Secure Computing Secure Firewall 2100 Security Appliance
The World’s Strongest Firewall

What Is the Secure Firewall Network Gateway Security Appliance?

Consolidating all major security functions under a single management interface, Secure Firewall® Network Gateway Security appliances deliver industry-leading, application-layer performance and best-in- class security. With over a decade of successful deployments in the most demanding, high-security environments, we have gained a reputation for building the world’s strongest self-defending firewall/VPN. Built with a comprehensive combination of high-speed application proxies, TrustedSource™ reputation-based global intelligence, and a complete arsenal of signature-based security services, our Unified Threat Management (UTM) firewalls defend networks and Internet-facing applications from all types of malicious threats, both known and unknown. Enterprises use our Network Gateway appliances to secure network access, protect Internet-facing applications, kill hidden attacks in packet streams, block viruses, spyware and spam, secure employee use of the Internet, decryption of SSL traffic, and create a forensic-quality audit trail for regulatory compliance and reporting.

• Gigabit-speed application layer firewall
• 3-4 times faster than leading "deep inspection" firewalls
• Combines 5 or more individual security systems in one appliance
• First and only firewall with reputation-based global intelligence
• Next generation IPS (intrusion prevention) with ASIC acceleration
• Positive security model: Automatically stop zero-hour attacks
• Over 200,000 attack signatures and growing
• Unequalled reputation for delivering highest-grade security
• Only firewall without a CERT advisory – and over 11+ years
• Ultra-hardened platform: Patented SecureOS® technology
• Real-time event monitoring, alerting, and reporting
• Enterprise Strong® appliance technology is preferred by IT professionals

Firewall/VPN:

As part of its base functionality, Secure Firewall provides the world’s strongest application firewall, and both gateway to gateway and client to gateway IPSec VPN capabilities.

The Self-Defending Firewall - Secure Firewall's defense starts with world-class firewall protection, comprised of multiple filtering technologies that provide stateful inspection and deep application-layer filtering, along with the most comprehensive list of functions for your enterprise gateway security needs. The firewall/VPN itself and these security functions (reputation services, anti-virus, URL filtering, anti-spam, and SSL decryption) are all protected by Secure Computing’s patented Type Enforcement™ technology. Fundamentally Type Enforcement is about the simple fact that security products should be more secure than the work stations, network devices, and servers that they protect. Secure Firewall is the only network gateway appliance to have ever achieved the pre-eminent EAL4+ Common Criteria certification for application layer firewalls. Its unique, unequalled CERT advisory record and zero emergency security patches over the 11+ year life of Secure Firewall set it apart from all other enterprise firewalls. Secure Firewall customers have never been interrupted by emergency security patch projects so common place in the security industry today where security products themselves need to be continually patched for security vulnerabilities. Not having to apply emergency security patches to Secure Firewall delivers tremendous time savings and is yet one more reason why Secure Firewall’s self-defending design is so confidently trusted by our customers.

IPSec VPN - Offering the latest in IPSec VPN technology, Secure Firewall accommodates both gateway to gateway VPN and client to gateway VPN’s for remote access to your network. Secure Firewall sets the standard for IPSec ease of use, interoperability and performance.

Streamline Operations with Low-Cost IPSec VPN - Decrease communication costs with remote offices, mobile employees, and partners by 75% or more. Secure Firewall's VPN security allows use of low-cost public Internet links to replace private network connections or expensive 800 number access.

Flexible and Strong End User Authentication - No matter how you want to authenticate VPN users, Secure Firewall meets your requirements. Supports cost-effective SafeWord®, SecurID, RADIUS, and others for user authentication via the XAuth protocol, as well as digital certificates from Netscape, VeriSign, Microsoft, and Entrust. For more information, visit Security Product Interoperability.

VPN Client Software for Telecommuters and Road Warriors:

Unmatched Interoperability & ICSA Certification - Secure Firewall's VPN provides unmatched interoperability. IPSec compatibility is fully certified by ICSA Labs. For more information, see the ICSA Labs web site. The exceptional interoperability of Secure Firewall was highlighted in Network World's recent review of IPSec products.

Unified Threat Management:

A unified threat management (UTM) device, Secure Firewall includes best-of-breed security so you gain greater manageability, more control, and stronger security than other UTM and firewall appliances provide. Unified Threat Management benefits organizations by giving them greater network protections that are consolidated into one device so they are far more manageable and cost effective.

Consolidating Security Systems Reduces Complexity, Saves Time and Costs:

Secure Firewall, an industry-leading UTM “all-in-one” device, consolidates numerous security functions into one system that’s easily manageable. Below are just some of the areas in which you can save time and money.

