CyberGuard SnapGear Security Appliance

CyberGuard Corporation

http://www.cyberguard.com

The SnapGearTM SG300 is a compact, feature-rich network security appliance that is perfect for securing very small networks and remote workers. The onboard 10/100 Ethernet switch enables a small business to implement a LAN quickly and easily, and connect the network to the Internet via broadband (ADSL, cable, SHDSL, etc.) or narrow-band (modem or ISDN) connections. If the broadband connection is lost, the SG300 can fail over in seconds to the narrowband connection, ensuring maximum uptime.

With a powerful stateful-inspection firewall, service-based intrusion detection and blocking solution, and advanced Internet connection sharing features, the SG300 is a price/performance leader.

Features
* Fully integrated IPsec VPN
* Full PPTP and L2TP VPN client and server
* Up to 30 Mbps LAN throughput
* Unrestricted, unlimited user license
* Web console for configuration and management
* Fully interoperable with CyberGuard appliances and other standards-based security devices
* No third-party client software required

Recommended for:
* Small businesses needing to connect multiple offices and telecommuters via a VPN
* Routing ADSL/Cable up to T1, DS1 and E1 speeds
* VPN connections up to 3.5 Mbps (most Cable and ADSL)

See also SG 560 and SG 565 models.

Commercial

Information updated: 28 Feb 06

Check Point Safe@Office Security Appliance

Check Point Software Technologies, Ltd.

http://www.checkpoint.com

Proven Network Security for Small Businesses

As your business grows and you leverage the Internet to connect customers and partners, your exposure to cyber threats increases. For foolproof network protection that is cost-effective, easily maintained, and remains effective at all times, small businesses turn to Safe@Office Unified Threat Management security appliances. They protect your network so that you can focus on your primary business and keep revenue rolling in.

For added convenience, Check Point offers both wired and wireless appliances.

Benefits
* Industry-proven firewall
* Protection against worms and viruses
* Remote access VPN
* Web Filtering
* Quick setup & management
* Up-to-date protection

All-in-One Network Security - A single cost-effective solution for all your network security and network management needs
Industrial Strength Protection - Market-leading stateful inspection firewall and intrusion prevention – the same proven technology that protects 98% of the Fortune 500®
Gateway Antivirus - Stop viruses before they reach your network with an automatically updated antivirus on the network gateway
Remote Access VPN - Securely connect your remote locations and employees for maximum productivity
Quick Setup & Management - Web-based management with preset security rules that let you focus on running your business

Also see the http://www.safeatoffice.com for more detailed information.

Commercial

Information updated: 28 Feb 06

Check Point VPN-1 Edge Security Appliance

Check Point Software Technologies, Ltd.

http://www.checkpoint.com

Secure Remote Connectivity with Unmatched Scalability

Today, organizations are challenged with providing remote offices with connectivity without compromising the security of their network. VPN-1 Edge integrated security appliances deliver secure connectivity with unmatched scalability, enabling companies to link even thousands of offices with a cohesive security policy.

VPN-1 Edge appliances are available in wired and wireless options.

Benefits
* Cost-effective, simple to deploy integrated security appliances
* Dependable, proven Check Point security technologies
* High availability with failover and redundant ISP connections
* Simplified, large scale management for up to thousands of remote gateways

Commercial

Information updated: 28 Feb 06

Cisco Pix 501 Security Appliance

Cisco Systems

http://www.cisco.com

Protection for Networks of All Sizes

The market-leading Cisco PIX Security Appliance Series delivers robust user and application policy enforcement, multivector attack protection, and secure connectivity services in cost-effective, easy-to-deploy solutions. These purpose-built appliances provide multiple integrated security and networking services, including:
* Advanced application-aware firewall services
* Market-leading voice over IP (VoIP) and multimedia security
* Robust site-to-site and remote-access IPSec VPN connectivity
* Award-winning resiliency
* Intelligent networking services
* Flexible management solutions

The Cisco PIX 501 is a compact, ready-to-use security appliance that delivers enterprise-class security for small offices and enterprise teleworker environments.

The PIX 501 includes an integrated 4-port Fast Ethernet (10/100) switch and a Fast Ethernet (10/100) interface. Ideal for securing high-speed broadband environments, the Cisco PIX 501 delivers up to 60 Mbps of firewall throughput, 3 Mbps of Triple Data Encryption Standard (3DES) VPN throughput, and 4.5 Mbps of Advanced Encryption Standard-128 (AES) VPN throughput.

See also PIX 506E for remote office/branch office environments.

