Datasheet

4
Specifications
ISG1000 ISG2000
Maximum Performance and Capacity
1
ScreenOS
®
version tested ScreenOS 6.3 ScreenOS 6.3
Firewall performance (large packets) 2 Gbps 4 Gbps
Firewall performance (small packets) 1 Gbps 2 Gbps
Firewall packets per second (64 byte) 1.5 M PPS 3 M PPS
AES256+SHA-1 VPN performance 1 Gbps 2 Gbps
3DES+SHA-1 VPN performance 1 Gbps 2 Gbps
Maximum concurrent sessions
3
500,000 1,000,000
New sessions/second 20,000 23,000
Maximum security policies 10,000 30,000
Maximum users supported Unrestricted Unrestricted
Network Connectivity
Fixed I/O 4 10/100/1000 ports 0
Interface expansion slots 2 4
LAN interface options Up to 8 mini-GBIC (SX, LX, or TX),
up to 8 10/100/1000,
up to 20 10/100, up to 2 10GbE
Up to 16 mini-GBIC (SX, LX, or TX),
up to 8 10/100/1000,
up to 28 10/100, up to 4 10GbE
Firewall
Network attack detection Yes Yes
Denial of service (DoS) and distributed denial of service
(DDoS) protection
Yes Yes
TCP reassembly for fragmented packet protection Yes Yes
Brute force attack mitigation Yes Yes
SYN cookie protection Yes Yes
Zone-based IP spoofing Yes Yes
Malformed packet protection Yes Yes
Integrated IPS (Optional Integrated IDP)
2, 10
Stateful protocol signatures Yes Yes
Attack detection mechanisms Stateful signatures, trac anomaly
detection, protocol anomaly detection
(zero-day coverage), backdoor detection
Stateful signatures, trac anomaly
detection, protocol anomaly detection
(zero-day coverage), backdoor detection
Attack response mechanisms Drop connection, close connection, session
packet log, session summary, email, custom
Drop connection, close connection, session
packet log session summary, email, custom
Attack notification mechanisms Session packet log, session summary, email,
SNMP, system log, WebTrends
Session packet log, session summary, email,
SNMP, system log, WebTrends
Worm protection Yes Yes
Simplified installation through recommended policies Yes Yes
Trojan protection Yes Yes
Spyware/adware/keylogger protection Yes Yes
Other malware protection Yes Yes
Protection against attack proliferation from infected
systems
Yes Yes
Reconnaissance protection Ye s Ye s