Unified Threat Management Data Sheet

Cyberoam CR50ia
Comprehensive Network Security for Small and Remote Offices
Cyberoam CR50ia is an identity-based security appliance that delivers real-time network protection against evolving Internet threats to Small Office-
Home Office (SOHO) and Remote Office Branch Office (ROBO) users.

CR50ia delivers comprehensive protection from threats like malware, virus, spam, phishing, and pharming attacks. Cyberoam’s unique identity-based
security protects users from internal threats that lead to data theft and loss. Cyberoam appliances deliver such comprehensive protection with Stateful
Inspection Firewall, VPN, Gateway Anti-Virus and Anti-Spyware, Gateway Anti-Spam, Intrusion Prevention System, Content Filtering, Bandwidth
Management, Multiple Link Management, Comprehensive Reporting over a single platform and can be centrally managed using the Cyberoam Central
Console. Integrated high availability provides protection against hardware failure to maximize network uptime and ensure uninterrupted access.

Identity-based Security in UTM

Cyberoam attaches the user identity to security, taking enterprises
a step ahead of conventional solutions that bind security to IP-
addresses. Cyberoam's identity-based security offers full
business flexibility while ensuring complete security in any
environment, including DHCP and Wi-Fi, by identifying individual
users within the network-whether they are victims or attackers.

Features Description Benefits

Stateful Inspection Firewall ! Powerful stateful and deep packet inspection ! Application layer protection
(ICSA Labs Certified) ! Fusion technology blends all the components of Cyberoam into ! Provides the right balance of security, connectivity and
a single firewall policy productivity
! Prevents DoS & flooding attacks from internal & external sources ! Flexibility to set policies by user identity
! Identity-based access control for applications like P2P, IM ! High scalability

Virtual Private Network ! Threat Free Tunneling ! Safe and clean VPN traffic
! Industry standard: IPSec, L2TP, PPTP VPN ! Secure connectivity to branch offices and remote users
! VPN High Availability for IPSec and L2TP connections ! Low cost remote connectivity over the Internet
! Dual VPNC Certifications - Basic and AES Interop ! Effective failover management with defined connection
priorities

Gateway Anti-Virus ! Scans HTTP, FTP, IMAP, POP3 and SMTP traffic ! Complete protection of traffic over all protocols
& Anti-Spyware ! Detects and removes viruses, worms and Trojans ! High business flexibility
! Access to quarantined mails to key executives ! Protection of confidential information
! Instant user identification in case of HTTP threats ! Real-time security

Gateway Anti-Spam ! Scans SMTP, POP3 and IMAP traffic for spam ! Enhances productivity
! Detects, tags and quarantines spam mail ! High business flexibility
! Enforces black and white lists ! Protection from emerging threats
! Virus Outbreak Protection ! High scalability
! Content-agnostic spam protection including Image-spam ! Zero hour protection incase of virus outbreaks
using Recurrent Pattern Detection (RPDTM) Technology ! Multi-language and Multi-format spam detection

Intrusion Prevention ! Database of over 3000 signatures ! Low false positives

System - IPS ! Multi-policy capability with policies based on default & custom ! Real-time Security in dynamic environments like DHCP and Wi-Fi
signatures, source and destination ! Offers instant user-identification in case of internal threats
! Prevents intrusion attempts, DoS attacks, malicious code, ! Apply IPS policies on users
backdoor activity and network-based blended threats
! Blocks anonymous proxies with HTTP proxy signatures
! Blocks “phone home” activities

Content & ! Automated web categorization engine blocks non-work sites ! Prevents exposure of network to external threats
Application Filtering based on millions of sites in over 82+ categories ! Blocks access to restricted websites
! URL Filtering for HTTP & HTTPS protocols ! Ensures regulatory compliance
! Hierarchy, department, group, user-based filtering policies ! Saves bandwidth and enhances productivity
! Time-based access to pre-defined sites ! Protects against legal liability
! Prevents downloads of streaming media, gaming, tickers, ads ! Ensures the safety and security of minors online
! Supports CIPA compliance for schools and libraries ! Enables schools to qualify for E-rate funding

