ETM

ETM ARISTA | Alldatasheet

Document overview

• Manufacturer or author: Provided By alldatasheet.com(free datasheet download site)
• PDF pages: 8

Technical content

• Protection, encryption, control & visibility
• NG Firewall, IPS, VPN & more
• Onboard security for small network appliances & IoT devices
• Full security processing on-premises or in the cloud Intelligent Edge Optimization
• Secure, WAN-optimized connectivity for every location
• Seamless scalability
• Optimal predictive routing technology for first packet, dynamic path selection
• Manage one or many appliances from ETM Dashboard Cloud Management at Scale
• Zero touch deployment with auto- provisioning VPN
• Configure & push policies
• Advanced alerting & reporting
• Visibility across globally dispersed networks & endpoints Network Security Simplified The way we work is evolving. Businesses have adapted to new cloud- based technologies and applications that have increased employee efficiency and provided a scalable pathway to continued business growth. Work teams, now composed of employees working in headquarter of fices, remotely, or branch offices, have become spread across increasingly large distances. While businesses realize a range of important bene fits in this transformative era, managing these dispersed networks and their connected devices can bring new challenges of cost, complexity, and control. NG Firewall and Micro Edge provide edge threat management and a comprehensive approach to network security orchestration. The suite of cloud-managed security and connectivity options work together to fit the needs of mid-sized businesses and distributed organizations. This integrated approach provides network administrators with the ability to ensure protection, monitoring and control across devices, applications, and events, enforcing a consistent security posture over the entire digital attack surface. Centralized Cloud Based Management One or many NG Firewall and Micro Edge appliances can be managed from any browser. Full visibility of all deployments in one single pane of glass view enables administrators to view appliance network status, important events, reporting data and push global configurations. Simplified Device Management Reduce management overhead by handling a range of tasks remotely. View appliance status at a glance, including uptime, bandwidth utilization, and network traf fic summaries. Manage licensing, software updates, backups, alerts and more. Monitor connected endpoints on the network, get alerts when threats are detected, and initiate an endpoint protection scan. Real-time firewall, router and endpoint status alerts help with site management and maintaining regulatory compliance. Zero Touch Deployment Deploy and configure new NG Firewall or Micro Edge hardware appliances remotely. Zero touch deployment reduces the amount of time needed and complexity of deployment by eliminating the need to con figure the appliance from the local network. Network Orchestration Automatically connect NG Firewall and Micro Edge appliances together via VPN creating a mesh network in just a few clicks. View aggregated performance data for the entire network and create shared WAN routing policies for Micro Edge appliances.

