In rows where columns are merged, the left value applies to the right. For example, both SX-150 and SX-250 are rack-mountable. Products declared end-of-sale are not included in the table.
Specifications
| SX-60 | SX-150 | SX-250 | |
|---|---|---|---|
 |  |  | |
| Ethernet | 4 × 100 Mbps | 4 × 1 Gbps | 10 × 1 Gbps |
| Plaintext | 4 × 91 Mbps4 | 4 × 936 Mbps4 | 10 × 937 Mbps4 |
| Form factor | Stand-alone | 1U rack-mountable | |
| Buy | Buy | Buy | |
| Try | Try | Try | |
Networking | |||
| WLAN |  1 | × | × |
| VLAN | 52 | 502 | 3002 |
| GSM/3G | 3 | 3 | 3 |
| Route throughput | 4 × 90 Mbps4 | 4 × 936 Mbps4 | 10 × 937 Mbps4 |
| NAT throughput | 90 Mbps4 | 841 Mbps4 | 936 Mbps4 |
| IPv6 | Fully implemented IPv6 support with router advertisement | ||
| Transparent bridges | Combined transparent/NAT/route modes with STP | ||
| NAT | Flexible dynamic or one-one NAT of hosts or networks with path and source port options | ||
| BGP | Dynamic BGP routing | ||
| Hardware failover | Layer 2/3 shared-address hardware failover with state synchronization | ||
| Internet failover | ICMP-probing gateway failover and uplink redundancy | ||
| Policy routing | Gateway, source or duplication address on packets matching firewall policies | ||
| QoS | Quality of service queues with RED, ECN and soft (borrow) options | ||
| Link aggregation | Failover or LACP-based link aggregation | ||
| Adressing | Unlimited number of addresses per interface, or DHCP client | ||
Security | |||
| Policy authentication | Web-based policy authentication for user-based policies | ||
| Rate limits | Per-service/user rate limits for DoS protection | ||
| Re-assembling | Fragment-spoof protection using adaptive re-assmebling | ||
| Egress/ingress | Sanity and spoof protection per interface | ||
| Randomization | Hardware randomization of IP, TCP and UDP fields | ||
| SYN-protection | Protection using multi-layer TCP-proxying, SYN cache and SYN cookies technology | ||
| Multi-interface policies | Strict policies with paths over input and output interfaces | ||
| Interface groups | Flexible policies with multiple input and output interfaces | ||
| Visual filters | Grouping of policies, address, queues, etc. in visual filters | ||
Services | |||
| UTM for Mail5 | Outbreak spam and virus protection operating inline on SMTP or POP3 | ||
| DHCP | DHCP server and relay with reserved hosts | ||
| DNS | Forwarding DNS cache and proxy with ability to add simple (A) records | ||
| PPTP | PPTP server and proxy, with NAT traversal and protocol parsing | ||
| DynDNS | Lightweight yet fully compliant DynDNS client for dynamic DNS hostnames | ||
| FTP | FTP server and proxy, with NAT traversal and protocol parsing | ||
| HTTP | Fine-grained web access control of configured policies or text rulesets | ||
Administration | |||
| Web administration | Easy-to-use yet flexible administration over HTTP or HTTPS | ||
| Command-line | Fully implemented, auto-completing interface over SSH or RS-232 | ||
| Clustering | Configuration clustering using FTP and SED patterns | ||
| Scheduled commands | Any command can be executed at a given time, interval or startup | ||
| LCD interface | × | × | (pin code) |
| Firmware | Update and recovery firmware for factory reset, recover mode, etc. | ||
| SNMP server | Statistics and monitoring using SNMP version 1/2c | ||
| NTP client | Automatic time synchronization using NTP | ||
| Syslog client | Remote logging using Syslog (UDP) | ||
| Mail reporting | Scheduled mail reports with custom thresholds | ||
| Fallback | Configuration fallback when confirmation (connection check) times out | ||
| FTP access | Uploading and downloading of configuration, pattern lists, etc. | ||
Load balancing5 | |||
| Layer 3 | Session-aware TCP or ICMP probing load balancing | ||
| Layer 5 | Connecting-relaying TCP load balancing with inline probing trying until success | ||
| Distribution mode | Round-robin, fill, slots or capacity-weighted distribution modes | ||
| Node configuration | Address, ports and max client options | ||
| Server health feedback | Open feedback protocol for asymmetric load based on real-time server health monitoring | ||
VPN | |||
| PPTP servers | 102 | 502 | 5002 |
| PPTP users | 102 | 502 | 5002 |
| IPSec tunnels | 12 | 502 | 1502 |
| IPSec throughput | 40 Mbps AES4 | 129 Mbps AES4 | 370 Mbps AES4 |
| IPSec keying | Manual and IKE/ISAKMP automatic key negotiation | ||
| IPSec modes | Mobile client, transport and tunnel modes | ||
| IPSec ciphers | AES (128/256), (3)DES, CAST (128), Blowfish, MD5 and SHA1 | ||
| IPSec options | Diffie-Hellman group 1, 2 and 5, PFS, main/aggressive modes and lifetimes | ||
| Radius | Authentication and accounting against Radius | ||
Hardware | |||
| CPU | 500 Mhz | 1.5 Ghz | 2 × 3 Ghz |
| RAM | 128 MB | 256 MB | 2 GB |
| Ethernet | 4 × 100 Mbps | 4 × 1 Gbps | 10 × 1 Gbps |
| Weight | 1.2 Kg | 7 Kg | 8.2 Kg |
| Dimensions | 21 × 15.1 × 4.4 cm | 43 × 24.8 × 4.4 cm | 43 × 39.2 × 4.4 cm |
| FCC (A), CE and RoHS | | | |
| Power | 30 W | 41 W | 75 W |
| Voltage | 120-250 V at 50-60 Hz | ||
| Storage disk | None (supports external USB disk) | ||
| Operating temp. | 0 to 45°C | ||
| Storage temp. | -20 to 75°C | ||
| Humidity | 5 to 95% (NC, 40°C) | ||
1 SX-60w only
2 The license is upgradeable
3 Requires software version 1.4.0.0 or later and Huawei E220 or Option HSPDA
4 Tested with iperf on standard notebooks (from 2006) over 2 m CAT-5 cables
5 The UTM and load balancing functionality requires additional licenses