Commercial

Information updated: 28 Feb 06

GTA's RoBoX Series GB-250

Global Technology Associates, Inc.

http://www.gta.com

The GB-250 and GB-250e Firewall Appliances are entry-level firewalls in GTA's RoBoX family with support for optional Mail Sentinel Anti-Spam and Mail Sentinel Anti-Virus add-on features, offering more power and flexibility than comparable appliances. Available in a 10 or 25 concurrent outbound user versions, the GB-250 and GB-250e are designed for small business offices that require network security functions usually found only in enterprise level firewall appliances. The proven ICSA certified GB-OS System Software, assures you full corporate level firewall security. Features include transparent NAT, stateful packet inspection, built-in IPSec VPN (optional on the GB-250 10 user version), DHCP and content filtering, all packed in a desktop internet security appliance. Total perimeter security in a small appliance.
* 10 or 25 concurrent outbound user versions
* Upgradeable to 50 concurrent outbound users
* Three 10/100 Ethernet interfaces including DMZ
* Support for Mail Sentinel Anti-Spam and Mail Sentinel Anti-Virus Option
* Powered by ICSA 4.1 Corporate Certified GNAT Box System Software
* Excellent Price/Performance
* GB-250e includes hardware VPN acceleration

Also see the GB-800 model, the mid-range model in the RoBoX series.

Commercial

Information updated: 28 Feb 06

LuciGate Firewall

Lucidata Data Communications Consultants

http://www.lucidata.com

Features
* Hacker Proof
* Transparent to Users
* Independent Appliance
* Low Cost
* No Maintenance Costs
* No Licensing Costs
* Easy to Setup - Easy to Understand
* Purpose Designed

Hackerproof - The LuciGate Firewall is a piece of dedicated hardware (sometimes referred to as a Firewall Appliance) that sits between your network and the outside world. Without its smartcard key, it will not allow ANY data to pass through it. It is not based on a PC and it cannot be configured remotely. This is a deliberate design feature - THE LUCIGATE FIREWALL WILL NOT RESPOND TO ANYTHING. In fact users of the network will not know that it is there. Because it will not respond to network messages, it cannot be interfered with. Only the smartcard key holds the setup information, and the outside world has no access to it.

Low Cost - Contrary to popular belief, there is no reason for a Firewall to be expensive. The LuciGate Firewall Appliance is the low-cost solution for IP Network Security. The LuciGate is a dedicated piece of hardware - specially designed to be a Firewall. It is not a general purpose computer, so there is no display, disc drives, interfaces, operating system etc. It simply acts as a filter passing on allowed data. This keeps the price low and the running costs zero. No maintenance is needed and there are no licence fees. A large organisation that wants to effectively separate different user groups, can install several LuciGate Firewall Appliances without breaking the bank.

ADSL Broadband - Now that broadband connections appear to be steadily rolling out, the need to consider the security of your network has never been so critical. While many quality ADSL routers provide features that give a good measure of protection, they themselves are in the front line and are totally exposed to the Internet. They are usually managed by an ISP which means they are potentially vulnerable to attacks from anywhere. Placing a LuciGate firewall between the broadband router and your network gives you complete control over the traffic entering your network, even if the router is compromised.

Easy Setup - Installing a LuciGate Firewall is simplicity itself. Plug the network cables from the "Inner World" and "Outer World" into the 10BASE-T or 10BASE-2 sockets, connect the power cable and switch on! Of course, nothing will pass through until the smartcard has been programmed and loaded into its slot. Programming the smartcard key will require a few more minutes!

Auto Logging - The LuciGate is supplied with a program called LuciGuard. This optional program will run on any Windows system that supports Windows Sockets. You would normally run the program on a PC in the “Inner World” that you are protecting. LuciGuard keeps a time-stamped Log of activities and triggers an alarm if anything suspicious happens. Even if someone rearranged the cables and physically bypassed the LuciGate Firewall, LuciGuard would know and raise the alarm.

Independent - LuciGate is a dedicated stand alone piece of hardware. Its only function is to be a firewall which is why it is sometimes referred to as a Firewall Appliance. It does not do anything else, so there is no need for an operating system or layers of software which can make computer based systems less than 100% reliable. Once installed, legitimate users of the network will not even know that it is there.

Commercial

Information updated: 01 Mar 06

Ndurant Express Series

Resilience Corporation

http://www.resilience.com

The Power of Deep Automation and Real Availability - To make the most of limited IT resources, small and medium-sized businesses can benefit from a firewall/VPN appliance that offers a port count and performance levels scaled to their specific needs at an affordable price. Resilience offers the Ndurant Express 10 with high level, lower cost protection and advanced security features. The popular Ndurant products are the only firewall solution platform that’s purpose-built with deep automation and real availability to run Check Point VPN-1 UTM software.

