The GB-2000X Firewall UTM Appliance's powerful hardware design meets the needs of SME corporations with complex Internet connectivity and heavy network traffic demands. GTA's GB-2000X Firewall UTM Appliance provides powerful, enterprise-level security with comprehensive features, including threat management support through Mail Sentinel Anti-Spam and Mail Sentinel Anti-Virus. The standard features of the GB-2000X include: 128,000 concurrent connections, unrestricted concurrent user licenses, unlimited network nodes, transparent NAT, stateful packet inspection, built-in IPSec VPN, gateway failover, load balancing, DCHP server, DNS server, LDAP and RADIUS support, secure remote management and content filtering in a 1-RU case. The GB-2000X standard configuration of six 10/100 Ethernet ports can be expanded to a maximum of ten Ethernet ports and VPN acceleration via two expansion slots.

GTA firewalls combine both standard and advanced features into one easy-to-use appliance. Whether you choose plug-and-play for basic perimeter security or more advanced options like Gateway Failover and IP Aliasing, you'll experience the ease of use of GTA's proprietary secure operating system.

Adding optional features such as additional mobile VPN clients, Mail Sentinel subscriptions, Surf Sentinel content filtering or H2A high availability is easy with a simple activation code. There is no additional hardware or software installation required.

Simple Implementation for Even Complex Environments - The GB-2000X Firewall is powered by GB-OS 5.2. The clean, sleek presentation of information provides an intuitive basis for monitoring and configuring any GTA firewall. The multi-layered configuration screen easily toggles between basic and advanced configuration options, reducing the complexity of maintaining firewall security while continuing to provide a wide array of powerful, customizable configuration choices for more complex networks.

High Performance - The hardware specifications of the GB-2000X provide both flexibility and high performance. The GB-2000X hardware architecture provides support for ten Ethernet ports, including gigabit Ethernet, and hardware VPN acceleration. These flexible configuration options allow the GB-2000X to handle networks with multiple Internet security zones. With increased processing power, the GB-2000X can handle networks with heavy demands of data and email traffic and easily accommodate more complex Internet connectivity environments. Intel based processors allow GTA to easily incorporate new technologies without compromising the performance of your network's security.

Dynamic Gateway ArchitectureThe GB-2000X includes GTA's unique Dynamic Gateway Architecture offering Multi-WAN failover, load sharing, policy based traffic management, and dynamic routing options. Routing capabilities include static routing along with routing based on policy, source, protocol or ports. Gateway failover includes support for six multiple Internet connections over multiple physical interfaces or virtual gateways over a single interface. Load balancing provides bandwidth management and assures maximum efficiency of Internet service. These flexible gateway failover and routing features provide business continuity by assuring network up-time.

Unified Threat Management - Organizations are protected against unauthorized access by a robust intrusion prevention system that comes standard with the GB-2000X. Attempts to penetrate the network perimeter's security through the firewall are logged and alarms are generated based on comprehensive rule sets established by the firewall administrator. GTA's Mail Sentinel Anti-Virus feature and commercial-grade Mail Sentinel Anti-Spam subscription option supplement the standard threat management features for an additional level of security to your perimeter's network defenses. GTA partners with best of breed market leaders to provide anti-virus and anti-spam filtering features.

Network Address Translation - Stateful packet inspection and application firewall techniques combine with a powerful address translation mechanism to provide complete transparent network access to external and DMZ networks for IP-based applications.

IPSec VPN - Integrated industry standard IPSec virtual private networking for both site-to-site installations and remote mobile users means that secure remote access can be a reality for even the smallest organization. Hardware VPN acceleration is an available option for the GB-2000X for those organizations with larger VPN connectivity demands.

SSL VPN - a protected virtual private network running on Secure Socket Layer technology, accessible via a Web browser or an independent client. Flexible implementation permits authorized users to establish secure remot e access from virtually any location and device.

• User Authentication

• Stealth Mode

• Object/Policy-based Filters

• Dynamic Gateway Architecture

• Load Balancing

• Virtual hosting via IP aliasing

• PPPoE

• NAT-T

• VLAN support

• DHCP client/server

• DMZ

• DNS/Dynamic DNS

• Traffic Shaping (bandwidth limiting)

• Mail Sentinel Email Proxy

• RBL

• Interface Bridging

• Alarm Coalescing

• LDAP, RADIUS and Active Directory Single Sign-on Support

• GTAsyslog for firewall logs in WELF format

• Remote management via user interfaces:
  Web, Console

• Easy set-up and installation

Mail Sentinel Anti-Spam - Mail Sentinel Anti-Spam allows organizations to add spam control to their email proxy running on a GB-2000X. Subscription based option.

Mail Sentinel Anti-Virus - Mail Sentinel Anti-Virus allows organizations to add SMTP based virus control to their email proxy running on a GB-2000X An included feature with a valid GTA support contract.

Surf Sentinel Content Filtering - Surf Sentinel allows organizations to increase productivity while reducing liability of access to unproductive or inappropriate web sites. Subscription based option.

GTA Mobile VPN Client - Add additional GTA Mobile VPN Clients. Available in single client or multi-user packs.

GTA SSL VPN Client - Add additional GTA SSL VPN Mobile Clients. Available in single client or multi-u ser packs.

GTA VPN Acceleration Bundle - Organizations with a large number of VPN connections may benefit from increased performance by off-loading VPN processing to the GTA VPN Acceleration card.

H2A (High Availability) - H2A provides your organization with firewall redundancy, assuring that firewall downtime does not mean network access downtime.

Your purchase of a GTA Firewall includes 60 days of software updates and 30 days of up-and-running support available through GTA's technical support staff in North America, and internationally through an authorized GTA channel partner.

GTA support programs provide remote assistance with on-going maintenance of your GTA firewall products and software. GTA offers a variety of support options. Contact your local authorized GTA channel partner or ask GTA's helpful sales staff to match support offerings to your organization's needs. Remote or on-site technical support may also be available through your authorized GTA reseller.

Data security is important, and your firewall should provide the best protection available. GTA firewalls have maintained continuous ICSA Certification since 1996, providing independent verification that your data is secure. Today, all GTA firewall products are certified under the stringent ICSA 4.1 Corporate criteria, so no matter which GTA firewall suits you best, you can trust it to protect your network from unauthorized access.