Imperva SecureSphere - Hardware Appliances

Overview:

SecureSphere appliances deliver unmatched performance, scalability, and flexibility to meet the needs of the most demanding network environments. With fail open interfaces, SecureSphere appliances offer fast and cost-effective fail over. Out-of-band management enhances security, while front panel status messages and network interfaces improve manageability.

Built around high performance architecture, SecureSphere appliances allow organizations to manage heavy traffic loads without impacting application or network performance. To maximize uptime, SecureSphere X2500, X4500, and X6500 models include redundant, hot-swappable components. SecureSphere appliances deliver a powerful and reliable platform for deploying Imperva's award-winning Web, database, and file security solutions.

Key Capabilities:

• Support high traffic loads with up to multi-gigabit throughput without impacting application and network performance.
• Maximize uptime and ensure reliability with hot-swappable components, redundant power supplies, hard drives and fans.
• Full extensibility with Lights-Out-Management, Hardware Security Module, SSL acceleration, and Fibre channel interface options.

SecureSphere Hardware Appliances:

Specifications	X6500	X4500	X2500	X2000	X1000
Throughput (Web and Database Security products)	2 Gbps	1 Gbps	500 Mbps	500 Mbps	100 Mbps
Throughput (File Security products)	Throughput (File Security products) Not Available	4 Gbps	2 Gbps	Not Available	Not Available
Fault Tolerant (Form Factor	Yes (2U)	Yes (2U)	Yes (2U)	No (1U)	No (1U)

SecureSphere Management Appliances:

The M-series management appliances offer increased storage capacity, faster disk speeds, and expansion options to provide Lights-Out-Management (LOM) and Fibre channel interfaces.

Specifications	M150	M100
FTL/ Form Factor	Yes (2U)	No (1U)

SecureSphere Stack

SecureSphere Stack (powered by Net Optics) provides a scalable, and high performance data security solution for bandwidth intensive applications. By leveraging Net Optics Director Pro's dynamic load balancing and intelligent protocol filtering technology, 10G inbound traffic is optimally distributed to a stack of up to five SecureSphere X6500 gateways for maximum security efficiency and performance. Net Optics Director Pro forwards only relevant protocols to SecureSphere gateways ensuring SecureSphere is only inspecting relevant traffic while bypassing all other traffic flows. SecureSphere Stack ensures organizations can easily scale SecureSphere Web, Database, and File Security deployments for network intensive applications and cloud deployments.

Features:

Scalable. Reliable. Flexible.

Imperva SecureSphere® appliances provide superior performance and resiliency for demanding network environments. With fail open interfaces, SecureSphere platforms offer fast and cost-effective fail over. Out-of-band management enhances security, while front panel status messages and network interfaces improve manageability. SecureSphere appliances deliver a scalable, reliable and flexible platform to power Imperva's Web and database security solutions.

High Performance Architecture

SecureSphere appliances offer ultra-high performance, allowing organizations to consolidate device management and address future bandwidth requirements. Supporting multi-gigabit throughput, tens of thousands of transactions per second, and sub-millisecond latency, SecureSphere appliances can manage heavy traffic loads without impacting application or network performance.

Fault Tolerant System Design

To maximize system uptime, the SecureSphere X2500, X4500, and X6500 models offer redundant, hot-swappable components including redundant power supplies, hard drives, and fans. In the event of a hardware failure, the redundant component will automatically take over, providing continuous system operations.

Expansion Options for Unique Business Needs

SecureSphere appliances can be extended to provide remote, out-of-band management and monitoring, performance acceleration, and more with expansion modules. Options include:

• Lights-Out-Management (LOM)
• Hardware Security Module (HSM)
• SSL acceleration
• Fibre channel interfaces

Deployment:

SecureSphere high performance hardware and virtual appliances enable drop-in deployment with no changes to applications or networks. With centralized management, role-based security, and advanced analytics and reporting, SecureSphere offers an integrated solution that is easy to deploy and manage.