Check Point: The Highest Level Security - Check Point VPN-1® delivers unified threat management that scales to enterprises of all sizes, helping customers to simplify security deployments by consolidating proven security functions within a single solution. It combines firewall, intrusion prevention, anti spyware, Web application firewall, and both IPSec and SSL VPN, in a fully integrated and easy-to-manage solution.

Resilience Real Availability: The Highest Level of Availability - If you don’t have high availability, you’re never sure your network has security. Resilience Ndurant Express delivers a superior form of high availability through our full system mirroring that keeps the Check Point application up and running 99.999% of the time. Resilience Real Availability integrates high availability features across all systems layers of Ndurant Express’s dual-module architecture to create a multi-layer solution with no single point of failure. The Ndurant Express Hot Standby architecture uses a single Check Point license to provide a low cost, high availability solution. This approach is key to making high-level security affordable for small and medium-sized businesses and larger businesses that may have multiple remote sites.

Resilience Deep Automation: The Greatest Ease of Ownership - What if your least experienced technician could provision a redundant pair of firewalls in fifteen minutes instead of hours or days? The Deep Automation of the Resilience Ndurent Express firewall solution makes it easy for your firewall solution to go from box to operational in under 15 minutes for virtually any member of your IT team, giving you the resource flexibility required by small and medium sized businesses. An operator performs appliance setup and administration through Resilience’s 5 to Live™ GUI. This simple Web interface lets users configure their Ndurant Express and Check Point Express software in five simple steps for a solution that’s fully operational in fifteen minutes.

Resilience Deep Automation functionality also means that upon detection of a failure, the hot-standby module in an Ndurant Express appliance automatically takes over operations for the primary module. Failover occurs in 30 seconds. After failover, remote users continue to work without interruption. Any user can hot-swap a replacement in the field with little or no service disruption; the replacement module self-configures automatically. Ndurant Express’s automatic failover and self-configuring modules are particularly important for providing perimeter security at remote locations where IT staff is not on site. Resilience backs Ndurant Express appliances with the Continuous Secured Ownership WarrantySM to provide the Check Point solution with no End-of-Life.

Commercial

Information updated: 22 June 07

SonicWALL TZ 150

SonicWALL Inc.

http://www.sonicwall.com

Today’s small business networks are susceptible to the same types of attacks as those faced by larger networks. And, while hackers have gained the most notoriety, it’s actually viruses, spyware and worms that pose the most significant security threat. Low-end security appliances simply don’t provide adequate protection from these threats and high-end solutions blow the budget. What’s needed is an integrated solution that provides the security of a deep packet inspection firewall at a price small businesses can afford.

Enter the SonicWALL® TZ 150 Series, a total security platform delivering layered protection to small offices in an easy-to-use, affordable platform. The TZ 150 Series integrates deep packet inspection firewall, IPSec 3DES/AES VPN and 802.11b/g secure wireless capabilities with support for gateway anti-virus, anti-spyware, intrusion prevention and content filtering to deliver true layered security. Secure remote access to critical network resources is available through SonicWALL VPN Client upgrades. Every TZ 150 Series appliance supports the SonicWALL portfolio of advanced security services and can be easily managed remotely as part of a multi-firewall and VPN environment using SonicWALL’s industry-leading Global Management System.

Commercial

Information updated: 17 Jan 07

Nokia IP60

Nokia Corporation

http://usa.nokia.com

Nokia IP60 Unified Threat Management (UTM) Security Platform is the optimal remote connectivity and perimeter security solution for small and branch office environments. Nokia IP60 is available in two versions ,wired and wireless, and offers Check Point firewall, VPN, intrusion prevention, and antivirus technologies in a single solution. Wireless appliances support multiple security protocols, enable specific security rules for WLAN segments and protect wireless interfaces by granting access to authorized users only. The solution provides centrally-managed secure connectivity for remote sites and is well-suited for customers who demand complete network reliability and integrated security with exceptional price performance.

Features
* Enterprise-class UTM features: firewall/VPN, IDS/IPS, web-filtering, Anti-Virus (AV)
* Pre-licensed for easy out-of-the-box deployment
* Available in two versions: wired and wireless
* Centralized management
* Nokia First Call - Final Resolution global support and services

Benefits
* Reduces administrative time with simple, comprehensive security and management
* Provides flexible cost-effective deployment options by extending integrated security to wireless networks
* Requires low total-cost-of-ownership (TCO) for managing large, distributed deployments
* Extends the Nokia/Check Point flexible cost-effective security options to remote offices
* Provides opportunity to increase return-on-investment (ROI) with single-vendor support and problem resolution

Commercial

Information updated: 01 Nov 2007

Juniper Networks NetScreen-5 Series

Juniper Networks Inc.

http://www.juniper.net

* Integrated security solutions combining Stateful firewall, Deep Inspection Firewall, IPSec VPN, antivirus and Web filtering
* Robust set of enterprise-class products and features to secure a small remote office, retail outlet, or broadband telecommuter
* Designed for widely distributed enterprise security deployments or service provider managed security services

Overview
Juniper Networks offers a robust set of enterprise-class solutions at the entry level of the firewall/VPN line of products. These include the Juniper Networks NetScreen-5GT, NetScreen-5GT ADSL, NetScreen-5GT Wireless and NetScreen-5XT appliances. These cost-effective, remote office security products are fully capable of securing a small remote office, retail outlet, or broadband telecommuter.

