|
A Leader in the next-generation
firewall technology, Ingate systems proudly offers the ingate Firewall
1600 - a powerful appliance that fits the needs of organisations with
high demands for capacity, throughput and reliability. Like all firewalls
from Ingate, the Firewall 1600 offers the ability to use realtime communications
such as Voice over IP (VoIP) and instant messaging (IM) based on the session
initiation protocol (SIP). Today many companies are looking to use VoIP
and other realtime IP communications. Ingate products meet the special
requirements for such usage by fully supporting SIP - the standardized
Internet Protocol for live person-to-person IP communications. With ingate,
enterprises can use VoIP and other live communications on the LAN and
globally via the Internet or Private IP networks.
The Ingate Firewall 1600 is only 1 U high, fitting easily into an ever-more-crowded
network design. It boasts six interfaces, two of which can be used at
Gigabit speed. The Firewall 1600 supports up to 360 simultaneous RTP sessions
(e.g. VoIP calls). In addition, the Firewall 1600 includes a new display
that communicates its status. Included with the Ingate Firewall 1600 are
ten SIP user licenses that can be used for the registration of SIP users
on the built-in SIP registrar.
Five SIP traversal licenses are also included, allowing up to five calls
to traverse the firewall simultaneously. Additional SIP user licenses
and SIP traversal licenses can be purchased at any time. The Ingate Firewall
1600 is fully featured, supporting stateful inspection and packet filtering
with rules defined and maintained by the network security administrator
utilizing the graphical html based user interface.
Ingate Firewalls include an encrypted Virtual Private Network (VPN) termination
module. In addition to the complete SIP support, Ingate Firewalls have
a proxy for all standard protocols, including TCP, UDP, FTP, and DHCP
Choose the Right Features for Your
Network
Ingate offers several add-on modules that allow you to tailor the Firewalls
to meet the specific demands of your business. Ingate’s Quality
of Service (QoS) software module sets different priorities for different
kinds of data and allocates bandwidth for different purposes – for
instance, giving priority to live communications. Ingate’s Remote
SIP Connectivity software module works seamlessly to extend the SIP capabilities
of the enterprise to employees working remotely (home office workers,
road warriors, etc.). Remote SIP Connectivity manages the traversal of
the remote NAT from a central firewall and also includes a STUN server.
The Ingate Firewall 1600 can also be upgraded with a crypto accelerator
card, making the VPN even faster and relieving some pressure on the main
processor.

|

Ingate Firewall 1600
Add Global VoIP Connectivity to your
IP-PBX
The Firewall 1600 opens up a world of possibilities and cost-saving opportunities
when used with a SIP-based IP-PBX. While IP-PBXs or standard IP-enabled
PBXs allow IP phones to be connected to the LAN, calls outside the office
are usually still connected using the old telephone network, the PSTN.
With the Firewall 1600 business can place free telephone calls through
IP, not only between branch offices and home workers, but also to offices
and other users using Internet-connected SIP-based telephony. In addition,
communication is no longer limited to telephony voice, but can include
rich applications such as video, instant messaging, presence and more.
The Firewall 1600 also allows home workers, road warriors and even branch
offices to belong the same central IP-PBX, and offers the ability to set
up a private VoIP network, if preferred. Advanced functions in the IP-PBX
or in the client such as call transfer,call hold, and voicemail are supported
by the SIP technology in the Ingate Firewall. All this is made possible
with the highest level of security.
Do More with Microsoft LCS 2005
Adding value to Microsoft Live Communications Server 2005, Ingate Firewalls
allow voice and video applications to work outside the LAN. In addition,
Ingate makes LCS available to mobile users through Remote SIP Connectivity.
Trusted Network Security for VoIP
The Ingate Firewall SIP proxy architecture grants fully secure traversal
of the SIP traffic. The ports for the media streams are only opened between
the specific parties of a call and only for the duration of the call.
The SIP proxy inspects the SIP packets before sending them on. TLS encryption
ensures privacy when communicating, making call eavesdropping, call hijacking,
and call spoofing harder to do. Ingate also supports authentication of
users and servers.
