• A distributed architecture enables the control and data planes to perform tasks concurrently—the control plane performs task scheduling, routing, policy management and other services while the data plane implements flow-based forwarding, status detection and access control—eliminating performance bottlenecks found in many other 10GE security products
• Crossbar technology enables wire-speed performance
• Dedicated packet filtering, combined with application-specific packet filters (ASPF), monitor connection status and implement dynamic packet filtering with access control lists (ACLs)
• Defense against the most common attacks includes denial of service (DoS)/Distributed DoS, Address Resolution Protocol (ARP) spoofing, large Internet Control Message Protocol (ICMP) packet, address/port scanning, Tracert, IP packets with the Record Route option and static and dynamic blacklists; also supports binding of media access control (MAC) and IP addresses and intelligent virus defense
• Peer-to-peer (P2P) application filtering and throttling, e-mail filtering based on Simple Mail Transfer Protocol (SMTP) mail address, titles, attachments, and contents, and Web page filtering including HTTP URL and content, enable optimal use of network bandwidth
• Remote Authentication Dial-In User Service (RADIUS) and HWTACACS authentication, certificate-based (x.509 format) public-key infrastructure (PKI)/certificate authority (CA) authentication enable user identity management and support user levels to secure the network against unauthorized users
• Centralized management and auditing provides traffic statistics and analysis, events monitoring and statistics, and mail notification of alarms, facilitating network security management
• Network Address Translation (NAT), including many-to-one, many-to-many, static NAT, dual translation, easy IP and DNS mapping, supports NAT traversal with multiple protocols via NAT ALG functions such as DNS, FTP, H.323 and NBT, enabling private network addressing to be hidden from the public internet for enhanced protection
• GRE, IPSec and dynamic VPN services enable secure, high-performance connections to remote locations, ensuring maximum protection for mission-critical information that needs to be shared across a distributed organization or with key partners
• For organizations where the network is critical to business continuity, uninterrupted network connectivity is ensured via high-availability support including: stateful failover, a 36-year mean time between failure (MTBF), Layer 3 monitoring, chassis internal temperature detection, auto collection of alarms through a Web-based management system and redundant power module backup
• Remote Web-based management system streamlines network administration

• Firewall throughput: 40 Gbps
• Concurrent sessions: 2,000,000
• 3DES (Data Encryption Standard) VPN Throughput: 2 Gbps
• Memory: Main Processing Unit (MPU), 2GB; Service Processing Module (SPM), 512MB
• CF: 256MB (default), 1GB (maximum)
• 5 Expansion slots: 1 MPU, 4 SPM
• SPM option: 8 gigabit and 4 gigabit combination ports; 2 10-gigabit XFP ports
• Power supply (AC): 100~240 V, 50/60Hz
• Power supply (DC): -48~-60 V
• Dimentions: 43.6 x 46.8 x 30.8 cm (17.2 x 18.4 x 12.1 in.)
• Power consumption: 650 W
• Virtual Firewall: 256
• Firewall rules: 50,000
• Network attack detection: Land, Smurf, Fraggle, WinNuke, Tear Drop, Fragment Flooding, Host Scan, Post scan
• DoS/DDos protection: TCP SYN Flood, user datagram protocol (UDP) Flood, Internet control protocol message protocol (ICMP) Flood
• IP blacklist
• IP/MAC binding
• Build-in database: 512 users
• User authentication: Remote Authentication Dial-In User Service (RADIUS), Terminal Access Controller Access-Control System (TACACS)
• Unicast Reverse Path Forwarding (uRPF)
• Network Address Translation (NAT)
• Port Address Translation (PAT)
• Application-level gateway (ALG): ICMP, FTP, domain name system (DNS), QQ/MSN, NetBIOS (NBT), Internet Locator Server (ILS), Real Time Streaming Protocol (RTSP), Point-to-Point Tunneling Protocol (PPTP), Transparent Network Substrate (TNS), Remote Access Service (RAS), H.225, H.245, Session Initiation Protocol (SIP)
• Web filter: URL Host Filter, HTTP Parameters Filter, Java Applet Blocking, ActiveX Blocking
• P2P bandwidth control
• Load balancing
• Concurrent VPN Tunnels: Up to 6,000
• Tunnel interfaces: Up to 4,095
• DES (56-bit), 3DES (168-bit), Advanced Encryption Standard (AES) (128-bit, 192-bit, 256-bit)
• MD-5 and (Secure Hash Algorithm) SHA-1 Authentication
• Manual Key, Internet Key Exchange (IKE), Public Key Encryption (PKE) (X.509)
• Perfect Forward Secrecy (DH Groups): 1, 2, 5
• IPSec NAT Traversal
• Static routing
• Policy routing
• Border Gateway Protocol (BGP)
• Routing Information Protocol (RIP) v1, RIPv2
• Open Shortest Path First (OSPF)
• Operating modes: Layer 2 (Transparent), Layer 3 (Route and/or NAT) Mixed Mode and Static
• Dynamic Host Configuration Protocol (DHCP), Point-to-Point Protocol over Ethernet (PPPoE) Client Internal DHCP Server
• DHCP Relay
• High availability: Active/Active and Active/Passive, with Firewall Session Synchronization
• Web User Interface (UI): HTTP and HTTPS
• Command-line interface: Console, Telnet and Secure Shell (SSH)
• Syslog: Up to 4 servers
• Simple Network Management Protocol (SNMP) v2c/v3
• Safety certification: UL
• EMC certification: CE/TOV
• Mean time between failures (MTBF): 36 years