Juniper Networks NetScreen-5GT: The NetScreen-5GT appliance is a feature-rich, enterprise-class, network security solution that integrates multiple security functions - Stateful and Deep Inspection firewall, IPSec VPN, denial of service protection, antivirus and Web filtering. For application-level protection, the NetScreen-5GT appliance supports embedded virus scanning, to help eliminate virus threats from the network. In addition, integrated Web filtering is offered on the NetScreen-5GT appliance, to optimize productivity and bandwidth utilization by controlling non-business-related Web surfing. The NetScreen-5GT Ethernet solution is ideal for environments that need hardwired connectivity backed by robust network, application and payload level security. The NetScreen-5GT Ethernet is available with five Ethernet interfaces that can be deployed in a wide variety of configurations.

Also available as NetScreen-5GT ADSL, NetScreen-5GT Wireless and NetScreen-5XT appliances.

Also see the Juniper Networks Netscreen-Hardware Security Client model.

Commercial

Information updated: 01 Mar 06

WatchGuard Firebox SOHO 6

WatchGuard Technologies, Inc.

http://www.watchguard.com

Designed for small and remote offices with modest in-house security expertise, Firebox® SOHO 6 security appliances plug in between your cable, DSL, or ISDN router and your network. They are security solutions designed for a small business or single user.

The Web-based user interface of the Firebox® SOHO 6 models is straightforward and easy-to-use. You don't need additional security expertise to install and manage your firewall, and you can manage your network securely from anywhere, at any time.

In addition to dynamic stateful packet filtering, Firebox SOHO 6 security appliances provide Network Address Translation (NAT), optional Web content filtering, and LiveSecurity® Service to keep your security updated.

SOHO 6
Dependable firewall with intuitive Web-based management for small businesses.

SOHO 6tc
Branch Office VPN end point with ICSA stateful packet filtering, optional IPSec Mobile User VPN, and intuitive remote management.

Also see the Watchguard Firebox X Edge product line. Firebox® X Edge is a line of firewall and VPN endpoint security appliances that deliver exceptional network protection to small businesses, remote offices, and telecommuters. Firebox X Edge is the ideal endpoint for Firebox X Peak and Core that extends a secure tunnel to safely connect telecommuters and remote offices.

Commercial

Information updated: 01 Mar 06

Securepoint Security Appliance

Securepoint GmbH

http://www.securepoint.cc

Securepoint Security Appliances are the complete security solution with optimized hardware, high-end security functions for your requirements and offer excellent performance results.

The appliances starts with Euro 650.

See this page for model specifications.

Commercial

Information updated: 01 Mar 06

Astaro Security Gateway 110 and 120

Astaro Corporation

http://www.astaro.com

Astaro Security Gateway network security appliances provide complete, cost-effective protection against a wide range of information security threats. Astaro's technology has been tested and proven on over 25,000 networks and has won multiple awards including best Business Security Appliance of 2005 from PC Magazine.

Ultimate Protection
Nine critical security applications - Firewall, VPN Gateway, Intrusion Protection, Virus Protection for Web, Virus Protection for Email, Spam Protection, Content Filtering, Spyware Protection and Phishing Protection - are fully integrated in one easy-to-manage package. Astaro's technology protects against over 3,000 intrusions, 100,000 viruses, thousands of spammers and 60 million questionable web sites - the broadest range of protection available in one product.

Unified Management
Using Astaro's renowned graphical interface and unified update mechanism, a single administrator can easily deploy and manage a comprehensive network security infrastructure. The Astaro Up2Date automated update service provides a single, fast mechanism to update threat patterns and system software.

The Astaro Security Gateway 110 and Astaro Security Gateway 120 models are designed to provide protection for small business and branch and remote offices. A built-in hard drive provides for quarantining of suspicious files and allows transaction logs to be stored locally. Their compact size, high reliability, and economical price make them a perfect fit for any small office environment.

Commercial

Information updated: 01 Mar 06

HotBrick Firewall SOHO

HotBrick Corporation

http://www.hotbrick.com

HotBrick product line for Small Offices and Home Offices extends business grade security to simple networks.

