Network Security Copyright © PLANET Technology Corporation. All rights reserved.

2 / 41 Introduction Advantage of PLANET ’ s Solution Product Overview Product Features & Comparison Solutions Roadmap

3 / 41 PLANET Advantages Full Range of Security Solutions All-in-One Security Appliance Easy integration with existing network infrastructure Low Total Cost of Ownership from integrated security solutions Bandwidth Management Gateway Multi-Homing Security Gateway VPN Security Gateway UTM Content Security Gateway

4 / 41 Product Overview ModelDescription Content Security CS-1000 UTM Content Security Gateway (200 IPSec VPN tunnels, IDP, Anti-Virus, Anti-Spam) CS-2000 UTM Content Security Gateway (200/1000 SSL/IPSec VPN tunnels, IDP, Anti-Virus, Anti-Spam) VPN Security SG-500 VPN Security Gateway (5 SSL VPN tunnels, 200 IPSEC VPN tunnels) SG-1000 VPN Security Gateway (50 SSL VPN tunnels, 200 IPSEC VPN tunnels) Bandwidth Management Content Security Multi-Homing Security Unified Office Gateway Broadband Router / Wireless Gateway VPN Security Content Security VPN Security

5 / 41 Product Overview ModelDescription Multi-Homing Security MH-2001 Multi-Homing Security Gateway (200 VPN tunnels) WLS-1280 Wireless LAN Switch / Security Gateway (120 VPN tunnels, 12 Access Points Management) Bandwidth Management BM-525 Bandwidth Management Gateway (25Mbps Bandwidth Control) Bandwidth Management Content Security Multi-Homing Security Unified Office Gateway Broadband Router / Wireless Gateway VPN Security Multi-Homing Security Multi-Homing Security Bandwidth Management Bandwidth Management

6 / 41 Product Overview ModelDescription Broadband Router VRT-401 VPN Broadband Router (100 VPN tunnels) VRT-311S VPN Broadband Router (10 VPN tunnels) Wireless Gateway WSG-404 Hot-Spot Wireless Subscriber Gateway (50 PnP IP Users, account generate via printer) Unified Office Gateway UMG-2000 Unified Office Gateway (IP PBX / Storage / / Security / WiFi / L2 Switch) Bandwidth Management Content Security Multi-Homing Security Unified Office Gateway Broadband Router / Wireless Gateway VPN Security Broadband Router / Wireless Gateway Broadband Router / Wireless Gateway Unified Office Gateway

Features & Comparison Content Security VPN Security

8 / 41 Product Overview Model Function CS-1000CS-2000SG-500SG-1000 Firewall VVVV SSL VPN -VVV Content Filtering VVVV Load Balancing Outbound Inbound/ Outbound -Outbound Bandwidth Management VVVV IDP VV-- Anti-Virus VV-- Anti-Spam VV-- Target Market SME

9 / 41 Mail Server CS-1000 Internet DMZ LAN Features CS-1000 UTM security Gateway with dual WAN, WAN backup, load balance Hardware-based Anti-Virus device Built-in Clam AV Anti-Virus engine can detect viruses, worms or other threats from transfer Anti-Spam block over 95% spam mail SMTP throughput 12,000 mails/ day Auto-Training system raises identify rate of spam mails substantially SPI Firewall, IDP support Dual WAN, VPN Trunk support VPN with DES, 3DES, AES encryption VPN Trunk support Up to 200 VPN tunnels QoS and Authentication feature CS-1000 LAN WAN DMZ Spa m Virus

10 / 41 Features CS-2000 Anti-Spam Filtering: block over 95% spam mail Anti-Virus Protection: Built-in double virus scan engines – Clam and Sophos Built-in 80GB Hard Disk can store the spam and Virus mail in Quarantine Auto-Training system raises identify rate of spam mails substantially VPN Connectivity: IPSec, SSL, PPTP Server, and PPTP Client support Up to 1000 IPSec VPN tunnels and 200 SSL VPN tunnels SPI Firewall IDP support Dual WAN, VPN Trunk support Outbound/Inbound Load Balancing Content Filter includes URL, Script, P2P, IM, and Download blocking QoS and Authentication feature CS-2000 LAN WAN DMZ

