VCL-MX-5040-R-ES
Router with Enhanced Security

Highlights:

• High-reliability hardware
• CPUbased, Modular Architecture, Infrastructure Neutral
• Easy installation andmanagement
• Suitable for installation in sub-stations, SCADA and industrial networks / harsh environments
• Supports for Ethernet, Fast Ethernet, Gigabit Ethernet, Optical Ports
• Detailed system logging, built-in reporting and monitoring tools including real-time graphs
• Export logs locally or on a Syslog server
• Network Flow Monitoring
• Suitable for 1+0 non-redundant and 1+1 redundant installation with automatic failover*. Support Active-Active mode.
• High availability functionality with Active-Active and Active-Passive features
• Secure Boot
• Secure Web Gateway (SWG)
• Data Loss Prevention (DLP)
• Resistance to Denial of Service (DoS)Attack
• Prevention of DDoS & DoS-added
• Content filtering and Brute Force attack mitigation
• Non-volatile Access Log with capability to "fingerprint" all successful and failed log-in attempts and keep a log of the IP addresses of all successful and failed logins / login attempts.
• Integrated threat control includes prevention of network attacks
• Intelligent protection of endpoints includes authentication, authorization and control
• Support out of band management through management port / console
• In service / remote software upgrade
• SYNcookie protection
• Zone based IP spoofing
• Malformed packet protection
• Software and Hardware Token Supported (TOTP)
• IEEE 1613
• IEC 61850-3, IEC 60068-2-27, IEC 60068-2-6 compliance

VCL-MX-5040-R-ES offers a wide range of VPN technologies ranging from modern SSL VPN's to IPsec. Site-to-Site and road warrior setups are possible and with the integrated OpenVPN client exporter, the client can be configured within minutes.

Firewall Security:

• Inclusion Policy - Access Control based upon White List IP addresses, MAC address and IP Domain
• Exclusion Policy - Access Control based on Black-List Continuous monitoring of the TLS connection to nullify MitM attacks.

Interfaces:

• 6 x 100GE interfaces, or
• 12 x 40GE interfaces, or
• 24 x 10/1GE interfaces, or
• Any combination of the interfaces mentioned here, not exceeding an aggregate of 600G

Throughput:

• IPsec VPN : Upto 450 Gbps
• Router + Firewall: Upto 540 Gbps
• NGFW : Upto 540 Gbps
• Threat Protection : Upto 510 Gbps

Routing Features and Capabilities:

• GUI and CLI based
• Static and Dynamic IP addressing for physical and logical interfaces
• IPv4 and IPv6 IP addressing format supported
• Support for multiple IP address
• ARP, IP forwarding
• Static routing, Default routing, VLAN based routing, CARP redundancy
• Routing Protocols: RIPv1, RIPv2, OSPFv2 and OSPFv3, BGPv4 Layer 2, Layer 3 routing
• Link Aggregation, SPANmirror port
• Supports framesize from64 to 9216 bytes
• TCP/IP, UDP, DHCPv4, DHCPv6
• SNMPv2, SNMPv3
• ACL Layer 2, Layer 3 Security
• QoS, Traffic Shaper
• Supports 802.1Q VLAN
• System Authentication and remote access via RADIUS
• SSH (Secure Access Control) with encrypted password protection.

Additional features of GUI:

• Comprehensive Dashboard for centralized overview of diagnostics, monitoring, device health, system status and key metrics
• Smart quick and efficient search functionality for streamlined user experience
• Detailed system information, Interface status and monitoring and network overview
• Granular user management with role-based access control for secure systemaccess
• Real-time surveillance for identifying and responding to live threat and network fluctuations.
• Comprehensive functionality for tracking and logging system, network and user activities and events.