VigorPro 5500 Enterprise Dual WAN Router with Anti-virus and Intrusion Protection
Legacy firewall devices have their limitations on networking protection and are often dedicated. The vulnerabilities of contemporary networks ranging from Web surfing, e-mail, FTP, tovarious instant messaging and P2P softwares, present a heavy burden for network administrators. VigorPro5500, serving as UTM equipment of the new generation, can fulfill your requirements for secure networks. Figure 1 . Front Panel
All-in-one Unified Security Firewall
Conventional firewalls are blind to today's attacks, and also cannot detect inappropriate e-mail and Web content. The most common solution is complex, costly collection of independent systems to deal with each of these threats along with network-level intrusions and attacks. The VigorPro5500 is capable of providing a complete complement of integrated services including : Anti-Virus Intrusion prevention Intrusion detection Web Content Filter ( power by SurfControl ) VPN SPI Firewall
Hardware-accelerated, Real-time Response
The VigorPro5500 employs a unique, hardware-accelerated architecture the provides the ability to perform real-time security without slowing critical network applications, such as Web traffic. Software-based anti-virus systems, which are designed for scanning non-real-time email messages, are too slow to be used to scan Web traffic or other real-time network applications.
Network-level Protection
Conventional way to protection against virus or malicious program, it required each host to install software on the host. To install software on a large number of hosts is a time consuming process. To evaluate for vulnerabilities, both scan engine and virus database needs constant upgrade. It is very costly and annoying for IT personnel with high maintenance. While VigorPro5500 works as firewall as well as internet gateway, so by nature VigorPro5500 blocks any attacks at the point of network entry. Through the user interface, the security administrator can monitor and instruct the VigorPro5500 to look for any vulnerability in network-level. Provide protection of all hosts inside network edge before threats intrude.
Content-based Inline Inspection
Conventional firewalls only inspect packets connection behavior to against any connection-based attack. While the content-based threats today. such as virus, worms, Trojans or banned content, which spread faster and do more damage. Conventional firewalls bypass the widely spread content-based threat and expose internal network to outside world. VigorPro5500 deploys DrayTek's unique MSSI™ ( Multi-stack Stateful Inspection) mechanism. With MSSI™ , VigorPro5500 inspects packet streams, compares any suspected content or behavior with build-in database in real-time, and provide inline anti-virus and anti-intrusion protection.