11 / 41 Features SG-500 Supports SSL VPN and IPSec VPN Up to 5 SSL VPN connection tunnels VPN with DES, 3DES, AES encryption SHA-1 / MD5 authentication Up to 200 IPSec VPN tunnels SPI Firewall QoS Content Filtering Hacker Alert and Anomaly Flow Detection Authentication: User Authentication, RADIUS, and POP3 SG-500

12 / 41 Features SG-1000 Supports SSL VPN, IPSec VPN, and PPTP server/client Up to 50 SSL VPN connection tunnels VPN with DES, 3DES, AES encryption SHA-1 / MD5 authentication VPN Trunk support Up to 200 VPN tunnels SPI Firewall QoS Content Filtering Dual WAN, WAN backup, load balance SG-1000 LAN WAN DMZ

13 / 41 Features Brief Model SG-1000SG-500CS-2000CS-1000 Description VPN Security Gateway UTM Content Security Gateway Placement 19 ” Rack MountDesktop19 ” Rack Mount Interface LAN x1, WAN x2, DMZ x1LAN x1, WAN x1, DMZ x1 LAN x1, WAN x2, DMZ x1 All Gigabit Ports LAN x1, WAN x2, DMZ x1 System Performance Max. Concurrent Sessions 110,00020,0001,000,000110,000 New Sessions per second 10,0001,00020,00010,000 Firewall Throughput 100Mbps70Mbps300Mbps100Mbps 3DES performance 17Mbps10Mbps30Mbps17Mbps Capacity per day --1,800,000120,000 Multi-Homing WAN Load Balance Outbound- Inbound/ Outbound Load Balance mode Round-Robin, by traffic, by sessions, by packets - Round-Robin, by traffic, by sessions, by packets Round-Robin, by traffic, by sessions, by packets Content Security Content Filtering VVVV Mail Security -- Anti-virus, Anti-spam Anti-virus, Anti-spam IDP --VV DoS, DDoS protections VVVV User Authentication VVVV QoS VVVV VPN IPSec VPN Tunnel 100/ / /200 SSL VPN50 tunnels5 tunnels200 tunnels - VPN Trunk V-VV

14 / 41 CS-1000 Comparison Brand PLANETFortinetZyxel Model CS-1000Fotigate-60ZyWALL-70 UTM LAN LAN x1, WAN x2, DMZ x1LAN x4, WAN x2, DMZ x1LAN x1, WAN x2, DMZ x4 System Performance Max. Concurrent Sessions 110,00050,00010,000 Firewall Throughput 100Mbps70Mbps90Mbps 3DES performance 17Mbps20Mbps40Mbps Mode of Operation Transparent VVV NAT, PAT VVV Virtual server VVV Multiple Subnet V-- Mail Security Anti-spam VVV Spam Mail Training System V-- Anti-virus VVV Automatically virus database update VVV Whitelist & Blacklist VVV Alert by VVV Update License Fees Free of chargePer Year

15 / 41 CS-1000 Comparison Brand PLANETFortinetZyxel Model CS-1000Fotigate-60ZyWALL-70 UTM Content Filtering Scripts, URL BlockingVVV IM, P2P BlockingV-- Download, Upload BlockingV-- VPN VPN Tunnel100/ PPTP serverVV- VPN TrunkVV- Advance Feature Outbound Load BalanceV-V WAN Fail overVVV IDPVVV QoSVVV User AuthenticationVVV Monitor Log to Syslog serverVVV Accounting ReportVVV

16 / 41 CS-2000 Comparison Brand PLANETFortinetJuniper Model CS-2000FortiGate 100ANetScreen 25 Hardware ProcessorIntel Celeron 1.2GHzFortiASICPowerPC266MHz RAM1GB256MB128MB Flash128MB-- H.D.80G-- Network port LAN x 1, WAN x 2, DMZ x 1 (All Gigabit Ports) LAN x 4, WAN x 2, DMZ x 210/100 RJ-45 Port x 4 Software Concurrent session1,000,000200,00032,000 New Sessions / second20,0004,000 Firewall performance300Mbps100Mbps 3DES performance30Mbps40Mbps20Mbps QoSVVV IDPVVV IDP ReportVV- VPN Tunnel SSL VPNVV- WAN Load balancing Inbound / OutboundOutbound- Content FilteringVVV

