1GbE UTM Firewalls
AR3050S, AR4050S, AR4050S-5G
Powerful firewall security and threat protection is combined with routing and switching to provide an innovative high-performance solution. The 5G model enables flexible WAN deployment for your distributed business using high-speed 5G mobile broadband to link remote offices to the corporate network, or to back up a wired Internet connection.
Ensure secure access to business applications from anywhere across the corporate WAN.
Overview
- Threat signature databases are updated regularly for up-to-the-minute protection against malware and cyber-attacks
- Full application control allows organizations to manage which online applications their people use and how they use them
- Web control provides a simple means to boost user productivity, ensure compliance, and save bandwidth, all while preventing web-based threats from infecting business networks
- Comprehensive VPN functionality provides secure remote access, so employees can utilize digital business resources from anywhere at any time
- Businesses relying on mobile Internet connectivity are assured of resilient operation with the ability to connect to two different 5G mobile service providers (AR4050S-5G)
- Back up a wired branch office WAN link with high-speed 5G mobile connectivity that can be used as required (AR4050S-5G)
- Vista Manager mini simplifies wireless deployment while Autonomous Wave Control (AWC) Lite automatically optimizes connectivity and throughput
- View the network map, and monitor wireless performance with floor and heat maps using Vista Manager mini integrated into the Device GUI
Key Features
- AlliedWare Plus™ feature-rich operating system
- Application aware firewalling with Deep Packet Inspection (DPI)
- Secure business operation with the Intrusion Prevention System (IPS)
- Enable automated inter-branch traffic optimization with SD-WAN
- Allied Telesis Autonomous Management Framework™ Plus (AMF Plus) automates network and device management
- Monitor fiber connections with Active Fiber Monitoring™
- Flexible mobile deployment with Dual 5G SIM card slots, plus wired Ethernet WAN and LAN ports (AR4050S-5G)
Certifications and Compliance
ICSA Corporate Firewall
ICSA Labs provides world-renowned testing and certification for cybersecurity and IT products, such as firewalls and security appliances.
IPv6 Ready
Run by the IPv6 Forum, IPv6 Ready certification demonstrates conformance to IPv6 standards and validates interoperability of IPv6 products.
Specifications
AR3050S | AR4050S | AR4050S-5G | |
---|---|---|---|
Security processor | 800MHz dual-core | 1.5GHz quad-core | |
Memory (RAM) | 1GB | 2GB | |
Memory (Flash) | 4GB | 4GB | |
Max power consumption | 23W | 27W | 28W |
5G mobile connectivity | - | - | 2 x SIM card slots |
High Availability bypass ports | 2 x 10/100/1000T RJ-45 | - | |
LAN ports | 8 x 10/100/1000T RJ-45 | ||
WAN ports | 2 x 1000X SFP / 2 x 10/100/1000T RJ-45 combo | 2 x 10/100/1000T RJ-45 | |
Other ports | 1 x USB, 1 x RJ-45 console, 1 x SDHC slot | 1 x USB, 1 x RJ-45 console |
Performance
AR3050S | AR4050S / AR4050-5G | |
---|---|---|
Firewall throughput (Raw) | 750 Mbps | 1,900 Mbps |
Firewall throughput (App Control) | 700 Mbps | 1,800 Mbps |
Concurrent sessions | 100,000 | 300,000 |
New sessions per second | 3,600 | 12,000 |
IPS throughput | 220 Mbps | 750 Mbps |
IP Reputation throughput | 350 Mbps | 1,000 Mbps |
Malware protection throughput | 300 Mbps | 1,300 Mbps |
VPN throughput | 400 Mbps | 1,000 Mbps |
Note: All performance values are maximums, and vary depending on system configuration.
