VCL-MX-5050-R-ES, Router with Cyber Security

VCL Products > Firewall > VCL-MX-5050-R-ES

VCL-MX-5050-R-ES, Router with Enhanced Security

Get Data Sheet

VCL-MX-5050-R-ES Enhanced Security industrial router with advanced cyber security features. With secure connectivity options over Gigabit Ethernet, supported by a comprehensive suite of routing and security capabilities, the VCL-MX-5050-R-ES is designed to excel in critical infrastructure installations such as utilities, SCADA networks, railways, airports as well as IT Networks of financial institutions such as banks and corporate networks. VCL-MX-5050-R-ES provides Inclusion Policy access control based upon Whitelist IP addresses, MAC address and IP Domain and Exclusion Policy access control based on Black-List continuous monitoring of the TLS connection to nullify MitM attacks. Features and capabilities include IPv4, IPv6, Layer 2, Layer 3 routing, Routing Protocols including RIPv1, RIPv2, OSPFv2 and OSPFv3, BGPv4, SNMPv2, SNMPv3, ACL Layer 2, Layer 3 Security, QoS, remote access via RADIUS and SSH with encrypted password protection.

Features
Specifications

Highlights:

Industrial, IEC-61850-3 compliant firewall
High-reliability hardware
Easy installation and management
Infrastructure neutral
Supports for Ethernet, Fast Ethernet, Gigabit Ethernet, Optical Ports
Built-in reporting and monitoring tools including real-time graphs
Suitable for 1+0 non-redundant and 1+1 redundant installation with automatic failover
High availability functionality with Active-Active and Active-Passive features
Intrusion Detection System (IDS) and Intrusion Prevention System (IPS)
Designed to be installed in sub-stations, SCADA networks and industrial / harsh environments
Resistance to Denial of Service (DoS) Attack
Prevention of DDoS & DoS-added
Content filtering and Brute Force attack mitigation
Non-volatile Access Log with capability to "fingerprint" all successful and failed log-in attempts and keep a log of the IP addresses of all successful and failed logins / login attempts.
Detailed system logging
SYN cookie protection
Zone based IP spoofing
Malformed packet protection
DNS guard features
Software and Hardware Token Supported (TOTP)
Secure Boot
Antivirus, Anti-worm, Anti-spam andAnti-Spyware protection
IEEE 1613
IEC 61850-3, IEC 60068-2-27, IEC 60068-2-6 compliance.

VCL-MX-5050-R-ES offers awide range of VPN technologies ranging from modern SSL VPN's to IPsec. Site-to-Site and road warrior setups are possible and with the integrated OpenVPN client exporter, the client can be configured within minutes.

Firewall Security:

Inclusion Policy - Access Control based upon White List IP addresses, MAC address and IP Domain
Exclusion Policy - Access Control based on Black-List Continuous monitoring of the TLS connection to nullify MitM attacks.

Wired Interfaces:

4 x 1G Optical SFP Ports
4 x 10/100/1000BaseT RJ45 Ethernet Ports
1 x 10/100/1000BaseT RJ45 Secure Management Port
1 x RS-232 (RJ45) Port

Throughput:

IPsec VPN : 10.4 Gbps
Router + Firewall : 15.2 Gbps
NGFW : 15.2 Gbps
Threat Protection : 14.4 Gbps

Router - Features and Capabilities:

GUI and CLI based
Static and Dynamic IP addressing for physical and logical interfaces
IPv4 and IPv6 IP addressing format supported
Support for multiple IP address
ARP, IP forwarding
Static routing, Default routing, VLAN based routing, CARP redundancy
Routing Protocols: RIPv1, RIPv2, OSPFv2 and OSPFv3, BGPv4
Layer 2, Layer 3 routing
TCP/IP, UDP, DHCPv4, DHCPv6
SNMPv2, SNMPv3
ACL Layer 2, Layer 3 Security
QoS, Traffic Shaper
Supports 802.1Q VLAN
System Authentication and remote access via RADIUS
SSH (Secure Access Control) with encrypted password protection.

GUI Features:

Comprehensive Dashboard for centralized overview of diagnostics, monitoring, device health, systemstatus and keymetrics
Smart quick and efficient search functionality for streamlined user experience
Detailed system information, Interface status and monitoring and network overview
Granular usermanagement with role-based access control for secure systemaccess
Real-time surveillance for identifying and responding to live threat and network fluctuations
Comprehensive functionality for tracking and logging system, network and user activities and events.