Security, Visibility & Control NG Firewall simpli fies network security with a single, modular software platform designed to fit the evolving needs of mid-sized and distributed organizations. NG Firewall provides a browser-based, responsive and intuitive interface enabling network administrators to quickly gain visibility into the traf fic on the network. From content filtering to advanced threat protection, and VPN connectivity, NG Firewall delivers a bulletproof network security platform. NG Firewall Features NG Firewall is exceptionally easy to use with a simple app based graphical UI allowing administrators to tailor NG Firewall for specific network needs. Comprehensive Security at the Gateway Proactively stop malware, hacking attempts, phishing schemes and other threats before they reach users’ devices. Next-Generation Filtering Get a handle on every rogue application, encrypted web request, malware distribution point, drive-by malvertising attempt, and rash of spam. Deep Analysis and Insights Gain valuable insights from database-driven reports without the need for a separate appliance. See the network status at a glance on the dashboard, ensure compliance with full event logs, and get noti fications of threats, anomalies or unusual user behavior with alerts. Superior Connectivity & Performance Meet the challenges of a remote workforce, branch offices and guest Wi-Fi. Keep users and data safe regardless of location or level of access. Balance competing priorities, ensure Quality of Service (QoS), and maximize uptime. Protect Proactively block malware, phishing, spam, hacking and other exploits from reaching network users and devices. Firewall Safeguard the network from Internet threats with control by IP address, protocol and port. Administrators can designate which systems and services (HTTP, FTP, etc.) are publicly available. Firewall can be run as a transparent bridge to complement a pre-existing firewall and allows administrators to control inbound and/or outbound access to specific IPs and ports. Intrusion Prevention Stop exploits before they enter the network. Pre- configured signature-based IPS makes it easier for administrators to provide 24/7 network protection from hackers. It minimizes annoying false positives and ensures that signatures are always current with automatic updates. With an easy-to-use setup wizard allowing simple con figuration of rules speci fic to each environment, Intrusion Prevention provides flexible control. Over 34,000 signature detections, including heuristic signatures for port scans, enable you to effectively monitor and block most suspicious requests. Phish Blocker Protect unsuspecting, click-happy users from identity theft attempts. Phish Blocker protects users from email phishing attacks and fraudulent pharming websites, and allows you to enable (or disable) the scanning of SMTP emails and take the appropriate action: Mark, Pass, Drop or Quarantine. Threat Prevention Block access to web and application content based on an analysis of the IP address’s reputation. IP address reputation scoring is based on the Webroot BrightCloud ® IP Reputation Service. This intelligent, real-time packet inspection categorizes IP addresses into five distinct categories – High Risk, Suspicious, Moderate Risk, Low Risk, and Trustworthy. Figure 1: NG Firewall Threat Prevention Virus Blocker Virus Blocker stops viruses at the gateway by leveraging signatures from Bitdefender™, the leader in speed and efficacy in identifying emerging threats. Heuristic models provide an additional layer of protection against zero-day threats, and real-time updates with no system downtime ensure that your network is always protected. Virus Blocker identi fies and blocks zero-day threats, viruses, worms, Trojan horses, botnets, unknown malware, and new infections. Edge Threat Management | NG Firewall

Get a handle on every rogue application, encrypted web request, malware distribution point and rash of spam. Ad Blocker Eliminate ad and cookie tracking, while improving webpage load times. Based on the open source project AdBlock Plus, Ad Blocker lets you easily block ads at the gateway without installing browser plugins. Ad Blocker prevents malware and scams through banner ads while reducing traffic on the network. Application Control Control access to applications, which can be productivity drains and bandwidth hogs. Application Control performs deep packet (DPI) and deep flow (DFI) inspection of network traffic, enabling it to accurately identify thousands of common applications such as social networking, P2P, instant messaging, video streaming, file sharing, enterprise applications and much more. Make sure that your users can access mission-critical and cloud-based apps while keeping recreational or inappropriate apps off the network. Application Control works in concert with Web Filter, SSL Inspector, Bandwidth Control and Policy Manager to give you the tools you need to enforce your user policies. Figure 2: NG Firewall Application Control Report Spam Blocker Filters and quarantines fraudulent email—spam, phishing and email fraud—preventing it from reaching your users. Its smart analysis delivers a catch rate of 99.5% while minimizing false positives. Spammers constantly adjust their content and tactics to evade spam blockers. Spam Blocker is updated in real-time to keep you one step ahead of spammers. Quarantine is automatic and maintenance-free. SSL Inspector Decrypt, scan and re-encrypt HTTPS and SMTP traffic on the fly. SSL Inspector creates a specialized certi ficate on each client. This certi ficate communicates directly with the gateway which is then able to decrypt HTTPS and SMTP traf fic, process, and re-encrypt it without ever exposing the decrypted traf fic to the network. This enables HTTPS traf fic to be inspected in the same way as regular HTTP traffic, meaning that all NG Firewall apps and their rules can be applied. Web Filter Block inappropriate content at the gateway before it reaches users. Allow, block, flag or alert by category to easily set up rules that meet your criteria. Web Filter allows you to monitor and control searches across popular search engines including Google, YouTube, Ask, Bing, and Yahoo. You can also enforce safe search on YouTube, as well as log searches, giving you an unprecedented degree of visibility and control, ideal for content-sensitive environments like schools, public libraries, and social services organizations. Perform Ensure network performance, maximum uptime and QoS to increase productivity. Bandwidth Control Manage the priority of business-critical, recreational and inappropriate traf fic. Ensure Quality of Service (QoS), utilize bandwidth resources ef ficiently, and prioritize bandwidth toward business-critical apps like VOIP, cloud- based business applications, or video conferences. Combine Bandwidth Control with Policy Manager to define different actions based on policies (user, group, time of day, etc.). WAN Balancer Distribute Internet traf fic to optimize QoS over two or more connections. WAN Balancer helps you maximize your cumulative network performance and throughput by distributing the traf fic based on simple rules. It also enables you to combine multiple commodity Internet connections into a cost-effective alternative to pricey high-bandwidth connections. WAN Failover Reroute traf fic automatically when one Internet connection fails. WAN Failover continually tests your Internet connections, and when one slows or fails, it can reroute network traf fic over the remaining connections, maximizing your uptime. WAN Failover also logs all downtime for each connection, arming you with the evidence you need to hold your ISPs accountable. Web Cache Streamline and accelerate users’ Internet browsing experience. Web Cache enables cached elements to be shared by all Internet users on your network increasing the responsiveness of web applications and reducing the bandwidth load. Edge Threat Management | NG Firewall

