The rapid increase of connected devices leads to the growing complexity of network infrastructure at the edge, which demands a more flexible network appliance that not only protects the network edge by offering security measures such as VPN, intrusion protection, content filtering and data encryption, but also offers a quick, easy-to-implement solution with efficiency in size, performance and power consumption.
The Intel Atom Processor C2000 Series
The Intel Atom processor C2000 series, codenamed “Rangeley”, addresses the need for building efficient entry to mid-range security appliances to safeguard the network edge. Based on the Silvermont microarchitecture, these processors deliver up to six times of the energy efficiency and up to seven times of the performance, compared to the previous Atom predecessors. (See our Whitepaper for details) Under “Rangeley” generations, Intel Atom processor C2000 series comes in a 64-bit systems-on-a-chip (SoCs) in two-to-eight core designs, offering high level of integration in packets processing and crypto acceleration. The followings are additional value-added features provided by the processor:
Intel QuickAssist Crypto Acceleration
Intel® QuickAssist Technology employs a hardware-assisted security engine designed to optimize the security applications, such as cryptography, data compression, and pattern matching. This engine works to reserve processor cycles for application processing, and that in turn not only relieves CPU burden but also improves overall system performance. Intel® QuickAssist Technology, made integral to the Intel architecture, aims to address the demand for hardware appliances with built-in security processing and to obviate the need for 3rd party co-processors.
Intel® DPDK Packet Processing Acceleration
Intel Data Plane Development Kit (DPDK) manages communication workload consolidation for hardware appliances built with the Intel® architecture, making application developer to accelerate network packet processing performance by 3 to 4 times.
Intel Virtualization for Efficient Resource Management
Flexibility in workload management is especially vital for an all-in-one network edge security appliance. Intel Atom processor C2000 series is coupled with the Intel Virtualization (VT-x and VT-d) enabled chipset, which manages multiple workloads in a virtualized environment. This technology provides flexibility in computing resource management, especially when high computing power required for specific security applications.
Lanner Solutions
Lanner Electronics has developed a series of entry-to-mid range communication appliances based on the Intel® Atom™ processor C2000 product family. By unifying computing, networking, management, virtualization, and security capabilities in integrated hardware architecture, these appliances work as multi-services network edge controllers for applications such as firewall, WAN optimization, CPE gateway and wired and wireless management in retail, SMEs, factories and other small area network environments.
The table below lists the Lanner’s Intel Atom C2000 based network security appliances. These platforms vary in form factor, CPU power, port density and LAN bypass function.
FW-7525 | FW-7551 | FW-7573 | UP-2010 | |
Form Factor | Desktop (rack mount kit available) | Desktop (rack mount kit available) | Rackmount 1U | Rackmount 1U |
System Cooling | Fanless | With Fan(s) | With Fan(s) | With Fan(s) |
Processor Options / Cores | Intel® Atom™ C2358 2C, C2518 4C | Intel® Atom™ C2358 2C, C2518 4C, C2758 8C | Intel® Atom SoC C2758 8C, C2518 4C | Intel® Atom SoC C2758 8C |
Max. Capacity Memory | 8 GB | 8 or 16 GB | 16 GB | 16 GB |
Storage | 1 x 2.5” drive bay, CF | 1 x 2.5” drive bay (Optional), CF | 2 x 2.5” drive bay, CF | 1 x SATA 3.0 port (Optional), CF |
Ethernet Ports | 4 or 6 x RJ45 GbE ports | 4 or 6 x RJ45 GbE ports | 6 x GbE RJ45 default 14 x GbE RJ45 maximum | 24 x GbE ports onboard +2 x 10G SFP+ |
Bypass | 1 pair Gen.2 (7525A) | N/A or 2 pairs Gen.2 | 3 pairs Gen.3 (Optional) | N/A |
TPM | FW-7525A support | N/A | N/A | TPM 1.2 |
Console/USB | 1 x RJ45/2xUSB 2.0 | 1 x RJ45/2xUSB 2.0 | 1 x RJ45/2xUSB 2.0 | 1 x RJ45/2xUSB 2.0 |
LCM | N/A | N/A | 2 x 20 characters | N/A |
Dimensions (mm) | 177 x 44 x 145.5 | 231 x 44 x 200 | 431 x 44 x 305 | 431 x 44 x 366.2 |
Security Acceleration | Intel QuickAssist Technology | Intel QuickAssist Technology | Intel QuickAssist Technology | Intel QuickAssist Technology |
Power Type/Watt | 36 or 60W Power Adapter | 36 or 60W Power Adapter | 1U ATX PSU 150W | 1U ATX PSU 500W |
Certifications | CE Class B, FCC Class B, RoHS, UL | CE Class B, FCC Class B, RoHS | CE, FCC Class A, RoHS, UL | CE Class A, FCC Class A, RoHS |
SKU Information | FW-7525A,FW-7525B, FW-7525C | FW-7551A,FW-7551B, FW-7551C, FW-7551D | FW-7573A, FW-7573B, FW-7573E | UP-2010A |
Desktop Network Edge Security Gateway - FW-7525 and FW-7551
The FW-7525 and the FW-7551 are positioned as desktop network security systems designed for entry-level UTM, firewall, VPN, IPS, and WAN optimization applications. The FW-7525 supports 2/4-core Intel Atom C2358/C2518 CPU, 4 or 6 GbE LAN ports with optional 1 pair of Gen.2 LAN bypass, 1 ECC DDR3 1600 SODIMM and a 36W or 60W power adapter. The FW-7551 supports up to 8-core Intel Atom C2758 CPU, 4 or 6 GbE LAN ports with optional 2 pairs of Gen.2 LAN bypass, 1 or 2 ECC DDR3 1600 SODIMM, 1 system cooling fan and a 36 or 60W power adapter.
Rackmount Network Security Appliance with NIC Module Expansion – FW-7573
The FW-7573 is a 1U network security appliance designed for UTM, firewall, VPN, IPS and WAN optimization applications from SMB to enterprise branch office. The system includes 6 built-in GbE LAN ports with optional 3 pairs of Gen.2 LAN bypass, 1 PCIe*8 NIC expansion slot, 2 x ECC DDR3 1600 DIMMs, 1 system cooling fan and an ATX power supply. The FW-7573 allows the expansion with one NIC modules, increasing the number of GbE ports to a total of 14.
Rackmount Network Appliance with High-port Density – UP-2010
Lanner UP-2010 is a 1U rackmount network security appliance with high-density Ethernet ports. Built with Intel® Atom™ C2000 processor, the appliance delivers efficient packet processing abilities and Intel® security instructions at low power consumption. In addition, UP-2010 also comes with Marvell® Prestera® packet processor to provide high-port density.