If you have an "always on" (DSL, Cable) internet connection, you should be concerned with information and data integrity. HotBrick SoHo solutions offer you business grade firewall and VPN capabilities to your home or satelite office so you can securely connect to the internet or corporate server.

SoHo 401W
• Now Supports WPA / WPA2 (besides WEP)
• Fast Wireless AP - Up to 54Mbps (802.11g+b)
• 1 x WAN 10/100
• 4 x LAN 10/100
• Built in NAT and Rule-based Policy Firewall
• Stateful Packet Inspection firewall for DoS
• URL Filter to block undesirable sites
• ALG's (Application Level Gateways)
• Dynamic DNS
• 3 year warranty

Firewall LB2
• Increase Your Network Speed
• 2 x WAN 10/100 - Load Balance & QoS
• 4 x LAN 10/100 - Share your internet connection
• 5 groups of access filter to LAN Users
• Packet filter & block URL
• Multiple DMZ
• Easy setup and management
• Firewall SPI, NAT, and firewall rules
• Dynamic DNS
• 3 year warranty

Commercial

Information updated: 01 Mar 06

ZyWALL 5 Internet Security Appliance for SOHO

ZyXEL Communications Corp.

http://www.zyxel.com

The ZyWALL series fulfills a range of application environments, from small and medium businesses, SOHO, or Telecommuters, to home user or education applications. The ZyWALL series provides a robust Firewall to protect your network, and the IPSec VPN function allows you to create a secure connection for e-business. ZyWALL's design helps users to save expenses, minimize maintenance, and simultaneously provide a high quality networking environment.

ZyWALL can also provide an affordable solution for building up network security. Often times the perception is that only large enterprises that have the resources and funds can invest the necessary money on security devices to protect their networks. Although this might be true with some solutions on the market, ZyXEL is committed to providing customers a full line of products to choose from that are scaled to give users only what they need, at a reasonable price, while not sacrificing reliability.

Also see ZyWALL 2, ZyWALL 2 Plus, and ZyWALL P1.

Commercial

Information updated: 01 Oct 2007

XSR Security Routers 1800 series

Lucidata Data Communications Consultants

http://www.enterasys.com

Combining lightning-fast IP routing with multiple security applications and high availability—all at a market-leading price—the XSR 1800 Series delivers big features and performance in a compact box. Designed especially for site-to-site and remote access connectivity, this flexible platform includes dual Fast Ethernet LAN interfaces, VPN hardware acceleration, stateful deep-packet inspection firewall, and a broad range of WAN interfaces.

The XSR-1805 delivers a robust 50k PPS, 100 Mbps IPSec/3DES encryption and a 180 Mbps stateful inspection firewall. The rack-mountable XSR-1850 offers superior router throughput, 200 concurrent IPSec/ 3DES VPN tunnels, stateful inspection firewall plus optional power supply and fan redundancy. Powerful management and configuration tools—including industrystandard Command Line Interface, SNMP integration and client/server Java application management support—provide extensive remote monitoring and diagnostic capabilities, critical in environments without on-site networking expertise.

The standards-based XSR 1800 Series offers a future-proof design to accommodate evolving security, QoS and connectivity needs. Unlike typical WAN routers, the XSR Security Router provides best-of-breed security and maintains performance when features are enabled. And, unlike typical security appliances, the XSR provides extensive IP routing and Quality of Service (QoS) on a wide range of WAN interfaces.

The XSR Security Routers set industryleading price/performance benchmarks for networking with IP routing, VPN and firewall available at a significant price advantage over the competition. In addition, the XSR WAN modules are shared across multiple Enterasys platforms, leveraging your investment and simplifying deployment scenarios.

Commercial

Information updated: 01 Mar 06

Celestix MSA2000

Celestix Networks Inc.

http://www.celestix.com

The MSA2000 is the entry level of MSA series security appliance that brings enterprise-class network security to small businesses. Competitive priced and yet powerful.

The MSA2000 is the latest version of the feature-rich and pre-configured enterprise class security solution for small and medium business that need secure application publishing and web access protection. Celestix has added an additional set of features that places the MSA2000 apart from the competition. Celestix has incorporated six PCI-Express bus Gigabit Ethernet ports that add a degree of versatility not commonly found in security appliances.

The MSA2000 features a backlit LCD panel (40 x 2 character) with an integrated dial control that allows the administrator to configure network parameters and begin securing the network within 15 minutes. The LCD also provides critical information and allows users to install security updates, or change the configuration of the appliance. The MSA2000 can be managed locally via a standard web browser or centrally through Microsoft ISA Server Enterprise Edition.