Free Software Upgrades for the First
Year
The Ingate Firewall 1600 has no data user restrictions. Software upgrades
are free for the first year. Thereafter, an annual licensing fee will
apply. New software versions can be downloaded quickly and easily online
from the Ingate Website.
|
Technical Specifications
Feature |
Ingate Firewall 1200 |
Ingate Firewall 1400 |
1600 |
Ingate 1880 |
Interfaces (10/100 Mbit/s |
2 |
4 |
4 |
4-8 |
Interfaces (10/100/1000 Mbit/s |
No |
No |
2 |
0-8 |
Redundant power supply |
No |
No |
No |
Yes |
Flash disc for system operation |
Yes |
No |
No |
Yes |
Dimension WxDxH (mm) |
220x254x44 |
432x254x44 |
428,6x360x44 |
482, 6x460x177 |
Certifications |
CE, FCC, UL |
CE, FCC, UL |
CE, FCC, UL |
CE, FCC, UL |
Performance |
|
|
|
|
Throughput (Mbit/s) (1500 byte packets) |
60 |
150 |
412 |
800 |
Packets per second (46 byte packets) |
120000 |
14000 |
75000 |
100000 |
VPN Tunnels |
50 |
100 |
400 |
800 |
3Des (168-bit) (Mbit/s) (1438 byte packets) |
12 |
24 |
69 |
100 |
AES (128-bit) Mbit/s) (1438 byte packets) |
28 |
49 |
150 |
230 |
SIP connections (SIP+RTP, time |
0.15s |
0.15s |
0.15s |
<0.15s |
RTP Data Delay (10Mbps/100Mbps) |
0.19/0.08ms |
0.19/0.08ms |
0.19/0.08 |
0.19/0.08 ms |
Number of concurrent RTP sessions |
50 |
180 |
360 |
800 |
Management |
|
|
|
|
Automatic check for new release |
Yes |
Yes |
Yes |
Yes |
Web GUI |
Yes |
Yes |
Yes |
Yes |
DHCP-client and PPPoE |
Yes |
Yes |
Yes |
Yes |
DHCP server |
Yes |
Yes |
Yes |
Yes |
SNMP |
Yes |
Yes |
Yes |
Yes |
Internal Log to HD |
Yes |
Yes |
Yes |
Yes |
Syslog (Ingate Firewall 1600) |
Yes |
Yes |
Yes |
Yes |
E-mail events |
Yes |
Yes |
Yes |
Yes |
Support for multiple DNS servers |
Yes |
Yes |
Yes |
Yes |
Unlimited data users |
Yes |
Yes |
Yes |
Yes |
Free Software Upgrades |
Yes |
Yes |
First Year |
Yes |
Unlimited VPN Tunnels |
Yes |
Yes |
Yes |
Yes |
Firewall functionality |
|
|
|
|
Stateful inspection |
Yes |
Yes |
Yes |
Yes |
Packet filtering |
Yes |
Yes |
Yes |
Yes |
DHCP Proxy |
Yes |
Yes |
Yes |
Yes |
Proxies for TCP, UPD, and FTP |
Yes |
Yes |
Yes |
Yes |
Flexible NAT and PAT |
Yes |
Yes |
Yes |
Yes |
Qos (Bandwidth limitation and priority |
Yes |
Yes |
Yes |
Yes |
Authentication |
RADIUS |
RADIUS |
RADIUS |
RADIUS |
VPN Functionality |
|
|
|
|
Authentication algorithms |
MD5 SHA1 |
MD5 SHA1 |
MD5 SHA1 |
MD5 SHA1 |
X.509 Certificates |
Yes |
Yes |
Yes |
Yes |
Generating of X.509 certificates for clients |
Yes |
Yes |
Yes |
Yes |
IPSec (3Des and AES) |
Yes |
Yes |
Yes |
Yes |
PPTP gateway |
Yes |
Yes |
Yes |
Yes |
SIP functionality |
|
|
|
|
SIP proxy |
Yes |
Yes |
Yes |
Yes |
SIP registrar |
Yes |
Yes |
Yes |
Yes |
SIP Traffic In and Out without extra proxy |
Yes |
Yes |
Yes |
Yes |
SIP traffic to private IP addresses (NAT/PAT) |
Yes |
Yes |
Yes |
Yes |
TLS encryption |
Yes |
Yes |
Yes |
Yes |
Authentication of SIP users from an external
RADIUS |
Yes |
Yes |
Yes |
Yes |
Max Recommended registered SIP users (Ingate
Firewall 1600) |
400 |
1000 |
3500 |
8000 |
Remote SIP connectivity |
|
|
|
|
STUN-server |
Yes |
Yes |
Yes |
Yes |
Far-End NAT traversal (also symetric NAT) |
Yes |
Yes |
Yes |
Yes |
|