Vigor 2910 Series - Product Highlights

• Combination Ethernet router, VPN Device, Firewall and Load-Balancer
• Primary Ethernet WAN Interface
• Selectable secondary WAN Interface - New!
• Load Balancing across both WAN ports with automatic or user-defined policies - New!
• WAN Backup using secondary WAN in case of fisr WAN failure - New!
• Four-Port 10/100BaseT autosensing Ethernet interface with manual speed over-ride (one port switchable to WAN2 port)
• Printer Port - built-in USB port compatible with most standard printers and any Windows 98SE, 2000 or XP client PC.
• Internet Firewall facilities featuring :
  • Automatic Keep-state facility for tracking packets and denying unsolicitied incoming data
  • Selectable DoS/DDoS protection
  • IP Address anti-spoofing
  • User-configurable packet-filtering with new Object Manager - New!
  • NAT/PAT for Automatic LAN/WAN Mapping and Security
  • NAT Port Redirection with automatic internal ranging - New!
  • NAT Port Forwarding (Up to 200 IP ports) - New!
  • True-DMZ for WAN IP Address Passthrough - New!
• QoS (Quality of Service) assurance with 8 selectable levels & support
• Internet Content Filtering:
  • URL Keyword Filtering - Whitelist or Blacklist specific sites or keywords in URLs
  • Surfcontrol Support - Block Web sites by category (subject to subscription)
  • Prevent accessing of web sites by using their direct IP address (thus URLs only)
  • Blocking automatic download of Java applets and ActiveX controls
  • Blocking of web site cookies
  • Block http downloads of file types :
    • Binary Executable : .EXE / .COM / .BAT / .SCR / .PIF
    • Compressed : .ZIP / .SIT / .ARC / .CAB/. ARJ / .RAR
    • Multimedia : .MOV / .MP3 / .MPEG / .MPG / .WMV / .WAV / .RAM / .RA / .RM / .AVI / .AU
    • Time Schedules for enabling/disabling these restrictions
  • Block P2P (Peer-to-Peer) file sharing programs (e.g. Kazza, WinMX etc. )
  • Block Instant Messaging programs (e.g. IRC, MSN/Yahoo Messenger)
• VPN facilities :
  • High performance VPN supports up to 32 simultaneous VPN tunnels.
  • Dial-in or dial-out, LAN-to-LAN or Teleworker-to-LAN
  • Protocol support for PPTP, L2TP, IPSec
  • MD-5 & SHA-1 Authentication
  • Encryption : MPPE, DES/3DES & AES
  • Hardware Co-processor for VPN Encryption
  • PFS (Perfect Forward Secrecy) - Adds additional key protection
  • Pre-shared/IKE keying & PKI (X.509) certificate support
  • IKE Phase 1 Agressive/Standard Modes & Phase 2 Selectable lifetimes
  • Radius Support for dial-in teleworker profiles
  • Compatible with other leading 3rd party vendor VPN devices
  • For further details about Vigor VPN click here
• VoIP Facilities (Vigor2910V / Vigor2910VG only) :
  • Voice calls carried over existing ADSL connection
  • Two VOIP ports (RJ11 to BT type sockets)
  • Automatic QoS Assurance for Voice-over-IP Calls - VoIP given highest priority
  • SIP Standard Compliant
  • VoIP Codecs : 8Kb/s-64Kb/s
  • Registration with multiple different SIP Registrars at the same time - New!
  • Distinctive Ring for incoming calls on different accounts - New!
  • Automatically select different SIP providers depending on destination called - New!
  • Manually select SIP provider for outgoing calls by user-defined prefix - New!
  • Hotline Facility - connects to a fixed destination when you lift the handset - New!
  • Do Not Disturb - Phones can be set to not ring according to a time schedule (e.g. at night) - New!
  • Speed Dial (Phone Book) for quick dialling
  • Caller ID on phone ports (UK Standard Compliant) - New!
  • Integration with the PSTN via ITSP (e.g. DrayTel) enabling you to make/recieve calls from regular phone lines
  • Connect any standard analogue phone into the phone ports
  • UK Standard Call progress Tones (Ring, Busy cadence etc.)
  • Adjustable Gain (volume) for voice tx/rx
  • Log of incoming/outgoing calls & realtime Status reporting
  • DTMF Transmission : In-Band, Out-of-Band (RFC2833), SIP Info
  • Low latency queuing (LLQ), Random Early Detection
  • G.168 Line Electrical Echo cancellation & Jitter Buffer (125 ms)
  • Support for VoIP through VPN tunnels
  • Built-in Call Handling (PBX) Facilities:
    • Intercom (call) between local voice/phone ports - New!
    • SIP Compliant Call Diversion (Forwarding) - Always, Busy or No-Answer
    • DND (Do Not Disturb) with automatic time schedule - New!
    • Call Waiting - New!
    • Call Transfer - New!
  • T.38 Fax Facilities - New!
  • Outbound NAT Proxy / STUN Server Support
• Wireless Features (Vigor2910VG only) :
  • 802.11g Super-G Wireless LAN (Total bandwidth up to 108Mb/s) - New!
  • Twin gain aerials provide diversity and optimum coverage
  • Optional Higher-Gain Aerials (see here)
  • Backward compatible with 802.11b (11Mb/s) and regular 802.11g (54Mb/s) standards
  • Wireless Security Features :
    • WEP, WPA and WPA2 Wireless Security & Encryption - New!
    • WLAN Isolation - Isolate WLAN from wired LAN - New!
    • SSID Stealthing
    • Restricted access list for clients (by MAC address)
    • Time Scheduling (WLAN can be disabled at certain times of day)
    • 802.1x User Authentication (via Radius Server, EAP-TLS Mode) - New!
  • Optional Username/Password Required for Wireless Users
  • WDS (Wireless Distribution system) for WLAN Bridging and Repeating (see here) - New!
  • Wireless Client Rate control - New!
  • Wireless VLAN - Set inclusive/Exclusive wireless groups - New!
  • Active Client list in Web Interface
• ISDN Features (Vigor2910VGi only):
  • Compatible with ISDN2e, BT's Home/Business Highway & BT Midband™ lines
  • Uses ISDN for shared Internet access (dial-on-demand)
  • Support for 64Kb/s and 128Kb/s (Multilink-PPP)
  • Automatic ISDN backup for Internet access during WAN port (broadband) failure
  • Bandwidth-on-demand (automatically switches between 64Kb/s and 128Kb/s)
  • Direct ISDN Dial-up LAN-to-LAN connectivity (to another ISDN site)
  • Remote 'teleworker' direct dial-in access to your LAN (from a remote ISDN line)
  • Remote activation of ISP dial-up (dials ISP on receipt of recognised Caller ID)
• Dynamic DNS Posting, compatible with popular services
• DHCP Server facility with pre-settable allocations and alien lock-out
• Support for non-NAT public subnets (multiple public IP addresses)
• LAN Side IP address range and built-in DHCP server/relay is fully configurable
• RIP & Static Routing configurable
• Diagnostic Facilities:
  • SNMP Reporting/Monitoring - compatible with industry standard tools
  • Comprehansive Syslog logging/monitoring (DrayTek Syslog tool supplied)
  • Ping & TraceRoute from WUI - New!
  • Real Time Data Flow Monitor, with instant block (cut of any user immediately!) - New!
• VPN Passthrough for VPN client/server running behind the router

On the Vigor2910VG, the Wireless interface can be turned off and you do not have to use VoIP. A version of the Vigor2910VG without VoIP (Vigor2910G) or without Wireless LAN (Vigor2910G) is also available, to special order, if it is particularly required.