Secure Firewall and UTM = Less to buy, less to maintain and greater security

Secure Firewall turns complexity into convenience:

Achieving the level of security your organization needs likely requires multiple functions and products, and this can quickly become a headache to manage. For example, using many separate products requires separate evaluations, purchasing cycle, training, integration, and maintenance. Assembling a solution made up of numerous point products quickly becomes time consuming and expensive.

Secure Firewall solves this problem by consolidating multiple security products on one platform. You can know up front that all the security functions in the device are integrated and work well together. Training and support comes from just one vendor so you only have one relationship to manage when you need assistance. This is far easier than buying and implementing many different solutions from different vendors, and then trying to make them all work together.

The Most Comprehensive Set of Gateway Security Functions:

Secure Firewall's comprehensive yet flexible platform protects you instantly out of the box with more gateway security functions in one device than any other leading platform on the market today.

1. TrustedSource global reputation services
2. Intrusion Prevention (IPS) signature service
3. Anti-virus and anti-spyware
4. Anti-spam and anti-fraud
5. URL filtering
6. SSL Decryption

Secure Firewall Security Appliance Specifications
Models:
Physical Specs:
Physical Size:	Mini 1U	Small 1U	Small 1U	Enterprise 1U	2U	2U	5U
Recommended Users/Sizing:	Small-Medium Office up to 150 users	Small-Medium Office up to 300 users	Medium Office up to 600 users	Medium to Large office	Medium to Large Office	Large Office	Enterprise Office
Max. Outbound IP Addresses:	200	400	700	Unlimited	Unlimited	Unlimited	Unlimited
Packet Filtering Throughput (TCP):	180 Mbps	275 Mbps	650 Mbps	1.6 Gbps	1.8 Gbps	2.6 Gbps	3.2 Gbps
Stateful Throughput:	170 Mbps	250 Mbps	600 Mbps	1.5 Gbps	1.7 Gbps	2.4 Gbps	3.0 Gbps
Concurrent Connections:	50,000	100,000	500,000	1,000,000	1,200,000	1,600,000	2,000,000
Application Throughput:	140 Mbps	230 Mbps	250 Mbps	1.2 Gbps	1.3 Gbps	1.8 Gbps	2.25 Gbps
IPSec VPN AES Throughput / Concurrent Connections:	80 Mbps / 125	160 Mbps / 200	160 Mbps / 250	240 Mbps / 350	300 Mbps / 400	350 Mbps / 500	400 Mbps / 600
Interfaces (min/max):	4 - 10/100	4/6 - 10/100	4/6 - Gigabit	8/14 - Gigabit	8/20 - Gigabit	8/20 - Gigabit	14/26 Gigabit
Fiber option:	N/A	4	4	4	6	6	10
Power Supply:	Single	Single	Single	Single - Dual Option	Single - Dual Option	Dual	Dual
RAID:	N/A	N/A	N/A	RAID 1	RAID 1	RAID 5	RAID 5
SSL Decryption:	s/w only	s/w only	s/w only	Hardware	Hardware	Hardware	Hardware
Highlights: (Available on all models)
Three-year hardware warranty Included:	Next-business-day, onsite parts replacement warranty with models 410/510/1100/2100/2150. Advanced replacement hardware warranty with models 110/210.
24x7 "live answer" support	Available SecureSupport includes rapid response phone, email, ticket tracking, Web knowledge base, customer escalation.
Only firewall with TrustedSource security	Hybrid firewall provides stateful inspection and deep application-level filters with reputation-based service for comprehensive protection against unknown attacks.
Content filtering & MIME type filtering	Integrated MIME type filters and IM, P2P, Java, and ActiveX blocking.
Intrusion Prevention signature service*	Comprehensive attack signatures updated in real-time with available ASIC-based hardware acceleration.
Intrusion detection & prevention, DoS, traffic anomaly detection	Strikeback® intrusion detection, automated response, and real-time alerts; blocks denial of service attacks; protocol anomaly protection and analysis.
IPSec VPN	ICSA-certified VPN gateway with SoftRemote® VPN client for remote access.
SecureOS - Self-Defending Platform, EAL4+ Common Criteria	High-speed operating system with patented Type Enforcement® technology. No root access possible. Never been compromised. Unequalled CERT advisory record.
VLAN policy enforcement	Security policy enforcement against virtual network segments using 802.1q tag recognition.
Cluster Management	High-bandwidth cluster management for up to five units managed as one.
High Availability	Stateful, active-active high availability pairs managed as one unit.
Security event monitoring and reporting	Secure Firewall SecurityReporter correlates and consolidates audit streams from multiple appliances.
Central Management*	Central management appliance available for managing enterprise-wide policies & monitoring of hundreds of Secure Firewall appliances.
Embedded anti-virus*/anti-spyware	Anti-virus/anti-spyware filtering for email and Web.
Embedded anti-spam*/anti-fraud	Anti-spam/anti-fraud engine captures and analyzes SMTP email using algorithmic technology and includes phishing attack protections.
Web site blocking and reporting	Integrated SmartFilter® URL filtering.
SSL decrypt*	Software or ASIC-accelerated SSL Web traffic is decrypted for performing application filtering.
DHCP client support	Small business locations sitting behind cable & DSL modems are easily integrated with Secure Firewall.