Maintain visibility and control over remote workers, branch offices and guest Wi-Fi to keep users connected and data safe. Captive Portal Easily manage Wi-Fi and guest access to the Internet. With Captive Portal you can require users to view or accept an Acceptable Use Policy before accessing the Internet (e.g. public Wi-Fi), authenticate users against Local Directory, RADIUS or Microsoft Active Directory (requires Directory Connector), and separate mobile devices to a different rack with different policies for BYOD (bring your own device) environments. IPsec VPN Provide seamless, secure network access for branch offices and remote employees. Uses cutting-edge security technology, supporting full tunnel or split tunnel, integrated with L2TP and Xauth. NG Firewall will detect VPN tunnel states immediately and automatically restart a tunnel in the event of downed connection. OpenVPN Enables SSL-based VPN that supports both site-to-site and client-to-site tunnels. OpenVPN can run as a server allowing for remote clients to connect to the NG Firewall server, and the OpenVPN application can connect to other remote servers as a client. Tunnel VPN Provide connectivity through encrypted tunnels to remote VPN servers and services. Tunnel VPN features a configuration wizard to enable connections to many privacy VPN providers like ExpressVPN or NordVPN. Tunnel VPN is for connecting NG Firewall as a client to a remote server or service. WireGuard VPN Build secure, fast, and cutting-edge connections between sites and to remote users. For networks with one or more branch of fices or locations, WireGuard VPN creates an encrypted tunnel, enabling them to function as a single virtual network. Site-to-site tunnels with WireGuard VPN have very little overhead which ensures network bandwidth is maintained. Manage Create policies by user, group, device, and time to control access. Get complete visibility into network activity and traffic. Directory Connector Use Microsoft Active Directory or RADIUS to power policy management. Users can quickly and easily authenticate to the network, providing smooth, secure, and seamless access to the network. Network administrators gain visibility to each user as they authenticate, and can assign them to groups in the directory, simplifying and augmenting policy management. Policy Manager Define and manage network privileges based on usernames, groups, time, day or protocol. Policies provide a way to segment network traf fic to provide completely separate con figurations for traf fic processing. For example, in a school network you could allow teachers to access Facebook but not students. Additionally, administrators can con figure multiple applications in separate policies simultaneously using the Parent Policy system. Parent Policies provide a tiered organization of policies providing global policies at the Parent Policy level that apply to all traf fic, and additional more customized policies for “child” tiers or levels below the Parent Policy. Reports Drill down into any feature or across all features by user, group, time and more. Comprehensive, or summary reports can also be distributed automatically via email to key stakeholders. Configuration Backup Enables recovery from hardware failures and disasters, and con figuration pro files to be shared across multiple deployments of NG Firewall. Branding Manager Personalize user-facing screens to add company logo, name and contact information. Zero-Touch Provisioning Network administrators can remotely set up and configure NG Firewall without having to be on site. Automatic upgrades ensure all appliances are kept up to date with the latest security updates and enhancements. Centralized Management One or many NG Firewall appliances can be managed from any browser. Full visibility of all deployments enables administrators to view appliance network status, important events, reporting data and push global configurations. Deploying NG Firewall NG Firewall can be deployed in various ways allowing you to choose the best deployment method for your network. Use a dedicated NG Firewall hardware appliance and drop it into your network with zero touch deployment, or use your own hardware that meets the hardware requirements. NG Firewall can also be deployed on a virtual machine, or in the cloud with AWS or Azure. Edge Threat Management | NG Firewall