• Main unit
• Console cable
• Chassis grounding cable
• Rubber feet
• Rack-mounting kit
• Documentation CD
• Installation and Safety Manual

• H3C PSR650A, DC Power Supply Module, 650W (SKU: 0231A79S)
• H3C PSR650A, AC Power Supply Module (SKU: 0231A81J)
• F5000-A5 12 Port 1GE (8+4) Service Unit - 0231A84X
• F5000-A5 2 Port 10GE XFP Service Unit - 0231A84Y

Not Applicable.

Not Applicable.

On-line support with H3C Knowledgebase, 24x7 for the life of the product.
Round-the-clock online access to H3C's interactive Knowledgebase troubleshooting guide, featuring thousands of technical solutions to help you diagnose and solve installation, configuration and maintenance issues.

One (1) year 30-day return to factory for replacement or repair, includes power supply and fan, if applicable.

Telephone support during business hours for 90 days.

Limited Lifetime Software Updates.

Warranty Information
Terms:
Hardware repair/replacement for one year. Software media replacement for 90 days.

H3C SecPath F5000-A5 Advanced VPN Firewall Product # 0150A0AG

3Com Corporation LIMITED WARRANTY The 3Com Corporation Limited Warranty described in this document is only applicable to genuine 3Com products and supersedes any such information that may be contained within your 3Com product user documentation. This warranty applies to customers located in the United States, Australia, Canada (except Quebec), Ireland, New Zealand, U.K., and other English language countries, and countries for which a translation into the local language is not provided. HARDWARE: 3Com warrants to the original end user ('Customer') that this hardware product will be substantially free from material defects in workmanship and materials, under normal use and service, for the following length of time from the date of purchase from 3Com or its authorized reseller: TERMS: Hardware repair/replacement for 1 year 3Com's sole obligation under this express warranty shall be, at 3Com's option and expense, to repair the defective product or part, deliver to Customer an equivalent 3Com product or part to replace the defective item, or if neither of the two foregoing options is reasonably available, refund to Customer the purchase price paid for the defective 3Com product. All 3Com products that are replaced will become the property of 3Com. Replacement products or parts may be new or reconditioned. 3Com warrants any replaced or repaired 3Com product or part for ninety (90) days from shipment, or the remainder of the initial warranty period, whichever is longer. SOFTWARE: 3Com warrants to Customer that each 3Com software program licensed from it, except as noted below, will, if operated as directed in the user documentation, substantially achieve the functionality described in the user documentation for a period of ninety (90) days from the date of purchase from 3Com or its authorized reseller. No updates or upgrades are provided under this warranty. 3Com's sole obligation under this express warranty shall be, at 3Com's option and expense, to refund the purchase price for the 3Com software product or replace the 3Com software product with 3Com software which meets the requirements of this warranty as described above. Customer assumes responsibility for the selection of the appropriate programs and associated reference materials. 3Com makes no warranty or representation that its software products will meet Customer's requirements or work in combination with any hardware or software products provided by third parties, that the operation of the 3Com software products will be uninterrupted or error free, or that all defects in the 3Com software products will be corrected. For any third party products listed in the 3Com software product documentation or specifications as being compatible, 3Com will make reasonable efforts to provide compatibility, except where the non-compatibility is caused by a "bug" or defect in the third party's product or from use of the 3Com software product not in accordance with 3Com's published specifications or user manual. THIS 3COM PRODUCT MAY INCLUDE OR BE BUNDLED WITH THIRD PARTY SOFTWARE. THE WARRANTY PROVISIONS OF THIS DOCUMENT DO NOT APPLY TO SUCH THIRD PARTY SOFTWARE. IF A SEPARATE END USER LICENSE AGREEMENT HAS BEEN PROVIDED FOR SUCH THIRD PARTY SOFTWARE, USE OF THAT SOFTWARE WILL BE GOVERNED BY THAT AGREEMENT. FOR ANY APPLICABLE WARRANTY, PLEASE REFER TO THE END USER LICENSE AGREEMENT GOVERNING THE USE OF THAT SOFTWARE. OBTAINING WARRANTY SERVICE: Customer must contact a 3Com Corporate Service Center or an Authorized 3Com Service Center within the applicable warranty period to obtain warranty