• Non-inline Network Monitoring: Activity monitoring with zero impact on performance or availability
• Transparent Inline Protection: Drop-in deployment and industry-leading performance for proactive security
• Agent-based Monitoring: Lightweight software agents monitor privileged database activities and network traffic

Specifications:

Hardware Appliance Specifications:
		X6500	X4500	X2500	X2000	X1000
Fault Tolerance		Dual, hot-swap hard drives, power supplies, and fans	Dual, hot-swap hard drives, power supplies, and fans	Dual, hot-swap hard drives, power supplies, and fans	N/A	N/A
Throughput (Web and Database security products)		2 Gbps	1 Gbps	500 Mbps	500 Mbps	100 Mbps
Throughput (Web and Database security products)		Not available	Up to 4 Gbps	Up to 2 Gbps	Not available	Not available
Latency		Sub-millisecond	Sub-millisecond	Sub-millisecond	Sub-millisecond	Sub-millisecond
Interface Module Slot 1	Default	4 x Copper	4 x Copper	4 x Copper	4 x Copper	4 x Copper
	Optional	2 x 1G Fiber SX OR 2 x 10G Fiber SR/LR	2 x 1G Fiber SX OR 2 x 10G Fiber SR/LR	2 x 1G Fiber SX OR 2 x 10G Fiber SR/LR	Not available	Not available
Interface Module Slot 2	Default	4 x Copper	None	None	None	None
	Optional	2 x 1G Fiber SX OR 2 x 10G Fiber SR/LR	2 x 1G Fiber SX OR 2 x 10G Fiber SR/LR	2 x 1G Fiber SX OR 2 x 10G Fiber SR/LR	Not available	Not available
Max Network Segments		(4) Bridge; (9) Proxy, Non-inline	(4) Bridge; (9) Proxy, Non-inline	(4) Bridge; (9) Proxy, Non-inline	(2) Bridge; (5) Proxy, Non-inline	(2) Bridge; (5) Proxy, Non-inline
Inline Fail Open (Bridging only)		Up to 4 bypass segments	Up to 4 bypass segments	Up to 4 bypass segments	2 bypass segments	2 bypass segments
Hard Drive		2 hot-swap 1 TB	2 hot-swap 1 TB	2 hot-swap 500 GB	500 GB	500 GB
Memory		8 GB	8 GB	4 GB	4 GB	2 GB
Serial Port		RJ45 connector	RJ45 connector	RJ45 connector	RJ45 connector	RJ45 connector
USB Port		2	2	2	2	2
SSL Acceleration		Included	Optional	Optional	Optional	Optional
Fibre Channel, LOM or HSM		Optional	Optional	Optional	N/A	N/A
Power Supply		Dual 400 W	Dual 400 W	Dual 400 W	250 W	250 W
AC Power		100-240V, 50-60 Hz	100-240V, 50-60 Hz	100-240V, 50-60 Hz	100-240V, 50-60 Hz	100-240V, 50-60 Hz
Typical Consumption		290 W	210 W	190 W	110W	80 W
Typical Heat Output		990 BTU/Hr	720 BTU/Hr	650 BTU/Hr	375 BTU/Hr	275 BTU/Hr
Form Factor		2U	2U	2U	1U	1U
Dimensions		17.4 x 20.1 x 3.46 in 443 x 512 x 88 mm	17.4 x 20.1 x 3.46 in 443 x 512 x 88 mm	17.4 x 20.1 x 3.46 in 443 x 512 x 88 mm	17 x 14 x 1.73 in 431.8 x 355.2 x 44 mm	17 x 14 x 1.73 in 431.8 x 355.2 x 44 mm
Weight		53.3 lbs (24.2 Kg)	51.10 lbs (23.2 Kg)	50.44 lbs (22.9 Kg)	14.1 lbs (6.4 Kg)	14.1 lbs (6.4 Kg)
Operating Environment		Temperature: 5° - 40° C Relative Humidity: 20% - 90%
Storage Environment		Temperature: 0° - 70° C Relative Humidity: 20% - 90%
Safety Agency Approval		CE/FCC/cTUVus/VCCI
Supported SecureSphere Products		- Web Application   Firewall - Database Activity   Monitoring - Database Firewall	- Web Application   Firewall - Database Activity   Monitoring - Database Firewall - File Activity   Monitoring	- Web Application   Firewall - Database Activity   Monitoring - Database Firewall - File Activity   Monitoring - File Firewall - Discovery and   Assessment   Server	- Web Application Firewall - Discovery and Assessment Server
Database Agents Included1		100	50	25	N/A	N/A
File Agents Included		Not available	200	100	N/A	N/A
Database Vulnerability Assessments Included2		400	200	100	100	25
Number of users included with File Security products3		Not available	1,000	250 or 500	N/A	N/A

