1GbE UTM Firewalls

AR3050S, AR4050S, AR4050S-5G

Powerful firewall security and threat protection is combined with routing and switching to provide an innovative high-performance solution. The 5G model enables flexible WAN deployment for your distributed business using high-speed 5G mobile broadband to link remote offices to the corporate network, or to back up a wired Internet connection.

Ensure secure access to business applications from anywhere across the corporate WAN.

 

Overview

  • Threat signature databases are updated regularly for up-to-the-minute protection against malware and cyber-attacks
  • Full application control allows organizations to manage which online applications their people use and how they use them
  • Web control provides a simple means to boost user productivity, ensure compliance, and save bandwidth, all while preventing web-based threats from infecting business networks
  • Comprehensive VPN functionality provides secure remote access, so employees can utilize digital business resources from anywhere at any time
  • Businesses relying on mobile Internet connectivity are assured of resilient operation with the ability to connect to two different 5G mobile service providers (AR4050S-5G)
  • Back up a wired branch office WAN link with high-speed 5G mobile connectivity that can be used as required (AR4050S-5G)
  • Vista Manager mini simplifies wireless deployment while Autonomous Wave Control (AWC) Lite automatically optimizes connectivity and throughput
  • View the network map, and monitor wireless performance with floor and heat maps using Vista Manager mini integrated into the Device GUI

Key Features

  • AlliedWare Plus™ feature-rich operating system
  • Application aware firewalling with Deep Packet Inspection (DPI)
  • Secure business operation with the Intrusion Prevention System (IPS)
  • Enable automated inter-branch traffic optimization with SD-WAN
  • Allied Telesis Autonomous Management Framework™ Plus (AMF Plus) automates network and device management
  • Monitor fiber connections with Active Fiber Monitoring™
  • Flexible mobile deployment with Dual 5G SIM card slots, plus wired Ethernet WAN and LAN ports (AR4050S-5G)

Certifications and Compliance

ICSA Labs logo

ICSA Corporate Firewall

ICSA Labs provides world-renowned testing and certification for cybersecurity and IT products, such as firewalls and security appliances.

IPv6 Ready Logo

IPv6 Ready

Run by the IPv6 Forum, IPv6 Ready certification demonstrates conformance to IPv6 standards and validates interoperability of IPv6 products.

Specifications

 AR3050SAR4050SAR4050S-5G
Security processor800MHz dual-core1.5GHz quad-core
Memory (RAM)1GB2GB
Memory (Flash)4GB4GB
Max power consumption23W27W28W
5G mobile connectivity--2 x SIM card slots
High Availability bypass ports2 x 10/100/1000T RJ-45-
LAN ports8 x 10/100/1000T RJ-45
WAN ports2 x 1000X SFP / 2 x 10/100/1000T RJ-45 combo2 x 10/100/1000T RJ-45
Other ports1 x USB, 1 x RJ-45 console, 1 x SDHC slot1 x USB, 1 x RJ-45 console

Performance

 AR3050SAR4050S / AR4050-5G
Firewall throughput (Raw)750 Mbps1,900 Mbps
Firewall throughput (App Control)700 Mbps1,800 Mbps
Concurrent sessions100,000300,000
New sessions per second3,60012,000
IPS throughput220 Mbps750 Mbps
IP Reputation throughput350 Mbps1,000 Mbps
Malware protection throughput300 Mbps1,300 Mbps
VPN throughput400 Mbps1,000 Mbps

Note: All performance values are maximums, and vary depending on system configuration.

