|
|
Highlights
• Secure, high-speed network access for small businesses
• Gigabit Ethernet connections enable rapid transfer of large files
• Advanced security, including intrusion prevention, helps keep assets safe
• Full IPsec VPN capabilities for up to five remote connections
Product Overview
Figure 1. Cisco RVS4000 Gigabit Security Router
Features and Benefits
• High-speed connectivity: Gigabit Ethernet connections on both WAN and LAN ports help you take full advantage of your broadband connections, enabling your employees to send and receive large files quickly and easily.
• Proven Stateful Packet Inspection (SPI) firewall with Intrusion Prevention System (IPS): Unlike standard firewalls, which block incoming streams based only on the source or type of data, the intrusion prevention system scans deep, enabling it to detect and block most worms, Trojan horses, and denial-of-service attacks to help keep your business assets safe.
• VPN capabilities: IP Security (IPsec) VPN capabilities built into the RVS4000 enable your remote employees, whether working from home or on the road, to connect to your office network using nearly any VPN client to access files and transfer data as securely as if they were in the office.
• Optional Cisco ProtectLink Web security service: This optional hosted service adds another layer of protection to your network by blocking malicious websites and controlling web access, without the drain on your office PCs caused by traditional security solutions.
• Improved traffic flow and network management: Flexible, built-in support for up to four 802.1Q virtual LAN (VLAN) connections enable separation of network traffic to help improve traffic flow and overall network management while enabling the RVS4000 to interoperate with other VLAN-capable switches (Figure 2).
• Limited lifetime warranty.
Figure 2. Cisco RVS4000 Gigabit Security Router Port Connections
Product Specifications
Table 1. Product Specifications
|
Feature |
Description |
|
Routing |
• Static routing
• Routing Information Protocol (RIPv1 and RIPv2)
• Inter-VLAN routing
|
|
Layer 2 |
• Port-based and 802.1Q tag-based VLANs
• 4 active VLANs (4094 range)
• One of five WAN/LAN ports can be mirrored to a selected LAN port
• Supports Rapid Spanning Tree Protocol (RSTP) for loop detection and faster reconfiguration
|
|
Network |
• Dynamic Host Configuration Protocol (DHCP) Server, DHCP Client, DHCP Relay Agent
• DHCP Server supports static IP address based on MAC address
• Domain Name System (DNS) Relay, Dynamic DNS (DynDNS, TZO)
• Network Address Translation (NAT): Port Address Translation (PAT), Network Address Port Translation (NAPT), Session Initial Protocol (SIP) Application Layer Gateway (ALG) support, NAT traversal
• Network edge software configurable on any IP address
|
|
IPv6 |
• Dual-stack IPv4 and IPv6
• 6 to 4
• Stateless address auto-configuration
• DHCP v6
• Intra Module Command Protocol ICMP v6
|
|
Security |
Access Control • MAC-based, IP-based access control list (ACL)
Firewall • SPI firewall
Content Filtering • Static URL blocking or keyword blocking (included)
• Dynamic filtering through Cisco ProtectLink Web security service (optional)
Intrusion Prevention System (IPS) • IP sweep detection
• Application anomaly detection (HTTP, FTP, Telnet, Remote Copy Protocol [RCP])
• Peer-to-peer control
• Instant messenger control
• Layer 3/Layer 4 protocol (IP, TCP, User Datagram Protocol [UDP], Internet Control Message Protocol [ICMP]) normalization
Secure Management • HTTPS
• Username/password
802.1X • Port-based RADIUS authentication (Extensible Authentication Protocol multicast distributed switching [EAP-MDS], Protected Extensible Authentication Protocol [PEAP])
|
|
VPN |
• 5 VPN tunnels for remote client access
• 5 IPsec gateway-to-gateway tunnels for branch office connectivity
• Triple Data Encryption Standard (3DES) encryption
• Message Digest Algorithm 5 (MD5)/Secure Hash Algorithm (SHA1) authentication
• IPsec NAT=T
• VPN pass-through of Point-to-Point Tunneling Protocol (PPTP), Layer 2 Tunneling Protocol (L2TP), IPsec
|
|
Quality of Service |
• Service-based bandwidth management supports rate control and priority
• Port-based prioritization on LAN port; application-based on WAN port
• 4 queues
|
|
Management |
• Simple Network Management Protocol (SNMP) version 1, 2c
• Event logging: local, syslog, email alerts
• Firmware upgradable through web browser
• Flash, RAM diagnostics
• Built-in web user interface for browser-based configuration
|
|
Performance |
NAT throughput: 800 Mbps when IPS is disabled |
|
Cisco Limited Lifetime Warranty for Cisco Small Business Products |
|
|
This Cisco Small Business product comes with a limited lifetime hardware warranty with return to factory replacement and a 1-year limited warranty for fans and/or power supplies. In addition, Cisco offers telephone technical support at no charge for the first 12 months following the date of purchase and software bug fixes, as available, for the warranty term. To download software updates, go to: www.cisco.com/cisco/web/download/index.html. Product warranty terms and other information applicable to Cisco products are available at www.cisco.com/go/warranty. |
|
System Specifications
Table 2. System Specifications
Configuration Requirements
Table 3. System Requirements
|
Feature |
Description |
|
Network adapter |
Network adapter with Ethernet network cable installed per PC |
|
Web-based configuration |
Java/cookies/SSL-enabled web browser |
Ordering Information
Table 4. Ordering Information