AR4050S
Routers, 2 GE WAN ports and 8 10/100/1000 LAN ports, UTM series
The AR4050S UTM Firewall consolidates threat protection, application and web control capabilities into a single device — ensuring the security of business communications. Together with advanced routing and switching, and a firewall certified secure by ICSA Labs, the high-performance AR4050S integrated security platform is the ideal choice for Enterprise gateway applications.
The quad-core processor delivers powerful performance, significantly increasing throughput and enabling simultaneous packet inspection. It is optimized for single-pass low-latency traffic inspection. Security engines and threat signature databases from the industry’s leading vendors, with regular updates, provide up-to-the-minute protection against malware, viruses and other cyber attacks.
- High availability bypass ports allow device redundancy with a single WAN link, reducing ongoing ISP fees. If the Master firewall loses power, traffic is automatically forwarded to the backup device
- SD-WAN load-balancing enables application-aware routing over multiple inter-branch or Internet connections, making sure priority traffic uses the best available path
- A USB interface supports 3G/4G connectivity, so data transfer can automatically switch to a mobile network when a primary WAN connection becomes unavailable
- An SD card slot allows easy backup of important files
- Autonomous Management Framework™ (AMF) compatibility automates device back-up for plug-and-play recovery
- Deploy as an SMB wireless controller using AWC Lite wireless optimization functionality
- Use UTM Offload to increase throughput when using some threat protection features
More information (pdf)
| Routers | |
|---|---|
| AT-AR4050S-xx | 2 GE WAN ports and 8 10/100/1000 LAN ports |
Where xx =
10 for US power cord
20 in the absence of a power cord
30 for UK power cord
40 for Australian power cord
50 for European power cord
51 for encryption is not enabled
| Mounting Kit | |
|---|---|
| AT-RKMT-J15 | Rack mount kit for installing two devices side by side in a 19-inch hardware rack |
| AT-RKMT-J14 | Rack mounting kit for mounting one device in a 19-inch rack for equipment |
| Modules SFP 1000 Mbps | |
|---|---|
| AT-SPTX | 1000T 100 m copper |
| AT-SPSX | Multimode 1000SX GbE fiber with a wavelength of 850 nm to 550 m |
| AT-SPSX/I | Multimode 1000SX GbE fiber with a wavelength of 850 nm to industrial temperatures up to 550 m |
| AT-SPEX | Multimode fiber 1000X GbE with a wavelength of 1310 nm to 2 km |
| AT-SPLX10 | Single-mode fiber 1000LX GbE 1310 nm up to 10 km |
| AT-SPLX10/I | Single-mode fiber 1000LX GbE with a wavelength of 1310 nm, industrial temperature up to 10 km |
| AT-SPBD10-13 | Fiber 1000LX GbE Bi-Di (1310 nm Tx, 1490 nm Rx) up to 10 km |
| AT-SPBD10-14 | Optovolokno 1000LX GbE Bi-Di (1490-nm Tx, 1310 nm Rx) do 10 km |
| AT-SPLX40 | Single-mode fiber 1000LX GbE with a wavelength of 1310 nm to 40 km |
| AT-SPZX80 | Single-mode fiber 1000ZX GbE 1550 nm at a distance of up to 80 km |
| AT-SPBD20-13/I | Optovolokno 1000BX GbE Bi-Di (1310 nm Tx, 1490 nm Rx) do 20 km |
| AT-SPBD20-14/I | Optovolokno 1000BX GbE Bi-Di (1490-nm Tx, 1310 nm Rx) do 20 km |
| GOODS | NAME | DESCRIPTION |
|---|---|---|
| AR4050S | AT-FL-UTM-OFFLOAD-1YR | UTM Offload License for 1 year |
| AR4050S | AT-FL-UTM-OFFLOAD-3YR | UTM Offload License for 3 years |