The MSA2000 is based on a robust Celestix 1U rack hardware platform, producing an extremely fast and efficient appliance with a maximum of 800 Mbps of firewall throughput and 53 Mbps of 3DES VPN throughput. To achieve such speed, the MSA2000 uses a powerful Intel® Pentium® Celeron D class CPU running in excess of 2.53GHz, 1GB of DDR2 RAM and 80GB of SATA-II hard drive. The Celestix MSA2000 has six auto-sensing 100/1000 Ethernet ports adding a degree of versatility not commonly found in a security appliance.

Feature Summary
* Runs Microsoft ISA Server 2006
* Firewall throughput of 800 Mbps and VPN throughput of 53 Mbps
* Six Gigabit Ethernet ports (PCI-Express)
* 1:1 Active/Passive Failover
* High performance Celestix Scorpio-X hardware platform
* One button backup and restore to factory default and last known version
* Update services

Commercial

Information updated: 06 Sep 2007

NetASQ's F-25 IPS-Firewall

NetASQ

http://www.netasq.com

NETASQ’s F25 IPS-Firewall is an easy-to-deploy security solution for small businesses and/or branch offices of distributed enterprises, offering a superior level of security at an attractive price.

This product may have an attractive price but provides the same level of protection as the other ptoducts in the NETASQ range. With its integrated 4-port switch, the F25 can be used as a single swap and security solution on a small enterprise network. The EZAdmin administration interface makes it possible to install the F25 in just a few clicks.

Highlights
IN-LINE INTRUSION PREVENTION
POWERFUL ANTISPAM
REMOTE USER AND GATEWAY-GATEWAY VPN
READY FOR CENTRALIZED MANAGEMENT
EZADMIN
TECHNICAL CHARACTERISTICS
IMAGES
DOCUMENTATION

Commercial

Information updated: 01 Mar 06

RouteFinder SOHO

Multi-Tech Systems Inc.

http://www.multitech.com

The RouteFinder™ SOHO security appliance is ideal for the small branch office or telecommuter who needs secure access to the corporate LAN. In addition to providing a WAN Ethernet port for DSL or cable broadband Internet access, it also offers both client-to-LAN and LAN-to-LAN VPN connectivity based on the IPSec or PPTP protocols. The RouteFinder SOHO security appliance provides 168-bit 3DES and AES encryption to ensure that your information remains private. In addition, it offers secure Internet firewall services.

Family Features
* One WAN Ethernet port connects to a DSL or cable modem
* Supports IPSec VPN tunnels and/or PPTP tunnels (RF560VPN only) for secure LAN-to-LAN and Client-to-LAN access over the Internet
* 3DES and AES encryption
* Built-in Stateful Packet Inspection firewall (RF560VPN)
* Built-in 4-port 10/100M bps switch
* Built-in firewall and DHCP services with Network Address Translation (NAT)
* Built-in dynamic DNS client
* Supports VPN tunneling using FQDN
* Protects your LAN against Denial of Service (DoS) attacks
* PPPoE support
* Two-year warranty

Commercial

Information updated: 01 Mar 06

PicoLiSS

Telco Tech

http://www.microliss.de

picoLiSS offers maximum protection to smaller businesses such as medical or legal practices that do not have their own IT administrator or IT budget. Used as a Firewall with Intrusion Detection System, picoLiSS ensures protection against unwanted intruders, both internal and external. The VPN function can be used to provide even better integration of staff into the firm‘s network and makes it possible to inexpensively connect other branches or mobile employees with the central network without the risk of outsiders reading or manipulating the data stream. ADSL router function is also integrated.

picoLiSS offers an inexpensive way of securing individual clients or small networks.

Highlights & Features:
* High-secure-linux
* 1 x WAN, 4 x ethernet (switch)
* Portbased packet filter
* Stateful inspection firewall
* Intrusion detection system
* IPsec-VPN-gateway (up to 5 tunnels)
* DSL router
* Intuitive administration via https-webinterface

Commercial

Information updated: 01 Mar 06

NetPilot 3

Visiq Technologies

http://www.visiq.co.uk

The entry level unit, the NetPilot 3 delivers e-mail server functionality with the ability to block and filter Internet access. In addition, the NetPilot 3 acts as an intelligent ‘cache’ server effectively keeping a copy of web sites accessed so that subsequent visits are made faster.

A full accredited firewall is built into the NetPilot giving full protection from external attacks; this can be further upgraded by the addition of virus protection licenses and Virtual Private Network functionality to provide remote access for satellite offices or remote workers.

The NetPilot 3 is ideally suited to companies with either a dial-up or broadband connection with between 2 – 25 machine on their network.