*Add-on modules, central management, SecurityReporter must be purchased separately. Note: Performance statistics are current as of February 2007 and may include available performance upgrades.

CommandCenter - Enterprise-Class Central Management:

CommandCenter™ is Secure Computing's enterprise-class central management solution that provides a central interface for easy management of ten, fifty or literally hundreds of Secure Firewall v7.x appliances. Maximize operational efficiency, simplify policy control, prove regulatory compliance, and relax with the security that comes only from Secure Firewall.

SecurityReporter - Security Event Analysis and Reporting:

SecurityReporter™ software is an award winning, easy-to-use, and cost-effective security event analysis and reporting solution for the Secure Firewall® Network Gateway appliance. It delivers central monitoring, correlated alerting, and reporting of Secure Firewall audit streams to identify real security threats from meaningless noise and gives immediate action points to keep the enterprise safer.

Secure Computing Documentation
	Download the Secure Computing Secure Firewall Product Family Overview Datasheet (PDF).

Pricing Notes:

• Base Platform supports 2 add-on Application Defense Module (such as Anti-Virus or Web Filtering) & 4 add-on modules with Performance Upgrade Option.
• Performance Upgrade Options must be purchased at the time of initial product sale.
• All Secure Firewall v7 new appliance units and Appliance Upgrade units include 1 free license for SecurityReporter.
• All Secure Firewall v7 new appliance units will come bundled with the TrustedSource module.

