AR3050S
The AR3050S UTM Firewall consolidates threat protection, application and web control capabilities into a single device — ensuring the security of business communications. Together with advanced routing and switching, the AR3050S integrated security platform is the ideal choice for Internet gateway applications.
The dual-core processor significantly increases throughput and enables simultaneous packet inspection. It is optimized for single-pass low-latency traffic inspection. Security engines and threat signature databases from the industry’s leading vendors, with regular updates, provide up-to-the-minute protection against malware, viruses and other cyber-attacks.
Key Features
- High availability bypass ports allow device redundancy with a single WAN link, reducing ongoing ISP fees. If the Master firewall loses power, traffic is automatically forwarded to the backup device
- SD-WAN load-balancing enables application-aware routing over multiple inter-branch or Internet connections, making sure priority traffic uses the best available path
- USB interface supports 3G/4G connectivity, so data transfer can automatically switch to a mobile network when a primary WAN connection becomes unavailable
- An SD card slot allows easy backup of important files
- Autonomous Management Framework™ Plus (AMF Plus) compatibility automates device back-up for plug-and-play recovery
- Deploy as an SMB wireless controller using Autonomous Wave Control™ (AWC) Lite wireless optimization functionality
Certifications and Compliance

IPv6 Ready
Run by the IPv6 Forum, IPv6 Ready certification demonstrates conformance to IPv6 standards and validates interoperability of IPv6 products.
Specifications
AR3050S | AR4050S | AR4050S-5G | |
---|---|---|---|
Security processor | 800MHz dual-core | 1.5GHz quad-core | |
Memory (RAM) | 1GB | 2GB | |
Memory (Flash) | 4GB | 4GB | |
Max power consumption | 23W | 27W | 28W |
5G mobile connectivity | - | - | 2 x SIM card slots |
High Availability bypass ports | 2 x 10/100/1000T RJ-45 | - | |
LAN ports | 8 x 10/100/1000T RJ-45 | ||
WAN ports | 2 x 1000X SFP / 2 x 10/100/1000T RJ-45 combo | 2 x 10/100/1000T RJ-45 | |
Other ports | 1 x USB, 1 x RJ-45 console, 1 x SDHC slot | 1 x USB, 1 x RJ-45 console |
Performance
AR3050S | AR4050S / AR4050-5G | |
---|---|---|
Firewall throughput (Raw) | 750 Mbps | 1,900 Mbps |
Firewall throughput (App Control) | 700 Mbps | 1,800 Mbps |
Concurrent sessions | 100,000 | 300,000 |
New sessions per second | 3,600 | 12,000 |
IPS throughput | 220 Mbps | 750 Mbps |
IP Reputation throughput | 350 Mbps | 1,000 Mbps |
Malware protection throughput | 300 Mbps | 1,300 Mbps |
VPN throughput | 400 Mbps | 1,000 Mbps |
Note: All performance values are maximums, and vary depending on system configuration.
Ordering Information
AT-AR3050S-xx
2 x GE WAN and 8 x 10/100/1000 LAN
AT-AR4050S-xx
2 x GE WAN and 8 x 10/100/1000 LAN
AT-AR4050S-5G-xx
2x 10/100/1000 WAN and 8x 10/100/1000 LAN
with 5G(1) mobile broadband access and dual SIM slots
(1) 5G connectivity is not supported in Vietnam, but the AR4050S-5G can still be used at 3G or 4G speeds
AT-RKMT-J15
Rack mount kit to install two devices side by side in a
19-inch equipment rack
AT-RKMT-J14
Rack mount kit to install one device in a 19-inch
equipment rack
AT-STND-J03
Stand-kit
Security Licenses - AR3050S
License Name | Includes | 1 year Subscription | 3 year Subscription | 5 year Subscription |
---|---|---|---|---|
Advanced Firewall | Application Control Web Control | AT-AR3-UTM-01-1YR | AT-AR3-UTM-01-3YR | AT-AR3-UTM-01-5YR |
Security Licenses - AR4050S / AR4050S-5G
License Name | Includes | 1 year Subscription | 3 year Subscription | 5 year Subscription |
---|---|---|---|---|
Advanced Firewall | Application Control Web Control | AT-AR4-UTM-01-1YR(1) | AT-AR4-UTM-01-3YR(1) | AT-AR4-UTM-01-5YR(1) |
Advanced Threat Protection | Advanced IPS IP Reputation | AT-AR4-UTM-02-1YR(1) | AT-AR4-UTM-02-3YR(1) | AT-AR4-UTM-02-5YR(1) |
(1) The AT-AR4-UTM-01 and AT-AR4-UTM-02 licenses cannot be used together
Feature Licenses for AR4050S / AR4050S-5G
Name | Description | Includes |
---|---|---|
AT-FL-UTM-OFFLOAD-1YR | UTM Offload license for 1 year | UTM Offload license for 1 year |
AT-FL-UTM-OFFLOAD-3YR | UTM Offload license for 1 year | UTM Offload license for 3 years |
AT-FL-UTM-OFFLOAD-5YR | UTM Offload license for 1 year | UTM Offload license for 5 years |
AT-RT-APM5-1YR(2),(3) | Cumulative AMF Plus Master license | AMF Plus Master license for up to 5 nodes for 1 year |
AT-RT-APM5-5YR(2),(3) | Cumulative AMF Plus Master license | AMF Plus Master license for up to 5 nodes for 5 years |
AT-RT-AWC5-1YR(4) | Cumulative AWC license | Autonomous Wave Control (AWC) license for up to 5 access points for 1 year |
AT-RT-AWC5-5YR(4) | Cumulative AWC license | Autonomous Wave Control (AWC) license for up to 5 access points for 5 years |
AT-RT-CB5-1YR-2022(5) | AWC-CB and AWC-SC license | AWC Channel Blanket and AWC Smart Connect license for up to 5 access points for 1 year |
AT-RT-CB5-5YR-2022(5) | AWC-CB and AWC-SC license | AWC Channel Blanket and AWC Smart Connect license for up to 5 access points for 5 years |
AT-FL-AR4-ASEC-1YR(6) | AMF-Sec license | AMF-Sec license for 1 year |
AT-FL-AR4-ASEC-5YR(6) | AMF-Sec license | AMF-Sec license for 5 years |
(2) From AW+ version 5.5.2-2 onwards, AMF Plus licenses provide all standard AMF network management and automation features. They also enable the AMF Plus intent-based networking features menu in Vista Manager EX (from version 3.10.1 onwards)
(3) Purchase one license per 5 nodes (up to 20 nodes maximum)
(4) 5 APs can be managed for free. Purchase one license per 5 additional APs (up to 25 APs maximum)
(5) Channel Blanket and Smart Connect are not available as free services. Both an AWC-CB license and an AWC license are required for Channel Blanket and/or Smart Connect to operate. (Channel Blanket is supported on TQ6602, TQ5403, and TQ5403e access points. Smart Connect is supported on TQ5403, and TQ5403e access points)
(6) To use AMF-Sec in conjunction with either the Advanced Firewall (NGFW) or Advanced Threat Protection (ATP) licenses, you must have AMF-Sec mini version 2.2.1 or newer