1GbE UTM Firewalls

AR3050S, AR4050S, AR4050S-5G

Powerful firewall security and threat protection is combined with routing and switching to provide an innovative high-performance solution. The 5G model enables flexible WAN deployment for your distributed business using high-speed 5G mobile broadband to link remote offices to the corporate network, or to back up a wired Internet connection. Ensure secure access to business applications from anywhere across the corporate WAN. AR4050S-5G available in Asia Pacific region in Q1 2023
Network AI | 1GbE UTM Firewalls

Overview

  • Threat signature databases are updated regularly for up-to-the-minute protection against malware and cyber-attacks
  • Full application control allows organizations to manage which online applications their people use and how they use them
  • Web control provides a simple means to boost user productivity, ensure compliance, and save bandwidth, all while preventing web-based threats from infecting business networks
  • Comprehensive VPN functionality provides secure remote access, so employees can utilize digital business resources from anywhere at any time
  • Businesses relying on mobile Internet connectivity are assured of resilient operation with the ability to connect to two different 5G mobile service providers (AR4050S-5G)
  • Back up a wired branch office WAN link with high-speed 5G mobile connectivity that can be used as required (AR4050S-5G)
  • Vista Manager mini simplifies wireless deployment while Autonomous Wave Control (AWC) Lite automatically optimizes connectivity and throughput
  • View the network map, and monitor wireless performance with floor and heat maps using Vista Manager mini integrated into the Device GUI

Key Features

  • AlliedWare Plus™ feature-rich operating system
  • Application aware firewalling with Deep Packet Inspection (DPI)
  • Secure business operation with the Intrusion Prevention System (IPS)
  • Enable automated inter-branch traffic optimization with SD-WAN
  • Allied Telesis Autonomous Management Framework™ Plus (AMF Plus) automates network and device management
  • Monitor fiber connections with Active Fiber Monitoring™
  • Flexible mobile deployment with Dual 5G SIM card slots, plus wired Ethernet WAN and LAN ports (AR4050S-5G)

Certifications and Compliance

ICSA Corporate Firewall

ICSA Labs provides world-renowned testing and certification for cybersecurity and IT products, such as firewalls and security appliances.

IPv6 Ready

Run by the IPv6 Forum, IPv6 Ready certification demonstrates conformance to IPv6 standards and validates interoperability of IPv6 products.

Specifications

AR3050S AR4050S AR4050S-5G
Security processor 800MHz dual-core 1.5GHz quad-core
Memory (RAM) 1GB 2GB
Memory (Flash) 4GB 4GB
Max power consumption 23W 27W 28W
5G mobile connectivity 2 x SIM card slots
High Availability bypass ports 2 x 10/100/1000T RJ-45
LAN ports 8 x 10/100/1000T RJ-45
WAN ports 2 x 1000X SFP / 2 x 10/100/1000T RJ-45 combo 2 x 10/100/1000T RJ-45
Other ports 1 x USB, 1 x RJ-45 console, 1 x SDHC slot 1 x USB, 1 x RJ-45 console

Performance

AR3050S AR4050S / AR4050-5G
Firewall throughput (Raw) 750 Mbps 1,900 Mbps
Firewall throughput (App Control) 700 Mbps 1,800 Mbps
Concurrent sessions 100,000 300,000
New sessions per second 3,600 12,000
IPS throughput 220 Mbps 750 Mbps
IP Reputation throughput 350 Mbps 1,000 Mbps
Malware protection throughput 300 Mbps 1,300 Mbps
VPN throughput 400 Mbps 1,000 Mbps
Note: All performance values are maximums, and vary depending on system configuration.

AT-AR3050S-xx

2 x GE WAN and 8 x 10/100/1000 LAN

AT-AR4050S-xx

2 x GE WAN and 8 x 10/100/1000 LAN

AT-AR4050S-5G-xx

2x 10/100/1000 WAN and 8x 10/100/1000 LAN with 5G(1) mobile broadband access and dual SIM slots (1) 5G connectivity is not supported in Vietnam, but the AR4050S-5G can still be used at 3G or 4G speeds
Where xx =
10 for US power cord
30 for UK power cord
40 for Australian power cord
50 for European power cord
51 for encryption not enabled

AT-RKMT-J15

Rack mount kit to install two devices side by side in a 19-inch equipment rack

AT-RKMT-J14

Rack mount kit to install one device in a 19-inch equipment rack

AT-STND-J03

Stand-kit

Security Licenses – AR3050S

License Name Includes 1 year Subscription 3 year Subscription 5 year Subscription
Advanced Firewall Application Control Web Control AT-AR3-UTM-01-1YR AT-AR3-UTM-01-3YR AT-AR3-UTM-01-5YR

