Target

Product

Chassis

Large
Scale
Enterprise
Network

Medium
Scale
Network

SECUI NXG 800V

NXG 500SE

Small
Scale
Network

SECUI NXG 200V

SECUI NXG 100V

Layer 2 Mode (Transparent Mode)

Yes

Layer 3 Mode (Route Mode, NAT Mode)

Yes

PAT (Port Address Translation)

Yes

Active / Stand by

Yes

Active-Active HA with L3 Switch

Yes

Active-Active HA with L2 Switch

Yes

Redundant Interfaces

Yes

Configuration Synchronization

Yes

Session Synchronization for Firewall and VPN

Yes

Session Failover for Routing Change

Yes

Device Failure Detection

Yes

Link Failure Detection

Yes

Authentication for New HA Members

Yes

Traffic Shaping

Yes

Load Balancing without L4 Switch

Yes

Server Load Balancing

Yes

Multiline IPSec Load Balancing by Packet (VPN)

Yes

Stateful Inspection Firewall

* Dynamic Rules Settings

Yes

* Session Synchronization at Kernel Level

Yes

* Classification Algorithm

Patented Algorithm

* Providing Secure Channel to Applications Using
Dynamic Ports

SUN RPC, SQL*NET, TFTP, FTP H.323, Dialpad, PPTP, L2TP, IPSec, PING,Real Player, Window Media Player,MSN

* Secure Proxy Supported

HTTP Transparent Proxy, SMTP,POP3

* Split DNS (External DNS & Internal DNS)

Yes
(External, Internal)

Third Party User Authentication

RADIUS, LDAP, SecureID, S/Key

XAUTH VPN Authentication

Yes

Web-Based Authentication

Yes

Deep Inspection Firewall

* Web Application Attacks Detected

Yes

* Protocol Anomaly

HTTP, SMTP, POP3

* Stateful Protocol Signatures

Yes

Intrusion Protection

* DoS and DDoS Protection

SYN Flooding Attack,
UDP Flooding Attack,
Ping Flooding Attack,
etc

* Packet Dropping

TCP Reassembly for Segmented Packet, Malformed Packet,etc

Inbound Packet having Internal Source IP Address
Inbound Packet having Abnormal Source IP Address

Yes

* Protection against Attacks Targeting Vulnerability of TCP/IP Stack

Land Attack,
Ping of Death Attack,
IP Forge Attack, etc

* Protection against Attacks Targeting Web Security Hole

Nimda Virus, Code-Red Virus,UNI-Code Bugs etc

Yes

* Detection and Protection of Scanning Attempt

Yes

* Session Shaping

Yes

Encryption Algorithm(DES, 3-DES,AES,SEED,etc )

Yes

Authentication Algorithm

SHA-1, HAS-160

Key Manipulation

Manual, IKE, PKI(X.509)

Perfect Forward Secrecy

DH Group 1,2,5
support

Prevent Replay Attack

Yes

Remote Access VPN

Yes

TBB (TCP Bandwidth Bonding)

Yes

IPSec NAT Traversal

Yes

DPD (Dead Peer Detection)

Yes

DLD (Dead Link Detection)

Yes

Split Tunneling

Yes

Redundant VPN Gateways

Yes

Zero Packet Loss SA Rekeying

Yes

Dynamic Routing

Yes(OSPF)

Static Routing

Yes

VLAN Trunking(802.1q)

Yes

VoIP

Yes

Port Aggregation(802.3ad)

Yes

PKI Certificate Request

PKCS#7, PKCS#10

Online Certificate Status Protocol (OCSP)

Yes

Certificate Authorities Supported

VeriSign, Entrust

Java Based User Interface

Command Line Interface

Console, Telnet, SSH

All Management via VPN Tunnel on Any Interface

SNMP Full Custom MIB

Central Management

Yes

Root Admin, Admin and Read Only User Levels

Yes

Secure Connection with User Authentication

Yes

Configuration Rollback

Yes

Syslog (Multiple Servers)

External,
Up to 3 servers

E-mail (2 Addresses)

Yes (Unrestriced)

SNMP (Version 2)

Yes (ver 1, 2)

Activity Log & Counter Log

Yes

Log File Format

Binary, CSV, TSV, WELF

Log Analyzer

Yes

Interoperbility with ESM Solutions

Yes

Reporting

Yes (HTML Format)

Static IP Address

Yes

DHCP, PPPoE Client

Yes

Internal DHCP Server

Yes

DHCP Relay

Yes

Security Certification

CC

Target

Product

Performance

Large
Scale
Enterprise
Network

Medium
Scale
Network

SECUI NXG 800V

NXG 500SE

Small
Scale
Network

SECUI NXG 200V

SECUI NXG 100V

Target

Product

Dimensions
(W)*(D)*(H)

Large
Scale
Enterprise
Network

SECUI NXG
2000V

426*550*88

SECUI NXG
800V

430*420*88

SECUI NXG
400V

430*415*44

Small
Scale
Network

SECUI NXG
200V

426*270*44

SECUI NXG
100V

225*205*50