Networks in the pursuit of speed, or must be able to take into account security, we can help enterprises to build a stable working environment. Congregation to UR-935 is a multi-function firewall both speed and safety equipment, in addition to the firewall (Firewall) function, but also has anti-virus, anti-spam, content, records, bandwidth control, custom port, IP anomaly analysis, collaborative defense, Internet behavior management, ARP security, switches (Switch) collaborative management, load balancing, content filtering, CMS centralized control, virtual private channel (IPSec VPN) and many other powerful features. UR-935 suitable for different sizes, the small business and office network environment, use of a network security for SMEs to meet defense needs. Assist SMEs in the first line at the network gateway to intercept all kinds of real-time virus threat, it still provides excellent network retains stunning performance. Products UR-935 built-in SPI firewall technology, proactively block, block hackers, whether SYN, ICMP, UDP and other attacks can be blocked. Public information is mainly applied to the rational flow concept that each source will not produce too many packets simultaneously, if a reasonable number of packets exceeds the set, the firewall will ask the excess packets blocked. IP V4 / V6 dual firewall technology IP V4 address shortages, IP V6 era coming sooner or later, so ShareTech in developing the next generation UTM when it has to integrate this trend, with a network interface regardless of whether it is defined as a WAN or a LAN, can bind both the V4 or V6, IP address, regardless of V4 in a pure environment, V4/V6 mixed, pure V6 environment, UR-935 are the same combination. Clam AV antivirus virus mail filtering engine protection system provided free of Clam AV antivirus engine can detect more than 1,000,000 viruses, worms, Trojans, regardless of e-mail, WEB, FTP altogether will automatically scan for viruses, automatic daily through the Internet Network update the virus file and e-mail list provides virus report. Web, FTP anti-virus filtering service when a user opens a browser to access a web page, UR-935 according to the system set discriminant web security, and for the file to upload and download files to do filtering and blocking rules. Based on past experience, the easiest to use FTP to download data to your computer poisoning. So use the Internet to download and upload files do pay special attention, because there may accidentally let the own data destroyed. UR-935 OfficeScan to help companies do a good job scanning and downloading FTP upload scanning services, and can prevent employees from downloading files using FTP, do security for enterprise network security services. Spam filter internal or external e-mail messages can be filtered and ST-IP network to provide credit rating, rapid ST-PIC multi-dimensional pattern recognition techniques, Bayesian filtering method, Bayesian filtering method automatic learning mechanism, greylisting, automatic whitelist mechanism, spam filtering and features such as fingerprint recognition method, and a black and white list comparison and intelligent learning database identification (Auto-Learning), and even set personal rules, flexibility to develop filtering rules, dealing with spam, no miscarriage of justice to ensure comprehensive protection, more than 95% accuracy. Mail filtering, can meet the filter criteria set by the administrator's letter, executive transfer, delete, block and other activities. For a complete record of all incoming and outgoing e-mail mail server or mail gateway mail, together with entrained files, all recorded, the most important thing is to save the message format is eml, on any operating system can be easily read or search. Detailed records WEB, FTP, MSN, Mail content skimming WEB, FTP file transfer, MSN conversations and file transfer, IM (Yahoo, ICQ, IRC, Gadu, Jabber) and e-mail records and other content sent and received, along with regulations use, automatic backup of all incoming and outgoing data specific user. Intranet Protection (ARP security) for UTM, the most difficult to detect the type of attack that broadcast packets, such as ARP spoofing, private aircraft DHCP server, etc., because the protocol congenital defects, resulting in this category aggressive behavior is difficult to be detected, the congregation to the UR-935's ARP detection mechanism can be the first time to find 'indiscriminate release' ARP message to. Alternatively, you can switch with collaborative defense equipment, you can mark the physical location of the IP, let him escape detection purposes. IP analyze any abnormal network behavior, regardless of what kind of software users run from the perspective of network packets, roughly divided into upload, download number of connections (Connect Seesion), flow (Flow) with duration (Time), by detected by the combination of these quantities, estimated using a network user is a normal behavior or abnormal. When they find abnormal behavior after internal users, managers can take a variety of strategies, for example, blocking access, immediately limit his maximum bandwidth, enabling collaborative defense mechanisms notice exchanger blocked or notify the administrator of his like. Collaborative defense (with SNMP switches) Collaborative Defense Advanced belong UTM protection through IP anomaly analysis, switches (Switch), real-time monitoring internal machine segment situation, when a large number of abnormal internal network packets sent, block these packet transmission, and to assist managers exclude abnormal state as soon as possible, at an event for the first time within which a computer to know where a switch PORT on the corporate network to avoid paralysis. Congregation to UR-935 collaborative defense mechanism, without changing the network architecture does not require the more expensive specialized Switch (with Layer 2 can), without adding any additional detection devices, without changing each user's network habits, so that the action network management becomes simple intuition. IP / MAC / Port interlock relatively high sensitivity in some network environments, such as military, government agencies, research institutions, etc., do not want the user to arbitrarily change the physical location of the Switch to the following user A (IP : 192.168.100.5, MAC: 05:51:62:53:02:03) as an example, through the UR-935 it can be positioned on the Switch section 3Port hole, if he changed to any Switch of different holes, the device be unreasonable. Content filtering provides Web Filter (web filtering) function can block access to inappropriate working end web pages and aggressive, and can own filters to block inappropriate websites. URL database management UR-935 built-in "cloud URL database", the page automatically classify managers as long as the URL nets against harmful attempts to prevent, you can easily control, no need to enter the site one by one IP address, keyword ... . to stop. Click on any harmful URL address is the origin of evil, the best way is to prohibit attempts to prevent the use of the network, if not a total ban, the use of constantly updated URL database is the best defense mechanism. Authentication Authentication provides the local user / AD/POP3 authentication and authorization mechanisms that can help network administrators within the enterprise and monitor all user accounts, in recognition of the effective user ID of the authorization, to allow the use of the network, so that enterprises can effectively manage network use of resources. Application Control UR-935 Packet eigenvalues ??using technology to identify types of software used, and put it properly classified, P2P software contains [], [IM], [WEB application], [entertainment software], [Other] and other five categories, you can target the desired control objectives control project made to apply the regulations on the control can be structured or open a specific application. Smart QoS than you imagine Bandwidth Management is for those who need to use, based on this principle, after the start] [Smart QoS, UTM will automatically check the remaining bandwidth, and assign it to people who are currently in use. The traditional QoS management interface can only send traffic out, UTM use IMQ mechanism, this technology can be managed by a network interface for each incoming, outgoing bandwidth. When a situation occurs, this mechanism will protect the operation of the device, for example: some people within the network packet Foreign mad, leading UTM overwhelmed, but let normal packet does not work, limiting mechanism LAN accept network traffic will Let device is not being offensive collapse. Outbound Load Balance Outbound Load Balancing for UR-935 provides 4WAN ports for a variety of load balancing algorithms, when one of a line break, all the network packets will automatically turn to another one normal line, ensure that the internal user network flow, When the line is restored, the packet will automatically assigned. According to set their own corporate demand load balancing rules, and network access can be set by reference to the rules guiding the implementation of network traffic load balancing. Inbound Load Balance Inbound Load Balancing UR-935 built-in Smart DNS Server, allows e-commerce industry through multiple ISP lines, provide users with more immediate, fast and stable continuous line of Internet online services. IPSec, PPTP VPN connection and control of UR-935 uses IPSec software, in full compliance with the IPSec standard definition to ensure that agreements with other device supports IPSec interoperability, currently supports manual key exchange (PreShare Key), also supports 3DES, AES , Blowfish, Twofish encryption algorithms and other MD5, HA and other authentication algorithm. PPTP VPN follow the RFC-related standards, supports MS-CHAP and MS-CHAP V2 authentication and MPPE encryption algorithm. VPN employees outside if you want to get the latest data, often using a computer connected to the Internet and open up the interception, but the openness of the Internet use to transfer data easily stolen, the data are transferred security concerns. Thus, most of the companies will be set on the Server VPN, allows users to connect from outside the machine, must pass numerous validation to enter. VPN is between the user and the company generated a host-encrypted channel, the transmission of important data. 1.IPSec VPN applicable in the transmission between headquarters and branch offices, can simultaneously support multiple computers connected between the remote server machine. IPsec VPN support for applications that require multiple computers and servers connected to each other machine, and place fixed for the enterprise environment, you can get pretty good management and security mechanisms. 2.PPTP VPN suitable for fixed locations transfers between the companies. For example: Staff transfers between the companies from home. More suitable for use in a fixed location with machine inter-company transfers. Built-in DNS server DNS server will be annoying A RECORD, MX and other settings, all to the internal DNS server, DNS can not only support IPV4 name resolution, even IPV6 also be part of a good job, Advanced Some even can do the same domain name and a different IP address to respond InBound load balancing. Traffic report provides a graphical interface for WEB traffic reports, historical state graphed the system, so that managers can keep track of the current operation of the system state. Currently UR-935 provides system status charts (including CPU load diagram, memory load diagram, system load), network traffic charts (LAN traffic, WAN1 traffic, WAN2 and DMZ traffic flow) and provides query can quickly search for the flow state history. Bridge, NAT network infrastructure to build mixed-mode change has been in progress, if a customer's network environment because of lack of the original building, for example, had only a simple IP router, Tigong Internet access, a period of time, resulting in security concerns or because of changes in the content network applications, you need to make up the missing features, such as Mail SPAM, Mail Virus, WebVirus etc. or bandwidth, application management, stop, or even want to record e-mail, WEB and other information. In response to these needs, UR-935 can be taken DMZ interface bridging (Bridge) mode, with UTM provides rich features to meet the ever-changing world of the Internet on the safety requirements, Bridge (Bridge) mode ensures that the user's environment, not To increase the security level because of the destruction of the existing network integrity. Variety of Multi-Subnet put UR-935's LAN or DMZ network interface can be bound to different subnets imagine the L3 switches and all network packets are routed via the UR-935 exchange, so that regardless how to grow the enterprise network, when necessary, adding a subnet, to meet the needs of growing up. UTM offers a variety of useful tools network test tools, including PING, Traceroute, DNS queries, Server Link and other tools, PING, Traceroute these two kind of tool that can also be performed in a different network interface. For example, a LAN interface PING, Traceroute any computer on the internal network. Support a group Lan Bypass for the prevention of network system crash problems, except for the power input is abnormal, also supports LAN bypass function, a fault in the machine will automatically turn the network connection automatically, ensuring that all external network to maintain smooth can also improve system stability and security. Management Simple Network Management to meet the basic requirements, the use of Web mode settings and update firmware, operating screen can always switch to Traditional Chinese / Simplified Chinese / English, and has a profile import, export functions, and can be freely Enable / disable ping / http / https remote control services. Any modification 'login title', 'Home Title', 'browser title' and other text, graphics or even upload to the management interface that enables administrators to enter a screen, you know which device is currently being set. Hardware Specifications Network Interface 4WAN / 1LAN / 1DMZ 10/100/1000 Mbps network speed system management using a browser to manage settings (HTTP & HTTPS) Certification CE, FCC User Environment Operating Temperature: 0 ℃ ~ 60 ℃ Operating Humidity: 10% ~ 95% RH Dimensions 44mm (height) × 430mm (W) × 255mm (depth) Power AC (100-240V) / 84W 1U Rackmount Models