CS-950

UTM Content Security Gateway

 
All-in-One Network Security Solution
The innovation of the Internet has created tremendous worldwide opportunities for e-business and information sharing. It has become essential for businesses to focus more on network security issues. The demand for information security has become the primary concern for the enterprises. To fulfill this demand, PLANET has launched the CS-950 UTM Content Security Gateway, an all-in-one appliance that carries several main categories across your network security deployments: firewall security protection, policy auditing (content filtering, VPN, and authentication), and easy management (CMS, wireless AP management and flow analysis). Furthermore, its VLAN, QoS and Outbound Load Balance features can improve the network efficiency while the web-based interface provides friendly and consistent user experience.
 
 
Excellent Ability in Threat Defense
The CS-950 adopts Clam AV for virus scanning which detects over 800,000 kinds of viruses, worms, and Trojans. Once suspicious emails are detected, the CS-950 will modify the subject and record the mail. Besides, websites and FTP will be scanned once the function of antivirus is enabled in policy. It also employs multi-spam filters, auto learning, and personal Blacklist/Whitelist. It gives administrators the flexibility to enforce custom filtering. These help companies to create their own database by importing the latest spam update. Using the filter, the following action like forward or delete can be taken for any mail identified as a spam.

An advanced protection of UTM, the co-defense SNMP switch can be known on which computer and which switch port at the earliest possible time which prevents business network from failure, and monitor network-attached devices for conditions that warrant administrative attention.
 
Moreover, its built-in SPI (Stateful Packet Inspection) firewall and IDP (Intrusion Detection and Prevention) functions provide DoS detection and block concealed malicious code or worms delivered in TCP/IP protocols. As soon as an attack is suspected, the CS-950 will immediately notify the IT administrator and an extensive range of reports will be available for analysis.
 
 
Cost-effective VPN Security Gateway Solution for SMBs
The CS-950 supports many popular security features including content blocking to block specific URL, authentication, IPSec, L2TP, SSL VPN, PPTP VPN server/client, outbound load-balancing, QoS, time schedule and more. Furthermore, it provides higher performance with all Gigabit Ethernet interfaces which offer faster speeds for your network applications. The Gigabit user-defined interfaces flexibly fulfill the network requirement nowadays, and the multiple WAN interfaces enable the CS-950 to support outbound load balancing and WAN fail-over features. The built-in multiple VPN tunnels (IPSec/PPTP/L2TP/SSL) enables businesses of any size to deliver secured connectivity for mobile employees, branch offices, and clients. As a result, the VPN functions not only provides high security level connection but also VPN fail-over features, a VPN redundant mechanism to always keep the VPN alive.
 
 
Improving Network Efficiency
The CS-950 has link redundancy, application control and many more functions to make the entire network system better. It is applicable to the small-scale sector (from 40 to 50 people), using a 9-inch desktop design, with four Gigabit ports (WAN/LAN/DMZ). The CS-950’s economical price with complete cable management features make it an inevitable choice for the next-generation office network load balancer.
 
The CS-950’s built-in fully-qualified domain name (FQDN) feature can automatically resolve the IP address corresponding to all. Users’ network can be easily managed by just typing the URL of the secure websites (HTTPS) like Facebook, YouTube and Yahoo.
 
 
The CS-950 can connect multiple WANs with up to three different ISPs. It creates a stable and qualified VPN connection for many important applications such as VoIP, video conferencing and data transmission.
 
 
Ordering Information
CS-950 UTM Content Security Gigabit Gateway
Multi-Homing VPN Security Gateway
PLANET CS-950 UTM Content Security Gateway has an SPI firewall with DoS detection. Through the FQDN function, it can easily block secure websites like Facebook, YouTube, Gmail, etc. With IPSec/PPTP/L2TP/SSL VPN solutions, the CS-950 provides secured data communication for branches, vendors, and mobile workers with a flexible way to connect back to the headquarters.
 
The CS-950 connects multiple WANs with up to three different ISPs. It creates a stable and qualified VPN connection for many important applications such as VoIP, video conferencing and data transmission.
 
 
Ordering Information
CS-950 UTM Content Security Gigabit Gateway
Physical Port
  • 4 x 10/100/1000BASE-T RJ45
  • 2 undefined Ethernet ports (WAN/LAN/DMZ)
  • Multi-WAN function
  • Outbound load balancing (Supported algorithms: Auto, Source IP, Destination IP or Manual)

IP Routing Feature
  • Static Route
  • Dynamic Route (RIPv2)

QoS
  • Guaranteed and maximum bandwidth configurable
  • Priority rule
  • Policy mode
  • Inside per source IP mode
  • Outside per source IP mode

Firewall Security
  • Stateful Packet Inspection (SPI) firewall
  • Blocking DoS/DDOS attack
  • Internal firewall
  • IP address block
  • Block website by URL, IP, Domain, FQDN
  • Anti-ARP spoofing
  • Application control

Mail Security
  • Antivirus base on auto-update antivirus engine
  • Built-in multiple anti-spam algorithms, auto learning, and personal black/white list
  • Mail log

Advanced Security
  • IDP (Intrusion Detection and Prevention)
  • User Authentication
  • Switch co-defense
  • Anomalous IP traffic analysis

VPN Features
  • Max. Connection Tunnel Entries: 500 IPSec VPN tunnels, 200 PPTP VPN tunnels, 200 L2TP VPN tunnels or 50 SSL VPN tunnels
  • Stateful packet inspection
  • Encryption methods: DES, 3DES, AES, AES-128/192/256
  • Authentication methods: MD5, SHA-1, SHA-256, SHA-512