High performance all-in-one Internet appliance for Smaller Organisations
* Fast, rugged and flexible core solution
* Highly upgradeable for new features
* Controlled multi-user web access
* Fully automated internal and external email
* Secure Checkmark - accredited firewall
* Simple set-up, configuration and control

Commercial

Information updated: 01 Mar 06

Prodigy PRO

Global Security One

http://www.gsec1.com

Small businesses face the same types of Internet threats as experienced by corporate networks. Viruses, worms and Trojans are increasingly infesting unprotected computers destroying in seconds a lifetime of hard work. Yet small businesses do not have access to the resources and more importantly the budgets a corporate entity may have. Traditional software solutions and low-end security devices simply don't make the grade in providing adequate security from these threats - what is required is an integrated Internet Security Management (ISM) solution that provides multi layered security from a single point yet at an extremely affordable price.

Recommended for: The Prodigy Pro is an enterprise class ISM device that delivers multi-layered security to small businesses (up to 15 users) in a very affordable, compact and easy to use package.

Prodigy ISM - Unified Security, Simple and comprehensive
* Intuitive user interface with pre-configured security set up wizards.
* Remotely manageable over the Internet.
* Designed to be administered by persons with minimal technical knowledge.

Prodigy Firewall and Actishield - Proactive multi-layered security, invisible protection
* High performance dynamic session tracking firewall coupled to deep inspection application specific security filters for Internet, Email and FTP traffic ensuring malicious content is stopped at the outset before it can enter the network.
* The Actishield feature in the Prodigy ISMs is unique in that it hides the Prodigy from the outside world; and because your internal network is connected to the Prodigy Pro, it also goes a long way to hiding your network as well. This reduces the threats of hackers and unwanted external intruders.
* Multiple security policies can be associated with a profile, ensuring flexible yet granular control.

Also see Prodigy BRANCH and Prodigy SMB models.

Commercial

Information updated: 01 Mar 06

NetBox SOHO

NetBox Blue Pty Ltd.

http://www.netboxblue.com

The NetBox is an Internet Server and protection Appliance, available in different models to ensure networks of all sizes are catered for. When connected to a computer network, it takes care of your entire Internet traffic needs . . . . . and in the process it saves you money and increases your productivity!

When a high quality Internet security connectivity solution is required for your business, the NetBox will:
* Reduce your costs;
* Increase the security and reliability of your computer network;
* Enhance the effectiveness of your email;
* Maximise the flexibility and productivity of all your Internet usage; and
* Monitor your network usage.

When connected to your computer network the NetBox provides features and benefits that translate directly into dollars saved by increasing your security, lowering your costs and improving productivity.

NetBox SOHO (Up to a maximum of 5 users).
Comes Standard with:
* Advanced Stateful and Application Firewall
* E-mail Virus & Content Scanning
* Spam Control
* E-mail Hosting & E-mail Gateway
* Web Mail Enabled
* Network Monitoring
* Remote Access Lite - 2 users (VPN PPTP)
* Transparent Caching Proxy Server
* NetBox to NetBox VPN
* Managed Firmware, Security Updates and Monitoring

Also see the NetBox Micro and NetBox Office at the same page.

Commercial

Information updated: 01 Mar 06

Amarenten Security Gateway SOHO Series

Amarenten International Ltd.

http://www.amarenten.com

The Amaranten SOHO Series is designed for remote offices and branch offices in need of high security and broad functionality but in a smaller format and with an attractive price.

The Amaranten Security Gateway SOHO Series currently consists of two products, Amaranten Security Gateway F50-Pro-L and F50-Pro. They are equipped with three 10/100 Mbps Ethernet interfaces and have a throughput of up to 80 Megabites per second.

Versatile Security Solutions
All Amaranten products are built to provide supreme and high-performing security at an unparalleled price / performance ratio. With a rich set of functionality such as Bandwidth Management, Office-to-Office VPN, User Authentication, Deep Inspection with Intrusion Detection and Prevention, Layer 7 Application Recognition, Content Filtering and advanced routing capabilities, we do not only see our products as gateways in complex networks but also as business platforms that grow with your needs.

Manage the bandwidth to cut your costs
Since remote offices always require reliable communications with the head office or other remote offices, it is of paramount that expensive bandwidth can be utilized in the most cost effective manner. For this reason, we have chosen to include the advanced Bandwidth Management feature even in our smallest products. And as you are able to manage bandwidth for traffic flowing through your VPN tunnels as well as for non-encrypted traffic, you can be sure that your business critical network traffic always receives the bandwidth it deserves.

Commercial

Information updated: 02 Mar 06

Eland SYS-2 SOHO

Eland Systems

http://www.elandsys.com

The Eland SYS-2 SOHO is a network security appliance with a built-in firewall and a Virtual Private Network gateway to secure your internal network. The Eland SYS-2 SOHO appliance supports networks up to 25 PCs. It offers the security and reliability of much more expensive appliances but at a fraction of the cost.

