" network expert "
It is a service license that Activates Security Services for Quedra LightBox Series. License activation is done online over the Internet.
NETWORK SECURITY SERVICE SUBSCRIPTIONS
Quedra Next Genetaion Firewall appliances works with Security Service Licences. All appliances needs to be activated with one of the security service licences. It gives different security features with technical support. All subscription services announced with renewal times.
|
BASIC |
STANDARD |
PREMIUM |
|
|
|
|
|
Technical Support (during office hours 08:30/18:00 TR) |
Basic Security Service Features |
Standard Security Service Features |
|
Hardware Replacement (only for hardware appliances) |
Enhanced Application Control |
Unlimited Remote Support (during office hours 08:30/18:00 TR) |
|
Software Updates (New Features + Enhancements + Fixing) |
DoS Protection |
SSL Packet Inspection |
|
Basic Security Features (including NAT/NAPT, basic Filters and security rules/features) |
Web Content Filtering |
|
|
|
Intrusion Prevention |
|
|
|
GW Antivirus Scaning |
|
|
|
Botnet Protection |
|
Quedra LightBox
Quedra LightBox Series is the next generation Network Security solution that provides advanced network security and access solution for small, medium and medium-large businesses and edge offices. With its experience in network technologies, Quedra offers both flexible access and access control features and advanced products against all kinds of new generation network security threats.
Next Generation Network Security
Quedra LightBox NGFW product offers high performance solutions with its rich network features ranging from Layer 2 to Layer 7. It provides full compatibility with your network thanks to its configuration flexibility. It strengthens your network with security functions, increasing overall network security.
Flexable Network Topology
Quedra LightBox Series adapts to any network architecture thanks to its SDWAN features. It performs fast and performance switching and routing. Thanks to its VPN features, you can easily access your network remotely and control your branches as if in the center.
Key Features :
- Easy setup with innate SD-WAN features
- All of the Next Generation Firewall features
- VPN support for remote access
- Rich Routing capabilities
- Configuration suitable for all types of networks with different operating modes
- Control panel where you can view all network objects and their states simultaneously
- Real-time network attack prevention (IPS)
- Gateway based Anti Virus and Anti Spam
- Deep packet inspection with DPI technology
- Application Security
- Protection for all types of DoS, BotNET attacks
- IP Based and MAC based filtering
- WAN Load Balance, FailOver support
- Server Load Balance support
- Bandwidth upgrade with LACP
HotSpot and Internet Access Control
- Guest user management
- Multi-language support in access control
- Welcome page customization
- Time and usage limitation
- Multiple device support for one user
- Local user authentication
- User authentication via SMS
- User authentication with TR ID number
- User authentication with external databases
Network and Security Layers
- Stateful Package Inspection - SPI
- Network Address Translation - NAT
- Policy Based Routing – PBR
- IP:MAC mapping
- Static Routing
- Destination, Source and Port based Routing
- Bandwidth Management
- Static and Dynamic IP
- DHCP Server and Client