service authorization. Dated proof of purchase from 3Com or its authorized reseller may be required. A User Service Order (USO), Return Material Authorization (RMA) or Service Repair Order (SRO) number will be issued. This number must be marked on the outside of the package sent to 3Com's Corporate Service Center. The 3Com product must be packaged appropriately for safe shipment and sent prepaid. It is recommended that returned 3Com products be insured or sent by a method that provides for tracking of the package. Responsibility for loss or damage does not transfer to 3Com until the returned item is received by 3Com. 3Com will retain risk of loss or damage until the item is delivered to Customer. For non-US Customers, the word 'prepaid' shall be omitted where this requirement is not permitted by law. The allocation of responsibility for loss or damage stated shall be subject to any mandatory legal requirements. 3Com shall not be responsible for any software, firmware, information, or memory data of Customer contained in, stored on, or integrated with any 3Com products returned to 3Com for repair, whether under warranty or not. WARRANTIES EXCLUSIVE, WARRANTY DISCLAIMER: TO THE FULL EXTENT ALLOWED BY LAW, THE FOREGOING WARRANTIES AND REMEDIES ARE EXCLUSIVE AND ARE IN LIEU OF ALL OTHER WARRANTIES, TERMS OR CONDITIONS, EXPRESS OR IMPLIED, EITHER IN FACT OR BY OPERATION OF LAW, STATUTORY OR OTHERWISE, INCLUDING, WITHOUT LIMITATION, WARRANTIES, TERMS OR CONDITIONS OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, SATISFACTORY QUALITY, CORRESPONDENCE WITH DESCRIPTION, NON-INFRINGEMENT AND QUIET ENJOYMENT, ALL OF WHICH ARE EXPRESSLY DISCLAIMED. 3COM NEITHER ASSUMES NOR AUTHORIZES ANY OTHER PERSON TO ASSUME FOR IT ANY OTHER LIABILITY IN CONNECTION WITH THE SALE, INSTALLATION, MAINTENANCE OR USE OF THIS 3COM PRODUCT. 3COM SHALL NOT BE LIABLE UNDER THIS WARRANTY IF ITS TESTING AND EXAMINATION DISCLOSE THAT THE ALLEGED DEFECT OR MALFUNCTION IN THE 3COM PRODUCT DOES NOT EXIST OR WAS CAUSED BY CUSTOMER'S OR ANY THIRD PERSON'S MISUSE, NEGLECT, IMPROPER INSTALLATION OR TESTING, UNAUTHORIZED ATTEMPTS TO OPEN, REPAIR OR MODIFY THE 3COM PRODUCT, OR ANY OTHER CAUSE BEYOND THE RANGE OF THE INTENDED USE, OR BY ACCIDENT, FIRE, LIGHTNING, POWER CUTS OR OUTAGES, OTHER HAZARDS, OR ACTS OF GOD. 3COM SHALL NOT BE LIABLE UNDER THIS WARRANTY IF THE PRODUCT IS NOT A GENUINE 3COM PRODUCT. 3COM DOES NOT ACCEPT, REPAIR OR REIMBURSE FOR RETURNS OF PRODUCTS THAT ARE NOT GENUINE 3COM PRODUCTS. LIMITATION OF LIABILITY: TO THE FULL EXTENT ALLOWED BY LAW, 3COM ALSO EXCLUDES FOR ITSELF AND ITS LICENSORS AND SUPPLIERS ANY LIABILITY, WHETHER BASED IN CONTRACT OR TORT (INCLUDING NEGLIGENCE), FOR INCIDENTAL, CONSEQUENTIAL, INDIRECT, SPECIAL, OR PUNITIVE DAMAGES OF ANY KIND, OR FOR LOSS OF REVENUE OR PROFITS, LOSS OF BUSINESS, LOSS OF INFORMATION OR DATA, OR OTHER FINANCIAL LOSS ARISING OUT OF OR IN CONNECTION WITH THE SALE, INSTALLATION, MAINTENANCE, USE, PERFORMANCE, FAILURE, OR INTERRUPTION OF ITS PRODUCTS, EVEN IF 3COM OR ITS AUTHORIZED RESELLER HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES, AND LIMITS ITS LIABILITY TO REPAIR, REPLACEMENT, OR REFUND OF THE PURCHASE PRICE PAID, AT 3COM'S OPTION. THIS DISCLAIMER OF LIABILITY FOR DAMAGES WILL NOT BE AFFECTED IF ANY REMEDY PROVIDED HEREIN SHALL FAIL OF ITS ESSENTIAL PURPOSE. Some countries, states, or provinces do not allow the exclusion or limitation of implied warranties or the limitation of incidental or consequential damages for certain products supplied to consumers, or the limitation of liability for death or personal injury, so the above limitations and exclusions may be limited in their application to you. When the implied warranties are not allowed to be excluded in their entirety, they will be limited to the duration of the applicable written warranty. This warranty gives you specific legal rights which may vary depending on local law. GOVERNING LAW: This Limited Warranty shall be governed by the laws of the Commonwealth of Massachusetts, U.S.A., and by the laws of the United States, excluding their conflicts of laws principles. The United Nations Convention on Contracts for the International Sale of Goods is hereby excluded in its entirety from application to this Limited Warranty. 3Com Corporation, 350 Campus Drive, Marlborough, MA 01752-3064 (508) 323-5000 Register Online: When you first call 3Com, we will collect customer and product information from you to determine warranty status. You can eliminate this step and speed your access to technical support by registering on-line at http://support.3com.com/registration/frontpg.pl.