The CERIO VPN Gateway is highly suitable for deployment in environments that require high reliability, efficiency, security, and throughput, such as corporate offices, government agencies, and public venues. It features IP gateway routing functionality, authentication gateway, high availability (HA) redundancy, VPN functionality, multiple WAN ports, QoS bandwidth management, an integrated functional Radius server for authentication and firewall capabilities. Hotspot technology allows Internet providers to offer Internet access to customers, while applying certain Internet use rules and limitation. Whether for offices, hotels, airports, schools, or other commercial establishments, it allows real-time monitoring of each user’s online activity, including usage time, data sent/received, real-time accounting and more enabling administrators to conduct audits efficiently.

Strong hardware VPN engine
CERIO’s DR-4000 Multifunction VPN Gateway is an easy-to-use, flexible, high-performance device well suited for small businesses. It provides comprehensive data security and privacy for accessing and exchanging sensitive and confidential information, supporting multiple VPN protocols including IPSec, PPTP, L2TP over IPSec, and VPN P2P. With website filtering functionality, it offers safer, more flexible, and more robust network connectivity for small to medium-sized offices, branch offices, and remote employees. It is particularly well-suited for deployment in small to medium-sized enterprise network environments.

Multi-WAN Supported
It supports up to 3 WAN ports, providing automatic traffic balancing, bandwidth optimization, automatic failover mechanisms, and increased bandwidth capacity. Through multiple WAN ports, it offers real-time load balancing and optimal routing algorithms. For companies hosting their own web servers, one WAN port can handle external HTTP port 80, while the internal network uses a second WAN port. This setup provides a simple and secure network segregation. With real-time load balancing and Optimum Route algorithm, DR-4000 intelligent router engine directs each session or connection to the best available link. It also supports policy-based routing, persistent routing, and traffic scheduling to effectively adapt your business policy into your network policy.

Bandwidth Allocation and Management Mechanism
As broadband usage proliferates coupled with the alarming rise of file sharing trend, in certain cases, it is important to assign quota for user bandwidth consumption, particularly in the education institutions, hot spots, or in a community with shared Internet access provider subsystem. DR-4000 supports two different quota mechanisms: prepaid and periodical, in order to meet different real-life business needs. The quota system can also be integrated with external accounting and billing systems. By traffic setting size and filtering mechanism, DR-4000 optimizes bandwidth utilization and ensures the best transmission quality for the transfer of mission-critical data. The bandwidth management mechanism includes limiting allocation based on IP sessions, as well as providing individual and specific IP range-based controls. It encompasses appropriate upstream and downstream bandwidth control for SIP/RSTP/RTP/Web modes, ensuring smooth network performance overall.

Excellent Protective Capability
The DR-4000 has a built-in SPI (Stateful Packet Inspection) firewall and supports specific Layer-7 protocols such as VoIP protocols (H.323 and SIP), video conferencing, and various IM protocols. In terms of content filtering, it supports IP/MAC filtering and can filter or scan through Layer-7 application layers. It has a built-in policy-based DoS/DDoS firewall protection, offering efficient and comprehensive protection against hacker attacks, thus enhancing network security.

Multiple Authentication Methods
It offers multiple authentication methods to meet the needs of various enterprises. The web authentication feature supports remote RADIUS servers, local users (supports creation of 10 local users), third-party OAuth 2.0 (ex. Google, Facebook login), POP3 servers, LDAP (AD) account authentication, remote MAC batch authentication, and guest access. It also supports web authentication Captive Portal, providing diverse authentication methods to meet the requirements of numerous users.

Account and Password Voucher Control Output Functionality.
By purchasing the SP-800-PRINTER (optional) account voucher printer POS system (network control server + thermal printer) and use it with built in Radio Server function, you can quickly select and print account and password vouchers for authenticated personnel using a controller. This feature is a great benefit for both the image and network security of the company, especially for one-time visitors.

Time Scheduling
The built-in time policy supports daily scheduling with up to 300 detailed time slot rules. These rules can be applied to advanced features, including timed activation of IP/MAC filtering and virtual server access control based on open ports, enabling time-based restrictions for allowing or disallowing access. For example, if the mail server’s port 25 is targeted by bots resulting in prolonged IP lockouts and continuous malicious attempts to log in. Therefore, use this function to make necessary port arrangements and allow multiple changes in the access interval to reduce daily malicious attacks and the possibility of IP paralysis.

Ping Watchdog
Supports Ping Watchdog for automatic monitoring and can be configured for repeated reboots to ensure operation. Administrators don’t need to worry about network crashes, and it also supports Auto Reboot by scheduling. Administrators can set to automatically reboot daily, weekly, or monthly as per their requirements.

Wake-on-LAN
Supports Wake-on-LAN function to wake up specified network members based on their MAC addresses. Administrators can schedule automatic wake-up for these devices daily, weekly, or monthly according to their needs.

Wired and Wireless Seamless Compatibility
It supports deploying wireless access points and is compatible with any wireless access point. By utilizing the DR-4000, both wired switch users and wireless AP users can seamlessly establish a secure authentication login environment.

Supports DC In and PoE In
In addition to providing DC In power input, it also supports PoE input allowing the device to receive both network data and power signals through a UTP cable. This meets the needs of long-distance cabling, eliminating the need for traditional power outlets and simplifying the construction of your network environment.

Hardware Overview

Software Specifications