| AR4050S | AT-FL-UTM-OFFLOAD-5YR | UTM Offload License for 5 years |
| AR4050S | AT-FL-AR4-AM20-1YR | AMF Master license up to 20 knots for 1 year |
| AR4050S | AT-FL-AR4-AM20-5YR | AMF Master license up to 20 knots for 5 years |
| AR4050S | AT-FL-AR4-AWC20-1YR (4) | WLAN controller license (AWC) for up to 20 access points for 1 year |
| AR4050S | AT-FL-AR4-AWC20-5YR (4) | WLAN (AWC) license for up to 20 access points for 5 years |
| AR4050S | AT-FL-AR4-CB5-1YR (5) | AWC-Channel Blanket license up to 5 access points for 1 year |
| AR4050S | AT-FL-AR4-CB5-5YR (5) | AWC-Channel Blanket license for up to 5 access points for 5 years |
| AR4050S | AT-FL-AR4-SC5-1YR (6) | AWC-Smart Connect license for up to 5 access points for 1 year |
| AR4050S | AT-FL-AR4-SC5-5YR (6) | AWC-Smart Connect license for up to 5 access points for 5 years |
| AR4050S | AT-FL-AR4-ASEC-1YR (7) | AMF-Sec license for 1 year |
| AR4050S | AT-FL-AR4-ASEC-5YR (7) | AMF-Sec license for 5 years |
(4) Five access points can be managed for free. Add 20 additional access points licensed to AWC
(5) Channel Blanket is not available as a free service. Channel Blanket requires both an AWC-CB license and an AWC license. This feature is supported by TQ5403 and TQ5403e access points.
(6) Smart Connect is not available as a free service. Smart Connect requires both an AWC-SC license and an AWC license. This feature is supported by access points TQ5403, TQ5403e and TQm5403.
(7) The AMF-Sec license cannot be used with Advanced Firewall (NGFW) or Advanced Threat Protection (ATP) licenses.
| AR3050S | AR4050S | |
|---|---|---|
| Processor and memory | ||
| Security Processor | Dual-core 800 MHz | Quad-core 1.5 GHz processor |
| Memory (RAM) | 1 GB | 2 GB |
| Flash | 4 GB | 4 GB |
| Security features | ||
| Router | Multi-zone router that supports deep packet checking with status tracking | |
| Application Proxy | FTP, TFTP, SIP | |
| Threat protection | DoS attacks, fragmented and distorted packets, mixed threats and more | |
| Security Subscription | Next Generation Router, Advanced Threat Protection | |
| Tunneling and Encryption | ||
| network-to-network (IPsec) VPN tunnels | 50 | 1,000 |
| VPN tunnels between client and site (OpenVPN) | 100 | 1,000 |
| Encrypted VPN | IPsec, SHA-1, SHA-256, SHA-512, IKEv2, SSL/TLS VPN | |
| Encryptantion | 3DES, AES-128, AES-192, AES-256 | |
| Key exchange | Diffie-Hellman Groups 5, 14, 16 | |
| Dynamic Routing VPN | RIP, OSPF, BGP, RIPng, OSPFv3, BGP4 + | |
| Point-to-point | Static PPP, L2TPv2 virtual tunnels, L2TPv3 Ethernet pseudo-wires | |
| Encapsulation | GRE for IPv4 and IPv6 | |
| Manage and authenticate | ||
| Logging and messaging | System log and v6, SNMPv2, and v3 system log | |
| Interfaces | Web interface, standard scripting command line interface | |
| Safe Management | SSHv1/v2, strong passwords | |
| Management tools | Allied Telesis Autonomous Management Framework TM (AMF) Autonomous wave control for wireless local area network (AWC) access points Vista Manager EX, AMF-Security mini |
|
| User Authentication | RADIUS, TACACS +, internal user database, web authentication, MAC authentication, 802.1x port authentication | |
| Team Authorization | TACACS + AAA (authentication, accounting and authorization) | |
| Networks | ||
| Routing (IPv4) | Static, dynamic (BGP4, OSPF, RIPv1/v2), source-based routing, policy-based routing, VRF-Lite, SD-WAN | |