17 / 41 CS-2000 Comparison Brand PLANETFortinetJuniper Model CS-2000FortiGate 100ANetScreen 25 IM/P2P BlockingV-- User Authentication Local Database, RADIUS, POP3, LDAP Local Database, RADIUS, LDAP High AvailabilityV-V Event log and alarmVVV Syslog server supportVVV Accounting ReportV-- StatisticVVV Anti-VirusVV- Anti-Virus Engine2(Clam & Sophos)1- Anti-SpamVVV Mail ReportV--

18 / 41 SG-1000 Comparison Brand PLANETCiscoSonicWall Model SG-1000VPN 3005SSL-VPN 2000 Hardware Dimension19 ” Rack Mount Network PortLAN x 1, WAN x 2, DMZ x 1LAN x 1, WAN x 1LAN x 1, WAN x 2, DMZ x 1 Software DMZ TransparentV-V Static RouteVVV NAT, PATVVV FirewallV-V DoS, DDoS protectionsV-V VPN Entry20050 SSL VPNV-V SSL VPN Tunnels50 Authentication UserV-V RADIUS AuthenticationVVV WAN Load balancing Round-Robin, by traffic, by packet, by session V- QoSV-V Content BlockingV-- URL FilteringV-V H/W Watch-DogV-- Hacker AlertV-V

Features & Comparison Multi-Homing Security

20 / 41 Features MH-2001 Four 10/100M Ethernet ports: LAN x 1, WAN x 2, DMZ x 1 Stateful Packet Inspection (SPI) Firewall & protection for DoS Web Content Filtering Hardware-based VPN with DES,3DES,AES encryption IPSec, PPTP VPN tunnels and VPN pass- through support Round Robin of outbound load balancing by traffic, by packet, by session Supports QoS and Authentication feature Up to 200 VPN tunnels User authentication MH-2001 WAN LAN DMZ WAN Load Balancing Firewall VPN Content Filter QoS WAN Load Balancing Firewall VPN Content Filter QoS

21 / 41 MH-2001 Comparison Brand PLANETSonicWall Watch Guard JuniperCisco Model MH-2001TZ170Firebox 700NS-25PIX 506E Concurrent Session 60,0006,00010,00016,00025,000 Firewall Throughput 100 Mbps90 Mbps150 Mbps100 Mbps 3DES Throughput 25 Mbps30 Mbps5 Mbps20 Mbps17 Mbps VPN Tunnels Outbound Load Balancing VV--- Bandwidth Management VV-V- Server Load Balancing 4 groups---- URL FilteringUser-defined User-defined / Websense * User-defined / Webblocker * User-defined / Websense * Remark: * Need additional annual fee

22 / 41 Features WLS-1280 IPSec VPN Encrypted Network Wireless LAN Switch Manageable 12 APs include WAP-4033, WAP-4033PE and WAP-4060PE Supports up to 120 concurrent users Provides 500 local accounts and 2000 on-demand accounts Multiple User login method via local database, RADIUS, POP3, NT domain Role-based and Policy-based access control, bandwidth control Supports monitor IP on 3rd party Access Points Managed APs support WEP, WPA, and WPA2 Supports VPN termination of IPSec tunnels for secured wired/wireless connection Supports MAC Access Control List WLS-1280 LAN WAN

Features & Comparison Bandwidth Management

24 / 41 Policy Statistics Service Distribution Chart Outbound Service Statistics Report Features BM-525 One 10/100Mbps LAN, DMZ, and WAN ports NAT mode and DMZ mode Guaranteed and maximum bandwidth with three levels of priorities Professional Monitor function includes Log, Accounting Report, Statistics, and Status MRTG-like Traffic Statistics, easy to trace and analyze Content Filter includes URL, Script, P2P, IM, and Download blocking Hacker Alert and Anomaly Flow Detection Virtual Server and IP mapping (Multi-DMZ Host) Assign daily and weekly access schedule to each individual policy BM-525

