| TotalSecure Firewall Overview | | | | | | | | |
| Deep Packet Inspection Firewall | | | | | | | | |
| Stateful Packet Inspection Firewall | | | | | | | | |
| Unlimited File Size Protection | | | | | | | | |
| Protocols Scanned | | | | | | | | |
| Threat Prevention Services Available | | | | | | | | |
| Application Intelligence and Control | | | | | | | | |
| Intrusion Prevention Service | | | | | | | | |
| Gateway Anti-Virus and Anti-Spyware | | | | | | | | |
| Content & URL Filtering (CFS) | | | | | | | | |
| SSL Inspection (DPI SSL) | | | | | | | | |
| Content Filtering Client (CFC)1 | Optional | Optional | Optional | Optional | Optional | Optional | Optional | Optional |
| Analyzer Reporting1 | Optional | Optional | Optional | Optional | Optional | Optional | Optional | Optional |
| Capture Advance Threat Protection1 | Optional | Optional | Optional | Optional | Optional | Optional | Optional | Optional |
| Enforced Client Anti-Virus and Anti-Spyware1 | Optional | Optional | Optional | Optional | Optional | Optional | Optional | Optional |
| 24x7 Support | | | | | | | | |
| Firewall General | | | | | | | | |
| Interfaces | 10 x 10-GbE SFP+, 2 x 10-GbE, 8 x 2.5-GbE, 8 x 1-GbE, 1 GbE Management, 1 Console | 10 x 10-GbE SFP+, 2 x 10-GbE, 8 x 2.5-GbE, 8 x 1-GbE, 1 GbE Management, 1 Console | 10 x 10-GbE SFP+, 2 x 10-GbE, 8 x 2.5-GbE, 8 x 1-GbE, 1 GbE Management, 1 Console | 6 x 10-GbE SFP+, 2 x 10-GbE, 4 x 2.5-GbE SFP, 8 x 2.5-GbE, 8 x 1-GbE, 1 GbE Management, 1 Console | 2 x 10-GbE SFP+, 2 x 10-GbE, 4 x 2.5-GbE SFP, 4 x 2.5-GbE, 16 x 1-GbE, 1 GbE Management, 1 Console | 2 x 10-GbE SFP+, 4 x 2.5-GbE SFP, 4 x 2.5-GbE, 16 x 1-GbE, 1 GbE Management, 1 Console | 2 x 10-GbE SFP+, 8 x 2.5-GbE SFP, 4 x 2.5-GbE, 12 x 1-GbE, 1 GbE Management, 1 Console | 4 x 2.5-GbE SFP, 4 x 2.5-GbE, 12 x 1-GbE, 1 GbE Management, 1 Console |
| Built-in Storage | 1TB, 128 GB | 1TB, 128 GB | 1TB, 128 GB | 64 GB | 64 GB | 32 GB | 32 GB | 16 GB |
| Management | CLI, SSH, Web UI, Capture Security Center, GMS, REST APIs | CLI, SSH, Web UI, Capture Security Center, GMS, REST APIs | CLI, SSH, Web UI, Capture Security Center, GMS, REST APIs | CLI, SSH, Web UI, Capture Security Center, GMS, REST APIs | CLI, SSH, Web UI, Capture Security Center, GMS, REST APIs | CLI, SSH, Web UI, Capture Security Center, GMS, REST APIs | CLI, SSH, Web UI, Capture Security Center, GMS, REST APIs | CLI, SSH, Web UI, Capture Security Center, GMS, REST APIs |
| Nodes Supported | Unrestricted | Unrestricted | Unrestricted | Unrestricted | Unrestricted | Unrestricted | Unrestricted | Unrestricted |
| Site-to-Site VPN Tunnels | 12,000 | 12,000 | 12,000 | 8,000 | 6,000 | 4,000 | 3,000 | 1,000 |
| IPSec VPN Clients (Maximum) | 2,000 (6,000) | 2,000 (6,000) | 2,000 (6,000) | 2,000 (6,000) | 2,000 (6,000) | 2,000 (4,000) | 500 (3,000) | 50 (1,000) |
| SSL VPN NetExtender Clients (Maximum) | 50 (3,000) | 2 (3,000) | 2 (3,000) | 2 (2,000) | 2 (1,500) | 2 (1,000) | 2 (500) | 2 (350) |
| VLAN Interfaces | 512 | 512 | 512 | 512 | 500 | 400 | 256 | 256 |
| Wireless Controller | | | | | | | | |
| WWAN Failover (4G/LTE) | | | | | | | | |
| Network Switch Management | | | | | | | | |
| Firewall/VPN Performance | | | | | | | | |
| Firewall Inspection Throughput2 | 17.1 Gbps | 17.1 Gbps | 12.0 Gbps | 12.0 Gbps | 6.25 Gbps | 6.0 Gbps | 3.75 Gbps | 3.0 Gbps |
| Threat Prevention throughput3 | 9.4 Gbps | 9.0 Gbps | 6.5 Gbps | 5.5 Gbps | 3.4 Gbps | 2.5 Gbps | 1.75 Gbps | 1.25 Gbps |
| Application Inspection Throughput3 | 11.5 Gbps | 10.8 Gbps | 7.75 Gbps | 6.0 Gbps | 4.25 Gbps | 3.0 Gbps | 2.1 Gbps | 1.4 Gbps |
