 256/384/512-bit, AESXCBC • Bandwidth limiting based on user, zation (not for BYOD/Hotspot) management • Diffie Hellman modes: 1, 2, 5, 14, 15, ticket or global settings Event Management • SNMP support 16, 17, 18, 22, 23, 24 • Social login (Facebook, Google) • More Than 30 Individually Configur- • VoIP/SIP support • Authentication: pre-shared key (PSK), • Social Enabler (sharing on social able Events • SYN/ICMP flood protection RSA keys networks) • Email Notifications • VLAN support (IEEE 802.1Q trunking) • X.509 certificates • MAC-address based user accounts • SMS Notifications • DNS proxy/routing • IKEv1, IKEv2 • Configurable multiple logins per user • Powerful Python Scripting Engine • Anti-spyware • Dead Peer Detection (DPD) • User accounts import/export via CSV • Phishing protection • NAT traversal • User password recovery Logging and Reporting • Compression • Automatic client network Web Security • Reporting dashboard • Perfect Forward Secrecy (PFS) configuration (support for DHCP • Detailed system, web, email, attack • HTTP & FTP proxies • VPN Site-to-Site and static IP) and virus reports • HTTPS filtering • VPN Client-to-Site (roadwarrior) • Fully integrated accounting • Live network traffic monitoring • Transparent proxy support • L2TP user authentication • Generic JSON API for external (powered by ntopng) • URL blacklist • XAUTH user authentication accounting and third party • Live log viewer • Authentication: Local, RADIUS, LDAP, OpenVPN integration • Detailed user-based web access re- Active Directory • Encryption: DES, 3DES, AES • Instant WLAN ticket shop (Smart- port (not in Mini 10 and Mini 10 WiFi) • NTLM single sign-on 128/192/256-bit, CAST5, Blowfish Connect) • Network/system/performance • Group-based and user-based web • Authentication: pre-shared key, X.509 • Single-click ticket generation statistics content filter certificates (Quick ticket) • Rule-based logging settings (firewall • Time based access control with • Support for VPN over HTTP Proxy • SMS/e-mail user validation and rules) multiple time intervals • PPTP passthrough ticketing • Syslog: local or remote • Bitdefender Anti-malware Engine • VPN client-to-site (roadwarrior) • Pre-/postpaid and free tickets • OpenTSA trusted timestamping • Bitdefender Content filter Engine • VPN client for Microsoft Windows • Time-/traffic-based tickets • SafeSearch enforcement and Apple OS X • Configurable ticket validity Extra Services Mail Security • Possibility of multiple logins per user • Terms of Service confirmation • NTP (Network Time Protocol) • VPN failover • MAC address tracking for free • DHCP server • SMTP & POP3 proxies • Multiple server support hotspots • SNMP server • Anti-spam with bayes, pattern • Support for mobile devices • Cyclic/recurring tickets (daily, weekly, • Dynamic DNS and SPF (Android, iOS) monthly, yearly) • Heuristics, black- and whitelists Management / GUI VPN Portal for Clientless Connections* • Remember user after first support • Web-based access to internal authentication (SmartLogin) • Centralized management through • Anti-virus resources • Multi-location setup through Endian Network (SSL) • Transparent proxy support • Configurable portal page master/satellite configuration** • Easy Web-Based Administration • Email quarantine management • Support for multiple destinations • External authentication server (Local, (SSL) • Spam auto-learning • Destination-based authentication LDAP, Active Directory, RADIUS) • Multi-language web-interface • Transparent mail forwarding (BCC) • SSL offloading (English, Italian, German, Japanese, • Greylisting User Management & Authentication Network Address Translation Spanish, Portuguese, Chinese, Rus- • Bitdefender Anti-spam Engine • Unified user management for Open- • Destination NAT sian, Turkish) • Bitdefender Anti-malware Engine VPN, L2TP, XAUTH, VPN Portal • Incoming routed traffic • Secure remote SSH/SCP access WAN Failover • Group management • One-to-one NAT • Serial console • Source NAT (SNAT) • Automatic WAN uplink failover • Integrated certificate authority Updates and Backups • IPsec NAT traversal • Monitoring of WAN uplinks • External certificate authority support • Centralized updates through Endian • Uplink types: Ethernet (static/DHCP), • User password and certificate Routing Network management PPPoE, PPTP • Static routes • Scheduled automatic backups • Multiple authentication servers (local, • Support for UMTS/GPRS/3G USB • Source-based routing • Encrypted backups via email LDAP, Active Directory, RADIUS) dongles • Destination-based routing • Instant recovery / Backup to USB • Fully integrated one-time password • Policy-based routing (based on inter- stick (Endian Recovery Key) User Authentication (OTP) support face, MAC address, protocol or port) • Active Directory / NTLM • Let‘s Encrypt Support • LDAP • RADIUS • Local sind Eigentum der jeweiligen Inhaber. und eingetragenen Marken Marken Endian SRL. Alle anderen von sind Marken Firewall Endian und Endian © 2021 Endian SRL. Änderungen vorbehalten. * Not in UTM Software 10, UTM Virtual 10, UTM Mini 10, UTM Mini 10 WiFi ** Master functionality not in UTM Mini 25, UTM Mini 25 WiFi and UTM Mercury 50.