Ordering Information
AT-AR3050S-xx
2 x GE WAN and 8 x 10/100/1000 LAN
AT-AR4050S-xx
2 x GE WAN and 8 x 10/100/1000 LAN
AT-AR4050S-5G-xx
2x 10/100/1000 WAN and 8x 10/100/1000 LAN
with 5G(1) mobile broadband access and dual SIM slots
(1) 5G connectivity is not supported in Vietnam, but the AR4050S-5G can still be used at 3G or 4G speeds
AT-RKMT-J15
Rack mount kit to install two devices side by side in a
19-inch equipment rack
AT-RKMT-J14
Rack mount kit to install one device in a 19-inch
equipment rack
AT-STND-J03
Stand-kit
Security Licenses - AR3050S
License Name | Includes | 1 year Subscription | 3 year Subscription | 5 year Subscription |
---|---|---|---|---|
Advanced Firewall | Application Control Web Control | AT-AR3-UTM-01-1YR | AT-AR3-UTM-01-3YR | AT-AR3-UTM-01-5YR |
Security Licenses - AR4050S / AR4050S-5G
License Name | Includes | 1 year Subscription | 3 year Subscription | 5 year Subscription |
---|---|---|---|---|
Advanced Firewall | Application Control Web Control | AT-AR4-UTM-01-1YR(1) | AT-AR4-UTM-01-3YR(1) | AT-AR4-UTM-01-5YR(1) |
Advanced Threat Protection | Advanced IPS IP Reputation | AT-AR4-UTM-02-1YR(1) | AT-AR4-UTM-02-3YR(1) | AT-AR4-UTM-02-5YR(1) |
(1) The AT-AR4-UTM-01 and AT-AR4-UTM-02 licenses cannot be used together
Feature Licenses for AR4050S / AR4050S-5G
Name | Description | Includes |
---|---|---|
AT-FL-UTM-OFFLOAD-1YR | UTM Offload license for 1 year | UTM Offload license for 1 year |
AT-FL-UTM-OFFLOAD-3YR | UTM Offload license for 1 year | UTM Offload license for 3 years |
AT-FL-UTM-OFFLOAD-5YR | UTM Offload license for 1 year | UTM Offload license for 5 years |
AT-RT-APM5-1YR(2),(3) | Cumulative AMF Plus Master license | AMF Plus Master license for up to 5 nodes for 1 year |
AT-RT-APM5-5YR(2),(3) | Cumulative AMF Plus Master license | AMF Plus Master license for up to 5 nodes for 5 years |
AT-RT-AWC5-1YR(4) | Cumulative AWC license | Autonomous Wave Control (AWC) license for up to 5 access points for 1 year |
AT-RT-AWC5-5YR(4) | Cumulative AWC license | Autonomous Wave Control (AWC) license for up to 5 access points for 5 years |
AT-RT-CB5-1YR-2022(5) | AWC-CB and AWC-SC license | AWC Channel Blanket and AWC Smart Connect license for up to 5 access points for 1 year |
AT-RT-CB5-5YR-2022(5) | AWC-CB and AWC-SC license | AWC Channel Blanket and AWC Smart Connect license for up to 5 access points for 5 years |
AT-FL-AR4-ASEC-1YR(6) | AMF-Sec license | AMF-Sec license for 1 year |
AT-FL-AR4-ASEC-5YR(6) | AMF-Sec license | AMF-Sec license for 5 years |
(2) From AW+ version 5.5.2-2 onwards, AMF Plus licenses provide all standard AMF network management and automation features. They also enable the AMF Plus intent-based networking features menu in Vista Manager EX (from version 3.10.1 onwards)
(3) Purchase one license per 5 nodes (up to 20 nodes maximum)
(4) 5 APs can be managed for free. Purchase one license per 5 additional APs (up to 20 APs maximum)
(5) Channel Blanket and Smart Connect are not available as free services. Both an AWC-CB license and an AWC license are required for Channel Blanket and/or Smart Connect to operate. (Channel Blanket is supported on TQ6602, TQ5403, and TQ5403e access points. Smart Connect is supported on TQ5403, and TQ5403e access points)
(6) To use AMF-Sec in conjunction with either the Advanced Firewall (NGFW) or Advanced Threat Protection (ATP) licenses, you must have AMF-Sec mini version 2.2.1 or newer