- Overview
- Application
- Key Features
- Specification
Appropriate Network Security Solutions
The innovation of the Internet has created a tremendous worldwide opportunities for e-business and information sharing. It has become essential for businesses, thus bringing network security issues into focus. The request for information security has become the primary concern for the enterprises. To fulfill the demand, PLANET has launched the CS-950 UTM Content Security Gigabit Gateway, it is an all-in-one appliance and carries several main categories across your network security deployments: firewall security protection, policy auditing (content filtering, VPN, and authentication), and easy management (CMS, wireless AP control and flow analysis). VLAN, QoS and Outbound Load Balance can be improve the network efficiency, Web-based interface provides friendly and consistent user experience.
| | | | | | | Excellent ability in Threat Defense
The CS-950 adopts Clam AV for virus scanning which can detect over 800,000 kinds of viruses, worms, and Trojans. Once suspicious emails are detected, the administrator can decide to delete or block them. Besides, websites and FTP will be scanned once the function of anti-virus is enabled in policy. It also emploies multi-spam filters, auto learning, and personal B/W list. It also gives administrators the flexibility to enforce custom filtering. These help companies create their own database by importing the latest spam update. Following actions like forward or delete can be taken on the mail identified as the spam. | | | | | | | Moreover,it built-in SPI (Stateful Packet Inspection) firewall and IDP (Intrusion Detection and Prevention) function to provides DoS detection and block concealed malicious code or worms delivered in TCP/IP protocols. As soon as an attack is suspected, CS-950 will immediately notify the IT administrator and later an extensive range of reports will be available for analysis.
| | | | | | | Cost-effective VPN Security Gateway Solution for SMBs
The CS-950 supports most of the popular security features including content blocking to block specific URL, authentication, IPSec, L2TP, SSL VPN, PPTP VPN server/client, outbound load-balancing, QoS, time schedule; and more. Furthermore, it provides higher performance with all Gigabit Ethernet interfaces which offer faster speeds for your network applications. The Gigabit user-defined interfaces flexibly fulfill the network requirement nowadays, and the multiple WAN interfaces enable the CS-950 to support outbound load balancing and WAN fail-over features. Built-in Multiple VPN tunnels (IPSec/PPTP/L2TP/SSL) enables businesses of any size to deliver secured connectivity for mobile employees, branch offices, and clients. As a result, the VPN not only can high security level connetion but also provide VPN fail-over features which are a VPN redundant mechanism to always keep the VPN alive. | | | | | | | Improving Network Efficiency
Moreover, the CS-950 has link redundancy, application control and other functions, so that the entire network system can be even better. PLANET CS-950, the latest model of its kind, is closer to the application of the small-scale sector (from 40 to 50 people), using a 9-inch desktop design, with four Gigabit ports (WAN/LAN/DMZ). The CS-950’s economical price with complete cable management features make it an inevitable choice for the next-generation office network load balancer.
| | | | | | | The CS-950’s built-in fully-qualified domain name (FQDN) can automatically resolve the IP address corresponding to all; you just type the URL that is able to manage the secure websites (HTTPS) like Facebook, YouTube and Yahoo.
| | | | | | | | | | | | | | | The CS-950 can connect multiple WANs with up to three different ISPs. It can create a stable and qualified VPN connection for many important applications such as VoIP, video conferencing and data transmission. | | | | | | | | | |
Multi-Homing VPN Security Gateway
PLANET CS-950 UTM Content Security Gigabit Gateway has an SPI firewall with DoS detection. Furthermore, through the FQDN, it can easily block secure websites like Facebook, YouTube, Gmail, etc. With IPSec/PPTP/L2TP/SSL VPN solutions, the CS-950 provides the secured data communication for branches, vendors, and mobile workers with a flexible way to connect back to the headquarters. | | | | | | | The CS-950 can connect multiple WANs with up to three different ISPs. It can create a stable and qualified VPN connection for many important applications such as VoIP, video conferencing and data transmission.