Bandwidth Management ! Committed and burstable bandwidth by hierarchy, ! Prevents bandwidth congestion
departments, groups & users ! Prioritizes bandwidth for critical applications

Multiple Link Management ! Security over multiple ISP links using a single appliance ! Easy to manage security over multiple links
! Load balances traffic based on weighted round robin distribution ! Controls bandwidth congestion
! Link Failover automatically shifts traffic from a failed link to a ! Optimal use of low-cost links
working link ! Ensures business continuity

On-Appliance Reporting ! Complete Reporting Suite available on the Appliance ! Reduced TCO as no additional purchase required
! Traffic discovery offers real-time reports ! Instant and complete visibility into patterns of usage
! Reporting by username ! Instant identification of victims and attackers in internal network

www.cyberoam.com
 Specification

Interfaces User Identity and Group Based Controls

10/100 Ethernet Ports - Access time restriction Yes
10/100/1000 GBE Ports 6 Time Quota restriction Yes
Configurable Internal/DMZ/WAN Ports Yes Schedule based Committed and Burstable Bandwidth Yes
Console Ports (RJ45) - Data Quota restriction Yes
SFP (Mini GBIC) Ports - Schedule based P2P and IM Controls Yes
USB ports 2
Networking
System Performance Multiple Link Auto Failover Yes
Concurrent sessions 220,000 WRR based Load balancing Yes
New sessions/second 3,000 Policy routing based on Application and User Yes
Firewall throughput (Mbps) 750 DDNS/PPPoE Client Yes
168-bit Triple-DES/AES throughput (Mbps) 50/80 Support for TCP MSS configuration Yes
Antivirus throughput (Mbps) 120 Support for HTTP Proxy Mode Deployment Yes
IPS throughput (Mbps) 200 Parent proxy support Yes
UTM throughput (Mbps) 125 Dynamic Routing: RIP v1& v2, OSPF, BGP Yes
Multicast Forwarding Yes
Stateful Inspection Firewall
Multiple Zones security with separate levels of access rule High Availability
enforcement for each zone Yes Active-Active Yes
Rules based on the combination of User, Source & Active-Passive with state synchronization Yes
Destination Zone and IP address and Service Yes Stateful Failover Yes
Alert on Appliance Status change Yes
Actions include policy based control for IPS, Content
Filtering, Anti virus, Anti spam and Bandwidth Management Yes
Administration & System Management
Access Scheduling Yes
Web-based configuration wizard Yes
Policy based Source & Destination NAT Yes
Role-based administration Yes
H.323 NAT Traversal Yes
Multiple administrators and user levels Yes
802.1q VLAN Support Yes
Upgrades & changes via Web UI Yes
DoS Attack prevention Yes
Mutil-lingual support: Chinese, Hindi Yes
Web UI (HTTPS) Yes
Gateway Anti-Virus & Anti-Spyware
Command line interface (Serial, SSH, Telnet) Yes
Virus, Worm, Trojan Detection & Removal Yes
SNMP (v1, v2c, v3) Yes
Spyware, Malware, Phishing protection Yes
Cyberoam Central Console Yes
Automatic virus signature database update Yes
Version Rollback Yes
Scans HTTP, FTP, SMTP, POP3, IMAP, VPN Tunnels Yes
NTP Server Support Yes
Customize individual user scanning Yes
Self Service Quarantine area Yes
User Authentication
Scan and deliver by file size Yes
Local database Yes
Block by file types Yes
Windows Domain Control & Active Directory Integration Yes
Add disclaimer/signature Yes
Automatic Windows Single Sign On Yes
External LDAP/RADIUS database Integration Yes
Gateway Anti-Spam
User/MAC Binding Yes
Real-time Blacklist (RBL), MIME header check Yes
Filter based on message header, size, sender, recipient Yes
Logging/Monitoring
Subject line tagging Yes
Internal HDD Yes
IP address blacklist/exempt list Yes
Graphical real-time and historical monitoring Yes
Redirect spam mails to dedicated email address Yes
Email notification of reports, viruses and attacks Yes
Image-based spam filtering using RPD Technology Yes
Syslog support Yes
Zero hour Virus Outbreak Protection Yes
Self Service Quarantine area Yes On-Appliance Reporting
Intrusion events reports Yes
Intrusion Prevention System
Policy violations reports Yes
Signatures: Default (3000+), Custom Yes
Web Category reports (user, content type) Yes
IPS Policies: Multiple, Custom Yes
Search Engine Keywords reporting Yes
User-based policy creation Yes
Automatic real-time updates from CRProtect networks Yes Data transfer reporting (By Host, Group & IP Address) Yes
Protocol Anomaly Detection Yes Virus reporting by User and IP Address Yes
P2P applications signatures including Skype Yes Compliance Reports 45+

