The Corrent SR series is a collection of combined firewall and VPN appliances targeted to SMEs through large enterprise deployments. Appliances range from the 1U SR100 targeted to businesses with 500 users or less through the SR620 with support for up to 1 million concurrent connections. The existing line of SR appliances are based on and come preloaded with Check Point software on a hardened O/S; while new offerings, expected to be available in May, will be preloaded with Microsoft's ISA Server 2004 and a hardened version of Windows Server 2003.

Features in common on the existing firewall/VPN appliance offerings (not including the new SRx10 offerings) include support for DES/3DES/AES encryption; MD5/SHA-1 authentication; support for active/active (with load balancing) or active/passive (hot standby) deployments; management via Web GUI or CLI with both Telnet and SSH connections facilitated; and a maximum number of VPN tunnels of 20,000. The lower 2 offerings--the SR100 and SR200--are based on Check Point Express software (which includes FireWall-1, VPN-1 Express gateway, VPN-1 SecuRemote, SmartDefense, and SmartCenter), while the other appliances are driven by Check Point VPN-1 Pro NG with Application Intelligence. The SR100 sports a pair of Gb interfaces and four 10/100 ports; while the others all include Gb ports with Fiber ports optional.

Key specifications for each of the existing offerings are as follows:

- SR100: 1U. For businesses with up to 500 users. Firewall throughput is listed at 400Mbps for large packets, and 75Mbps for small packets; while VPN throughput weighs in at 100Mbps/325Mbps (3DES/AES) for large packets and 26Mbps/33Mbps for small packets. TCP sessions can be processed at a rate of 20,000/second, and the appliance supports up to 250,000 concurrent connections.

- SR200: 1U. Firewall throughput is listed at 2Gbps for large packets, and 80Mbps for small packets; while VPN throughput weighs in at 379Mbps/430Mbps (3DES/AES) for large packets and 40Mbps/40Mbps for small packets. TCP sessions can be processed at a rate of 20,000/second, and the appliance supports up to 250,000 concurrent connections.

- SR300: 2U. Firewall throughput is listed at 2Gbps for large packets, and 500Mbps for small packets; while VPN throughput weighs in at 2Gbps (both 3DES/AES) for large packets and 500Mbps for small packets. TCP sessions can be processed at a rate of 50,000/second, and the appliance supports up to 500,000 concurrent connections.

- SR400: 2U. Firewall throughput is listed at 3Gbps for large packets, and 1Gbps for small packets; while VPN throughput weighs in at 2Gbps (both 3DES/AES) for large packets and 1Gbps for small packets. TCP sessions can be processed at a rate of 50,000/second, and the appliance supports up to 500,000 concurrent connections.

- SR520: 2U. Firewall throughput is listed at 3Gbps for large packets, and 2Gbps for small packets; while VPN throughput weighs in at 2Gbps (both 3DES/AES) for both large and small packets. TCP sessions can be processed at a rate of 50,000/second, and the appliance supports up to 1 million concurrent connections.

- SR620: 3U. Firewall throughput is listed at 4Gbps for large packets, and 2Gbps for small packets; while VPN throughput weighs in at 2Gbps (both 3DES/AES) for both large and small packets. TCP sessions can be processed at a rate of 50,000/second, and the appliance supports up to 1 million concurrent connections.

In addition to the combined firewall and VPN appliance line described above, Corrent has also announced a line of SSL VPN appliances based on Check Point Connectra. The initial offering in the SSL VPN line is the SR110, which is available now and supports up to 250 concurrent users; while larger SR210 and SR310 models are expected in Q2, 2005.

Expected in May, two new models in the SR series will be based not on Check Point, but instead on Microsoft's ISA Server 2004 (with a version of Windows Server 2003 serving as the hardened OS) and therefore targeted to shops based on Microsoft technologies. The SR125 sports firewall performance up to 400 Mbps, while the SR225 will support up to 2 Gbps firewall performance. The SR225 will additionally include the vendor's ASIC based VPN acceleration.

Pricing for the existing product line ranges from $3,700 to $37,900; the new SR125 and SR225 offerings are expected to be priced at $5,900 and $8,900, respectively; and the SR110 is priced at $3,700. Check Point Connectra is preloaded on the SR110, but is licensed separately from Check Point.

Visit the Corrent Web site for further information.

product submission by EITPlanet Staff

E-Mail this page to a colleague
send info about Corrent SR Series

Suggest a link
for the Corrent SR Series fact sheet