Rhinolabs Security Appliance

RL-IA-3558

www.rhinolabsinc.com Introducing RL-IA-3558

Rhinolabs RL-IA-3558 is an enterprise grade Edge Security appliance powered by Intel® Atom® (Denverton) processor family.

This new generation platform is able to perform multiple applications within a small form factor at low power and low cost.

RL-IA-3558 appliance is ideal for providing all-inclusive security and network solutions for residential and small and midsize business (SMB).

Rhino Labs Inc., 3240 Scott Blvd., Santa Clara, CA 95054 (408) 207 0400 [email protected] www.rhinolabsinc.com Introducing RL-IA-3558

OPNsense® is an open source, easy-to-use and easy-to-build HardenedBSD based and platform.

OPNsense includes most of the features available in expensive commercial firewalls, and more in many cases. It brings the rich feature set of commercial offerings with the benefits of open and verifiable sources.

For more information please check https://opnsense.org

Rhino Labs Inc., 3240 Scott Blvd., Santa Clara, CA 95054 (408) 207 0400 [email protected] www.rhinolabsinc.com Hardware Specifications

Intel® Atom® C3000 Series Processor 4-8 cores, C3558 2.2 GHz

ECC DDR4 SODIMM Memory Max support 32 GB

Onboard EMMC 5.0 16 GB/32 GB 1x M.2 SATA Storage 1x 2.5” SATA 1x 7 PIN SATA

8x1 Gbe 4x1 Gbe C3558 Integrated MAC Ethernet 4x1 Gbe Intel i210 Support 2 POE+ ports

USB 2 x USB 3.0. Output 2.5 A

2 MiniPCIe for WiFi or LTE modules Mini PCIe LTE module can support Dual SIM

Miscellaneous I/O Console RS 232 RJ 45 GPIO 4 Input 4 Output GPIO header I2C I2C header TPM TPM Header

Security TPM Module

Power Supply DC 12 V

Working temperature -10 °C to 60 °C Environmental Working Humidity – 20 °C – 70°C

AMI UEFI Software BIOS Choice of OS: OpenWRT integrated with DPDK, , HyperScan Operating System with DPDK, Snort, Hyperscan Core OS

Form Factor 11”W x 7.2”D x 1.9”H

Rhino Labs Inc., 3240 Scott Blvd., Santa Clara, CA 95054 (408) 207 0400 [email protected] www.rhinolabsinc.com Software Support

RL-IA-3558 has many software packages to choose from -

OpenWrt, DPDK, Snort, Debian Linux, Fedora Core OS.

For custom software optimization and support please contact us at [email protected]

Ordering Information

RL-IA-3558

For other SKU’s and custom design please contact us at [email protected]

Rhino Labs Inc., 3240 Scott Blvd., Santa Clara, CA 95054 (408) 207 0400 [email protected] www.rhinolabsinc.com About Us

Rhino Labs Inc. is a leading provider of high-performance networking and data infrastructure solutions.

Our products are used by a growing base of OEM customers in applications focused on Cyber Security, Network Monitoring and Traffic Management.

Our standard and customized products include Intelligent Bypass NICs, Smart NICs, and a variety of network, security, and storage appliances.

We are a privately held company headquartered in Santa Clara, CA with a local engineering and manufacturing facility and a high volume manufacturing facility in Malaysia.

Rhino Labs Inc., 3240 Scott Blvd., Santa Clara, CA 95054 (408) 207 0400 [email protected] www.rhinolabsinc.com OPNsense Feature List

