Click to enlarge

Provides both secure IPsec site-to-site tunnels and IPsec secure access for remote clients

Includes denial-of-service (DoS) protection, stateful packet inspection (SPI), URL keyword filtering, logging, reporting, and real-time alerts

Physical Interfaces
LAN ports: Eight (8) 10/100/1000 Mbps auto-sensing, Auto Uplink^TM RJ-45 ports; one LAN port can be dedicated hardware DMZ port
WAN ports: One (1) 10/100/1000 Mbps auto-sensing, Auto Uplink^TM RJ-45 ports to connect to any broadband modem, such as DSL or cable

SPI firewall
Stateful packet inspection (SPI): prevents denial-of-service (DoS) attacks, provides stealth mode, User support: Unrestricted
Keyword filtering on: address, service (ex. FTP, SMTP, HTTP, RPL, SNMP, DNS, ICMP, NNTP, POP3, SSH, etc.), protocol, Web URL port/service blocking, file extension (ex. Java, URL, ActiveX)
Port/service blocking
SIP Application Layer Gateway
SIP compatibility list: Linksys SPA-901, Linksys SPA-941, SNOM M3, Cisco 7940G, X-Lite 3.0 (software for phones, D-Link DPH-140S, Grandstream GXP-2000, Polycom SoundStation 6000, Siemens C450, Aastra 51i

IPsec VPN functionality
Five (5) dedicated IPsec VPN tunnels
Manual key and Internet Key Exchange Security Association (IKE SA) assignment: pre-shared key signature, RSA/DSA signature
Key life and IKE lifetime time settings
Perfect forward secrecy
Diffie-Hellman groups 1 and 2
Oakley support
Operating modes: main, aggressive
Fully qualified domain name (FQDN) support for dynamic IP address VPN connections

IPsec support
IPsec-based 56-bit (DES) 168-bit (3DES), or 256-bit (AES) encryption algorithm
MD5 or SHA-1 hashing algorithm
ESP support
PKI features with X.509 v.3 certificate support
remote access VPN (client-to-site), site-to-site VPN
IPsec NAT traversal (VPN passthrough)
Two-factor authentication support

Routing Modes of Operation
Many-to-one Multi-network Address Translation (NAT)
Classical routing
Unrestricted users per port

Click here for more info.