Features Broadband Router / Wireless Gateway

26 / 41 Features VRT-401 VPN Broadband Router IPsec, PPTP, and L2TP server/ client support Provides up to 100 VPN tunnels 15 Mbps 3DES VPN performance SPI firewall + DoS prevention protection 90 Mbps Firewall throughput Virtual Server, DMZ, UPnP and DDNS support VRT-401

27 / 41 Built-in NAT Firewall Stateful Packet Inspection (SPI) Firewall for DoS attacks UPnP support IPsec, PPTP and L2TP VPN pass through support Provides up to 10 VPN tunnels Group-based / Scheduled Access Control Predefined / User-defined service database VRT-311S Features VRT-311S

28 / 41 Features Brief Model Function VRT-401VRT-311S LAN port 43 WAN port 11 DMZ port Software1 x hardware DMZ Content FilteringVV FirewallRule-based DDNS, UPnPVV Virtual ServerVV DoS supportVV SchedulingVV LogsVV VPN Tunnels10010 VPN pass throughIPSec, PPTP, L2TP Microsoft VPN support-V VPN AuthenticationMD5/SHA-1 VPN EncryptionDES/3DESDES/3DES/ AES Target Market SMESOHO

29 / 41 VRT-311S Comparison Brand PLANET SonicwallJuniperWatchGuard Model VRT-311S SOHO 3Netscreen-5XTFirebox X15 Interface LAN x3, WAN x1, DMZ x1 LAN x1, WAN x1, console x1 LAN x4, WAN x1 Firewall Throughput80 Mbps75 Mbps70 Mbps95 Mbps 3DES Throughput3.5 Mbps *20 Mbps 35 Mbps URL BlockingVVVV DDNSV--V DoSVVVV UPnPV--- Virtual ServerVVVV DMZHardwareSoftware* Routing Mode Static Route, RIP v1, v2 Static Route, RIP v1, v2 Static Route, RIP v2 Static Route, RIP v2 VPN Tunnels10 15 VPN Pass ThroughIPSec, PPTP, L2TP IPSec, L2TPIPSec, PPTP Microsoft PPTP VPN Server V--- VPN AuthenticationMD5/SHA-1 VPN EncryptionDES/3DES/AES DES/3DES Hardware VPN-VV- Remark: * software based 3DES performance.

30 / 41 Features WSG Mbps 11g Hot Spot Wireless Subscriber Gateway Plug-n-Play IP Internet access, no configuration changes required Comply with g wireless standard Work with any WiFi adapters such as Centrino Notebook, 11g 54Mbps adapters or 11b adapters Built-in or RADIUS AAA support (Authentication, Authorization and Accounting) Built-in RC4 WEP Encryption, secure HTML login page (SSL), VLAN Security for Wireless, VPN (IPSec/PPTP) Pass through Operate with the compact thermal printer (WSG-ACG4) to print out billing information in a minute Right for any places that provide public access to the Internet, such as Cyber Caf é, Airport, Government, and etc. WSG-404

Features Unified Office Gateway

32 / 41 Applications Unified office network management at single point

33 / 41 Features UMG-2000 IP PBX / VoIP Service Service Internet Security Service Network Storage Service WiFi Service 24+2G Switch Service UMG-2000 Unified Office Gateway

34 / 41 Features UMG Service Supports POP3, SMTP, IMAP Secured Socket Layer (SSL) Junk Mail Filtering Anti-Virus and Anti-Spam Auto Backup, Auto Reply Web Mail Service Supports POP3, SMTP, IMAP Secured Socket Layer (SSL) Junk Mail Filtering Anti-Virus and Anti-Spam Auto Backup, Auto Reply Web Mail Internet Security Service Access Control List (ACL) URL / IM / P2P Blocking Firewall / NAT DoS Attack Protection Site-to-Site SSL VPN PPTP VPN Remote Access Internet Security Service Access Control List (ACL) URL / IM / P2P Blocking Firewall / NAT DoS Attack Protection Site-to-Site SSL VPN PPTP VPN Remote Access Network Storage Service RAID 0, 0/1, 5, and JBOD Up to 4TB Hot-swap Disk Array User Network Storage Quota Scheduled Auto Backup, Auto Snapshot User/Group Privilege ACL Network Storage Service RAID 0, 0/1, 5, and JBOD Up to 4TB Hot-swap Disk Array User Network Storage Quota Scheduled Auto Backup, Auto Snapshot User/Group Privilege ACL Front Panel