1 Database agents only included with SecureSphere Database Activity Monitoring and Database Firewall.
2 Database assessments only included with Discovery and Assessment Server, Database Activity Monitoring, and Database Firewall.
3 File Security products: File Activity Monitoring and File Firewall.

Management Appliance Specifications:
	M150	M100
Fault Tolerance	Dual, hot-swap hard drives, power supplies, and fans	N/A
Interfaces	2 x 1GbE Copper	2 x 1GbE Copper
Memory	4 GB	4 GB
Hard Drive	2 hot-swap 300 GB	300 GB
Serial Port	RJ45 connector	RJ45 connector
USB Port	2	2
LOM or Fibre Channel	Optional	N/A
Power Supply	Dual 400 W	250 W
AC Power	100-240V, 50-60 Hz	100-240V, 50-60 Hz
Typical Consumption	190 W	110 W
Typical Heat Output	650 BTU/Hr	375 BTU/Hr
Form Factor	2U	1U
Dimensions	17.4 x 20.1 x 3.46 in (443 x 512 x 88 mm)	17 x 14 x 1.73 in (431.8 x 355.2 x 44 mm)
Weight	22.7 Kg (50 lbs)	6.4 Kg (14.1 lbs)
Operating Environment	Temperature: 5° - 40° C, Relative Humidity: 20% - 90%
Storage Environment	Temperature: 0° - 70° C, Relative Humidity: 20% - 90%
Safety Agency Approval	CE/FCC/cTUVus/VCCI

 

SecureSphere Stack Appliance Specifications:
	Net Optics Director Pro	Net Optics 10 Gigabit iBypass Switch
Throughput	Up to 10Gbps aggregated throughput (Web, Database, File)	Up to 10Gbps aggregated throughput (Web, Database, File)
Interfaces	10 x SFP-based 1Gbps network ports 2 x XFP-based 10Gbps network ports 12 x 1Gbps network ports network ports	2 x Duplex LC monitoring ports 2 x Duplex LC network ports
Max Network Segments	11 bridges	1 bridge
Inline Fail Open (Bridging only)	Up to 11 bypass segments	1 bypass segment
Fault Tolerance	Hot-swappable Power Supplies	N/A
AC Power	100-240VAC, 47-63Hz	100-240VAC, 47-63Hz
Form Factor	Surface or 19" rack mount (1U)	N/A
Dimensions	19 x 23.4 x 1.72 inches 483 x 594 x 44 mm	6.5 x 14 x 1.125 inches 165.1 x 355.6 x 28.6 mm
Weight	18 lbs (8.2 Kg)	N/A
Operating Environment	Temperature: 0° - 40° C Relative Humidity: 10% - 95%	Temperature: 5° - 40° C Relative Humidity: 10% - 95%
Storage Environment	Temperature: -10° - 70° C Relative Humidity: 10% - 95%	Temperature: -10° - 70° C Relative Humidity: 10% - 95%
Safety Agency Approval	CE/FCC/VCCI/C-Tick/Fully RoHS and WEEE compliant	Fully RoHS compliant

 

Documentation:

Download the SecureSphere Appliance Datasheet (PDF).

Download the Net Optics Diretor Pro Datasheet (PDF).