Ordering Information

AT-AR3050S-xx

2 x GE WAN and 8 x 10/100/1000 LAN

AT-AR4050S-xx

2 x GE WAN and 8 x 10/100/1000 LAN

AT-AR4050S-5G-xx

2x 10/100/1000 WAN and 8x 10/100/1000 LAN
with 5G(1) mobile broadband access and dual SIM slots

(1) 5G connectivity is not supported in Vietnam, but the AR4050S-5G can still be used at 3G or 4G speeds

Where xx =
10 for US power cord
30 for UK power cord
40 for Australian power cord
50 for European power cord
51 for encryption not enabled
 

AT-RKMT-J15

Rack mount kit to install two devices side by side in a
19-inch equipment rack

AT-RKMT-J14

Rack mount kit to install one device in a 19-inch
equipment rack

AT-STND-J03

Stand-kit 

Security Licenses - AR3050S

License NameIncludes1 year Subscription3 year Subscription5 year Subscription
Advanced FirewallApplication Control
Web Control
AT-AR3-UTM-01-1YRAT-AR3-UTM-01-3YRAT-AR3-UTM-01-5YR

Security Licenses - AR4050S / AR4050S-5G

License NameIncludes1 year Subscription3 year Subscription5 year Subscription
Advanced FirewallApplication Control
Web Control
AT-AR4-UTM-01-1YR(1)AT-AR4-UTM-01-3YR(1)AT-AR4-UTM-01-5YR(1)
Advanced Threat ProtectionAdvanced IPS
IP Reputation
AT-AR4-UTM-02-1YR(1)AT-AR4-UTM-02-3YR(1)AT-AR4-UTM-02-5YR(1)

(1) The AT-AR4-UTM-01 and AT-AR4-UTM-02 licenses cannot be used together

Feature Licenses for AR4050S / AR4050S-5G

NameDescriptionIncludes
AT-FL-UTM-OFFLOAD-1YRUTM Offload license for 1 yearUTM Offload license for 1 year
AT-FL-UTM-OFFLOAD-3YRUTM Offload license for 1 yearUTM Offload license for 3 years
AT-FL-UTM-OFFLOAD-5YRUTM Offload license for 1 yearUTM Offload license for 5 years
AT-RT-APM5-1YR(2),(3)Cumulative AMF Plus Master licenseAMF Plus Master license for up to 5 nodes for 1 year
AT-RT-APM5-5YR(2),(3)Cumulative AMF Plus Master licenseAMF Plus Master license for up to 5 nodes for 5 years
AT-RT-AWC5-1YR(4)Cumulative AWC licenseAutonomous Wave Control (AWC) license for up to 5 access points for 1 year
AT-RT-AWC5-5YR(4)Cumulative AWC licenseAutonomous Wave Control (AWC) license for up to 5 access points for 5 years
AT-RT-CB5-1YR-2022(5)AWC-CB and AWC-SC licenseAWC Channel Blanket and AWC Smart Connect license for up to 5 access points for 1 year
AT-RT-CB5-5YR-2022(5)AWC-CB and AWC-SC licenseAWC Channel Blanket and AWC Smart Connect license for up to 5 access points for 5 years
AT-FL-AR4-ASEC-1YR(6)AMF-Sec licenseAMF-Sec license for 1 year
AT-FL-AR4-ASEC-5YR(6)AMF-Sec licenseAMF-Sec license for 5 years

(2) From AW+ version 5.5.2-2 onwards, AMF Plus licenses provide all standard AMF network management and automation features. They also enable the AMF Plus intent-based networking features menu in Vista Manager EX (from version 3.10.1 onwards)

(3) Purchase one license per 5 nodes (up to 20 nodes maximum)

(4) 5 APs can be managed for free. Purchase one license per 5 additional APs (up to 20 APs maximum)

(5) Channel Blanket and Smart Connect are not available as free services. Both an AWC-CB license and an AWC license are required for Channel Blanket and/or Smart Connect to operate. (Channel Blanket is supported on TQ6602, TQ5403, and TQ5403e access points. Smart Connect is supported on TQ5403, and TQ5403e access points)

(6) To use AMF-Sec in conjunction with either the Advanced Firewall (NGFW) or Advanced Threat Protection (ATP) licenses, you must have AMF-Sec mini version 2.2.1 or newer

All Models

Accessories

Documentation

Related Videos

UTM Firewall Video

Video: Introducing the AR4050S-5G UTM Firewall

Video: Vista Manager Mini