| IPS Throughput3 | 10.3 Gbps | 10.2 Gbps | 7.2 Gbps | 6.0 Gbps | 3.4 Gbps | 2.3 Gbps | 1.8 Gbps | 1.4 Gbps |
| Anti-Malware Inspection Throughput3 | 8.5 Gbps | 8.0 Gbps | 6.5 Gbps | 5.4 Gbps | 2.8 Gbps | 2.45 Gbps | 1.5 Gbps | 1.3 Gbps |
| IMIX Throughput | 4.1 Gbps | 4.1 Gbps | 2.65 Gbps | 2.65 Gbps | 1.45 Gbps | 1.3 Gbps | 900 Mbps | 700 Mbps |
| SSL DPI Throughput3 | 2.25 Gbps | 2.1 Gbps | 1.5 Gbps | 1.45 Gbps | 800 Mbps | 675 Mbps | 320 Mbps | 250 Mbps |
| VPN Throughput4 | 10.0 Gbps | 10.0 Gbps | 6.75 Gbps | 6.0 Gbps | 3.5 Gbps | 3.0 Gbps | 1.5 Gbps | 1.3 Gbps |
| Maximum SPI Connections | 12,500,000 | 10,000,000 | 7,500,000 | 5,000,000 | 4,000,000 | 3,000,000 | 2,000,000 | 1,000,000 |
| Maximum DPI Connections | 5,000,000 | 4,000,000 | 3,000,000 | 2,000,000 | 1,500,000 | 1,000,000 | 750,000 | 500,000 |
| Default/Maximum Connections (DPI SSL)5 | 550,000/320,000 | 450,000/290,000 | 250,000/170,000 | 250,000/170,000 | 175,000/125,000 | 175,000/145,000 | 100,000/40,000 | 100,000/60,000 |
| New Connections/Sec | 130,000 | 130,000 | 90,000 | 90,000 | 40,000 | 40,000 | 14,000 | 14,000 |
| Features | | | | | | | | |
| Logging and Reporting | Analyzer, Local Log, Syslog | Analyzer, Local Log, Syslog | Analyzer, Local Log, Syslog | Analyzer, Local Log, Syslog | Analyzer, Local Log, Syslog | Analyzer, Local Log, Syslog | Analyzer, Local Log, Syslog | Analyzer, Local Log, Syslog |
| Network Traffic Visualization | | | | | | | | |
| Netflow/IPFIX Reporting | | | | | | | | |
| SNMP | | | | | | | | |
| Authentication | LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC) | LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC) | LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC) | LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC) | LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC) | LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC) | LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC) | LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC) |
| Dynamic Routing | BGP, OSPF, RIP | BGP, OSPF, RIP | BGP, OSPF, RIP | BGP, OSPF, RIP | BGP, OSPF, RIP | BGP, OSPF, RIP | BGP, OSPF, RIP | BGP, OSPF, RIP |
| Secure SD-WAN | | | | | | | | |
| Single Sign-on (SSO) | | | | | | | | |
| Voice over IP (VoIP) Security | | | | | | | | |
| PortShield Security | | | | | | | | |
| Port Aggregation | | | | | | | | |
| Link Redundancy | | | | | | | | |
| Policy-based Routing | | | | | | | | |
| Route-based VPN | | | | | | | | |
| Dynamic Bandwidth Management | | | | | | | | |
| Stateful High Availability | | | | | | | | |
| Multi-WAN | | | | | | | | |
| Load Balancing | | | | | | | | |
| Object-based Management | | | | | | | | |
| Policy-based NAT | | | | | | | | |
| IKEv2 VPN | | | | | | | | |
| TLS/SSL/SSH Decryption and Inspection | | | | | | | | |
| SSL Control | | | | | | | | |
| Auto-provision VPN | | | | | | | | |
| Biometric Authentication | | | | | | | | |
| Active/Active Cluster | | | | | | | | |
| Terminal Services Authentication/Citrix Support | | | | | | | | |
| DNS Proxy | | | | | | | | |
| Hardware Failover6 | Active/Standby with State Sync, Active/Active DPI with State Sync, Active/Active Clustering | Active/Standby with State Sync, Active/Active DPI with State Sync, Active/Active Clustering | Active/Standby with State Sync, Active/Active DPI with State Sync, Active/Active Clustering | Active/Standby with State Sync, Active/Active DPI with State Sync, Active/Active Clustering | Active/Standby with State Sync, Active/Active DPI with State Sync, Active/Active Clustering | Active/Standby with State Sync, Active/Active Clustering | Active/Standby with State Sync, Active/Active Clustering | Active/Standby with State Sync |
