Clavister

NetWall

NetWall 6000 series

Clavister’s latest addition to its line of Next Generation Firewalls with state-of-the-art SD-WAN capabilities

Highlights
• Easy-to-deploy & flexible SD-WAN
hubs or spokes

• Fully enabled Next Generation Firewall

feature-set

• SSL VPN to support secure remote

working with Windows, macOS and iOS
clients included

• Outstanding performance with up to 50

Gbps firewall performance​and up to 15
Gbps SD-WAN performances

• Simple to deploy new firewalls using

Clavister NetWall 6000 series offers best-in- custom configuration templates with
class price-performance, highly scalable and centralized management tool
easy-to-deploy appliance with Secure SD- • Included with cloud analytics tools to
WAN features. provide real-time troubleshooting and
Clavister’s NetWall 6000 series offers next- overview dashboards
generation firewall (NGFW) capabilities for SMBs • Unique CyberSecurity Score for simplified
to mid-sized enterprises, ideal for datacentres, actionable security analytics
headquarters (HQ) and distributed office
• Application Visibility & Control with high
deployments designed to prevent cyber-attacks,
granularity and support for over 3000
reduce complexity, and lower your costs. unique applications
Clavister NetWall 6000 series architecture
• Integrated Intrusion Detection/Protection
is engineered to deliver enhanced network
System with real-time updates.
visibility, protection, and performance to help IT
managers and system administrators to address • Botnet and denial of service (Dos)
some of the greatest challenges facing networks protection through continuous updated
today. These NGFWs address growing breaches IP Reputation feeds
and protects against emerging threats with • 8 x 1 GbE (RJ45), 2x 10 GbE (SFP+)​
proven Secure SD-WAN in a simple, affordable, on board and expandable with two
and flexible to deploy appliance. expansion modules slots​supporting
configurations with up to 10x 10 GbE or 4
x 40 GbE + 2 x 10 GbE connectivity

• PoE, 8x1 GbE (RJ45) Copper including

External 48V PoE PSU

• Optional Dual Power Supply Support – AC

standard, DC as option
2 Clavister 6000 Series

The release of NetWall 6000 series expands Clavister’s security ability to deliver enhanced security
capabilities across SD-WAN and NGFW solutions, suitable for public sector deployments.

Solution Deployment Scenario

Next Generation Firewall (NGFW) Secure SD-WAN

• Reduce the complexity and maximize your • Ideal as SD-WAN hub or spoke with
ROI by integrating threat protection security simplified deployment and maintenance
capabilities into a single high-performance routines, while saving cost at the same time
network security appliance • Dual WAN link, route failover and traffic
• Empowered by Clavister’s eco-system, it prioritization and shaping use-cases with
provides full visibility into users, devices, application detection supporting over 3000
applications across the entire attack surface unique apps
and consistent security policy enforcement • Strong security posture with integrated
• Protect against network exploitable security capabilities and real-time threat
vulnerabilities with industry validated IPS protection
(Intrusion Prevention System) that offers low • Centralized management with auto-
latency and optimized network performance provisioning, analytics, and reporting to
• Fully scalable to support rise in encrypted reduce day-to-day management, increase
traffic productivity and scale your security without
scaling your team at no extra cost

Clavister Location 2
OneConnect

Cloud
InCenter
Virtual
product
Cloud
InCenter

Rack Location 1
product

Clavister
NetWall
Public/Private
cloud

Location 1
Desktop
product
Clavister
OneConnect
On-Prem
InControl
Location 3

On-Prem
InControl
 Clavister 6000 Series 3

Security Use Cases

Connect
Reliable Secure VPN
F Connecting branch offices and remote locations securely and cost effectively
Routing & Load Balancing
6 Avoid downtime and secure business continuity with redundancy
Secure Network Zones
l Network segmentation to protect company’s digital assets
Server Load Balancing
7 Simplifying scaling and allowing preventive maintenance

Secure Remote Access

m Empowering remote workers and d
 evices with flexible secure access

Protect
Firewalling
j Network Firewalling securing IT resources and users
Network Attack Protection
f Intrusion detection and prevention system and Denial of Service protection
Encrypted Traffic Inspection
£ SSL Inspection to look inside untrusted secure traffic
Antivirus Scanning
U Streaming scanning of attachments in mail, web and file downloads for malicious content

Prevent
Active Traffic Optimisation
A Traffic prioritisation securing preferred use of resources

Captive Portal Authentication

^ Integration with Active Directory and 2FA procedures for open network access
Botnet Blocking
{ Block outgoing and incoming traffic through IP reputation
Web Content Filtering
J Restrict access to inappropriate content a
 nd high risk sites
Application Visibility & Control
\ Control applications and user behaviour t o optimize network resource usage
4 Clavister 6000 Series

Products & Services included

Hardware replacement
Traffic prioritisation securing preferred use of resources

24/7 Support (online & by phone)

Integration with Active Directory and 2FA procedures for open network access
Centralized management
with Clavister lnControl
Clavister OneConnect
SSL VPN Client for Windows and macOS
Security analytics
Analyze your security thoroughly with Clavister lnCenter Cloud

