DrayTek Vigor2950 Security Firewall Router & VPN Device - Overview

Draytek Vigor 2950 High-Performance Firewall

The Draytek Vigor 2950 Security Firewall combines Internet security, high throghput and high capacity VPN capabilities. For remote teleworkers and inter-office links, the Draytek Vigor 2950 can support up to 200 simultaneous VPN tunnels. Encryption and authentication is all handled by a dedicated VPN co-processor, thus maintaining maximum router performance. The Draytek Vigor 2950 also provides high-security firewall options with both IP-layer and content based protection.

Two Megabit WAN Ports & Five Gigabit LAN Ports

DrayTek Vigor2950 Security Firewall Router & VPN Device - Dual WAN

DrayTek Vigor2950 Security Firewall Router & VPN Device - Dual-WAN Ports for Failover or Load Balancing

For Internet connectivity protection, the Draytek Vigor 2950 has two Ethernet WAN ports which can be used in failover mode (secondary ISP used if the primary ISP fails) or in load-balancing mode, where the two ISPs can share the Internet loading. Specific rules can be set for routing traffic via specific WAN connections, or automatic balancing will make best use of resources

With a Draytek Vigor 2950 and a pair of Draytek Vigor 100 modems, you can have a complete
load balancing or failover solution using multiple ADSL lines.

DrayTek Vigor2950 Security Firewall Router & VPN Device - Specification

Draytek Vigor 2950 Specification

• Load Balancing featuring:
  • Two dedicated Ethernet WAN Ports (10/100Mb/s)
  • WAN Failover or Load-Balanced Connectivity
  • Service/IP Based Preference Rules or auto-weight
• Total WAN Throughput up to 90Mb/s
• Five Gigabit Ethernet LAN Ports (10/100/1000 Mb/s)
• High-Security Firewall with Stateful Packet Inspection (SPI)
• Robust TCP/IP Stack with Selectable DoS/DDos Protection
• LAN Mirroring & Monitoring Port (Ethernet Port No. 5)
• High Capacity VPN Concentrator featuring:
  • Dedicated VPN Co-Processor for encryption/authentication
  • VPN Throughput up to 50Mb/s
  • Up to 200 Simultaneous Tunnels
  • Dial-in or dial-out, LAN-to-LAN or Teleworker-to-LAN
  • Protocol support for PPTP, L2TP, IPSec
  • MD-5 & SHA-1 Hardware-Based Authentication
  • Encryption : MPPE, DES/3DES & AES
  • PFS (Perfect Forward Secrecy) - Adds additional key protection
  • Pre-shared/IKE keying & PKI (X.509) certificate support
  • IKE Phase 1 Agressive/Standard Modes & Phase 2 Selectable lifetimes
  • Dead Peer Detection (DPD) and NAT-Traversal (NAT-T)
  • Radius Support for dial-in teleworker profiles
  • No additional client or remote site licencing required
  • Smart-VPN Software Utility provided for teleworker convenience (Windows)
  • Compatible with other leading 3rd party vendor VPN devices
• Internet CSM (Content Security Management) featuring:
  • URL Keyword Filtering - Whitelist or Blacklist specific sites or keywords in URLs
  • Surfcontrol Support - Block web sites by category (subject to subscription)
  • Prevent accessing of web sites by using their direct IP address (thus URLs only)
  • Blocking automatic download of Java applets and ActiveX controls
  • Blocking of web site cookies
  • Block http downloads of file types (binary, compressed, multimedia):
  • Time Schedules & exclusions for enabling/disabling these restrictions
  • Block P2P (Peer-to-Peer) file sharing programs (e.g. Kazza, WinMX etc. )
  • Block Instant Messaging programs (e.g. IRC, MSN/Yahoo Messenger)
• New DrayOS Version 3 Operating System including new object-based Firewall
• QoS (Quality of Service) Assurance:
  • User-Defined Class-Based Rules
  • DiffServ Codepoint Classifying
  • 4 Priority Levels (Inbound/Outbound)
  • Bandwidth Borrowing
  • Individual IP Bandwidth/Session Limitation
• VLAN Blocking across LAN Ethernet ports
• Flexible DHCP with 'IP-MAC Binding'
• PPPoE Client and Static/Dynamic WAN IP modes
• NAT, Multi-NAT & Flexible Mapping/Forwarding
• Up to 15,000 simultaneous NAT Sessions supported
• Comprehensive Diagnostics & Reporting
• Real Time Data Flow Monitor, with instant block
• Rack Mountable (Brackets supplied) & Integral Power Supply
• Warranty : 2 Years Manufacturer's RTB included