button1-blue

button2-blue2

button3-blue2

Stonesoft 1301

The Stonesoft 1301 appliance is a versatile and modular Security Engine-powered solution designed to meet the performance and scalability requirements of small data centers and medium-sized network central sites. It can be used in a Firewall/VPN role (Layer 3) for secure routing, NAT, and IPsec VPN gateway purposes. It can also be used in an IPS role (Layer 2) in an IDS deployment or an inline IPS deployment, or in the Layer 2 Firewall role. All of these roles are available with a single unified software image and can be adapted just by changing the configuration.

In the Firewall/VPN role, the Stonesoft 1301 appliance provides high performance with unique clustering capabilities for up to 16 nodes. This provides very high IPsec VPN speeds, as well as high-performance content and application inspection where needed.

In the IPS and Layer 2 Firewall roles, the Security Engine becomes transparent to surrounding network devices. The inline IPS and Layer 2 Firewall combine flexible deployment, AET-ready network security, and application control into one dedicated appliance.

Built on a rock solid platform

As the Stonesoft 1301 is built on the platform of the Stonesoft Security Engine (NGN), you have the power to transform its role as your organization grows and your needs change. A unified design, and the ability to make deployment changes remotely and automatically via license, helps to cut operating costs and eliminate unnecessary future capital investment rounds.

Configuring and administering the 1301 with the Stonesoft Management Center (SMC) provides additional resource and OPEX benefits. SMC gives you the ability to automate workflows, easily define policies across your entire infrastructure, swiftly define and deliver advanced visualizations, and have a continuously excellent level of situational awareness. This helps security administrators efficiently minimize the risk from cyber threats while empowering productivity.

Stonesoft 1301 Specifications

Maximum performance L3 FW/VPN L2 FW / IPS / IDS
Throughput
(UDP 1514 byte packets, no inspection)
20 Gbps 20 Gbps
Throughput
(UDP 1514 byte packets, with inspection)
8 Gbps 8 Gbps
64 byte packets per second
(no inspection)
7 million 7 million
HTTP inspection (21 kB payload) 2.5 Gbps 2.5 Gbps
SSL/TLS inspection throughput (RC4-128) 500 Mbps 500 Mbps
New TCP connections/sec
(no inspection)
120 000 120 000
New inspected HTTP connections/sec (21 kB payload) 15 000 15 000
Concurrent connections 10 million 10 million
Inspected concurrent connections 1 million 1 million
VLANs Unlimited Unlimited
VPN throughput (AES-128-GCM) 2 Gbps  
VPN tunnels 20 000  
Virtual Engines (default/max) 5/25  
       
Licenced Performance Firewall/VPN 1301-L appliance Firewall/VPN 1301 appliance Firewall/VPN 1301-P appliance
Throughput (UDP 1514 byte packets, no inspection) 2 Gbps 5 Gbps 20 Gbps
VPN throughput (AES-128-GCM) 600 Mbps 1 Gbps 2 Gbps
Concurrent mVPN Clients 200 200 Unlimited
Virtual Engines n/a n/a n/a
   
Network interfaces  
Fixed 6 x 10/100/1000 Mbps copper
Module slots 1 (Available modules listed at the product codes section)
Connectors  2 x USB, 1 x serial
   
Measurements  
Form factor 1U 19” rack unit
Dimensions (W x H x D) 426 x 44 x 400 mm / 16.77 x 1.73 x 15.7 inches
Net weight 6.2 kg / 13.7 lbs (without module)
Gross weight 9.4 kg / 20.7 lbs (without module)
   
Safety/EMC certifications  
  CE, FCC, CB, Gost-R, RoHS
   
Power  
Power supply AC input: 100-240 VAC, 50-60 Hz, 250W DC input: -72 - -36V, 200W
Typical power consumption 85 - 150 W
   
