NSG-5100 Next-Generation Firewall, 6-Port Gigabit and 4 1Gb SFP, with LIC1-NSG5100-04 Service Bundle for 2 Years

Dynamic routing (OSPF, BGP, RIPv2) Dynamic routing (OSPF, BGP, RIPv2) Dynamic routing (OSPF, BGP, RIPv2)

Static and Policy routing Static and Policy routing Static and Policy routing

Route controlled by application Route controlled by application Route controlled by application

Built-in DHCP, NTP, DNS Server and DNS proxy Built-in DHCP, NTP, DNS Server and DNS proxy Built-in DHCP, NTP, DNS Server and DNS proxy

Operating modes, NAT/route, transparent (bridge), and mixed mode Operating modes, NAT/route, transparent (bridge), and mixed mode Operating modes, NAT/route, transparent (bridge), and mixed mode

Security policy based on application, role and geo-location Security policy based on application, role and geo-location Security policy based on application, role and geo-location

Application Level Gateways and session support, MSRCP, PPTP, RAS, RSH, SIP, FTP, TFTP, HTTP, dcerpc, dns-tcp, dns-udp, H.245 0, H.245 1, H.323 Application Level Gateways and session support, MSRCP, PPTP, RAS, RSH, SIP, FTP, TFTP, HTTP, dcerpc, dns-tcp, dns-udp, H.245 0, H.245 1, H.323 Application Level Gateways and session support, MSRCP, PPTP, RAS, RSH, SIP, FTP, TFTP, HTTP, dcerpc, dns-tcp, dns-udp, H.245 0, H.245 1, H.323

NAT and ALG support, NAT46, NAT64, NAT444, SNAT, DNAT, PAT, Full Cone NAT, STUN NAT and ALG support, NAT46, NAT64, NAT444, SNAT, DNAT, PAT, Full Cone NAT, STUN NAT and ALG support, NAT46, NAT64, NAT444, SNAT, DNAT, PAT, Full Cone NAT, STUN

Protocol anomaly detection, rate-based detection, custom signatures manual, automatic push or pull signature updates Protocol anomaly detection, rate-based detection, custom signatures manual, automatic push or pull signature updates Protocol anomaly detection, rate-based detection, custom signatures manual, automatic push or pull signature updates

IPS Actions, default, monitor, block, reset (attackers IP or victim IP incoming interface) with expiry time IPS Actions, default, monitor, block, reset (attackers IP or victim IP incoming interface) with expiry time IPS Actions, default, monitor, block, reset (attackers IP or victim IP incoming interface) with expiry time

Filter Based Selection, severity, target, OS, application or protocol Filter Based Selection, severity, target, OS, application or protocol Filter Based Selection, severity, target, OS, application or protocol

IP exemption from specific IPS signatures IP exemption from specific IPS signatures IP exemption from specific IPS signatures

IDS sniffer mode IDS sniffer mode IDS sniffer mode

IPv4 and IPv6 rate based DoS protection with threshold settings against TCP Syn flood, TCP/UDP/SCTP port scan, ICMP sweep, TCP/UDP/SCIP/IC_x005f MP session flooding (source/destination) IPv4 and IPv6 rate based DoS protection with threshold settings against TCP Syn flood, TCP/UDP/SCTP port scan, ICMP sweep, TCP/UDP/SCIP/IC_x005f MP session flooding (source/destination) IPv4 and IPv6 rate based DoS protection with threshold settings against TCP Syn flood, TCP/UDP/SCTP port scan, ICMP sweep, TCP/UDP/SCIP/IC_x005f MP session flooding (source/destination)

Abnormal protocol attack defense Abnormal protocol attack defense Abnormal protocol attack defense

Anti-DoS/DDoS, including SYN Flood, DNS Query Flood defense Anti-DoS/DDoS, including SYN Flood, DNS Query Flood defense Anti-DoS/DDoS, including SYN Flood, DNS Query Flood defense

ARP attack defense ARP attack defense ARP attack defense

Manual, automatic push or pull signature updates Manual, automatic push or pull signature updates Manual, automatic push or pull signature updates

Flow-based Antivirus, protocols include HTTP, SMTP, POP3, IMAP, FTP/SFTP Flow-based Antivirus, protocols include HTTP, SMTP, POP3, IMAP, FTP/SFTP Flow-based Antivirus, protocols include HTTP, SMTP, POP3, IMAP, FTP/SFTP

