Billion S100N - Manual

802.11n Gigabit SSL / IPSec VPN Gateway

with Portal-based Wireless NAC

With the increasing availability of wireless technology, small offices and SMBs are

finding that WLAN deployment can allow them to increase the overall efficiency of

their business but they still remain on the sideline. The most important reason is

that they are concerned about the exposure of their sensitive corporate

information over the WLAN network. Billion’s BiGuard S100N is the perfect

solutions for SMBs that need a flexible, secure wired and wireless connection,

and always-on connectivity to the corporate resources. Integrated with

portal-based wireless NAC (Network Access Control), the BiGuard S100N

enables workers or visitors to roam freely, securely and seamlessly between

subnets in an office building, or between different network types – LAN, WLAN

and WAN – without the risk of unauthorized access to the corporate network. By

establishing encrypted SSL VPN tunnels, mobile workers can securely access the

intranet from any location, such as a branch office, home, or even a public kiosk.

Gigabit WAN and LAN ports provide the bandwidth and speed needed for heavy

bandwidth consuming applications like video streaming and critical business

applications. “Energy efficient” features such as Smart Power Saving and Wake

On LAN (WOL) allow the corporate networks to be more environmentally friendly

and to increase cost savings without the compromise of their network

performance.

• Draft 802.11n wireless and delivers up to 300Mbps link rate
• Wireless NAC (Network Access Control)
• SSL VPN gateway plus solid router and firewall functions
• IPSec VPN capabilities
• Gigabit for both LAN and WAN connectivity
• Rich in SSL VPN applications
• Granular access policy management
• Personalized web portal
• Data encryption, user authentication and access control
• End Point Security (EPS) checking

*3

• Host security checking
• USB 2.0 port for plugging a 3G / HSDPA modem

*3

• Supports Wi-Fi Protected Setup (WPS) and WPA-PSK / WPA2-PSK
• Supports Wi-Fi WMM prioritization
• Quality of Service control
• Windows / Linux / Macintosh supported
• Microsoft Windows Mobile 5.0 / 6.0 compatible mobile devices supported

Features & Specifications

SSL VPN

Capabilities

Access Connections

• Network Extender (TCP / UDP)
• Standalone Network Extender client
• Network Place
• Application Proxy

• Concurrent SSL VPN tunnels:

up to 30, basic 10 tunnels

• Personalized web portal
• SSL hardware accelerator
• Single Sign-On (SSO)

• Recommended for small offices and SMBs

with employees from 50 to 200

• Concurrent sessions: 25,000

Applications & Management

• Network File Share (CIFS)
• Citrix client
• Terminal services (RDP5, RDP6)
• File Transfer Protocol (FTP)
• Telnet
• Supports MS Outlook Web Access (OWA)
• Virtual Network Computing (VNC)
• Secure Shell (SSH, SSHv2) support
• SRDP (Single Remote Desktop Protocol)

Security

• SSL encryption
• Web cache cleaner
• Local database
• Digital certificate
• Self-signed certificate
• User access control

Compatible Web Browsers

*

1

• Microsoft Internet Explorer 6.0 and newer

versions

• Netscape 7.0 and newer versions
• Opera 9.0 and newer versions

Supported Operating Systems

*1

• Microsoft Windows, Linux, and Apple Macintosh

Firewall & Content Filtering

• Stateful Packet Inspection (SPI)
• Denial of Service (DOS) prevention
• Packet filter
• MAC filter