35 / 41 Features UMG-2000 Rear Panel IP PBX / VoIP Service SIP 2.0 (RFC3261) compliant Up to 250 Registrations Call-Parking, Echo Cancellation QoS Support Telephone Conference, 3-Way Calling Call Hold, Call Waiting Fax Server Support IP PBX / VoIP Service SIP 2.0 (RFC3261) compliant Up to 250 Registrations Call-Parking, Echo Cancellation QoS Support Telephone Conference, 3-Way Calling Call Hold, Call Waiting Fax Server Support WiFi Service b/g/n Wireless Access Point 3 RP-SMA Detachable Antennas Security: WEP / WPA / WPA2 WiFi Service b/g/n Wireless Access Point 3 RP-SMA Detachable Antennas Security: WEP / WPA / WPA2 24+2G Switch Service IEEE 802.1d Spanning Tree IGMP Snooping 24+2G Switch Service IEEE 802.1d Spanning Tree IGMP Snooping

Network Security Solutions

37 / 41 When Customers Choose CS Series Products? SPI Firewall VPN IDP Anti-Virus Anti-Spam URL Filtering Content Filtering Bandwidth Management Planet CS series products are All-in-One Security Solution which includes important security functions, such as VPN, IDP, Anti-Virus, and Anti-Spam. If customers mainly look for Anti-Virus and Anti-Spam functions, CS-1000 or CS-2000 would be the best choice. Use the Browser

38 / 41 When Customers Choose SG Series Products? Support up to 50 SSL VPN connection tunnels Planet SG series products provide important security functions, such as VPN, SPI Firewall, Content Blocking, and QoS. If customers look for SSL, IPSec, PPTP VPN mostly, they can choose SG-500 or SG SPI Firewall SSL VPN IPSec VPN PPTP VPN (SG-1000) VPN Trunk (SG-1000) WAN Load Balancing (SG-1000) Content Filtering Bandwidth Management

39 / 41 When Customers Choose MH Series Products? Planet MH series products provide two WAN ports and important security functions, such as SPI Firewall, Script Blocking, URL Blocking, and QoS. If customers looking for WAN Fail Over function mostly, they can choose MH ISP1ISP2 LAN DMZ SPI Firewall WAN Fail Over WAN Load Balancing IPSec VPN PPTP VPN URL Blocking Script Blocking Bandwidth Management WAN1 Fail Access Internet through WAN2

40 / 41 Roadmap Fiber Router Security Gateway 2009/Q32009/Q tunnels CS 2 WAN / VPN / FW / Anti- Virus / Anti- Spam / IPD CS tunnels SSL VPN 2 WAN / SSL VPN / FW SG-1000 Gigabit Router 5-Port Gigabit VPN / IPS Router XRT-501 Fiber Broadband Router 1 WAN 100FX, 4 LAN, PPPoE, DHCP, VLAN, 802.1q, 802.1p, VPN pass through, Firewall, FTX tunnels CS 2WAN / VPN / FW/ IDP / Anti-Virus / Anti- spam / ICSA-certified, CS tunnels MH IPSec/PPTP/SSL VPN, SPI Firewall, QoS, Outbound Load Balancing, MH-3000 Unified Office Gateway 1 WAN / 24+2G / 11n / 4 FXO / 4 Hard Disk, IP-PBX / VoIP / Network Storage / / Internet Security / WiFi / L2 Switch UMG-2000 Unified Office Gateway 1 WAN / 24+2G / 11n / 4 FXO + 4 FXS (8 FXO) /4 Hard Disk, IP-PBX / Network Storage / / Internet Security / WiFi / L2 Switch, UMG-2200 Unified Office Gateway 1 WAN / 24+2G / 4 Hard Disk, / Internet Security / L2 Switch / (IP-PBX) / (Network Storage) / ( ) Cost Down, UMG n Fiber Broadband Router 1 WAN 100FX, 4 LAN, 11n 2T2R, PPPoE, DHCP, VLAN, 802.1q, 802.1p, VPN pass through, Firewall, FTX-401N