| Routing (IPv6) | Static, dynamic (BGP4 +, OSPFv3, RIPng), policy-based routing, SD-WAN | |
| Multicast | IGMPv1/v2/v3, PIM-SM, PIM-DM, PIM-SSM, PIMv6 | |
| Stability | STP, RSTP, MSTP | |
| High availability | VRRP, VRRPv3, hardware-controlled bypass ports | |
| Traffic control | 8 priority queues, DiffServ, HTB scheduling, RED curves | |
| IP Address Management | Static v4/v6, DHCP v4/v6 (server, relay, client), PPPoE | |
| NAT | Static, IPsec, dynamic NAPT, dual NAT, subnet-based NAT | |
| Link aggregation | 802.3ad static and dynamic (LACP) | |
| VLAN | 802.1Q Tags | |
| Discovery | LLDP, LLDP-MED | |
| Reliability Features | ||
| Modular operating system AlliedWare Plus Full environmental monitoring of power supply, fan, temperature and internal voltage SNMP traps warn network administrators in case of failure Fan speed control |
||
| Hardware Features | ||
| Input power | 90 to 260 V AC (automatic range selection), 47 to 63 Hz | |
| Maximum power consumption | 23 W | 27 W |
| LAN ports | 8 ports 10/100/1000T RJ-45 | |
| WAN ports | 2 combined ports 1000X SFP/2 ports 10/100/1000T RJ-45 | |
| High Availability Bypass Ports | 2 ports 10/100/1000T RJ-45 | |
| Other ports | 1 USB port, 1 RJ-45 console, 1 SDHC slot | |
| Product dimensions (H x W x D) | 42.5 mm (1.67 inches) x 210 mm (8.26 inches) x 220 mm (8.66 inches) | |
| Dimensions in the package (Inx W x D) | 36.5 cm (14.37 inches) x 26 cm (10.24 inches) x 11.5 cm (4.53 inches) | |
| Weight of goods | 1.7 kg without packaging, 2.6 kg in packaging | |
| Typical/maximum noise | 28.4 dBA/35.1 dBA | |
| Environmental characteristics | ||
| Operating temperature range | 0 ° C to 50 ° C (32 ° F to 122 ° F). Decrease nominal values by 1 ° C every 305 meters (1000 feet) | |
| Storage temperature range | -20 ° C to 60 ° C (-4 ° F to 140 ° F) | |
| Range of relative humidity during operation | 5% to 80% non-condensing | |
| Range of relative humidity during storage | 5% to 95% non-condensing | |
| Working height | Maximum 2000 meters (6600 feet) | |
| Related Products | |
|---|---|
| AT-MWS600AP (Version 2.2.3) | Wireless access point with dual-band IEEE 802.11ac radio and built-in antennas |
| AT-MWS1750AP (Version 2.2.3) | Wireless access point with dual-band IEEE 802.11ac wave1 radio module and built-in antennas |
| AT-MWS2533AP (versions 2.2.1, 2.2.3) | Wireless access point with dual-band IEEE 802.11ac wave2 radio module and built-in antennas |
| AT-TQ4600-xx (version 4.0.5) | Enterprise-class wireless access point with dual-band IEEE 802.11ac radio module and built-in antenna |
| AT-TQ4400e-xx (Version 4.0.5) | External enterprise-class wireless access point with dual-band IEEE 802.11ac radio module |
| AT-TQm1402 | 802.11ac Wave 2 enterprise-class wireless access point with 2 radio modules and built-in antenna |
| AT-TQ1402 | Wireless access point Advanced 802.11ac Wave 2 enterprise class with 2 radio modules and built-in antenna |
| AT-TQm5403 | 802.11ac Wave 2 enterprise class wireless access point with 3 radio modules and built-in antenna |
| AT-TQ5403 | Advanced 802.11ac Wave 2 enterprise-class wireless access point with 3 radio modules and built-in antenna |
| AT-TQ5403e | External wireless access point Advanced 802.11ac Wave 2 enterprise class with 3 radio modules and four omnidirectional antennas |