UTM Comparison Chart

UTM ModelsUTM Models UTM5UTM5 UTM9SUTM9S UTM10UTM10 UTM25UTM25 UTM25SUTM25S UTM50UTM50 UTM150UTM150
Sizing Guidelines
Firewall Throughput¹ 500 Mbps 933 Mbps 566 Mbps 700 Mbps 980 Mbps 980 Mbps 980 Mbps
Application Firewall Throughput¹ 400 Mbps 900 Mbps 450 Mbps 630 Mbps 905 Mbps 905 Mbps 940 Mbps
Anti-virus Throughput¹ 20 Mbps 23 Mbps 23 Mbps 25 Mbps 30 Mbps 42 Mbps 110 Mbps
IPS Throughput 130 Mbps 172 Mbps 150 Mbps 200 Mbps 240 Mbps 320 Mbps 620 Mbps
UTM Throughput¹ (HTTP Traffic) 13 Mbps 18 Mbps 15 Mbps 22 Mbps 24 Mbps 32 Mbps 82 Mbps
UTM Throughput¹ (non-HTTP Traffic, e.g. P2P, DNS, SSH) 130 Mbps 172 Mbps 150 Mbps 200 Mbps 240 Mbps 320 Mbps 620 Mbps
Maximum VPN Throughput¹ 80 Mbps 80 Mbps 80 Mbps 85 Mbps 90 Mbps 85 Mbps 586 Mbps
Maximum Concurrent Connections¹ 12000 16000 16000 40000 40000 40000 80000
802.1q VLANs 255 255 255 255 255 255 255
Content Security
Web and Email Scanned Protocols HTTP, HTTPS, FTP, SMTP, IMAP, POP3
Stream Scanning ✓ ✓ ✓ ✓ ✓ ✓ ✓
Inbound and Outbound Inspection ✓ ✓ ✓ ✓ ✓ ✓ ✓
Signature-Less Zero Hour Protection ✓ ✓ ✓ ✓ ✓ ✓ ✓
Malware Signatures 1.2 Million 1.2 Million 1.2 Million 1.2 Million 1.2 Million 1.2 Million 1.2 Million
Automatic Signature Updates Hourly Hourly Hourly Hourly Hourly Hourly Hourly
Web Content Filters Filter By: HTTPS Smart Block, HTML Body Keywords, File Extension
Web Object Filters ActiveX, Java™, Flash, JavaScript™, Proxy, Cookies
Email Content Filters Filter By: Subject Keywords, Password-protected Attachments, File Extension, File Name
Distributed Spam Analysis ✓ ✓ ✓ ✓ ✓ ✓ ✓
Distributed Spam Analysis Supported Protocols SMTP, POP3
Anti-spam Real-time Blacklist (RBL) ✓ ✓ ✓ ✓ ✓ ✓ ✓
User Defined Spam Allowed/Block Lists Filter By: Sender Email Address, Domain, IP Address, Recipient Email Address, Domain
Distributed Web Analysis w/ 64 categories ✓ ✓ ✓ ✓ ✓ ✓ ✓
Maximum Number of Users Unlimited
Firewall Features
Stateful Packet Inspection (SPI) Port/Service Blocking, Denial-of-service (DoS) Prevention, Stealth Mode, Block TCP Flood, Block UDP Flood, WAN/LAN Ping Response Control
Application Firewall Global Mode, Policy Mode, SSL Decryption, Granular Application Policies, Application Session Monitoring, Application Dashboard
Applications Protected 332 332 332 1212 1212 1212 1212
Intrusion Detection & Prevention (IPS) ✓ ✓ ✓ ✓ ✓ ✓ ✓
IPS Signatures 619 619 619 2114 2114 2114 2114
WAN Modes NAT, Classical Routing
ISP Address Assignment DHCP, Static IP Assignment, PPPoE, PPTP
Secondary WAN IP Addresses 16 32 16 32 32 32 64
NAT Modes 1-1 NAT, PAT
Routing Static, Dynamic, RIPv1, RIPv2
VoIP SIP ALG
DDNS DynDNS.org, TZO.com, Oray.net, 3322 DDNS
Firewall Functions Port Range Forwarding, Port Triggering, DNS proxy, MAC Address Cloning/spoofing, Network Time Protocol NTP Support, Diagnostic Tools (ping, DNS lookup, trace route, other), Auto-Uplink on Switch Ports, L3 Quality of Service (QoS) ,LAN-to-WAN and WAN-to-LAN (ToS)
DHCP DHCP Server, DHCP Relay
User Authentication for VPN Active Directory, LDAP, Radius, Local User Database
Security Policies Based on Active Directory with Single Sign-On (SSO) ✓ ✓ ✓ ✓ ✓ ✓ ✓