Networking
  • Outbound load balance
  • Failover for WAN
  • PPPoE/Static IP/DHCP Client
  • Protocols: TCP/IP, UDP, ARP, ICMP, FTP, IPv4, IPv6
  • Virtual Server
  • DDNS: DynDNS, 3322, No-IP, Planet DDNS & Planet Easy DDNS
  • Transparent bridge/transparent routing

Others
  • Wireless AP Management
  • CMS (Central Management System)
  • HA (High Availability) mode
  • Supported access by HTTP or HTTPS
  • SNMP agent (SNMPv3-capable)
  • Schedulable firmware upgrade through Web browser
  • Comprehensive web-based management and policy setting
  • Monitoring, logging, and alarms of system activities
 
Ordering Information
CS-950 UTM Content Security Gigabit Gateway
Hardware
Ethernet 4 10/100/1000BASE-T RJ45 Ethernet ports
Console Port DB-9 console port (115200, 8, N, 1)
USB Port 2 USB 2.0 port for system configuration backup and recovery
Reset Button Reset to factory default
Thermal Fan 1
Software
Management Web browser
Operation Mode NAT, Transparent Bridging, Transparent Routing
Routing Protocol Static Route, Dynamic Route (RIPv2)
NAT Throughput Max. 1.8Gbps
Max. Connections Max. 1.2 million
Mail Scan/Day Max. 432000
Firewall Security Stateful Packet Inspection (SPI)
Internal firewall
Multiple Subnet Supports max. 255 multiple subnets
Outbound Load Balancing Supported algorithms: Auto, Source IP, Destination IP or Manual
Protocol IPv4, IPv6, TCP, UDP, HTTP, HTTPS, SMTP, FTP, NTP, DNS, PLANET DDNS, PLANET Easy DDNS, DHCP, PPPoE, SNMP, QoS, IEEE 802.1q
Content Filtering URL blocking
IP blocking
Domain blocking
Black/White list
Application Blocking P2P blocking (Bit Torrent, eDonkey, WinMX and more)
IM blocking (WeChat, Yahoo Messenger, WhatsApp, QQ, Skype, Google Talk and more)
Multimedia streaming (PPLive, PPStream, Tornado Broadcast and more)
Web-based mail (Gmail, Yahoo, Hotmail and more)
Online game (World of Warcraft, QQGame and more)
Remote controlling (TeamViewer, Remote Desktop and more)
Web (YouTube, Facebook and more)
VoIP (SIP, H.323 and more)
QoS Smart QoS
Guaranteed and maximum bandwidth configurable 
Priority levels 
Policy mode/Inside Per source IP mode/Outside Per source IP mode
User Authentication Max. concurrent connections up to 256 entries
Supports local database, RADIUS, POP3 and AD authentication
AP Management Max. 50 APs
Logs System Operation Log, Configuration Log, Network Log, Objects Log, Network Services Log, Advanced Protection Log, Mail Security Log, IDP Log and VPN Log
Reports Show CPU/RAM system load, network flow and traffic ranking
Mixed format reports: tabular and graphical
Automated Daily/Weekly Report 
Reports sent via Email
Watch-Dog Auto-reboot upon failure
Others Outbound load balancing
Failover for WAN 
CMS (Central Management System)
HA (High Availability) mode
FQDN
Switch co-defense
IDP (Intrusion Detection and Prevention)
Antivirus and Antispam
Antivirus Engine Clam AV
Antivirus Action Modify the subject 
Record the suspicious mail information 
Antispam Algorithms Fingerprinting, bayesian Filtering, auto learning, spam characteristics filtering and personal black/white list
Antispam Action Modify the subject 
Delete the spam mail
Record the suspicious mail information
VPN
VPN Function IPSec, PPTP server and client, L2TP, SSL
IPSec VPN Tunnels Max. 500
PPTP VPN Tunnels Max. 200
L2TP VPN Tunnels Max. 200
SSL VPN Tunnels Max. 50
VPN Throughput Max. 90Mbps
Encryption Methods DES, 3DES, AES or AES-128/192/256 encrypting
Authentication Methods MD5/SHA-1/SHA-256/SHA-512 authentication algorithm
General
Power Requirements 12V DC, 3.3A
Power Consumption 22W max.
Weight 0.96kg
Dimensions (W x D x H) 232 x 152 x 44 mm
Regulatory Compliance CE, FCC
Reliability MTBF > 63449hrs
Standards Conformance
Regulatory Compliance CE, FCC
Environment Specifications
Operating Temperature: 0 ~ 40 degrees C
Relative Humidity: 5 ~ 95% (non-condensing)
Storage Temperature: -20 ~ 75 degrees C
Relative Humidity: 5 ~ 95% (non-condensing)
Standard Accessories
Packet Contents CS-950 x 1
Quick Installation Guide x 1
Adapter x 1 
Power Cord x 1
Console Cable x 1
Ethernet Cable x 1
Screw Package x 1
Rack-mount Ear x 2
Feet Pads x 4
Ordering Information
CS-950 UTM Content Security Gigabit Gateway

Datasheet

Date Version Description Download
2017-10-20 1.0 CS-950

Quick Guide

Date Version Description Download
2017-09-30 1.0 Initial Release
Ordering Information
CS-950 UTM Content Security Gigabit Gateway