Secure Computing SnapGear SG640 PCI Card
SnapGear all-in-one Internet security appliances

Secure, versatile, and easy to use

The SnapGear SG640 is a cost-effective firewall/ VPN/IDS/IPS solution packaged on a PCI card for desktops and critical servers. By offloading all firewall, VPN, and IDS/IPS processing from the host computer, the SG640 ensures high performance and throughput with the convenience of remote management and simplified installation. Unlike "coprocessing" products, the SG640 is an advanced, self-contained multi-tasking stateful firewall, VPN, and IDS/IPS appliance. It includes a RISC processor and two Ethernet interfaces for host and LAN communications (only one external). The SnapGear SG640 packs the power of a firewall, VPN, and IDS/IPS solution while eliminating the cabling, space and power requirements of an external appliance.

Features / Benefits:

Enterprise-class networking technology in small business platforms

SnapGear'sconfigurable firmware is based on embedded Linux and provides a virtually unlimited range of precise tuning options for such elements as QoS (Quality of Service), VPN tunnel topology, routing, and fine-grained firewall rule sets. Fully supports both business and consumer-grade broadband, ADSL, dedicated circuits from T-1 on up, narrow-band modems, and wireless. Advancednetworking features include support of port & tag based VLAN, OSPF, BGP, RIP, RIPv2, RAS, RADIUS, TACACS+, MS-CHAP V2, and more. Web and DNS caching is also available.

TrustedSource™ reputation-based global intelligence

In addition to the award winning Secure Firewall (Sidewinder) line of firewalls from Secure Computing, SnapGear too leverages the TrustedSource global intelligence feed to filter through mail messages coming into your network. TrustedSource collects and maintains a reputation ‘score’ of each IP sender and allows SnapGear customers to leverage that knowledge. By defining a threshold score within SnapGear which will identify which mail items to accept and reject, SnapGear will remove volumes of unwanted SPAM or malware. Whether you are trying to protect against zombies, malware, or even image spam, SnapGear and TrustedSource will greatly enhance your protection barrier. Thousands of sensors worldwide are continually providing feedback to the TrustedSource servers on the actions of specific IP addresses, allowing Secure Computing customers to leverage this reputation database real-time. Please visit the TrustedSource technology page for more information.

To assure uninterrupted connectivity, all SnapGear family products are equipped with a serial port. If the broadband Internet connection is lost, SnapGear products can automatically create a new narrowband connection using an external ISDN or analog modem. The SG560, SG565, SG580, and SG720 appliances support multiple broadband ports to ensure uninterrupted WAN access and maximum bandwidth utilization.

One of the largest problems with VoIP connections are the interruptions and delays the user experiences with those appliances that don’t have the appropriate quality of service features. In addition to the SIP proxy included within SnapGear, there is also an L7 classifier, which allows for VoIP packets to be prioritized over any other data being pushed through the appliance. This feature ensures that your VoIP calls are as clean as possible.

With ICSA-Certified dynamic firewall technology underpinning all SnapGear models, SnapGear customers are assured of the highest levels of stateful firewall protection. The entire SnapGear line is highly resistant to denial-of-service attacks and intrusion attempts, while actively repelling port scans and other common probes.

Whether connecting site-to-site or with mobile users, SnapGear supports all of the most popular types of VPN technology including PPTP, L2TP, GRE, and IPSec. Even the smallest SnapGear security appliances include a robust IPSec VPN solution for securely inter-connecting multiple offices across the public Internet without investing in a dedicated wide area network. The SnapGear VPN supports 3DES, AES, and other popular commercial encryption algorithms.

1. Internet/VPN connection to the central SnapGear appliance where management of all other dedicated VPN offloading SnapGear appliances occurs
2. A secure LAN connection
3. Leveraging the SnapGear switching to offload VPN tunnels
4. Leveraging the SnapGear switching to offload VPN tunnels
5. Leveraging the SnapGear switching and an external multi-port switch to add ‘n’ number of appliances to gain VPN Processing capabilities with SnapGear

All SnapGear security appliances include technology to disrupt conventional scanning and network layer denial of service attacks. The SnapGear SG565, SG580 and SG720 include embedded anti-virus gateway services for SMTP, HTTP, POP3, and FTP. The SnapGear SG565, SG580, SG640, and SG720 models also include an active IDS (Intrusion Detection System) powered by Snort™ to proactively monitor network events and alert network personnel when there is suspicious activity. The IDS assists with intrusion mitigation by scanning traffic for known viruses and by profiling traffic bi-directionally to help identify compromised systems.

Control and report on how your employees use their Web access. SnapGear appliances include the option for you to affordably subscribe to a simplified application of our leading Secure Web URL filtering solution, providing in-the-cloud filtering with a pre-defined set of reports (subscriptions available on a per appliance basis). See Webwasher® URL filtering solution to learn about the full scope of this product available as a separate off-box solution.