Compressed file virus scanning Compressed file virus scanning Compressed file virus scanning

File transfer control based on file type File transfer control based on file type File transfer control based on file type

File protocol identification, including HTTP, FTP, SMTP and POP3 File protocol identification, including HTTP, FTP, SMTP and POP3 File protocol identification, including HTTP, FTP, SMTP and POP3

File signature and suffix identification for over 100 file types File signature and suffix identification for over 100 file types File signature and suffix identification for over 100 file types

Content filtering for HTTP-GET, HTTP-POST, FTP and SMTP protocols Content filtering for HTTP-GET, HTTP-POST, FTP and SMTP protocols Content filtering for HTTP-GET, HTTP-POST, FTP and SMTP protocols

IM identification and network behavior audit IM identification and network behavior audit IM identification and network behavior audit

Max/guaranteed bandwidth tunnels or IP/user basis Max/guaranteed bandwidth tunnels or IP/user basis Max/guaranteed bandwidth tunnels or IP/user basis

Tunnel allocation based on security domain, interface, address, user/user group, server/server group, application/app group, TOS, VLAN Tunnel allocation based on security domain, interface, address, user/user group, server/server group, application/app group, TOS, VLAN Tunnel allocation based on security domain, interface, address, user/user group, server/server group, application/app group, TOS, VLAN

Bandwidth allocated by time, priority, or equal bandwidth sharing Bandwidth allocated by time, priority, or equal bandwidth sharing Bandwidth allocated by time, priority, or equal bandwidth sharing

Type of Service (TOS) and Differentiated Services (DiffServ) support Type of Service (TOS) and Differentiated Services (DiffServ) support Type of Service (TOS) and Differentiated Services (DiffServ) support

Prioritized allocation of remaining bandwidth Prioritized allocation of remaining bandwidth Prioritized allocation of remaining bandwidth

Maximum concurrent connections per IP Maximum concurrent connections per IP Maximum concurrent connections per IP

Bandwidth allocation based on URL category Bandwidth allocation based on URL category Bandwidth allocation based on URL category

Bi-directional link load balancing Bi-directional link load balancing Bi-directional link load balancing

Outbound link load balancing includes policy based routing, ECMP and weighted, embedded ISP routing and dynamic detection Outbound link load balancing includes policy based routing, ECMP and weighted, embedded ISP routing and dynamic detection Outbound link load balancing includes policy based routing, ECMP and weighted, embedded ISP routing and dynamic detection

Inbound link load balancing supports SmartDNS and dynamic detection Inbound link load balancing supports SmartDNS and dynamic detection Inbound link load balancing supports SmartDNS and dynamic detection

Automatic link switching based on bandwidth, latency, jitter, connectivi_x005f ty, application etc. Automatic link switching based on bandwidth, latency, jitter, connectivi_x005f ty, application etc. Automatic link switching based on bandwidth, latency, jitter, connectivi_x005f ty, application etc.

Redundant heartbeat interfaces Redundant heartbeat interfaces Redundant heartbeat interfaces

Active/Active and Active/Passive Active/Active and Active/Passive Active/Active and Active/Passive

Standalone session synchronization Standalone session synchronization Standalone session synchronization

HA reserved management interface HA reserved management interface HA reserved management interface

Failover, Port, local & remote link monitoring, stateful failover, sub-second failover Failover, Port, local & remote link monitoring, stateful failover, sub-second failover Failover, Port, local & remote link monitoring, stateful failover, sub-second failover

Management over IPv6, IPv6 logging and HA Management over IPv6, IPv6 logging and HA Management over IPv6, IPv6 logging and HA

IPv6 tunneling, DNS64/NAT64 etc IPv6 tunneling, DNS64/NAT64 etc IPv6 tunneling, DNS64/NAT64 etc

IPv6 routing protocols, static routing, policy routing, ISIS, RIPng, OSPFv3 and BGP4+ IPv6 routing protocols, static routing, policy routing, ISIS, RIPng, OSPFv3 and BGP4+ IPv6 routing protocols, static routing, policy routing, ISIS, RIPng, OSPFv3 and BGP4+

IPS, Application identification, URL filtering, Anti-Virus, Access control, ND attack defense IPS, Application identification, URL filtering, Anti-Virus, Access control, ND attack defense IPS, Application identification, URL filtering, Anti-Virus, Access control, ND attack defense