AR4050S
UTM Firewall
The AR4050S UTM Firewall consolidates threat protection, application and web control capabilities into a single device — ensuring the security of business communications. Together with advanced routing and switching, and a firewall certified secure by ICSA Labs, the high-performance AR4050S integrated security platform is the ideal choice for Enterprise gateway applications.
The quad-core processor delivers powerful performance, significantly increasing throughput and enabling simultaneous packet inspection. It is optimized for single-pass low-latency traffic inspection. Security engines and threat signature databases from the industry’s leading vendors, with regular updates, provide up-to-the-minute protection against malware, viruses and other cyber attacks.
Key Features
- High availability bypass ports allow device redundancy with a single WAN link, reducing ongoing ISP fees. If the Master firewall loses power, traffic is automatically forwarded to the backup device
- SD-WAN load-balancing enables application-aware routing over multiple inter-branch or Internet connections, making sure priority traffic uses the best available path
- USB interface supports 3G/4G connectivity, so data transfer can automatically switch to a mobile network when a primary WAN connection becomes unavailable
- An SD card slot allows easy backup of important files
- Autonomous Management Framework™ Plus (AMF Plus) compatibility automates device back-up for plug-and-play recovery
- Deploy as an SMB wireless controller using Autonomous Wave Control™ (AWC) Lite wireless optimization functionality
- Use UTM Offload to increase throughput when using some threat protection features
Certifications and Compliance
IPv6 Ready
Run by the IPv6 Forum, IPv6 Ready certification demonstrates conformance to IPv6 standards and validates interoperability of IPv6 products.
ICSA Corporate Firewall
ICSA Labs provides world-renowned testing and certification for cybersecurity and IT products, such as firewalls and security appliances.
Specifications
| AR3050S | AR4050S | AR4050S-5G | |
|---|---|---|---|
| Security processor | 800MHz dual-core | 1.5GHz quad-core | |
| Memory (RAM) | 1GB | 2GB | |
| Memory (Flash) | 4GB | 4GB | |
| Max power consumption | 23W | 27W | 28W |
| 5G mobile connectivity | - | - | 2 x SIM card slots |
| High Availability bypass ports | 2 x 10/100/1000T RJ-45 | - | |
| LAN ports | 8 x 10/100/1000T RJ-45 | ||
| WAN ports | 2 x 1000X SFP / 2 x 10/100/1000T RJ-45 combo | 2 x 10/100/1000T RJ-45 | |
| Other ports | 1 x USB, 1 x RJ-45 console, 1 x SDHC slot | 1 x USB, 1 x RJ-45 console | |
Performance
| AR3050S | AR4050S / AR4050-5G | |
|---|---|---|
| Firewall throughput (Raw) | 750 Mbps | 1,900 Mbps |
| Firewall throughput (App Control) | 700 Mbps | 1,800 Mbps |
| Concurrent sessions | 100,000 | 300,000 |
| New sessions per second | 3,600 | 12,000 |
| IPS throughput | 220 Mbps | 750 Mbps |
| IP Reputation throughput | 350 Mbps | 1,000 Mbps |
| Malware protection throughput | 300 Mbps | 1,300 Mbps |
| VPN throughput | 400 Mbps | 1,000 Mbps |
Note: All performance values are maximums, and vary depending on system configuration.
Ordering Information
AT-AR3050S-xx
2 x GE WAN and 8 x 10/100/1000 LAN
AT-AR4050S-xx
2 x GE WAN and 8 x 10/100/1000 LAN
AT-AR4050S-5G-xx
2x 10/100/1000 WAN and 8x 10/100/1000 LAN
with 5G(1) mobile broadband access and dual SIM slots
(1) 5G connectivity is not supported in Vietnam, but the AR4050S-5G can still be used at 3G or 4G speeds
AT-RKMT-J15
Rack mount kit to install two devices side by side in a
19-inch equipment rack
AT-RKMT-J14
Rack mount kit to install one device in a 19-inch
equipment rack
AT-STND-J03
Stand-kit
Security Licenses - AR3050S
| License Name | Includes | 1 year Subscription | 3 year Subscription | 5 year Subscription |
|---|---|---|---|---|
| Advanced Firewall | Application Control Web Control | AT-AR3-UTM-01-1YR | AT-AR3-UTM-01-3YR | AT-AR3-UTM-01-5YR |
Security Licenses - AR4050S / AR4050S-5G
| License Name | Includes | 1 year Subscription | 3 year Subscription | 5 year Subscription |
|---|---|---|---|---|
| Advanced Firewall | Application Control Web Control | AT-AR4-UTM-01-1YR(1) | AT-AR4-UTM-01-3YR(1) | AT-AR4-UTM-01-5YR(1) |
| Advanced Threat Protection | Advanced IPS IP Reputation | AT-AR4-UTM-02-1YR(1) | AT-AR4-UTM-02-3YR(1) | AT-AR4-UTM-02-5YR(1) |
(1) The AT-AR4-UTM-01 and AT-AR4-UTM-02 licenses cannot be used together
Feature Licenses for AR4050S / AR4050S-5G
| Name | Description | Includes |
|---|---|---|
| AT-FL-UTM-OFFLOAD-1YR | UTM Offload license for 1 year | UTM Offload license for 1 year |
| AT-FL-UTM-OFFLOAD-3YR | UTM Offload license for 1 year | UTM Offload license for 3 years |
| AT-FL-UTM-OFFLOAD-5YR | UTM Offload license for 1 year | UTM Offload license for 5 years |
| AT-RT-APM5-1YR(2),(3) | Cumulative AMF Plus Master license | AMF Plus Master license for up to 5 nodes for 1 year |
| AT-RT-APM5-5YR(2),(3) | Cumulative AMF Plus Master license | AMF Plus Master license for up to 5 nodes for 5 years |
| AT-RT-AWC5-1YR(4) | Cumulative AWC license | Autonomous Wave Control (AWC) license for up to 5 access points for 1 year |
| AT-RT-AWC5-5YR(4) | Cumulative AWC license | Autonomous Wave Control (AWC) license for up to 5 access points for 5 years |
| AT-RT-CB5-1YR-2022(5) | AWC-CB and AWC-SC license | AWC Channel Blanket and AWC Smart Connect license for up to 5 access points for 1 year |
| AT-RT-CB5-5YR-2022(5) | AWC-CB and AWC-SC license | AWC Channel Blanket and AWC Smart Connect license for up to 5 access points for 5 years |
| AT-FL-AR4-ASEC-1YR(6) | AMF-Sec license | AMF-Sec license for 1 year |
| AT-FL-AR4-ASEC-5YR(6) | AMF-Sec license | AMF-Sec license for 5 years |
(2) From AW+ version 5.5.2-2 onwards, AMF Plus licenses provide all standard AMF network management and automation features. They also enable the AMF Plus intent-based networking features menu in Vista Manager EX (from version 3.10.1 onwards)
(3) Purchase one license per 5 nodes (up to 20 nodes maximum)
(4) 5 APs can be managed for free. Purchase one license per 5 additional APs (up to 20 APs maximum)
(5) Channel Blanket and Smart Connect are not available as free services. Both an AWC-CB license and an AWC license are required for Channel Blanket and/or Smart Connect to operate. (Channel Blanket is supported on TQ6602, TQ5403, and TQ5403e access points. Smart Connect is supported on TQ5403, and TQ5403e access points)
(6) To use AMF-Sec in conjunction with either the Advanced Firewall (NGFW) or Advanced Threat Protection (ATP) licenses, you must have AMF-Sec mini version 2.2.1 or newer
All Models
Accessories
Documentation