VCL-MX-5040-R-ES
Router with Enhanced Security

Highlights:

• High-reliability hardware
• CPU-based, modular architecture, infrastructure neutral
• Easy installation and management
• Suitable for installation in substations, SCADA, and industrial networks / harsh environments
• Supports for Ethernet, Fast Ethernet, Gigabit Ethernet, Optical Ports
• Detailed system logging, built-in reporting, and monitoring tools, including real-time graphs
• Export logs locally or on a Syslog server.
• Network Flow Monitoring
• Suitable for 1+0 non-redundant and 1+1 redundant installation with automatic failover*. Support Active-Active mode.
• High availability functionality with active-active and active-passive features
• Secure Boot
• Secure Web Gateway (SWG)
• Data Loss Prevention (DLP)
• Resistance to Denial of Service (DoS) Attack
• Prevention of DDoS & DoS-added
• Content filtering and brute force attack mitigation
• Non-volatile Access Log with the the capability to "fingerprint" all successful and failed log-in attempts and keep a log of the IP addresses of all successful and failed logins / login attempts.
• Integrated threat control includes prevention of network attacks.
• Intelligent protection of endpoints includes authentication, authorization, and control.
• Support out-of-band management through the management port / console
• In service / remote software upgrade
• SYN cookie protection
• Zone-based IP spoofing
• Malformed packet protection
• Software and Hardware Token Supported (TOTP)
• IEEE 1613
• IEC 61850-3, IEC 60068-2-27, IEC 60068-2-6 compliance

VCL-MX-5040-R-ES offers a wide range of VPN technologies ranging from modern SSL VPNs to IPsec. Site-to-site and road warrior setups are possible, and with the integrated OpenVPN client exporter, the client can be configured within minutes.

Firewall Security:

• Inclusion Policy—Access Control based upon Whitelist IP addresses, MAC addresses, and IP domains
• Exclusion Policy—Access Control based on Black-List Continuous monitoring of the TLS connection to nullify MitM attacks.

Interfaces:

• 6 x 100GE interfaces, or
• 12 x 40GE interfaces, or
• 24 x 10/1GE interfaces, or
• Any combination of the interfaces mentioned here, not exceeding an aggregate of 600G

Throughput:

• IPsec VPN: Up to 450 Gbps
• Router + Firewall: Up to 540 Gbps
• NGFW: Up to 540 Gbps
• Threat Protection: Up to 510 Gbps

Routing Features and Capabilities:

• GUI and CLI based
• Static and dynamic IP addressing for physical and logical interfaces
• IPv4 and IPv6 IP addressing formats are supported.
• Support for multiple IP addresses
• ARP, IP forwarding
• Static routing, default routing, VLAN-based routing, CARP redundancy
• Routing Protocols: RIPv1, RIPv2, OSPFv2, and OSPFv3, BGPv4 Layer 2, Layer 3 routing
• Link Aggregation, SPAN mirror port
• Supports frame size from 64 to 9216 bytes
• TCP/IP, UDP, DHCPv4, DHCPv6
• SNMPv2, SNMPv3
• ACL Layer 2, Layer 3 Security
• QoS, Traffic Shaper
• Supports 802.1Q VLAN
• System authentication and remote access via RADIUS
• SSH (Secure Access Control) with encrypted password protection.

Additional features of GUI:

• Comprehensive dashboard for a centralized overview of diagnostics, monitoring, device health, system status, and key metrics
• Smart, quick, and efficient search functionality for streamlined user experience
• Detailed system information, interface status and monitoring, and network overview
• Granular user management with role-based access control for secure system access
• Real-time surveillance for identifying and responding to live threats and network fluctuations.
• Comprehensive functionality for tracking and logging system, network, and user activities and events.