Other  
Operating temperature/humidity +5—+35°C (+41—+95°F) 10%—95%, non condensing humidity (RH)
Storage temperature/humidity -20—+70°C (-4—+158°F) 10%—95%, non condensing humidity (RH)
MTBF 150 000 hours
Rack mounting Mounting accessories for 2-post and 4-post rack (max 70 cm / 27.5 inches deep) included by default. For deeper rack order APP-RACK-1300.
Support  
Replacement service 15 months or 39 months replacement service for non-complying hardware
Premium support 24/7-call logging via web, email and phone, two-hour response time, software updates, hardware replacement service
Basic support 8/5-call logging via web, email and phone, next business day response time, software updates, hardware replacement service
   
Product codes *  
APP-FW-1301-C1-L Stonesoft Firewall/VPN 1301-L appliance, AC power supply
APP-FW-1301-C1 Stonesoft Firewall/VPN 1301 appliance, AC power supply
APP-FW-1301-C1-P Stonesoft Firewall/VPN 1301-P appliance, AC power supply
APP-FW-1301-C2-L Stonesoft Firewall/VPN 1301-L appliance, DC power supply
APP-FW-1301-C2 Stonesoft Firewall/VPN 1301 appliance, DC power supply
APP-FW-1301-C2-P Stonesoft Firewall/VPN 1301-P appliance, DC power supply
APP-NGN-1301-C1 Stonesoft Security Engine 1301 appliance, AC power supply
APP-NGN-1301-C2 Stonesoft Security Engine 1301 appliance, DC power supply
   
Feature pack codes  
FP-1Y-AS-2 One year Anti-Spam (AS) subscription for 1301 appliance
FP-1Y-AV-5 One year Anti-Virus (AV) subscription for 1301 appliance
FP-1Y-WF2-174 One year Web Filtering (WF) subscription for FW-1301-L and FW-1301 appliance
FP-1Y-WF2-173 One year Web Filtering (WF) subscription for FW-1301-P and NGN-1301 appliance
FP-1Y-UTM-8 One year UTM subscription bundle (AV, AS, WF) for FW-1301-L and FW-1301 appliance
FP-1Y-UTM-7 One year UTM subscription bundle (AV, AS, WF) for FW-1301-P and NGN-1301 appliance
FP-FW-FDPI-3 Full deep inspection for FW-1301-L, FW-1301 and FW-1301-P
FP-MVPN-1300-U Unlimited concurrent Mobile VPN users for FW-1301-L and FW-1301
FP-NGN-VE-25 Virtual Engine feature pack license 6-25 for NGN-1301
FP-NGN-VE-10-UPG Virtual Engine feature pack license 6-10 for NGN-1301
FP-NGN-VE-25-UPG Virtual Engine feature pack license 11-25 for NGN-1301
   
Interface modules  
MOD-EM1-GE-4  Quad Port Gigabit Ethernet Copper Module
MOD-EM1-GE-8  Eight Port Gigabit Ethernet Copper Module (requires appliance hardware revision 1 or newer)
MOD-EM1-GE-SFP-4  Quad Port SFP Gigabit Ethernet Module
MOD-EM1-10G-SFP-2  Dual Port SFP+ 10GB Module
MOD-EM1-GE-4-B Quad Port Gigabit Ethernet Copper Bypass Module
MOD-EM1-GE-SX-4-B Quad Port Gigabit Ethernet Fiber (SX) Bypass Module
MOD-EM1-10G-SR-2-B Dual Port Fiber (SR) 10GB Bypass Module
MOD-EM1-10G-LR-2-B Dual Port Fiber (LR) 10GB Bypass Module
   
Add-on product codes  
SP-DFDC-1300 Dual-feed adapter for 1300 series DC power supplies
APP-RACK-1300 Rack rails for 70 – 86 cm / 27.5 – 33.8 inches deep rack

* -R license codes are without strong encryption (DES only)

Free Consultation

Due to our numerous partnerships, we can provide unbiased opinions on the best solution for your environment.

Unbeatable Prices

Our partnership levels give us the highest product discounts which we pass on as savings to our customers.

Professional Services

Finish your IT projects on-time and under budget with our nation-wide team of senior level engineers.

24x7 Tech Support

Rest assured knowing that our U.S. based IT support team is here for you on nights, weekends and when you need us most.