- PPPoE / IPoE Support
- DNS Proxy Support
- VLAN Support
- VPN (IPSec, SSLVPN, OpenVPN)
- Load Balance and Failover Support
- URL Filtering
- Category and word Based Filtering
- Customizable address, word, file based filtering
- Virus, Trojan plug-in and Malware blocking
- Autonomous Security Database Signature Update
- Application Filtering
- Signature-Based Category-Based Intrusion Detection and Prevention
Logging and Reports
- SysLog support
- All network activity logs
- Detailed activity logs
- Instant system information
- Records in accordance with TR Law No. 5651
- Ability to transfer recordings to different media
- Accuracy and integrity preservation
Hardware and Performance Features
|
LB30 |
LB60 |
LB100 |
LB300 |
|
|
Interfaces |
4xGigabit Ethernet |
4xGigabit Ethernet |
6x2.5Gigabit Ethernet |
6x2.5Gigabit Ethernet |
|
Sessions |
150.000 |
200.000 |
500.000 |
900.000 |
|
New Sessions/Sec |
15.000 |
20.000 |
40.000 |
90.000 |
|
Firewall Throughput |
900Mbps |
1200Mbps |
2000Mbps |
3000Mbps |
|
UTM/NGFW Throughput |
90Mbps |
120Mbps |
350Mbps |
400Mbps |
|
IPS Throughput |
100Mbps |
100Mbps |
400Mbps |
400Mbps |
|
Antivirus Throughput |
80Mbps |
80Mbps |
350Mbps |
350Mbps |
|
IPSEC VPN Throughput |
90Mbps |
90Mbps |
450Mbps |
450Mbps |
|
SSL VPN Throughput |
60Mbps |
60Mbps |
300Mbps |
300Mbps |
|
IPSEC VPN Tunnels |
30 |
60 |
100 |
300 |
|
SSL VPN Tunnels |
30 |
60 |
100 |
300 |
|
Firewall Rules |
1000 |
2000 |
5000 |
5000 |
|
Internal Storage |
240GB SSD |
240GB SSD |
256GB SSD |
256GB SSD |
|
Working Temperature |
-10℃--60℃(14F~140F) |
-10℃--60℃(14F~140F) |
-10℃--50℃(14F~122F) |
-10℃--50℃(14F~122F) |
|
Measurements (Device) |
135mm*127mm*39mm |
135mm*127mm*39mm |
177mm*125mm*55mm |
177mm*125mm*55mm |
|
Measurements (Box) |
305mm*205mm*75mm |
305mm*205mm*75mm |
305mm*205mm*75mm |
305mm*205mm*75mm |
|
Weight (Kg) |
Net 0.6kg / Gross 1.2kg |
Net 0.6kg / Gross 1.2kg |
Net 1.3kg / Gross 2.0kg |
Net 1.3kg / Gross 2.0kg |
General Specifications
|
Operating Modes |
VPN - Virtual Private Network |
Management Interface Features |
||||||||
|
• |
OSI Layer 2 Transparent |
• |
SSL VPN |
• |
HTML5 Responsive Web Interface |
|||||
|
• |
OSI Layer 3 Routing + Stealth Mode |
|
> |
Certificate Verification |
|
> |
SSL Certi cate based authentication |
|||
|
• |
Virtual Wire |
|
|
User Credentials Verification (+ 2FA ) |
|
> |
2FA - Two-Factor Authentication |
|||
|
Routing |
|
> |
Authentication: |
|
> |
Customizing the Service Port |
||||
|
• |
IPv4 / IPv6 Static Routing |
|
|
BLAKE2*, RSA*, SHA*, MD*, SHAKE* |
• |
Out of Band Management Plane |
||||
|
• |
PBR - Policy Based Routing |
|
> |
Encryption: |
|
> |
Resource Reservation |
|||
|
• |
OSPF - Open Shortest Path First Protocol |
|
|
AES*, ARIA*, CAMELLIA*, SEED*, SM4* |
• |
SSH Console |
||||
|
• |
BGP - Border Gateway Protocol |
• |
PPTP / L2TP VPN, L2TP over IPSec |
• |
Physical Console (Monitor, Keyboard) |
|||||
|
• |
RIP / RIPng - Routing Information Protocol |
• |
IPsec VPN (Both VTI and Legacy Mode) |
• |
Serial Console (If exists on hardware) |
|||||
|
• |
PIM SM/SSM IGMP v2/v3 Multicast Routing |
• |
Site to Site VPN |
• |
Incident Notification Service |
|||||
|
• |
Routing Monitor |
• |
GRE Tunnelling |
|
> |
SMS, Email, Brower Notification |
||||
|
Network Interface Specifications |
Services |
User Authentication Methods |
||||||||
|
• |
Loopback Interface, IEEE802.1Q VLAN support |
• |
Live Dashboard |
• |
