The SG710 is the flagship
of CyberGuard's SG Series of firewall/VPN appliances.
With multi-megabit throughput, four fast Ethernet
ports standard, and the option for two additional
gigabit ports, the ICSA-certified SG710 is an
excellent solution for branch offices of large
organizations, as well as central offices of
small to mid-sized enterprises (SME).
The SG710 provides central
site VPN, firewall and session load balancing
capabilities with the capacity to securely connect
hundreds of mobile and remote employees. The
SNORT-based IDS adds an extra security layer
by detecting attacks and alerting administrator.
So that countermeasures can be implemented quickly
before the network is compromised. With its
rich feature set and rack-optimized form factor,
the SG710 is a compelling enterprise-class firewall
solution at a mid-market price.
Configuration with Bandwidth Optimization
The SG710 supports four 10/100
Fast Ethernet (FE) segments in its base configuration.
Customers requiring Gigabit Ethernet (GbE) connectivity
can order the SG710+, which is equipped with
dual GbE ports, extending the total number of
Ethernet segments to six. Central and remote
networks can connect to the Internet through
a variety of broadband (ADSL, SHDSL and cable)
or dedicated high-speed copper (T-1, T-2, fractional
T-3 and full T-3) or fiber circuits (OC-1 to
The SG710 improves available
Internet bandwidth and connection uptime by
providing traffic load balancing across dual
WAN links while an embedded Web proxy cache,
based on Squid, further accelerates Web page
downloads. This makes the SG710 an excellent
solution for organizations that are power Web
users or have many remote offices accessing
corporate intranets. Bandwidth can be further
optimized through traffic shaping controls.
Customers wishing to protect against access
to inappropriate Web material can purchase an
URL content filtering (UCF) subscription service.
This works in conjunction with the URL proxy
embedded in the SG710 to increase productivity
and available bandwidth. The combination supports
blocking, monitoring, rating and optional reporting
without the need for an on-site URL database.
IDS Assures Maximum Security
Although all SG firewall/VPN
appliances defend against Denial of Service
and other common attacks, the SG710 raises the
bar by detecting "suspicious" activity
before it escalates into a full-blown network
Web Cache for
Rapid Web Response Time
The SG710 incorporates a
powerful Web proxy cache to improve Web page
response time and reduce link loads. Designed
to integrate seamlessly with upstream proxy
caches provided by ISPs, the SG710 allows complete
tuning of the service using the management console
GUI and command-line interface.
Increase uptime and boost
performance by connecting the SG710's two broadband
links to different Internet providers, and then
combining these into a single "virtualized"
high performance connection. A network outage
on either link will automatically switch traffic
to the operational link via the built-in link
failover features. The resulting network redundancy
makes it possible to reduce by half the number
of security appliances required to protect a
network while preserving maximum throughout
and uptime. The traffic load-balancing feature
also boosts the performance of Web transfers
and the stability of a company network connected
by DSL to the Internet.
Demilitarized Zones (DMZ)
improve on-site and remote employee productivity
without compromising security by creating DMZs
that segment the network into private and public
security zones. Typically, the private network
will be used to secure "internal"
data while the DMZ permits access to e-mail
servers, Web servers, and other "public"
applications and content.