VCL-MX-5020-R-ES, Router with Enhanced Security

VCL Products > Firewall > VCL-MX-5020-R-ES

VCL-MX-5020-R-ES, Router with Enhanced Security

VCL-MX-5020-R-ES is an integrated IEC-61850 compliant industrial router with firewall equipment which has advanced features that may be installed to secure critical infrastructure such as utilities, sub-stations, smart-grid distribution systems, airports and railways as well as IT Networks of financial institutions such as banks and corporate networks. VCL-MX-5020-R-ES is password protected with capabilities that meet and exceed NERC as well as all mandatory requirements of password protection and control as provided in the GR-815-CORE-2 specifications.

Features
Specifications

Highlights:

Industrial, IEC-61850-3 compliant firewall
High-reliability hardware
Easy installation and management
Infrastructure neutral
Supports for Ethernet, Fast Ethernet, Gigabit Ethernet, Optical Ports
Built-in reporting and monitoring tools including real-time graphs
Suitable for 1+0 non-redundant and 1+1 redundant installation with automatic failover
High availability functionality with Active-Active and Active-Passive features
Intrusion Detection System (IDS) and Intrusion Prevention System (IPS)
Designed to be installed in sub-stations, SCADA networks and industrial / harsh environments
Resistance to Denial of Service (DoS) Attack
Prevention of DDoS & DoS-added
Content filtering and Brute Force attack mitigation
Non-volatile Access Log with capability to "fingerprint" all successful and failed log-in attempts and keep a log of the IP addresses of all successful and failed logins / login attempts.
Detailed system logging
SYNcookie protection
Zone based IP spoofing
Malformed packet protection
DNSguard features
Software and Hardware Token Supported (TOTP)
Secure Boot
Antivirus,Anti-worm,Anti-spam andAnti-Spyware protection
IEEE 1613
IEC 61850-3, IEC 60068-2-27, IEC 60068-2-6 compliance

VCL-MX-5020-R-ES offers awide range of VPNtechnologies ranging from modern SSL VPN's to IPsec. Site-to-Site and road warrior setups are possible and with the integrated OpenVPN client exporter, the client can be configured within minutes.

Firewall Security:

Inclusion Policy - Access Control based upon White List IP addresses,MAC address and IP Domain
Exclusion Policy - Access Control based on Black-List Continuous monitoring of the TLS connection to nullify MitM attacks.

Interfaces:

4 x 1G Optical SFP Ports
4 x 10/100/1000BaseT RJ45 Ethernet Ports
1 x 10/100/1000BaseT RJ45 Secure Management Port
1 x RS-232 (RJ45) Port

Throughput:

IPsec VPN : 10.4 Gbps
Router + Firewall : 15.2 Gbps
NGFW : 15.2 Gbps
Threat Protection : 14.4 Gbps

Routing Features and Capabilities:

GUI and CLI based
Static and Dynamic IP addressing for physical and logical interfaces
IPv4 and IPv6 IP addressing format supported
Support for multiple IP address
ARP, IP forwarding
Static routing, Default routing, VLAN based routing, CARP redundancy
Routing Protocols: RIPv1, RIPv2, OSPFv2 and OSPFv3, BGPv4
Layer 2, Layer 3 routing
TCP/IP, UDP, DHCPv4, DHCPv6
SNMPv2, SNMPv3
ACL Layer 2, Layer 3 Security
QoS, Traffic Shaper
Supports 802.1Q VLAN
System Authentication and remote access via RADIUS
SSH (Secure Access Control) with encrypted password protection.

GUI Features:

Comprehensive Dashboard for centralized overview of diagnostics, monitoring, device health, system status, and key metrics
Smart quick and efficient search functionality for streamlined user experience
Detailed system information, Interface status and monitoring, and network overview
Granular user management with role-based access control for secure systemaccess
Real-time surveillance for identifying and responding to live threat and network fluctuations.
Comprehensive functionality for tracking and logging system, network and user activities and events.