VPN Client
Content & Application Filtering
IPSec compliant Yes
Inbuilt Web Category Database Yes
Inter-operability with major IPSec VPN Gateways Yes
URL, keyword, File type block Yes
Supported platforms: Windows 98, Me, NT4, 2000, XP, Vista Yes
Categories: Default(82+), Custom Yes
Import Connection configuration Yes
HTTP Upload block Yes
Protocols supported: HTTP, HTTPS Yes
Block Malware, Phishing, Pharming URLs Yes Certification
Custom block messages per category Yes ICSA Firewall - Corporate Yes
Block Java Applets, Cookies, Active X Yes VPNC - Basic and AES interoperability Yes
Checkmark UTM Level 5 Certification Yes
CIPA Compliant Yes
Compliance
Vitrual Private Network - VPN
CE Yes
IPSec, L2TP, PPTP Yes
FCC Yes
Encryption - 3DES, DES, AES, Twofish, Blowfish, Serpent Yes
Hash Algorithms - MD5, SHA-1 Yes
Dimensions
Authentication - Preshared key, Digital certificates Yes
H x W x D (inches) 16.8 x 10.3 x 1.7
IPSec NAT Traversal Yes
H x W x D (cms) 42.8 x 25.5 x 4.4
Dead peer detection and PFS support Yes
Weight 5.3 kg, 11.68 lbs
Diffie Hellman Groups - 1,2,5,14,15,16 Yes
External Certificate Authority support Yes
Power
Export Road Warrior connection configuration Yes
Domain name support for tunnel end points Yes Input Voltage 115-230 VAC
VPN connection redundancy Yes Consumption 90W
Total Heat Dissipation (BTU) 200
Bandwidth Management
Application and User Identity based Bandwidth Management Yes Environmental
Guaranteed & Burstable bandwidth policy Yes Operating Temperature 0 to 40 °C
Application & User Identity based Traffic Discovery Yes Storage Temperature -20 to 80 °C
Multi WAN bandwidth reporting Yes Relative Humidity (Non condensing) 0 to 90%
Cooling System -Fans 3

Toll Free Numbers

VPNC USA : +1-877-777-0368
Copyright © 1999 - 2008 Elitecore Technologies Ltd. All rights reserved.
CERTIFIED India : 1-800-301-00013 Cyberoam and Cyberoam logo are registered trademark of Elitecore
Technologies Ltd. Although Elitecore has attempted to provide accurate
Basic
Interop APAC/MEA : +1-877-777-0368 information, Elitecore assumes no responsibility for accuracy or
completeness of information neither is this a legally binding representation.
AES Elitecore has the right to change, modify, transfer or otherwise revise the
www.check-mark.com Interop Europe : +44-808-120-3958 publication without notice. AR-10-95824-081210 Unified Threat Management

www.cyberoam.com I [email protected] Elitecore Product