AR4050S

UTM Firewall

The AR4050S UTM Firewall consolidates threat protection, application and web control capabilities into a single device — ensuring the security of business communications. Together with advanced routing and switching, and a firewall certified secure by ICSA Labs, the high-performance AR4050S integrated security platform is the ideal choice for Enterprise gateway applications.

The quad-core processor delivers powerful performance, significantly increasing throughput and enabling simultaneous packet inspection. It is optimized for single-pass low-latency traffic inspection. Security engines and threat signature databases from the industry’s leading vendors, with regular updates, provide up-to-the-minute protection against malware, viruses and other cyber attacks.

Add to quote
View Datasheet

Key Features

  • High availability bypass ports allow device redundancy with a single WAN link, reducing ongoing ISP fees. If the Master firewall loses power, traffic is automatically forwarded to the backup device
  • SD-WAN load-balancing enables application-aware routing over multiple inter-branch or Internet connections, making sure priority traffic uses the best available path
  • USB interface supports 3G/4G connectivity, so data transfer can automatically switch to a mobile network when a primary WAN connection becomes unavailable
  • An SD card slot allows easy backup of important files
  • Autonomous Management Framework™ Plus (AMF Plus) compatibility automates device back-up for plug-and-play recovery
  • Deploy as an SMB wireless controller using Autonomous Wave Control™ (AWC) Lite wireless optimization functionality
  • Use UTM Offload to increase throughput when using some threat protection features

Certifications and Compliance

IPv6 Ready

Run by the IPv6 Forum, IPv6 Ready certification demonstrates conformance to IPv6 standards and validates interoperability of IPv6 products.

ICSA Corporate Firewall

ICSA Labs provides world-renowned testing and certification for cybersecurity and IT products, such as firewalls and security appliances.

Specifications

 AR3050SAR4050SAR4050S-5G
Security processor800MHz dual-core1.5GHz quad-core
Memory (RAM)1GB2GB
Memory (Flash)4GB4GB
Max power consumption23W27W28W
5G mobile connectivity--2 x SIM card slots
High Availability bypass ports2 x 10/100/1000T RJ-45-
LAN ports8 x 10/100/1000T RJ-45
WAN ports2 x 1000X SFP / 2 x 10/100/1000T RJ-45 combo2 x 10/100/1000T RJ-45
Other ports1 x USB, 1 x RJ-45 console, 1 x SDHC slot1 x USB, 1 x RJ-45 console

Performance

 AR3050SAR4050S / AR4050-5G
Firewall throughput (Raw)750 Mbps1,900 Mbps
Firewall throughput (App Control)700 Mbps1,800 Mbps
Concurrent sessions100,000300,000
New sessions per second3,60012,000
IPS throughput220 Mbps750 Mbps
IP Reputation throughput350 Mbps1,000 Mbps
Malware protection throughput300 Mbps1,300 Mbps
VPN throughput400 Mbps1,000 Mbps

Note: All performance values are maximums, and vary depending on system configuration.

Ordering Information

AT-AR3050S-xx

2 x GE WAN and 8 x 10/100/1000 LAN

AT-AR4050S-xx

2 x GE WAN and 8 x 10/100/1000 LAN

AT-AR4050S-5G-xx

2x 10/100/1000 WAN and 8x 10/100/1000 LAN
with 5G(1) mobile broadband access and dual SIM slots

(1) 5G connectivity is not supported in Vietnam, but the AR4050S-5G can still be used at 3G or 4G speeds

Where xx =
10 for US power cord
30 for UK power cord
40 for Australian power cord
50 for European power cord
51 for encryption not enabled
 

AT-RKMT-J15

Rack mount kit to install two devices side by side in a
19-inch equipment rack

AT-RKMT-J14

Rack mount kit to install one device in a 19-inch
equipment rack

AT-STND-J03

Stand-kit 

Security Licenses - AR3050S

License NameIncludes1 year Subscription3 year Subscription5 year Subscription
Advanced FirewallApplication Control
Web Control
AT-AR3-UTM-01-1YRAT-AR3-UTM-01-3YRAT-AR3-UTM-01-5YR

Security Licenses - AR4050S / AR4050S-5G

License NameIncludes1 year Subscription3 year Subscription5 year Subscription
Advanced FirewallApplication Control
Web Control
AT-AR4-UTM-01-1YR(1)AT-AR4-UTM-01-3YR(1)AT-AR4-UTM-01-5YR(1)
Advanced Threat ProtectionAdvanced IPS
IP Reputation
AT-AR4-UTM-02-1YR(1)AT-AR4-UTM-02-3YR(1)AT-AR4-UTM-02-5YR(1)

(1) The AT-AR4-UTM-01 and AT-AR4-UTM-02 licenses cannot be used together

Feature Licenses for AR4050S / AR4050S-5G

NameDescriptionIncludes
AT-FL-UTM-OFFLOAD-1YRUTM Offload license for 1 yearUTM Offload license for 1 year
AT-FL-UTM-OFFLOAD-3YRUTM Offload license for 1 yearUTM Offload license for 3 years
AT-FL-UTM-OFFLOAD-5YRUTM Offload license for 1 yearUTM Offload license for 5 years
AT-RT-APM5-1YR(2),(3)Cumulative AMF Plus Master licenseAMF Plus Master license for up to 5 nodes for 1 year
AT-RT-APM5-5YR(2),(3)Cumulative AMF Plus Master licenseAMF Plus Master license for up to 5 nodes for 5 years
AT-RT-AWC5-1YR(4)Cumulative AWC licenseAutonomous Wave Control (AWC) license for up to 5 access points for 1 year
AT-RT-AWC5-5YR(4)Cumulative AWC licenseAutonomous Wave Control (AWC) license for up to 5 access points for 5 years
AT-RT-CB5-1YR-2022(5)AWC-CB and AWC-SC licenseAWC Channel Blanket and AWC Smart Connect license for up to 5 access points for 1 year
AT-RT-CB5-5YR-2022(5)AWC-CB and AWC-SC licenseAWC Channel Blanket and AWC Smart Connect license for up to 5 access points for 5 years
AT-FL-AR4-ASEC-1YR(6)AMF-Sec licenseAMF-Sec license for 1 year
AT-FL-AR4-ASEC-5YR(6)AMF-Sec licenseAMF-Sec license for 5 years

(2) From AW+ version 5.5.2-2 onwards, AMF Plus licenses provide all standard AMF network management and automation features. They also enable the AMF Plus intent-based networking features menu in Vista Manager EX (from version 3.10.1 onwards)

(3) Purchase one license per 5 nodes (up to 20 nodes maximum)

(4) 5 APs can be managed for free. Purchase one license per 5 additional APs (up to 20 APs maximum)

(5) Channel Blanket and Smart Connect are not available as free services. Both an AWC-CB license and an AWC license are required for Channel Blanket and/or Smart Connect to operate. (Channel Blanket is supported on TQ6602, TQ5403, and TQ5403e access points. Smart Connect is supported on TQ5403, and TQ5403e access points)

(6) To use AMF-Sec in conjunction with either the Advanced Firewall (NGFW) or Advanced Threat Protection (ATP) licenses, you must have AMF-Sec mini version 2.2.1 or newer

All Models

Accessories

Documentation