Features
* Firewall
* VPN
* DHCP
* NAT
* Real-time reporting

Benefits
* Easy to use and deploy - User-friendly web browser-based UI for configuration
* Secure and reliable out-of-the-box
* Performance at affordable price
* IPSec VPN compatible with other vendor products
* Connect up to 25 computers - our appliances do not have any license limit

Commercial

Information updated: 02 Mar 06

Gajshield SecureGate Hardware Appliance

Gajshield

http://www.gajshield.com

GajShield SecureGate Hardware Appliance
The GajShield SecureGate Appliances are industrial grade hardware appliances tailored security application and for networks who foresee future growth within their network infrastructure and who require fast, reliable and flexible network security. The GajShield SecureGate Appliance platform allows IT managers to configure the base unit with the performance and applications they currently want, with the ability to easily upgrade to other security applications

GajShield SecureGate Hardware appliances are powered by enterprise class ICSA certified Stateful Inspection Firewall, IPS, Gateway Virus Screening, URL Filtering, VPN & Bandwidth Management protecting networks from intrusions.

ICSA Certified Firewall - Stateful Packet Inspection - Acts as a firewall between the Internet and your organization.s LAN, protecting it from unauthorized access. GajShield inspects individual network packet headers and tracks the sequence of events on connections to detect violations of normal process and policies set.

Deep Packet Inspection - GajShield scans application-related content of packet payloads to ensure that they conform with rules specific to web traffic, email, DNS, and others.

Application Proxies - GajShield provides comprehensive protection by utilizing application proxies that simplify management by allowing administrators to quickly and easily enable and disable protocols. Proxies are included for the protocols:
* HTTP
* DNS
* SOCKS
* POP3
* SMTP

Other Features:
Policy based NAT
DoS /DDOS Protection
Intrusion Prevention System
Virus Screening
Web Filtering
Virtual Private Network
Bandwidth Management & ISP Load Balancing
Easy Deployment & Management

Commercial

Information updated: 02 Mar 06

netMIND

FortressWALL.com

http://www.fortresswall.com

netMIND Product Overview
netMIND product models are routers/secure fortressWALL/virusBLOCK™ hardware/software devices designed on a unique modular concept to make upgrading as easy as possible when the Internet changes. The netMIND products allow an unlimited number of users to connect to the Internet simultaneously through a single Internet Service Provider (ISP) account per physical location. The netMIND appliance can easily be configured to analog phone lines, DSL, Sprint Broadband, ISDN, Cable Modem, T-1 or USB external 3-COM ISDN modems and includes a PROVEN SECURE fotressWALL. and a denial meter that records intrusion attempts.

Secure fortressWALL
netMIND acts as a secure fortressWALL making the computers operating behind it significantly less vulnerable to attack than on a standard internet connection. The netMIND product serves as a router for each computer behind the netMIND, allowing each computer to communicate with the device to access the Internet. Any machine making a blind request from the Internet will only be able to communicate with the netMIND itself. The netMIND is designed to be resistant to attack. Since there is only one access point to the Internet, one's exposure to attack is greatly reduced, virtually eliminating a hacker's access to your sensitive information and files. Multiple netMINDs may be strategically placed throughout a company's intranet to provide departmental fortressWALL security. An example:screening the accounting department from prying eyes within the network as well as denying unauthorized access by the outside world. This type of application would also slow or halt the spread of a virus on a companies network.
In a worldwide challenge, hackers were invited to attack a server secured by netMIND. The fortressWALL maintained the security of the server and none of the attacks were successful. The netMIND also offers a secure Plug-n-Play Tunneled Secure Virtual Private Network (PnP-Tunneled-SVPN} option that is easy to install and has been found to be stable. With 253-user access at each netMIND location, the SVPN is the most affordable tunneled system on the market. netMIND has worked flawlessly since 1998 and is a trusted name in Internet appliance hardware, where a truly affordable and secure Internet connection is needed or required.

Multiple Users
netMIND also is a product designed to allow multiple users connection to the Internet simultaneously through one Internet service provider (ISP) account. Supported connections include 56K Modem, DSL, ISDN, Cable Modem, T-1 lease line, Sprint Broadband, etc.

netMIND installs quickly and easily and may pay for itself by eliminating monthly service fees where two or more computers at the same locations have to connect simultaneously to the internet. Special options for home or business allow access to many connection types and can grow to meet your future bandwidth needs. netMIND is the most versatile multiple access Internet appliance available on the market today. Most other systems are either not effective, not secure, unreliable, hard to use, expensive or frustrating to in