Secure Computing Product
Secure Computing Secure Firewall v7 Appliance
Secure Firewall v7 Network Gateway Security Appliance - Model 2100 E - Includes 3 Years of next-business-day, on-site, hardware warranty coverage * Free Apple MacBook Air	#SW7X-AP-2100E Our Price: $19,600.00
Performance Option - purchase at the time of initial product sale
Secure Firewall v7 Performance Option #1 for 2100/2150 E -Ability to run 4 add-on options	#SWOP-AP-PUP1-21XOE Our Price: $995.00
Warranty Upgrade Options
3 Years - Hardware Maintenance Service Level Upgrade, 4-hour resp, Model 2100 - Only available at the time of initial product sale	#SWHM-2100-4HR-36 Our Price: $3,800.00
NBD - Hardware Maintenance 2 Year Extension (5 yrs total), Model 2000/2100/2150/1000/EM25/EM50/EMUL	#SWHM-2UEN-NBD-EXT-24 Our Price: $4,900.00
4 Hour Resp - Hardware Maintenance 2 Year Extension (5 yrs total), Model 2000/2100/2150/1000/EM25/EM50/EMUL	#SWHM-2UEN-4HR-EXT-24 Our Price: $7,900.00
Hardware Upgrade Options
Two open slots. - SSL, IPS, 1 or 2 6-port copper NICs - 1, 2, or 3 dual port Fiber cards. Purchase 1 or 2 of the PCI-X. 3rd Card must be a dual port PCIe. If a 3rd Fiber card is installed, only 2 copper connections available.
Network Card, Intel Pro 1000 Gigabit NIC - Dual Port Fiber, PCI-X	#SWOP-AP-GETH-FBR-DP-A Our Price: $1,525.00
Network Card, Intel Pro/1000 PF Gigabit NIC, PCIe, Dual Port Fiber	#SWOP-AP-GETH-FBR-DPE-A Our Price: $2,000.00
Network Card, 6 Gigabit Copper Interfaces, PCI-X	#SWOP-AP-GETH-6X-A Our Price: $990.00
10 G Network Card, Intel Dual Port with SR Fiber, PCIe	#SWOP-AP-10G-FBR-DP Our Price: $4,995.00
SecureSupport Direct Support Services
Secure Firewall SecureSupport Direct Support Service, 1 Year - Includes: 24x7 "Live Answer" Telephone Support, unlimited e-mail support, 24x7 web-based knowledge base, 24x7 web-based access to trouble tickets, regular patch notifications via e-mail, software version upgrades free of charge	#SWTS-SPRD-2100-12 Our Price: $4,410.00
Secure Firewall SecureSupport Direct Support Service, 3 Year - Includes: 24x7 "Live Answer" Telephone Support, unlimited e-mail support, 24x7 web-based knowledge base, 24x7 web-based access to trouble tickets, regular patch notifications via e-mail, software version upgrades free of charge	#SWTS-SPRD-2100-36 Our Price: $11,907.00
Support, Warranty & Subscription Reinstatement Fee
Secure Firewall Support Reinstatement fee, 0-6 months lapse in service	#XXTS-REIN-0-6 Our Price: $750.00
Secure Firewall Support Reinstatement fee, 7+ months lapse in service	#XXTS-REIN-7 Our Price: $1,500.00
Anti-Virus & Anti-Spyware Add-on Module - 1 Year
Anti-Virus & Anti-Spyware for Secure Firewall, 25-49 Users, 1 Year Subscription *Note: Price Per User, Quantity must be 25 or Greater	#SWLC-AVR-25-49-12 Our Price: $21.00
Anti-Virus & Anti-Spyware for Secure Firewall, 50-99 Users, 1 Year Subscription *Note: Price Per User, Quantity must be 50 or Greater	#SWLC-AVR-50-99-12 Our Price: $16.80
Anti-Virus & Anti-Spyware for Secure Firewall, 100-249 Users, 1 Year Subscription *Note: Price Per User, Quantity must be 100 or Greater	#SWLC-AVR-100-249-12 Our Price: $13.44
Anti-Virus & Anti-Spyware for Secure Firewall, 250-499 Users, 1 Year Subscription *Note: Price Per User, Quantity must be 250 or Greater	#SWLC-AVR-250-499-12 Our Price: $11.20
Anti-Virus & Anti-Spyware for Secure Firewall, 500-999 Users, 1 Year Subscription *Note: Price Per User, Quantity must be 500 or Greater	#SWLC-AVR-500-999-12 Our Price: $8.96
For 1,000 or great users, please contact us for a quote
Anti-Virus & Anti-Spyware Add-on Module - 3 Year
Anti-Virus & Anti-Spyware for Secure Firewall, 25-49 Users, 3 Year Subscription *Note: Price Per User, Quantity must be 25 or Greater	#SWLC-AVR-25-49-36 Our Price: $50.40
Anti-Virus & Anti-Spyware for Secure Firewall, 50-99 Users, 3 Year Subscription *Note: Price Per User, Quantity must be 50 or Greater	#SWLC-AVR-50-99-36 Our Price: $40.32
Anti-Virus & Anti-Spyware for Secure Firewall, 100-249 Users, 3 Year Subscription *Note: Price Per User, Quantity must be 100 or Greater	#SWLC-AVR-100-249-36 Our Price: $32.26
Anti-Virus & Anti-Spyware for Secure Firewall, 250-499 Users, 3 Year Subscription *Note: Price Per User, Quantity must be 250 or Greater	#SWLC-AVR-250-499-36 Our Price: $26.87
Anti-Virus & Anti-Spyware for Secure Firewall, 500-999 Users, 3 Year Subscription *Note: Price Per User, Quantity must be 500 or Greater	#SWLC-AVR-500-999-36 Our Price: $21.51
For 1,000 or great users, please contact us for a quote
SSL Decrypt Add-on Module
SSL Decrypt with H/W Acceleration, Model 2100/2150 C, D & E (New Purchase Only) - Includes 1 Year Hardware Warranty, requires v6.1 or newer Note: SSL Decryption card and IPS Engine Acceleration card can not be ordered together on the same appliance	#SWLC-SSL-21X0 Our Price: $5,995.00
IPS Engine Add-on Module - One time purchase
Secure Firewall v7 IPS Engine for Appliance Models 2100/2150 C, D, and E (New Purchase Only)	#SWXX-IPS-21X0 Our Price: $4,995.00
IPS Add-on Module - 1 Year Subscription
Secure Firewall v7 IPS Subscription, Models 410, 510, RM700, 1100, 2100, 2150 & 4150, 1 Year	#SWLC-IPS-410-4150-12 Our Price: $595.00
IPS Add-on Module - 3 Year Subscription
Secure Firewall v7 IPS Subscription, Models 410, 510, RM700, 1100, 2100, 2150 & 4150, 3 Year	#SWLC-IPS-410-4150-36 Our Price: $1,488.00