Stateful firewall Certificates • Feodo Tracker ๏File Backup ๏Filter by ๏ Certificate Authority • Geolite2 Country IP ๏Cloud Backup • Source • Create or Import CA’s • Emerging Threats ETOpen SNMP • Destination • Create or Import Certificates ๏SSL Fingerprinting ๏ Monitor & Traps • Protocol ๏Let’s Encrypt (Plugin) ๏Auto rule update using Diagnostics • Port • Automated (Trusted) CA configurable cron ๏Filter reload status • OS (OSFP) 802.1Q VLAN support Captive Portal ๏Firewall Info (pfInfo) ๏Limit simultaneous connections ๏ max 4096 VLAN’s ๏Typical Applications ๏Top Users (pfTop) on Link Aggregation & Failover • Guest Network ๏Firewall Tables a per rule base ๏Failover • Bring Your Own Device • Aliases ๏Log matching traffic on a per ๏Load Balance (BYOD) • Bogons rule ๏Round Robin • Hotel & Camping Wifi Access ๏Current Open Sockets bases ๏Cisco Ether Channel (FEC) • Template Management ๏Show All States ๏Policy Based Routing ๏802.3ad LACP • Multiple Zones ๏State Reset ๏Packet Normalisation Other Interface types ๏Authenticators ๏State Summary ๏Option to disable filter for pure ๏Bridged interfaces • All available authenticators ๏Wake on LAN mode ๏Generic Tunnel Interface (GIF) • None (Splash Screen Only) ๏ARP Table Policy organisation ๏Generic Routing Encapsulation ๏Voucher Manager ๏DNS Lookup ๏Alias Support Network Address Translation • Multiple Voucher Databases ๏NDP Table • IP addresses ๏ • Export vouchers to CSV ๏Ping • Port ranges ๏1:1 of ip’s & subnets ๏Timeouts & Welcome Back ๏Packet Capture • Domain names (FQDN) ๏Outbound NAT ๏Bandwidth Management ๏Test Port ๏Interface Groups ๏NAT Reflection • Use Traffic Shaper ๏Trace route • Create security zones with Traffic Shaping ๏Portal bypass Monitoring equal rules ๏Limit bandwidth • MAC and IP whitelisting ๏ Agent (Plugin) ๏Rule Category ๏Share bandwidth ๏Real Time Reporting ๏ Monit (Plugin) • Easy access rule sets ๏Prioritise traffic • Live top IP bandwidth usage • Proactive System Monitoring Granular control state table ๏Rule based matching • Active Sessions Enhanced Reporting ๏Adjustable state table size • Protocol • Time left ๏Network Flow Analyser ๏On a per rule bases • Source • Rest API ‘Insight’ • Limit simultaneous client • Destination Virtual Private Networks • Fully Integrated connection • Port ๏IPsec • Detailed Aggregation • Limit states per host • Direction • Site to Site • Graphical Representation • Limit new connections per IGMP Proxy • Road Warrior • Clickable and Searchable second ๏For multicast routing ๏OpenVPN • CVS Exporter • Define state timeout Universal Plug & Play • Site to Site ๏System Health • Define state type ๏Fully supported • Road Warrior • Round Robin Data ๏State types Dynamic DNS • Easy client configuration • Selection & Zoom • Keep ๏Selectable form a list exporter • Exportable • Sloppy ๏Custom ๏ (Plugin) ๏Traffic Graph • Modulate ๏RFC 2136 support • Full mesh routing • Live Traffic Monitoring • Synproxy DNS Forwarder ๏ZeroTier (Plugin) Network Monitoring • None ๏Host Overrides • VPN, SDN & SD-WAN ๏Netflow Exporter ๏Optimisation options ๏Domain Overrides ๏PPTP (Legacy) • Version 5 & version 9 • Normal DNS Server ๏LT2P (Legacy) • Local for ‘Insight’ • High latency ๏Host Overrides High Availability • Agressive • A records ๏Automatic hardware failover ๏Support Virtual Installs • Conservative • MX records ๏Synchronised state table • VMware tools (Plugin) Authentication ๏Access Lists ๏Configuration synchronisation • Xen Guest Utilities (Plugin) ๏External Servers DNS Filter Caching Proxy ๏Easy Upgrade • LDAP ๏Supports OpenDNS ๏ Multi interface • Reboot warning for base • Radius DHCP Server ๏Transparent Mode upgrades ๏Integrated Servers ๏IPv4 & IPv6 ๏Support SSL Bump ๏SSL Flavour selectable • Local User Manager ๏Relay Support ๏SSL Domain only (easy filtering) • OpenSSL • Vouchers / Tickets ๏BOOTP options ๏Access Control Lists • LibreSSL • FreeRadius (Plugin) Multi WAN ๏Blacklists ๏Selectable Package Mirror Authorisation ๏Load balancing ๏Category Based Web-filter ๏Reinstall Single Package ๏ ๏Failover ๏Traffic Management ๏Lock Package (prevents • Local User Manager ๏Aliases ๏Auto sync for remote blacklists upgrade) Accounting Load Balancer ๏ICAP (supports virus scan ๏Audit Feature ๏FreeRadius (Plugin & External) ๏Balance incoming traffic over engine) • Check installed packages ๏Vouchers / Tickets multiple servers Virus scanning for 2-Factor Authentication Network Time Server ๏External engine support (ICAP) known security vulnerabilities ๏Supports TOTP ๏Hardware devices ๏ClamAV (Plugin / C-ICAP) ๏Plugin Support ๏Google Authenticator • GPS Reverse Proxy REST API ๏Support services: • Pulse Per Second ๏HAProxy - Load balancer ๏ACL support • Captive Portal Intrusion Detection & (Plugin) Online Documentation • Proxy Prevention Online Identity Protection ๏Free & Searchable • VPN ๏Inline Prevention ๏ - Anonymity online (Plugin) • GUI ๏Integrated rulesets Backup & Restore OPNsense® is Copyright © • SSH / Console • SSL Blacklists ๏History & Diff support 2014 – 2019 by Deciso B.V.

Rhino Labs Inc., 3240 Scott Blvd., Santa Clara, CA 95054 (408) 207 0400 [email protected] www.rhinolabsinc.com