Security Licenses – AR4050S / AR4050S-5G

License Name Includes 1 year Subscription 3 year Subscription 5 year Subscription
Advanced Firewall Application Control Web Control AT-AR4-UTM-01-1YR(1) AT-AR4-UTM-01-3YR(1) AT-AR4-UTM-01-5YR(1)
Advanced Threat Protection Advanced IPS IP Reputation AT-AR4-UTM-02-1YR(1) AT-AR4-UTM-02-3YR(1) AT-AR4-UTM-02-5YR(1)

(1) The AT-AR4-UTM-01 and AT-AR4-UTM-02 licenses cannot be used together

Feature Licenses for AR4050S / AR4050S-5G

Name Description Includes
AT-FL-UTM-OFFLOAD-1YR UTM Offload license for 1 year UTM Offload license for 1 year
AT-FL-UTM-OFFLOAD-3YR UTM Offload license for 1 year UTM Offload license for 3 years
AT-FL-UTM-OFFLOAD-5YR UTM Offload license for 1 year UTM Offload license for 5 years
AT-RT-APM5-1YR(2),(3) Cumulative AMF Plus Master license AMF Plus Master license for up to 5 nodes for 1 year
AT-RT-APM5-5YR(2),(3) Cumulative AMF Plus Master license AMF Plus Master license for up to 5 nodes for 5 years
AT-RT-AWC5-1YR(4) Cumulative AWC license Autonomous Wave Control (AWC) license for up to 5 access points for 1 year
AT-RT-AWC5-5YR(4) Cumulative AWC license Autonomous Wave Control (AWC) license for up to 5 access points for 5 years
AT-RT-CB5-1YR-2022(5) AWC-CB and AWC-SC license AWC Channel Blanket and AWC Smart Connect license for up to 5 access points for 1 year
AT-RT-CB5-5YR-2022(5) AWC-CB and AWC-SC license AWC Channel Blanket and AWC Smart Connect license for up to 5 access points for 5 years
AT-FL-AR4-ASEC-1YR(6) AMF-Sec license AMF-Sec license for 1 year
AT-FL-AR4-ASEC-5YR(6) AMF-Sec license AMF-Sec license for 5 years

(2) From AW+ version 5.5.2-2 onwards, AMF Plus licenses provide all standard AMF network management and automation features. They also enable the AMF Plus intent-based networking features menu in Vista Manager EX (from version 3.10.1 onwards)

(3) Purchase one license per 5 nodes (up to 20 nodes maximum)

(4) 5 APs can be managed for free. Purchase one license per 5 additional APs (up to 20 APs maximum)

(5) Channel Blanket and Smart Connect are not available as free services. Both an AWC-CB license and an AWC license are required for Channel Blanket and/or Smart Connect to operate. (Channel Blanket is supported on TQ6602, TQ5403, and TQ5403e access points. Smart Connect is supported on TQ5403, and TQ5403e access points)

(6) To use AMF-Sec in conjunction with either the Advanced Firewall (NGFW) or Advanced Threat Protection (ATP) licenses, you must have AMF-Sec mini version 2.2.1 or newer

Products

accessories

RKMT-J14

The RKMT-J14 rackmount kit to install one device in a 19-inch equipment rack
accessories

BRKT-J24

Wall mount kit for small switches.
accessories

STND-J03

AT-STND-J03 is a dedicated kit for installing Allied Telesis hardware products vertically.
accessories

RKMT-J15

Rackmount kit to install two devices side by side in a 19-inch equipment rack
models

AR4050S-5G

The AR4050S Unified Threat Management (UTM) Firewall combines powerful firewall and threat protection with routing and switching, to provide an innovative high-performance security solution.
accessories

VT-Kit3

Management cable (USB to Serial Console)
accessories

SPTXc

10/100/1000T (RJ-45), 100m
accessories

SPBD10

1000LX (LC) single-mode BiDi, 10km
accessories
Network Solutions and Products | Transceivers

SPLX40

1000EX (LC), single-mode, 40km
accessories
Network Solutions and Products | Transceivers

SPLX10/Iᅠ

1000LX (LC) single-mode, I-Temp, 10km
accessories

SPEX

1000SX (LC) Multi-Mode, 2km
accessories

SPSX

1000SX (LC), multi-mode, 220-550m