| | | | | | | | | |
Physical Port
- 4 x 10/100/1000BASE-T RJ45
- 2 undefined Ethernet port (WAN/LAN/DMZ)
- Multi-WAN function
- Outbound load balancing (Supported algorithms: Auto, Source IP, Destination IP or Manual)
QoS
- Guaranteed bandwidth
- Maximum bandwidth
- Priority
- Policy mode
- Inside Per source IP mode
- Outside Per source IP mode
Firewall Security
- Stateful Packet Inspection (SPI) firewall
- Blocking DoS/DDOS attack
- Internal firewall
- IP address block
- Block website by URL, IP, Domain, FQDN
- Anti-ARP spoofing
- Application control
VPN Features
- Max. Connection Tunnel Entries: 500 IPSec VPN tunnels, 200 PPTP VPN tunnels, 200 L2TP VPN tunnels or 50 SSL VPN tunnels
- Stateful packet inspection
- Encryption methods: DES, 3DES, AES, AES-128/192/256
- Authentication methods: MD5, SHA-1, SHA-256, SHA-512
Networking
- PPPoE/Static IP/DHCP Client
- Protocols: TCP/IP, UDP, ARP, ICMP, FTP, IPv4, IPv6
- Virtual Server
- DDNS: supports DynDNS, 3322, No-IP, Planet DDNS & Planet EasyDDNS
- Transparent bridge/transparent routing
Network Management
- Supported access by HTTP or HTTPS
- Comprehensive web-based management and policy setting
- SNMP agent (SNMPv3-capable)
- Monitoring, logging, and alarms of system activities
- Schedulable firmware upgrade through Web browser
| | |
| Hardware |
| Ethernet |
4 10/100/1000BASE-T RJ45 Ethernet ports |
| Console Port |
DB-9 console port (115200, 8, N, 1) |
| USB Port |
2 USB 2.0 port for system configuration backup and recovery |
| Reset Button |
Reset to factory default |
| Thermal Fan |
1 |
| Software |
| Management |
Web browser |
| Operation Mode |
NAT, Transparent Bridging, Transparent Routing |
| Routing Protocol |
Static route, Dynamic Route |
| NAT Throughput |
Max. 1.8Gbps |
| Max. Connections |
Max. 1.2 Million |
| Mail Scan/Day |
Max. |
| Firewall Security |
Stateful Packet Inspection (SPI)
Internal firewall
|
| Multiple Subnet |
Supports max. 16 multiple subnets |
| Outbound Load Balancing |
Supported algorithms: Auto, Source IP, Destination IP or Manual |
| Protocol |
IPv4, IPv6, TCP, UDP, HTTP, HTTPS, SMTP, FTP, NTP, DNS, PLANET DDNS, PLANET Easy DDNS,DHCP, PPPoE, SNMP, QoS, IEEE 802.1q |
| Content Filtering |
URL blocking
IP blocking
Domain blocking
Blacklist/Whitelist
|
| Application Blocking |
P2P blocking (Bit Torrent, eDonkey, WinMX and more)
IM blocking (WeChat, Yahoo Messenger, WhatsAPP, QQ, Skype, Google Talk and more)
Multimedia streaming (PPLive, PPStream, Tornado Broadcast and more)
Web-based mail (Gmail, Yahoo, Hotmail and more)
Online game (World of Warcraft, QQGame and more)
Remote controlling (TeamViewer, Remote Desktop and more)
Web (Youtube, Facebook and more)
VOIP (SIP, H.323 and more)
|
| QoS |
Guaranteed bandwidth
Maximum bandwidth
Priority levels
Policy mode/Inside Per source IP mode/Outside Per source IP mode
|
| User Authentication |
Max concurrent connections up to 256 entries
Supports local database, RADIUS, POP3 and AD authentication
|
| AP Management |
Max. 50 pcs |
| Logs |
System Operation Log, Configuration Log, Network Log, Objects Log, Network Services Log, Advanced Protection Log, Mail Security Log, IDP Log and VPN Log |
| Reports |
Show CPU/RAM system load, network flow and traffic ranking
Mixed format reports: tabular and graphical
Automated Daily/Weekly Report
Reports sent via Email
|
| Watch-Dog |
Auto-reboot upon failure |
| Others |
Outbound load balancing
Failover for WAN
CMS (Central Management System)
HA (High Availability) mode
FQDN
|
| VPN |
| VPN Function |
IPSec, PPTP server and client, L2TP, SSL |
| IPSec VPN tunnels |
Max. 500 |
| PPTP VPN tunnels |
Max. 200 |
| L2TP VPN tunnels |
Max. 200 |
| SSL VPN tunnels |
Max. 50 |
| VPN Throughput |
Max. 90Mbps |
| Encryption methods |
DES, 3DES, AES or AES-128/192/256 encrypting |
| Authentication methods |
MD5/SHA-1/SHA-256/SHA-512 authentication algorithm |
| General |
| Power Requirements |
12V DC, 3.3A |
| Power Consumption |
36W max. |
| Weight |
0.96 kg |
| Dimensions (W x D x H) |
232 x 152 x 44mm |
| Regulatory Compliance |
CE, FCC |
| Reliability |
MTBF > 63449hrs |
| Standards Conformance |
| Regulatory Compliance |
CE, FCC |
| Environments Specifications |
| Operating |
Temperature: 0 ~ 40 degrees C
Relative Humidity: 5 ~ 95% (non-condensing)
|
| Storage |
Temperature: -20 ~ 75 degrees C
Relative Humidity: 5 ~ 95% (non-condensing)
|
| Standard Accessories |
| Packet Contents |
CS-950 x 1
Quick Installation Guide x 1
Adapter x 1
Power cord x 1
Console cable x 1
Ethernet Cable x 1
Screw Package x 1
Rack-mount ear x 2
Feet pads x 4
|
|