NG Firewall | Appliances Model Number CCA-ETM-Q4 CCA-ETM-Q8 CCA-ETM-Q8W CCA-ETM-Q12 CCA-ETM-Q20 Recommended Devices Up to 150 Up to 250 Up to 250 Up to 1500 Up to 5000 Processor Quad Core Intel Atom X6413E Quad Core Intel Atom C3558 Quad Core Intel Atom C3558 Quad Core Intel Xeon E3-1225 v5 Six Core Intel Xeon E-2176G RAM 8GB DDR4 8GB DDR4 8GB DDR4 16GB DDR4 32GB DDR4 Storage 128 GB eMMC 128 GB SATA DOM 128 GB SATA DOM 512 GB NVMe SSD 512 GB NVMe SSD Interfaces 4x GbE 4x GbE / 2x SFP+ / 2x PoE+ 4x GbE / 2x SFP+ / 2x PoE+ 8x GbE / 4x SFP 17x GbE / 4x SFP+ USB ports 2 2 2 2 2 Console RJ45 (serial) Mini USB and RJ45 (serial) Mini USB and RJ45 (serial) HDMI HDMI and RJ45 (serial) Wireless - - 802.11 b/g/n/ac - - External Antennas - - 2 - - Form Factor Fanless Desktop Desktop, Rack Mount Option Desktop, Rack Mount Option 1U Rackmount 1U Rackmount Firewall Throughput1 940 Mbps 9.4 Gbps 9.4 Gbps 950 Mbps 8.5 Gbps NGFW Throughput1,2 850 Mbps 870 Mbps 870 Mbps 950 Mbps 2 Gbps IPsec Throughput3 2.3 Gbps Dimensions (HxWxD) 6.7″ x 5.5″ x 1.3″ (170 x 140 x 34mm) 9.8″ x 9.9″ x 1.7″ (250 x 252 x 44mm) 9.8″ x 9.9″ x 1.7″ (250 x 252 x 44mm) (438 x 430 x 44mm) (438 x 553 x 44mm) Operating Temperature 32° – 104°F (0° – 40°C) 32° – 104°F (0° – 40°C) 32° – 104°F (0° – 40°C) 32° – 104°F (0° – 40°C) 32° – 104°F (0° – 40°C) Relative Humidity 0% - 90% 20% - 90% 20% - 90% 20% - 90% 20% - 90% Power Source 12V 36W Power adapter 12V 60W Power adapter 54V 65W Power adapter (PoE+) 12V 60W Power adapter 54V 65W Power adapter (PoE+)

250 Watt PSU Redundant 300

Certifications CE/FCC/UL CE/FCC/UL CE/FCC/UL CE/FCC/UL CE/FCC/UL 1 Throughput numbers are based on a single LAN to a single WAN transmission in one direction using IPerf with UDP packet size 1500. 2 NGFW throughput is measured with Application Control, IPS, Web Filter, Virus Blocker and Reports. 3 NG Firewall version 16.6, AES256 cipher, IPerf with single UDP flow, 1500 MTU, and stateful firewall. Warranty Appliances come with a one-year limited hardware warranty, which covers parts, repair, or replacement. A 3-year hardware warranty is also available for purchase.