PCI Compliance Two Factor Authentication Support ✓ ✓ ✓ ✓ ✓ ✓ ✓
VPN
Site to Site VPN Tunnels 5 10 10 25 25 50 150
SSL VPN Tunnels 2 5 5 14 14 25 75
L2TP, PPTP VPN Tunnels 5 5 5 5 5 5 5
IPsec Encryption Algorithm DES, 3DES, AES(128,192,256 bit)/SHA-1, MD5
Key Exchange IKE, Manual Key, Pre-Shared Key, PKI, X.500
IPsec NAT Traversal ✓ ✓ ✓ ✓ ✓ ✓ ✓
iPhone Native VPN Client Support ✓ ✓ ✓ ✓ ✓ ✓ ✓
Included ProSafe VPN Client Lite Licenses 0 0 1 1 1 3 3
SSL Version Support SSLv3, TLS1.0
SSL Encryption Support DES, 3DES, ARC4, AES(128,256bit)
SSL Message Integrity MD5, SHA-1, MAC-MD5/SHA-1, HMAC-MD5/SHA-1
SSL Certificate Support RSA, Diffie-Hellman, Self (Key Lengths 512-bit, 1024-bit, 2048-bit )
SSL VPN Platforms Supported Windows 2000 / XP / Vista® (32bit), Windows 7 (32 and 64bit), Mac OS® X 10.4.x/10.6.x
Deployment
VLAN Support ✓ ✓ ✓ ✓ ✓ ✓ ✓
Multi-WAN Fail-over   ✓   ✓ ✓ ✓ ✓
Intelligent Traffic Load Balancing Based on Traffic Byte Count   ✓   ✓ ✓ ✓ ✓
USB Dongle Support for 3G/4G WAN Connections   ✓     ✓    
Configuration Wizards Setup, IPsec VPN, SSL VPN
Electronic License ✓ ✓ ✓ ✓ ✓ ✓ ✓
Logging and Reporting
Management HTTP/HTTPS, SNMP v2c
Reporting Summary Statistics, Graphical Reporting, Automatic Outbreak Alerts, Automatic Malware Notifications, System Notifications
Logging Traffic, Malware, Spam, Content Filter, Email Filter, System, Service, IPS, Application, Port Scan, IM, P2P, Firewall, IPsec VPN, SSL VPN
Log Delivery Management GUI Query, Email Delivery, Syslog
Hardware
Gigabit RJ45 Ports WAN/LAN 1/4 2/4 1/4 2/4 2/4 2/6 4/4
DMZ Interfaces (Configurable) 1 1 1 1 1 1 1
Flash Memory/RAM 2 GB/512 MB 2 GB/512 MB 2 GB/512 MB 2 GB/1 GB 2 GB/1 GB 2 GB/1 GB 2 GB/1 GB
USB Ports 1 1 1 1 1 1 1
Certifications ICSA: Anti-virus VPNC: AES Interop, Basic Interop
Checkmark: Anti-Malware, Anti-Spam, Enterprise Firewall, VPN, IPS, URL Filtering
Major Regulatory Compliance FCC Part 15 Class A, CE mark commercial, VCCI, C-Tick Class A, CE/LVD, cUL, RoHS, China RoHS
Storage and Operating Temperatures Operating Temperature 0-45°C (32°-113°F),
Storage Temperature -20-70°C (-4°-158°F)
Humidity Operation 90% Maximum Relative, Storage 95% Maximum Relative
Power Input Rating 100-240V, AC/50-60Hz, Universal Input, 1.2 Amp Max 100-240V, AC/50-60Hz, Universal Input, 1.0 Amp Max
Dimensions (W x H x D) cm 33 x 4.3 x 20.9 33 x 4.3 x 28.6 33 x 4.3 x 20.9 33 x 4.3 x 20.9 33 x 4.3 x 28.6 44 x 4.3 x 25.3 44 x 4.3 x 25.3
Dimensions (W x H x D) in 13 x 1.7 x 8.2 13 x 1.7 x 11.25 13 x 1.7 x 8.2 13 x 1.7 x 8.2 13 x 1.7 x 11.25 17.3 x 1.7 x 9.96 17.3 x 1.7 x 9.96
Weight kg/lb 2.1/4.6 2.56/5.65 2.1/4.6 2.1/4.6 2.56/5.65 2.9/6.4 2.9/6.4
Package Contents ProSecure UTM Appliance, Power Cable, Rubber Feet, Resource CD, Rackmount Kit, Warranty Card, Quick Installation Guide, Electronic License (Bundles only)²
Hardware Warranty Lifetime

¹ Throughput measured in a lab environment. Actual performance may vary depending on network conditions and activated services.
² Electronic Licenses are now used to register UTMs that are purchased as part of a bundle. A license key will be assigned to the UTM at the time it is registered with NETGEAR License servers.