Mernis (NVI) |
|||||
|
• |
Link Aggregation : |
• |
Automated Update System |
• |
SMS |
|||||
|
|
> |
LACP, Failover, Load Balance, Round Robin |
• |
Offline Update |
• |
Local User |
||||
|
• |
Bridging / STP / Ethernet Bypass |
• |
Automatic Configuration Backup |
• |
HTTP (API) |
|||||
|
• |
Virtual Extensible LAN (VXLAN) |
• |
DHCPv4/v6 Server, Relay and Monitor |
• |
LDAP |
|||||
|
• |
NAT64, IPv6 6to4 Tunneling |
• |
Authenticated http/https Proxy |
• |
RADIUS |
|||||
|
• |
Static ARP |
• |
Quedra Shared Management-Virtual System |
• |
POP3 / IMAP |
|||||
|
• |
PPP ve PPPoE Connection Interface |
• |
QoS - Effective Bandwidth Management |
• |
SSO: Negotiate Kerberos - Active Directory |
|||||
|
• |
3G/4G/LTE Modem Support |
• |
Time and Quota Adjustable Hotspot(Captive) |
• |
TACACS + |
|||||
|
Security Specifications |
• |
Bandwidth Monitor |
Product Certifications |
|||||||
|
• |
Zone Based Firewall |
• |
Quedra Registry Service |
• |
Common Criteria EAL4 + |
|||||
|
• |
Application Security (AppID) |
• |
Quedra Announcement Service |
• |
TRtest Product Conformity Certificate |
|||||
|
• |
Honeypot Trapping |
• |
NetFlow Export Service |
• |
MIT (Made in Turkiye) |
|||||
|
• |
Traffic Rate Limiting |
• |
RADIUS Server and Proxy |
IPsec VPN |
||||||
|
• |
Multi-Policy, Section and Profile Support |
• |
Domain Based http/https Forwarding |
• |
Encryption: |
|||||
|
• |
Time Based Security Policy Management |
• |
https SSL Offload Service |
|
> |
AES / CAMELIA / NULL_ENC / SERPENT |
||||
|
• |
IPS - Intrusion Detection and Prevention |
• |
SNMP v2/v3 Service |
|
> |
TWOFISH /DES / 3DES |
||||
|
• |
SPI - Statefull Packet Inspection |
• |
RRD Service |
• |
Authentication: |
|||||
|
• |
DPI - Deep Packet Inspection |
|
> |
Number of Active Users and Bandwidth |
|
> |
MD5, SHA1, SHA256, SHA384, SHA512, AES |
|||
|
• |
http / https Web Filtering (SNI / DPI) |
• |
http/https Caching |
• |
WildCard ID Support |
|||||
|
• |
DNS Query Filtering |
• |
Domain Based Bandwidth Limiting |
• |
NAT Traversal Support |
|||||
|
• |
Interface Based Anti Spoofing (Sym and Asym) |
• |
Log Timestamping |
• |
PKI - Public Key Infrastructure Support |
|||||
|
• |
MAC Based Quarantine |
• |
Timestamp Integration |
• |
PSK - Pre Shared Key Support |
|||||
|
• |
MAC - IP Matching Control |
• |
Syslog (TCP/UDP/TLS) - supported formats; |
Email Security |
||||||
|
• |
ARP Poisoning Protection |
|
> |
RAW, CEF, EWMM, GELF, JSON, WELF, CIM |
• |
Gateway Antispam *** |
||||
|
• |
Flood Intrusion Prevention |
• |
Black Hole Service |
• |
Anti Virus / Anti Malware *** |
|||||
|
• |
Gateway Anti Virüs / Anti Malware *** |
• |
Campus Information Service |
• |
Email Rate Limiting |
|||||
|
• |
SSH Inspection, Anti Botnet |
• |
LLDP Service |
• |
RBL, MX, SPF, DKIM, DMARC Check |
|||||
|
• |
DoS Prevention - Connection Limiting |
• |
GEO-IP Service |
• |
Email Quarantine |
|||||
|
• |
XFF Scan - Trusted Proxy Servers |
• |
Quedra Central Management/Logging Integration |
• |
Gray Listing, Phishing Check |
|||||
|
• |
Service Based Timeout Control |
|
|
|
• |
Category and Rule Based Filtering |
||||
* Note : Hardware and software features may differ due to developments and changes in the life cycle of related software and hardware.
Bu ürüne ait özellikler veritabanımızda bulunmamamktadır.
Bu ürünle ilişkilendirilmiş bir dijital varlık bulunamamaktadır.
Bu ürüne alternatif bir ürün bulunmamaktadır.
