Dual RF Access Point with DPI Base Security Protection SWF 1220 Dual Band 802.11b/g/n + a/n, 1 +4 Gbe LAN, 3dbi Detachable Antenna Main F Main Features eatures Œ Intrusion Prevention (IPS): Intrusion scanning with 2,600+ rules Œ IEEE 802.11b/g/n mode AP, 2T2R with 300Mbps high throughput signatures Œ 5-in-1 application layer security solution integrated Œ Web guard: Actively filter-out Malicious website (560K+ rule Œ Backend signature database actively update service database) Œ Anti-virus (AV): Virus scanning, including HTTP/FTP/SMTP/POP3/ Œ Web filtering: Self-define Key word base URL filtering (35 pre- IMAP4 Protocols define categories) Œ Application guard: Configurable Application blocking including IM and P2P Product Overview As most of BYOD (Bring your own devices) and embedded devices are lack of right and efficient network security protection today, to provide a clean and safe WLAN communication for all connected devices/equipment, SWF 1220 security Access Point that integrates DPI (Deep Packet Inspection) scan engine to protect traditional PC based equipment and also non-PC embedded devices from network security threaten. The SWF 1220 security Access Point is designed for small & medium business (SMB) who lack of resources and skillful MIS management. SWF 1220 is not only a high performance dual RF, Dual Band AP, but also embedded with five DPI based security software modules that commit a high throughput communication while still enjoy a safe WLAN environment. All these signatures and rules are supported by backend signature database that makes sure you get the up-to-date protection. User gets first year free access right to signature database with the purchasing, and can be renewed by subscribe the annually update service. The renewal service provides customers nonstop internet protection. Specifications Œ Antenna: 2 x RP-SMA Connector, 3 dbi antenna gain Wireless Radio Œ Wireless Interface: IEEE 802.11b/g/n Radios operating in 2.4 GHz & Interface IEEE 802.11a/n in 5GHz Œ Uplink Port: 1 x 10/100/1000 Base-T Ethernet Œ Wireless architecture: Œ LAN Port: 4 x 1 x 10/100/1000 Base-T Ethernet (1) AP mode Œ USB 2.0 x1 (2) WDS mode (Repeater/Bridge) Œ Power switch Œ Tx Power (2.4GHz): - 10dbm @ HT40 MCS15 Management - 13dbm @ 54Mbps Œ NTP based or manual time setting - 17dbm @ 6Mbps Œ HTTP/HTTPS based Web GUI Œ Tx Power (5GHz): Œ Configuration Profile Management - 9dbm @ HT40 MCS15 Œ Internal ramdisk based syslog server or external syslog server - 11dbm @ 54Mbps Œ SNMP v1/v2c - 15dbm @ 6Mbps Œ Support Multiple SSID Œ Rx Sensitivity (2.4GHz) Network - 65dbm @ HT40 MCS15 Œ WAN: DHCP client/Static IP/PPPoE - 72dbm @ 54Mbps Œ LAN: Static IP/Mask and integrated DHCP server - 90dbm @ 6Mbps Œ Router/Bridge/WDS Mode Œ Rx Sensitivity (5GHz) Œ Network address translation - 66dbm @ HT40 MCS15 - 72dbm @ 54Mbps Œ Policy based routing - 92dbm @ 6Mbps Œ Dynamic DNS Security Access Point Œ Normal or hiding SSID Œ Dimension (W x D x H): 213 x 125 x 37.4mm Œ Wireless Security: No Encryption/WEP/WPA/WPA2/802.1x Œ Weight: 716g (AP include wall mount, not include antenna nor Œ Basic IPv6 support adapter) Œ DC Input: +12V/1A Firewall Œ SPI (Stateful Packet Inspection) Firewall Environmental Specification Œ Access Control List Œ Humidity 95 % @ 60°C Œ Universal Plug and Play Œ Operating Temperature: 0 to +60° C Œ Port Forwarding Œ Storage Temperature: -20 to +80° C Œ Port Triggering Œ Vibration: Random 0.3g VPN pass-through Certifications Œ IPSec pass-through Œ FCC, CE Œ L2TP/PPTP pass-through Œ RoHS compliant OpenVPN Client Package Contents Œ Blowfish, 3DES, AES encryption support Œ SWF 1220 x 1 Œ Routing and Bridge mode support Œ CD-ROM (with User's Manual and QIG) x 1 Œ UDP and TCP OpenVPN support Œ Power adapter Œ 3 Authentication method: password, RSA key, or both Œ Detachable antenna x 2 Œ Ethernet cable x 1 Signature Database Security Specifications Œ 1 year service warranty bundled for signature database update Anti-Virus(AV) Œ Compound years warranty is offered by project base Œ High Performance Streaming Anti-Virus Engine Œ Packet-Based and Low Latency Œ Scanning HTTP/FTP/SMTP/POP3/IMAP4 Ordering Information Œ Generic TCP Stream Scanning for other TCP flows Œ SWF 1220-EU (PN: 10SF0122000X0) Œ Destroy popular Windows/Linux/Android virus, Trojan, spyware Œ Default AV signature capacity could capture more than 32 million new Œ SWF 1220-US (PN: 10SF0122002X0) virus/Trojan instances (could be increase the signatures by customer’s request) Œ Signature rules could be renew by signature database Œ Renew frequency is about 1~2 updates per day Web Guard(WG) Œ HTTP based attacks prevention from popular malicious websites Œ Fine granularity for domain/path, not only domain Œ Supporting URL keyword based blocking. Œ Automatic update via NEXCOM signature file distribution cloud Œ Default WG signatures can block 20K newest malicious website URLs Intrusion Prevention System Œ High performance streaming intrusion prevention engine Œ Packet-Based and Low Latency Œ URL normalization Œ Protocol Anomaly Œ Traffic Anomaly detection and blocking Œ Port scan detection and blocking Œ Actions: drop packet/drop session/log App Guard(APG) Œ High performance streaming application classification engine Œ Packet-Based and Low Latency Œ Fine granularity. For example, MSN messenger login, chat, file transfer, audio/video are selectable. Facebook or Facebook flash game are selectable Œ Application Guard whitelist Œ Scheduled application control - For example, allowing MSN chat after office hours Œ Default APG signature can identify 400 applications Web URL Filtering Œ 35 categories for web URL filtering Œ Querying backend database support 174 million categorized web page Œ Natural Language Processing technology assisted categorization (Key-word base) Œ Advanced Trend Tracer technology to catch the buzzwords Œ Support 48 languages Physical and Power Œ Form factor: wall mount Security Access Point