CVPN3030E-NRBUN-K9

• Maximum LAN-to-LAN Sessions: 500
• Encryption Method: Hardware
• Encryption (SEP) Module: 1

High-Performance, Distributed-Processing Architecture:

• Cisco SEP modules provide hardware-based encryption, ensuring consistent performance throughout the rated capacity
• Large-scale tunneling support provided for WebVPN (SSL), IPSec, PPTP and L2TP/IPSec connections

Scalability:

• Modular design (four expansion slots) provides investment protection, redundancy, and a simple upgrade path
• System architecture is designed to supply consistent, high-availability performance
• All digital design provides the highest reliability and 24-hour continuous operation
• Robust instrumentation package provides run-time monitoring and alerts
• Microsoft compatibility offers large-scale client deployment and smooth integration with related systems
• Integrated device clustering (load balancing) technology

Security:

• Full support of current and emerging security standards allows for integration of external authentication systems and interoperability with third-party products
• Firewall capabilities through stateless packet filtering and address translation to ensure the required security of a corporate LAN
• User and group level management offers maximum flexibility. WebVPN offers granular access control per group and detailed logging information

High Availability:

• Redundant subsystems and multichassis failover capabilities ensure maximum system uptime
• Extensive instrumentation and monitoring capabilities provide network managers with real-time system status and early-warning alerts

Security:

• Authentication and Accounting Servers:

• Support for redundant external authentication servers:
• Kerberos/Active Directory authentication
• Microsoft NT Domain authentication
• Microsoft NT Domain authentication with Password Expiration (MSCHAPv2)-IPsec only

• Internet-Based Packet Filtering:

• Source and destination IP address
• Port and protocol type
• Fragment protection
• FTP session filtering
• Site-to-site filters and NAT (for overlapping address space)

• RSA Security Dynamics (SecurID Ready), including native support for RSA 5 (Load Balancing, Resiliency):

• Internal authentication server for up to 100 users
• X.509v3 digital certificates (including CRL/LDAP and CRL/HTTP, CRL Caching and Backup CRL Distribution Point support)
• RADIUS accounting
• TACACS+ Administrative user authentication

Depth:

• Unit without front bezel or SEPS/PS: 15"
• Unit with front bezel, no SEPS/PS: 16-3/16"
• Unit with front bezel and SEPS/PS: 16.75"

Client Software Compatibility:

• WebVPN-Clientless connectivity utilizing SSL capable Web browser on remote system
• Cisco VPN Client (IPSec) for Windows 98, ME, NT 4.0, 2000, XP, Linux (Intel), Solaris (UltraSparc 32 and 64-bit), and Mac OS X 10.2 (Jaguar), including centralized split-tunneling control and data compression
• Microsoft PPTP/MPPE/MPPC, MSCHAPv1/v2, EAP/ RADIUS pass-through for EAP/TLS and EAP/GTC support
• Microsoft L2TP/IPSec forWindows 2000/XP (including XP DHCP option for route population)
• Microsoft L2TP/IPSec for Windows 98, Windows Millennium (ME), and Windows NT Workstation 4.0
• MovianVPN (Certicom) Handheld VPN Client with ECC
• Netlock (Mac OS 8 & 9) VPN Client

Certification:

• FIPS 140-1 Level 2 (3.1)
• VPNC

Regulatory Compliance:

• CE Marking

Safety:

• UL 1950
• CSA

EMC:

• FCC Part 15 (CFR 47) Class A
• EN 55022 Class A
• EN50082-1
• AS/NZS 3548 Class A
• VCCI Class A