DefensePro Tech Specs
DefensePro 6 DefensePro 20 DefensePro 60 DefensePro 110/220 DefensePro 200/400 DefensePro 400/800
PROGRAMMABLE MITIGATION PERFORMANCE
On-Demand Scalable Clean DefensePro 6-02 - 200 Mbps DefensePro 20-2 - 2 Gbps DefensePro 60-10 - 10 Gbps DefensePro 110-40 - 40 Gbps DefensePro 200-80 - 80 Gbps DefensePro 400-200 - 200Gbps
Throughput Licenses DefensePro 6-05 - 500 Mbps DefensePro 20-4 - 4 Gbps DefensePro 60-20 - 20 Gbps DefensePro 220-120 - 120 Gbps DefensePro 400-160 - 160 Gbps DefensePro 800-380 - 380Gbps
DefensePro 6-1 - 1 Gbps DefensePro 20-8 - 8 Gbps DefensePro 60-40 - 40 Gbps
DefensePro 6-2 - 2 Gbps DefensePro 20-12 - 12 Gbps
DefensePro 6-3 - 3 Gbps
DefensePro 6-5 - 5 Gbps
Max Programmable Mitigation
6 Gbps 20 Gbps 60 Gbps 110 Gbps/220 Gbps 200 Gbps/400 Gbps 400 Gbps/800 Gbps
Throughput
Max Attack Concurrent Sessions Unlimited
DDoS Flood Attack Prevention Rate 7,2 Mpps 27,5 Mpps 27,5 Mpps 50 Mpps/142 Mpps 292 Mpps 1,119 Mpps
SSL/TLS Connections per Second 20KCPS (RSA 2K) 95KCPS (RSA 2K) 95KCPS (RSA 2K) 150KCPS (RSA 2K) - -
Latency < 60 microseconds
Real-Time Signatures Detect attacks and protect in less than 18 seconds
BLOCKING PERFORMANCE
Maximal DDoS Blocking Throughput - 240 Gbps 240 Gbps 800 Gbps 760 Gbps 3.4 Tbps
Maximal DDoS Blocking (PPS) - 0.357 Billion 0.357 Billion 1.19 Billion 0.827 Billion 2.7 Billion
INSPECTION PORTS
10/100/1000 Copper Ethernet 6 - - - - -
1 GE / 10 GE 2 (SFP+) 24 (SFP+) 24 (SFP+) - 20 (SFP+) -
10 GE / 25 GE - - - 24 (SFP+/SFP28) - -
40 GE - - - max. 8/min. 4 (QSFP+) 4 (QSFP+) -
100 GE - - - max. 4/min. 0 (QSFP28) 4 (QSFP28) 18 (QSFP28)
400 GE1 - - - - - 4 (QSFP-DD)
MANAGEMENT PORTS
10/100/1000 Copper Ethernet 2
Management Console RJ-45
OPERATION MODE
Network Operation Transparent L2 Forwarding, IP Forwarding
Deployment Modes Inline, SPAN port monitoring, Copy port monitoring, Out-of-path mitigation (scrubbing center solution)
Tunneling Protocols VLAN Tagging, L2TP, MPLS, GRE, GTP, IPinIP
IPv6 Yes
Jumbo Frame - Supported
Block Actions Drop packet, reset (source, destination, both), suspend (source IP address, source port, destination IP address, destination port or any combination), challenge-response for TCP, HTTP and
DNS suspicious traffic
1
Requires 400G connectivity, available at additional cost.
DefensePro 6 DefensePro 20 DefensePro 60 DefensePro 110/220 DefensePro 200/400 DefensePro 400/800
HIGH AVAILABILITY
Fail-open/fail-close2 Internal fail-open/fail-close for Internal fail-close for optical transceivers (i.e., SFP+) Internal fail-close for optical transceivers (e.g. SFP+, SFP28, QSFP+, Internal fail-close for optical
integrated copper ports; Internal SFP28) transceivers (e.g. SFP+, SFP28,
fail-close for fiber ports or optical QSFP+, SFP28
transceivers (i.e., SFP+)
Dual Power Supply Yes, hot swappable
PHYSICAL
Dimensions (W x D x H) mm 436 x 406 x 44 mm (1U) 436 x 480 x 88 mm (2U) 436 x 480 x 88 mm (2U) 482 x 550 x 87 mm (2U) 424 x 600 x 88 mm (2U) 436 x 570x 88 mm (2U)
EIA rack or standalone: 482 mm EIA rack or standalone: EIA rack or standalone: EIA rack or standalone: EIA rack or standalone: 482 mm EIA rack or standalone: 482 mm
(19 in) 482 mm (19 in) 482 mm (19 in) 482 mm (19 in) (19 in) (19 in)
Weight Single power supply: Dual power supply: Dual power supply: Dual power supply: Dual power supply: Dual power supply:
6 kg (13.2 lbs) 13.2 kg (29 lbs) 13.2 kg (29 lbs) 14.5 Kg (31.9 lbs) 18.7 kg (41.2 lbs) 27.5 kg (60.6 lbs)
Dual power supply:
6.5 kg (14 lbs)
Power Supply (Auto-range) 80 plus certified 80 plus certified 80 plus certified 80 plus certified 80 plus certified 80 plus certified
AC:100–120V/200–240V, 47–63 Hz AC:100–120V/200–240V, 47–63 Hz AC:100–120V/200–240V, 47–63 Hz AC:100-120V/200-240V, 47-63 Hz AC:100–120V/200–240V, 47–63 Hz AC:100–120V/200–240V, 47–63 Hz
DC: -36 to -72V DC: -36 to -72V DC: -36 to -72V DC: -36 to -72V DC: -36 to -72V DC: -41 to -72V
Power Consumption Single and dual power supply: 140W Dual power supply: 320W Dual power supply: 550W Dual power supply: 890W Dual power supply: 970W
Single and dual power supply: 480
Heat Dissipation BTU/h
Dual power supply: 1,088 BTU/h Dual power supply: 1880 BTU/h Dual power supply: 2,930 BTU/h Dual power supply: 3,300 BTU/h
Operating Temperature 0°–40°C (32°–104°F)
Humidity 5% to 95% non-condensing
COMPLIANCE & CERTIFICATIONS
Compliance
RoHS Compliant (EU directive 2011/65/EU, 2015/863/EU)
Safety/EMC/EMI & Certifications UL/TUV, FCC (USA), IC (Canada), CE (Europe), UKCA (UK), RCM (Australia/ NZ) , VCCI (Japan), KCC (Korea), EAC (Russia), CCC (China), BSMI (Taiwan), Anatel (Brazil), NOM (Mexico)
For more information visit: https://www.radware.com/newsroom/certifications-hardware/
Warranty 1-year hardware and software maintenance
Support Certainty Support Program
2
External fiber fail-open switch is available at additional cost.