Optimize Your Network from Edge to Edge Micro Edge is a lightweight device with advanced connectivity and security capabilities enabling businesses to have a secure network edge. Micro Edge provides secure branch connectivity, optimizes existing internet infrastructure, and prioritizes business critical applications to maximize employee productivity. As the network expands, Micro Edge seamlessly scales to ensure the network edge remains connected and protected. Seamless Connectivity to Branch-offices and Business Continuity Micro Edge appliances have multiple WAN ports that balance network traf fic in real-time over multiple Internet paths. Link monitoring and automatic failover eliminate network downtime. Zero Touch Deployment and centrally managed con figuration pro files enable branch of fices to be connected and protected in minutes. Edge Optimization Micro Edge’s optimal predictive routing technology identifies application traf fic at the first packet. This advanced technology prioritizes business critical traf fic to ensure the network runs smoothly. Boost Internet connectivity with traf fic shaping and QoS, and leverage real-time performance monitoring with WAN balancing to make the most of the available bandwidth. Secure Network Edge Micro Edge has a stateful firewall, Threat Prevention and Web Filter which block traffic that can cause harm to your network ensuring the network, data and users are protected from the ever increasing volume of cyberthreats. Encrypted traf fic is a hotspot for hackers to hide malware or other malicious code. However, Threat Prevention and Web Filter can make assessments even if the traf fic is encrypted and block harmful files or transmissions before they get onto the network. Web Filter blocks access to dangerous, inappropriate or distracting website content to protect the network and increase employee productivity. Threat Prevention ensures any web address accessed is not associated with any malware, hacking or malicious attacks. Micro Edge Features Application-based Optimization Optimal predictive path selection technology incorporates a sophisticated cloud component to identify applications at the first packet. This advanced technology enables Micro Edge to choose the best path for speci fic applications or categories of network traffic. Edge Optimization Traffic shaping and Quality of Service prioritizes business critical traffic across WAN links. Real-time Link Performance Monitoring Jitter, packet loss, latency and throughput of each link are continually measured to ensure applications can be sent over the best performing links for their needs. Dynamic Path Selection Decisions on which links to use are made in real-time based on actual current link performance of packet loss, latency and jitter conditions, as well as available bandwidth. Multiple Internet Pathways Multiple WANs as well as LTE connectivity can be used as primary or failover links. Application based path selection can optimize performance over LTE and hard- wired links. Figure 3: Micro Edge Dashboard Edge Threat Management | Micro Edge

Micro Edge | Appliances Headquarters

5453 Great America Parkway

Santa Clara, California 95054 Phone: +1-866-233-2296 Email: edge.sales@arista.com Copyright 2023 Arista Networks, Inc. The information contained herein is subject to change without notice. Arista, the Arista logo and EOS are trademarks of Arista Networks, Inc. All other company names are trademarks of their respective holders. Information in this document is subject to change without notice. Other product or service names may be trademarks or service marks of others. March 20, 2023 Warranty Appliances come with a one-year limited hardware warranty, which covers parts, repair, or replacement. A 3-year hardware warranty is also available for purchase. edge.arista.com Model Number CCA-ETM-Q6E CCA-ETM-Q6EWL Recommended devices Up to 300 Up to 300 Processor Quad Core Intel Atom C3558 Quad Core Intel Atom C3558 RAM 2 GB DDR4 2 GB DDR4 Storage 8 GB mSATA SSD 8 GB mSATA SSD Interfaces 2x GbE SFP Combo / 4x GbE 2x GbE SFP Combo / 4x GbE USB Ports 2 2 Video Mini USB and RJ45 (serial) Mini USB and RJ45 (serial) Wireless - 802.11 ac/a/b/g/n LTE - 4G LTE Cat-6 AT&T, T-Mobile, or Verizon External Antennas - 2 Wi-Fi / 2 LTE Form Factor Fanless Desktop, Rack Mount Option Fanless Desktop, Rack Mount Option Max Throughput 950 Mbps 950 Mbps Unit Weight 3.1 lbs (1.4 kg) 3.3 lbs (1.5 kg) Shipping Weight 5.5 lbs (2.5 kg) 5.7 lbs (2.6 kg) Operating Temperature 32° – 104°F (0° – 40°C) 32° – 104°F (0° – 40°C) Power Source 40W Power Adapter 40W Power Adapter Certifications CE/FCC/UL CE/FCC/UL