Ruijie RG-WALL 1600-Z5100-S Product Specification |
| Overview | Ruijie RG-WALL 1600-Z5100-S Next-Generation Z Series Firewall รองรับ Intrusion Prevention, Antivirus, Port Scan, Traffic Learning, Application Control, DoS/DDoS attacks. |
System Performance and Capacity |
Firewall throughput of IPv4 packets (1518-byte UDP packets)4 | 15 Gbps |
Firewall throughput (packets per second) | 2.3 Mpps |
Concurrent sessions (TCP) | 1000000 |
New sessions/second (TCP) | 134000 |
Firewall policies | 4000 |
SSL VPN throughput (1392-byte) | 3 Gbps |
Concurrent SSL VPN users (recommended maximum, tunnel mode) | 1000 |
Application control throughput (HTTP 64K) 2 | 10 Gbps |
IPsec VPN throughput (512-byte) | 4 Gbps |
Gateway-to-Gateway IPsec VPN Tunnels | 1000 |
Dimensions and Weight |
Product dimensions (W x D x H) | 440 mm x 300 mm x 43.6 mm (17.32 in. x 11.81 in. x 1.72 in.) |
Shipping dimensions (W x D x H) | 545 mm x 450 mm x 130 mm (21.46 in. x 17.72 in. x 5.12 in.) |
Product weight | 4.44 kg (9.79 lbs) |
Shipping weight | 5.7 kg (12.57 lbs) |
Form factor | 1 RU rack |
Port Specifications |
Fixed service port | 8 x 10/100/1000BASE-T ports
2 x 1GE SFP ports
4 x 10GE SFP+ ports |
Fixed management port | 1 x RJ45 MGMT port (reusing Ge0/0)
1 x RJ45 console port (RS-232) |
USB port | 2 x USB 2.0 ports |
Storage |
Hard disk | No hard disk for factory delivery. A 1 TB SATA hard drive can be added. |
Power Supply and Consumption |
Power supply | 2 x pluggable power modules (one power module for factory delivery) l Rated input voltage: 100-240 V; 50-60 Hz l Rated input current: 2 A (maximum) |
Max. Power Consumption | < 60 W |
Environment and Reliability |
Operating temperature | 0°C to 45°C (32°F to 113°F) |
Storage temperature | -40°C to +70°C (-40°F to +158°F) |
Operating humidity | 40% RH to 65% RH (non-condensing) |
Storage humidity | 10% RH to 90% RH (non-condensing) |
Noise level | 36 dB |
Operating altitude | 0-5000 m (0-16404 ft.) |
Compliance | EMC SZEM2404002506ATV LVD SZES2404002242AT |
Network |
Physical interface | Configuring interfaces as LAN/WAN interfaces; three modes for WAN interfaces: PPPoE, DHCP, and static IP; configuring the routing, transparent, or bypass mode for interfaces |
Sub-interface | Configuring sub-interfaces and VLAN IDs |
Bridge interface | Configuring interfaces in transparent mode as bridge interfaces |
Aggregate interface | Configuring aggregate interfaces |
Routing | IPv4/IPv6 static and dynamic routing, routing policy, Policy-based Routing (PBR), ISP address library-based routing, application-based routing, and egress load balancing |
DHCP server | DHCP server functions |
DNS server | Configuring DNS addresses for devices |
DDNS | Multiple DDNS service providers supported |
Link detection | Link detection and link detection logs |
VPN | SSL VPN and IPsec VPN |
VRRP | VRRP functions |
Object |
Address and address group | Configuring IPv4/IPv6 address objects in IP address/range format |
Zone | Configuring security zones |
Application and application group | Configuring application types in application/application group mode |
Service and service group | Configuring service objects; common default port services supported |
Time plan | Configuring time objects; one-off time plans and cyclic time plans supported |
ISP address library | Default ISP address libraries: China Telecom (CHN), China Mobile (CHN), China Unicom (CHN), CERNET (CHN), and Beijing Teletron (CHN); customizing, importing, and exporting ISP address libraries |
Virus protection template | Configuring content object templates; antivirus (AV) templates supported; configuring quick scan or deep scan; configuring templates based on protocols and directions; setting excluded viruses |
Intrusion prevention template | Configuring content object templates; predefined Intrusion Prevention System (IPS) templates supported; customizing IPS templates; configuring rule filters based on objects, severity, protocols, and threat types; setting excluded rules |
File filtering | Configuring content object templates; file filter templates (filtering by file type) supported |
URL filtering | URL filtering |
SSL proxy certificate | Adding, importing, deleting, viewing, and downloading SSL proxy certificates; configuring a global SSL proxy certificate |
Server certificate | Importing, deleting, viewing, and downloading server certificates |
Security rule base | Viewing default security rules in the IPS security library |
Content identification | URL category and keyword configuration |
User authentication | User management, user import, authentication server configuration, real-name user information synchronization, and authentication policy configuration |
Policy |
Traffic learning | Traffic learning to record destination IP addresses and port numbers as well as abnormal traffic; exporting traffic learning logs |
Network address translation (NAT) | NAT; configuring NAT policies; importing NAT policies in a batch; common NAT application-level gateway (ALG) services; server port mapping; viewing NAT address pool status |
Security policy | Configuring security policies; customizing policies based on parameters including objects, contents, and zones; viewing the policy list; importing security policies in a batch |
Policy simulation | Simulating policy execution in the simulation space to check whether uncertain security policies can achieve expected effects |
Policy configuration wizard | Security policy configuration wizard for conducting port scan, performing configurations, testing configurations, and other steps to generate security policies |
Policy optimization | Sorting out configured security policies and analyzing policies to identify redundant, expired, and conflicting policies |
Policy lifecycle | Full lifecycle display of security policies, including detailed records of policy changes |
Port scan | Port scan of configured IP ranges for all ports or selected ports; policy creation prompt for scan results |
DoS/DDoS attack defense | Different DDoS attack defense policies in security defense |
ARP attack defense | Preventing ARP attacks including ARP spoofing and ARP flooding in security defense |
Local defense | Configuring local defense policies in security defense |
Threat intelligence | Enabling or disabling threat intelligence; customizing threat intelligence; managing excluded threats |
Blocklist and allowlist | Configuring global blocklists and allowlists |
SSL proxy policy | Configuring SSL proxy policies; customizing policies based on parameters including objects, contents, and zones; viewing the policy list |
SSL proxy template | Configuring SSL proxy templates; setting the template type to protecting client or server |
Allowlist | Configuring domain name allowlists and application allowlists |
Behavior analysis | Configuring analysis policies, templates, and allowlists |
System |
Simple Network Management Protocol (SNMP) | Connecting to third-party platforms for management through SNMPv1/v2/v3 |
Patch installation | Downloading and installing patches for upgrade |
Cloud management platform | Enabling or disabling unified management on the cloud management platform; log upload to the cloud |
One-click collection | Collecting fault information with one click |
Device health | Device health diagnosis |
Service diagnosis | Service continuity diagnosis |
System upgrade | System upgrade and rollback |
Database backup | System database backup and restoration |
Factory settings restoration | Restoring factory settings on the web UI |
รับประกัน | 3 ปี |