Software upgrades
New features & maintenance releases

lnCenter on-premises
Optional Clavister lnCenter on-premises installation

CyberSecurity Score
For simplified actionable analytics

Signature updates
From eco system partners for all the protect and prevent use-cases

Clavister Security Eco-System

Clavister works with many of the world’s leading technology companies to improve
manageability, strengthen security and ensure faster and more successful deployments.
Integrated into the Clavister Next Generation Firewall is an ecosystem with the best of breed
components empowering key use-cases named in this paper. Feeds are updated in real-time
through the Clavister provisioning network to ensure the latest signatures are deployed for
optimal protection.
Read more at www.clavister.com/eco-system.
 Clavister 6000 Series 5

Security Subscriptions
Clavister delivers several security services to empower the NetWall 6000 platform.
A subscription is mandatory to access these services. You can easily optimize the
protection capabilities of your NetWall appliance with one of these security bundles.

Essentials Enhanced Premium *

Basic Firewalling & Routing ● ● ●

Application Control ● ● ●
Clavister InCenter Cloud ● ● ●
Device Inteligence ● ● ●
Antivirus ● ●
Web Content Filtering ● ●
IP Reputation ● ●
Clavister OneConnect ● ●
SD-WAN Features ● ●
NetEye License/Service ●

* Only available för Rack-mounted NGFW models

* SSL inspection is only avaliable for the premium subscription.
6 Clavister 6000 Series

Clavister NetWall 6000 Series Hardware Specifications

Feature Specification

Ethernet Ports (on board) 8 x 1GbE (RJ45), 2x 10 GbE (SFP+)

No. Expansion Modules Two (2)
Form-factor 1U, 19"
Dimensions (HxWxD) 44 mm x 438 mm x 508 mm (1.73 in x 17.24 in x 20.00 in)
Rack mountable Yes
Power Supply - AC 100-240VAC, 50-60 Hz
Power Supply - DC 48VDC (optional)
Redundant Power Supplies Yes (optional)
Hot-swappable Power Supplies Yes

Technical Features NetWall 6200 NetWall 6600 Note

IPv4 Firewall Throughput 20 Gbps / 18 Gbps / 3 Gbps 50 Gbps / 18 Gbps / 3 Gbps RFC 2544
(1518 / 512 / 64 byte, UDP)
New Sessions/Second (TCP) 300 000 connections/s 300 000 connections/s

Concurrent Connections 5 000 000 8 000 000

IPsec VPN Throughput (1420 5 Gbps / 5 Gbps / 0,6 Gbps 15 Gbps / 6 Gbps / 0,6 Gbps With optional IPsec
/ 512 / 64 byte, UDP) acceleration module
IPsec VPN Throughput (1420 1 Gbps / 0,8 Gbps / 0,2 Gbps 1 Gbps / 0,8 Gbps / 0,2 Gbps Without optional
/ 512 / 64 byte, UDP) module
Gateway-to-Gateway or 2500 5000
Roaming IPsec VPN Tunnels
VLANs 4096 4096

Virtual Routes 250 500

Clavister Expansion Modules

8 x 1 GbE RJ45 Copper 8 x 1 GbE RJ45 SFP PoE, 8 x 1 GbE RJ45 Copper
No transceivers included Including External 48V PoE PSU

4 x 10 GbE SFP+ IPsec Accelerator & 2 x 40 GbE QSFP

No transceivers included 4 x 10 GbE SFP+ No tranceivers included

No transceivers included
 Clavister 6000 Series 7

Clavister Central Management and Control

InControl All Clavister appliances can be administered individually via a web
interface, but a license to use the central management Clavister
lnControl is included. The solution offer zero-touch deployment,
simplified ways to provision and manage a Secure SD-WAN
deployment and firmware upgrade management capacities.
Learn more at www.clavister.com/incontrol

Clavister Real-Time Cloud Analytics

InCenter Cloud Clavister lnCenter enables IT administrators to gain insight into
their networks. Clavister In Center provides all the user stories
including forensics with log search, dash boarding and reporting
as well as health monitoring. A hosted version of Clavsiter
lnCenter Cloud is included with each Security Subscription, and
alternatively lnCenter is available for on-premises deployment as
well.
Learn more at www.clavister.com/incenter

Simplified Actionable Security Analytics

Helping IT Managers and their executives to communicate about
the status of their security infrastructure and ensures that funds
and efforts are spent where they matter the most - this tool is
included in Clavister lnCenter vailable to al l Clavister NetWall with
a Security Subscription.
Learn more at www.clavister.com/cybersecurity-score

Clavister Simple Secure Remote Working

OneConnect Clavister OneConnect is our SSL VPN windows, iOS/iPad OS and
macOS client that offers a simple and easy to use solution for
remote access and is included in Clavister’s NetWall.
Learn more at www.clavister.com/oneconnect

Clavister AB, Sjögatan 6 J, SE-891 60 Örnsköldsvik, Sweden

Phone: +46 (0)660 29 92 00 — Web: www.clavister.com