All SnapGear appliances are easy to securely manage via any Web browser (Internet Explorer, Netscape Navigator and others), and also provide an extensive feature-rich command line interface (SSH security on all models apart from SG300). Optional enterprise-class central management and reporting is available by deploying Global Command Center software on a platform of your choosing. Global Command Center software allows network administrators to manage hundreds of SnapGear appliances easily including the management of upgrades, policy changes, and other configuration tasks with the click of a mouse.

SnapGear Security Appliance Specifications
Market & specs
Market	SOHO	SMB/ROBO	SMB/ROBO	SMB/ROBO	Desktop/server card	SMB/ROBO
Support & warranty	1 yr, 24x7 included	1 yr, 24x7 included	1 yr, 24x7 included	1 yr, 24x7 included	1 yr, 24x7 included	1 yr, 24x7 included
Size/dimensions	7"x4.6"x1.7"	6.5"x4.5"x1"	8.1"x4.7"x1"	6.5"x4.5"x1"	PCI card	Small 1U rack-mount
Memory-Flash/RAM	4/16 MB	8/16 MB	16/64 MB	16/64 MB	16/64 MB	256/256 MB
Ethernet Interfaces	1-10/100 + 4-port switch (5 total)	1-10/100 + 4-port switch (5 total)	1-10/100 + 4-port switch (5 total)	1-10/100 + 4-port switch (5 total)	1-10/100	3-10/100 + 2-10/100/1000
File & print sharing (2 USB ports)			X
Wireless-802.11b/g			X
H/W crypto accerlation		X	X	X		X
Performance
VPN - PPTP tunnels	10	10	25	80	80	100
VPN - IPSec tunnels	40	100	150	200	150	400
Stateful inspection throughput	25 Mbps	110 Mbps	110 Mbps	160 Mbps	80 Mbps	180 Mbps
VPN - PPTP RC4(128-bit)performance	4 Mbps	7 Mbps	7 Mbps	10 Mbps	7 Mbps	4 Mbps
VPN-IPSec 3DES (168-bit) performance	2 Mbps	32 Mbps	32 Mbps	44 Mbps	5 Mbps	4 Mbps
VPN-IPSec AES (256-bit) perforamance	4 Mbps	32 Mbps	32 Mbps	44 Mbps	12 Mbps	4 Mbps
Network features
VLAN (802.1q)		X	X	X	X	X
VLAN (port based)		X	X	X		X
Failover/load balancing		X	X	X		X
DHCP client/server/relay	X	X	X	X	X(no relay)	X
Web cache (squid - nontransparent)			X	X	X	X
Traffic shaping/QoS	X	X	X	X	X	X
SIP proxy		X	X	X	X	X
Routing	X	X	X		X	X
RAS (dial in)	X	X	X			X
RIP,RIPv2		X	X		X	X
BGP, OSPF			X			X
Security features
TrustedSource anti-spam	X	X	X	X	X	X
KCSA certified firewall	X	X	X	X	X	X
Anti-intrusion	X	X	X	X	X	X
L2TP & GRE	X	X	X	X	X	X
IPv6 gateway	X	X	X	X	X	X
IDS & IPS (Snort)			X	X	X	X
Policy enforement (NASL scripts)			X	X	X	X
Content/Web filtering (optional service)	X	X	X	X	X	X
Gateway anti-virus (POP3,SMTP,FTP,HTTP)			X	X		X
White/black URL lists	X	X	X	X	X	X
White/black host lists	X	X	X	X	X	X

Firewall and intrusion mitigation:

• ICSA certified stateful firewall
• SNORT® IDS/IPS
• Anti-virus (SMTP, POP3, HTTP, FTP)
• Policy enforcement with NASL (Nessus Attack Scripting Language)
• Secure Web URL filtering (optional)
• TrustedSource electronic mail filtering
• And much more...

• VPNC-certified IPSec
• X.509 certificates
• Optional manual keying (up/download via browser)
• VPNC-certified L2TP (inside of IPSec)
• PPTP VPN
• GRE tunnels (bridge networks allowing transmission of all traffic)
• 3DES, AES
• NAT traversal
• RFC2661 compliant
• And much more...

 

Secure Computing Documentationn
	Download the Secure Computing SnapGear Product Overview Datasheet (PDF).

Secure Computing Product
Secure Computing CommandCenter Appliance
SnapGear PCI Card Model SG640 - PCI UTM card, 1x Ethernet	#SG640-12 Our Price: $439.00
Tech Support Upgrade and Renewal - 12 Months
SnapGear Tech Support Upgrade and Renewal - Upgrade and Renewal: SnapGear 24/7 phone and email Support and Maintenance, 12 Months, (does not include HW warranty extension)	#SGTS-SG640-12-A Our Price: $100.00
Hardware Warranty Extension - 24 months
SnapGear Hardware Warranty Extension - One-Time Hardware Warranty Extension, 24 Mon. (Must be registered before the initial 12 month warranty expires)	#SGHM-SG640-EXT-24 Our Price: $159.00
SnapGear Subscriptions
SnapGear TrustedSource Subscription, 12 Months	#TRSG-SG640-12 Our Price: $79.00
Secure Web URL Filtering Subscription, 12 Months	#WWSG-SG640-12 Our Price: $79.00