Vigor 3300V High Performance Firewall, Load-Balancer, VPN & VoIP Device

The DrayTek Vigor 3300V is an 4-Port Load-Balancing Router providing a robust firewall, QoS management, VPN Tunnelling and flexible multiple WAN interfaces for load balancing/WAN backup. The Vigor 3300V provides extensive cross-compatibility with 3rd party products and each major feature has extensive configuration options to provide great flexibility. Click here for a map of the product's Web Interface menu.

The Vigor 3300V also has up to eight Voice-over-IP ports (via optional plug-in modules), providing PSTN integration and PBX facilities to provide a complete VoIP office solution.

Main Features:

• Robust & Comprehensive Firewall

Four WAN Ports

• Connect up to four Internet feeds for increased Internet bandwidth, load-balancing, fault-tolerance and redunancy.
• Up to eight optional VoIP (Voice-over-IP) ports
• FXS (Phone Ports) or FXO (Line Ports) provide PSTN and VoIP integration.

High Performance VPN Server

• Up to 128 simultaneous IPSec VPN Tunnels with high security encryption managed by a dedicated VPN co-processor.
• Port Based VLAN or 802.1q based VLAN, supporting multiple independent or common LAN subnets.

Physical DMZ Ports

• Up to three of the WAN ports can be alternatively configured to be hardware DMZ ports for the isolated hosting of a public-facing server.

QoS Assurance

• Quality of Service assurance allows you to set different priorities for different types of Internet traffic to ensure that your mission critical connectivity can always get as much of the available Internet bandwidth as it needs.

Content Filtering

• The Vigor 3300V has several levels of Internet filtering including URL-keyword blocking and more comprehensive complete Surfcontrol™ category-based filtering.

Robust Firewalling

The Vigor 3300V employs full Stateful Packet Inspection (SPI) to help protect your network from intruders, rogue data and other potential attacks. In additional Dos (Denial-of-Service) and DDoS (Distributed DoS) attacks are protected against by robust coding, allowances for known attacks (e.g. SYN, ICMP Flood, Port Scanning etc.) and algorithms to detect specific rogue data patterns or protocol anomolies. By default, the firewall blocks all incoming data (except where it is an reply to outgoing request) and allows all outgoing data. The user can create specific packet filters to further restrict external/internal access. The Vigor 3300V also provides full NAT/PAT operation enabling you to run your private network on a private subnet.

Content Filtering & Parental Control

The Vigor 3300V has several levels of Internet and IP filtering. At the TCP/IP level, the firewall allows you to block specific internal or external IP addresses (or subnets) from being reached but the Vigor 3300V's actual content filtering can provide application level control. In simple use, you can prevent access to web URLs which contain certain keywords by entering them into the router (e.g. 'hotmail' etc.). You can also block users from downloading potentially harmful java applets, EXE/ZIP/Multimedia files, cookies or using web proxies.

VPN Capabilities

The Vigor 3300V can create VPN tunnels across the public internet. The tunnels can be to remote networks, or from a single dial-in teleworker, needing to access your head office LAN where the Vigor 3300V is installed. The Vigor 3300V can create up to 128 simultaneous VPN tunnels, incoming or outgoing, to different locations. A dedicated VPN encryption co-processor ensures that maximum VPN performance in maintained, even with high level encryption.

At the remote sites, small offices can make use of other Vigor routers for the VPN termination, and single teleworkers can use the VPN capabilities built into Microsoft Windows 98SE/2K/XP. The Vigor 3300V also provides compatibility with other third party vendor products, including Cisco™, Symantec™, Nokia™, Sonicwall™, Checkpoint™ and Watchguard™ products.

• Up to 128 Simultaneous VPN tunnels (IPSec & 32 PPTP)
• LAN-to-LAN or teleworker access
• VPN Dial-in, dial-out, always on or on-demand
• Dedicated High Performance VPN Co-Processor
• IPSec Authentication: SHA-1 and MD5
• DES, 3DES and AES Encryption (56-256 bits)
• HMAC-SHA-1 and HMAC-MD5 integrity algorithm
• ESP/AH header protocols
• MPPE Encryption for PPTP connections
• PKI (X.509) digital certificates / CA
• DHCP over IPSec
• Auto or manual keying for IPSec
• VPN Passthrough for all common protocols

Load Balancing & Multi-Purpose WAN Ports

The Vigor 3300V has four WAN/DMZ ports which each be configured as either an Internet-facing WAN interface or as a LAN-facing physical DMZ (a 'Demilitarized Zone' which is isolated from the rest of the LAN). When configured as an Internet-facing (WAN) interface 2,3 or 4 ports can be combined for load balancing or backup, whereby you can use multiple Internet connections to provide greater total bandwidth capacity or fault-tolerance.

Load Balancing

In basic load-balancing mode, the Vigor 3300V will distribute WAN traffic requests evenly. This means that if you have two 2Mb/s feeds, two LAN users can download at 2Mb/s simultaneously. Alternatively you can select traffic preferences for the load balancing, selecting specific Internet feeds for traffic types of traffic (e.g. VoIP, VPN), by source/destination IP address or TCP/UDP Port ranges.

Backup/Fault Tolerance

WAN ports can also be configured to act as backup to the main (primary) Internet feed, and only activate in the event of the primary Internet feed failing (determined by lack of routing). Once the primary internet feed is restored, the backup WAN port goes idle again.

Vigor 3300V Specification

High Performance Firewall featuring :

• Easy to navigate Web Interface
• Full Stateful Packet Inspection for both NAT and non-NAT operation
• Load Balancing & WAN Port backup (failover)
• High-Availability (VRRP, RFC2338)
• Packet Filtering & IP DMZ Support
• DHCP Client, Server & Relay
• Bandwidth/Speed Limitation Function
• Bind IP Address to MAC Address on LAN
• Physical DMZ Port (selectable)
• WAN & LAN Port Mirroring (for audit/diagnostic)
• RFC Compliance Testing
• Dos & DDoS protection on all interfaces (LAN & WAN side) including signature testing
• Support for multiple private subnets on the LAN side
• Built-in diagnostics for all interfaces, and ping/traceroute tools
• QoS facilities for guaranteeing available bandwidth for traffic categories

Internet Access Control/Restriction :

• Web URL filtering based on keywords, with reporting facility
• Blocking enabled/disabled based on time / day schedules
• Content Inspection : Real-time detection and blocking of Java Applet, Active X, Ccookies and Web Proxies (selectable).
• Surfcontrol™ Site Category blocking ('Parental Control')

Physical Interfaces :

• WAN-Side 4 X 10/100BaseT Ethernet (3 selectable DMZ)
• LAN-Side 4 X 10/100BaseT Ethernet
• Separate LAN-side DMZ Port (10/100BaseT)
• Power : 220-240VAC; IEC socket on rear

Comprehensive Reporting & management facilities :

• Syslog reporting of real-time routing & firewalling activity
• Email notification of breaches
• Configuration and management from web-based user interface
• Secure remote management
• Test and debug facilities also available on Telnet interface
• Built-in self-diagnostic tools
• SNMP Agent with MIB-II

Rackmountable (19") - Brackets included