• Instruction detection
• URL filter
• Java Applet / Active X / Cookie

blocking

Quality of Service Control

• Supports DiffServ approach

• Traffic prioritization and bandwidth

management based on IP protocol,
port number and IP address

Web-Based Management

• Easy-to-use web based user interface
• Group account settings on access

applications

• Firmware upgrades through web-based

interface

• Local and remote management

through HTTP and HTTPS

• Multi-language web interface
• Supports BiGuard CMS for

centralized management

IPSec VPN

• 10 IPSec VPN tunnels
• Manual key, Internet Key Exchange (IKE)

authentication and key management

• Authentication (MD5 / SHA-1)
• DES / 3DES encryption

• AES 128 / 192 / 256 encryption
• IP Authentication Header (AH)
• IP Encapsulating Security Payload (ESP)
• Dynamic VPN (FQDN) support
• Supports remote access and

office-to-office IPSec connections

Wireless

• Compliant with IEEE 802.11n, 802.11g

and 802.11b standards

• 2.4 GHz – 2.484 GHz frequency range
• Up to 300Mbps wireless link rate
• Wireless NAC (Network Access Control)

- Up to 4 SSIDs setup
- Guest account auto-generating
- Guest account duration control

• WPS (Wi-Fi Protected Setup)
• 64 / 128 bits WEP supported for encryption
• Wireless Security with WPA-PSK /

WPA2-PSK support

• Supports Wi-Fi WMM prioritization
• WDS repeater function support

Network Protocols and Features

• Static IP, PPPoE and DHCP client

connection to ISP

• NAT, static routing and RIP1/2
• Dynamic Domain Name System (DDNS)
• Router mode
• Virtual server

• Hardware DMZ
• DHCP server
• SNTP
• SNMP
• Multi-NAT
• Transparent bridging

Logging and Monitoring

• Centralized logs
• System log

• E-mail alerts and intrusion logs
• System status monitoring

Hardware Specifications

Physical Interface

• 1 x 10 / 100 / 1000Mbps
Gigabit WAN ports
• 4 x 10 / 100 / 1000Mbps
Gigabit LAN ports
(1 port can be configured as DMZ)
• 3 detachable 2.4GHz 2dBi SMA antenna

Physical Specifications

• Dimensions: 19" x 6.93" x 1.65"
• 1 x USB 2.0 host (Future extension)
• Power switch
• Reset button

Power Requirements

• Input: 15V DC, 1.6A

Operating Environment

• Operating temperature: 0 to 40°C
• Storage temperature: -20 to 70°C

• Humidity: 20 to 95% non-condensing

Support and Service

*

2

• Hardware Warranty for 1 years

• Features and Firmware Upgrade
for 1 year

• WOL (Wake On LAN)
• Granular user policy management
• Supports mobile devices

(Microsoft Windows Mobile 5.0 / 6.0 or
compatible)

• Supports MS IIS NTLM

(NT LAN Management) authentication

• SSL event log and monitor
• Web based data (HTTP, HTTPS)

• Authentication domains: RADIUS,

LDAP, Active Directory, NT Domain

• Host security checking

• End Point Security checking

*3

• Firefox 1.5 and newer versions
• Safari 2.0 and newer versions
• Mozilla 1.7 and newer versions
• Sun JRE 1.3 and newer versions

BiGuard S100N

• BiGuard SSL VPN Tunnel Upgrades
• BiGuard Central management System*3
• BiGuard One Time Password

ideal for

Small Off

ices

SMBs

Departme

nts of

SMEs

TEL : +886-2-2914-5665
FAX : +866-2-2918-6731,+886-2-2918-2895
E-mail : [email protected]

www.billion.com

Billion Electric Co., Ltd.
8F, No.192, Sec.2, Chung Hsing Road,
Hsin Tien City, Taipei County 23146, Taiwan

Options for Business Growth

• BiGuard SSL VPN Tunnel Upgrades
• BiGuard Central Management System

*3

• BiGuard One-Time Password

Copyright © Billion Electric Co., Ltd. All rights reserved.

Key Features

Notes

:

1. Please refer to http://www.billion.com/product/biguard/sslvpnbrowser.htm for updates of all supported browsers and OS platforms.

2. Users are strongly recommended to register the products on www.biguard.com in order to be able to use the update feature and firmware updates

3. To be available
4. All the specifications are subject to change without prior notice.

- With BiGuard S100N you can, with no risk or compromise to the security of your corporate network.

Concerned about your corporate Intranet being intruded while offering WLAN Internet/Intranet access?