DefensePro VA for Private Clouds DefensePro VA for Public Clouds
Hypervisor KVM kernel 3.19, QEMU 2.0, VMware (ESX server versions: 6.0, 6.5, 6.7), Native Public Cloud support AWS, Azure
OpenStack 16.1
Minimum VM requirements 2 vCPUs, 16GB RAM, 10GB storage
Minimum VM requirements 2 vCPUs, 16GB RAM, 10GB storage
PERFORMANCE
PERFORMANCE1
Max Mitigation Capacity/ Up to 25 Gbps per DefensePro VA instance
OnDemand Scalable Throughput DefensePro VA 200 Mbps, 500 Mbps, 1 Gbps, 2 Gbps, 5 Gbps, 10 Gbps, 20 Throughput
Licenses Gbps2, 40 Gbps
Max Legit Concurrent Sessions 1,000,000 sessions per vCPU
Max Mitigation Capacity/ Up to 50 Gbps per DefensePro VA instance
Max Attack Concurrent Sessions Unlimited
Throughput
Max DDoS Flood Attack Prevention Up to 500,000 pps per vCPU
Max Legit Concurrent Sessions 1,000,000 sessions per vCPU
Rate
Max Attack Concurrent Sessions Unlimited
INSPECTION PORTS
Max DDoS Flood Attack Up to 950,000 pps per vCPU
Ethernet 1 or 2 inspection ports for typical deployments. Additional inspection ports
Prevention Rate up to a limit supported by the instance type.
Latency < 60 microseconds MANAGEMENT PORTS
Real-Time Signatures Detect attacks and protect in less than 18 seconds Ethernet 1 port
INSPECTION PORTS OPERATION MODE
10 GE, 25 GE, 40 GE 2 (Intel® Ethernet Server Adapter X520, 10 GE; Intel® Ethernet Controller Network Operation AWS: Symmetric inspection, IP Forwarding Mode
XL710, 40 GE), PCI Passthrough Azure: Asymmetric inspection, Destination NAT Forwarding Mode
4 (Intel® Ethernet Network Adapter XXV710, 10 GE, 25 GE), SRIOV Deployment Mode AWS: In-VPC or Security VPC
Azure: In-VPC
2 (Intel® Ethernet Network Controller E810 10GE, 25GE, 50GE, 100GE), SRIOV
MANAGEMENT PORTS HIGH AVAILABILITY
Active:Active AWS and Azure: integration with AWS Gateway Load Balancer and Azure
Ethernet Via virtual interface (virtio)
Load Balancer
Management Console KVM Virsh; VMware Serial Port Fail-open/fail-close AWS: with Radware-provided Lambda function
OPERATION MODE Support Certainty Support Program
Network Operation Transparent L2 Forwarding/IP Forwarding
Deployment Modes In-line
Tunneling Protocols VLAN Tagging, L2TP, MPLS, GRE, GTP, IPinIP
IPv6 Yes
Jumbo Frame Up to 2KB
Block Actions Drop packet, reset (source, destination, both), suspend (source IP address,
source port, destination IP address,
destination port or any combination), challenge-response for TCP, HTTP
and DNS suspicious traffic
SUPPORT
Support Certainty Support Program
1
Performance figures assume Intel® server-grade processor with 3 GHz
2
20 Gbps, 40 Gbps Throughput License supported on KVM
This document is provided for information purposes only. This document is not warranted to be error-free, nor subject to any other warranties or conditions, whether expressed orally or implied in law. Radware specifically disclaims any liability
with respect to this document and no contractual obligations are formed either directly or indirectly by this document. The technologies, functionalities, services, or processes described herein are subject to change without notice.
© 2022 Radware Ltd. All rights reserved. The Radware products and solutions mentioned in this document are protected by trademarks, patents and pending patent applications of Radware in the U.S. and other countries. For more details,
please see: https://www.radware.com/LegalNotice/. All other trademarks and names are property of their respective owners.
