In addition to the above functions, the DR-4000-CA is also a Multi WAN Gigabit VPN router gateway. The features including network security, SPI（Stateful Packet Inspection）firewall protection, policy auditing (such as content filtering, VPN tunnel and MAC/IP filtering), captive portal login authentication and RADIUS authentication capabilities. Moreover, it supports multiple WAN ports, allowing users to perform load balancing or failover for enhanced network efficiency. It is designed specifically for organizations with multifunctional, high-efficiency, and comprehensive networking needs. Whether the company’s network architecture involves on-premises servers or outsourced cloud-based servers, the CERIO DR-400-CA is an ideal VPN security gateway device solution for small to medium-sized enterprises seeking robust networking capabilities.

The CERIO Multi WAN Gigabit AP Management Controller Gateway is highly suitable for deployment in environments that require high reliability, efficiency, security, and throughput, such as corporate offices, government agencies, and public venues. It features IP gateway routing functionality, authentication gateway, high availability (HA) redundancy, VPN functionality, multiple WAN ports, QoS bandwidth management, an integrated functional Radius server for authentication and firewall capabilities. Hotspot technology allows Internet providers to offer Internet access to customers, while applying certain Internet use rules and limitation. Whether for offices, hotels, airports, schools, or other commercial establishments, it allows real-time monitoring of each user’s online activity, including usage time, data sent/received, real-time accounting and more enabling administrators to conduct audits efficiently.

AP Management Controller Features

Multi WAN: Supports multiple WAN connections and provides load balancing and failover functions to ensure high availability and stability of the network.

High-Efficiency Transmission Rate: Provides Gigabit 10/100/1000Mbps Ethernet connections, ensuring high-speed data transmission and network performance.

AP Management: Centralizes management and control of APs, supporting management of up to 128 APs, simplifying network administration.

Real-time Monitoring: Capable of real-time monitoring of AP status and performance, offering remote configuration and firmware update capabilities.

Load Balancing: Automatically distributes traffic across different WAN connections, optimizing network resource usage and preventing single-port overload.

Security Features: Offers various security functions including firewall, VPN, intrusion detection, and protection. Supports multiple encryption protocols to ensure the security of data transmission.

QoS Management: Supports QoS settings to prioritize critical applications and services, ensuring the quality of traffic.

Monitoring Reports: Provides detailed traffic monitoring and reporting features, helping administrators understand network usage and optimize network performance.

Easy Configuration and Management: Supports web browsers and dedicated management software, simplifying device configuration and daily management.

Strong hardware VPN engine
CERIO’s DR-4000-CA Multifunction VPN Gateway is an easy-to-use, flexible, high-performance device well suited for small businesses. It provides comprehensive data security and privacy for accessing and exchanging sensitive and confidential information, supporting multiple VPN protocols including IPSec, PPTP, L2TP over IPSec, and VPN P2P. With website filtering functionality, it offers safer, more flexible, and more robust network connectivity for small to medium-sized offices, branch offices, and remote employees. It is particularly well-suited for deployment in small to medium-sized enterprise network environments.

Multi-WAN Supported
It supports up to 3 WAN ports, providing automatic traffic balancing, bandwidth optimization, automatic failover mechanisms, and increased bandwidth capacity. Through multiple WAN ports, it offers real-time load balancing and optimal routing algorithms. For companies hosting their own web servers, one WAN port can handle external HTTP port 80, while the internal network uses a second WAN port. This setup provides a simple and secure network segregation. With real-time load balancing and Optimum Route algorithm, DR-4000-CA intelligent router engine directs each session or connection to the best available link. It also supports policy-based routing, persistent routing, and traffic scheduling to effectively adapt your business policy into your network policy.

Bandwidth Allocation and Management Mechanism
As broadband usage proliferates coupled with the alarming rise of file sharing trend, in certain cases, it is important to assign quota for user bandwidth consumption, particularly in the education institutions, hot spots, or in a community with shared Internet access provider subsystem. DR-4000-CA supports two different quota mechanisms: prepaid and periodical, in order to meet different real-life business needs. The quota system can also be integrated with external accounting and billing systems. By traffic setting size and filtering mechanism, DR-4000-CA optimizes bandwidth utilization and ensures the best transmission quality for the transfer of mission-critical data. The bandwidth management mechanism includes limiting allocation based on IP sessions, as well as providing individual and specific IP range-based controls. It encompasses appropriate upstream and downstream bandwidth control for SIP/RSTP/RTP/Web modes, ensuring smooth network performance overall.

Excellent Protective Capability
The DR-4000-CA has a built-in SPI (Stateful Packet Inspection) firewall and supports specific Layer-7 protocols such as VoIP protocols (H.323 and SIP), video conferencing, and various IM protocols. In terms of content filtering, it supports IP/MAC filtering and can filter or scan through Layer-7 application layers. It has a built-in policy-based DoS/DDoS firewall protection, offering efficient and comprehensive protection against hacker attacks, thus enhancing network security.

Multiple Authentication Methods
It offers multiple authentication methods to meet the needs of various enterprises. The web authentication feature supports remote RADIUS servers, local accounts, third-party OAuth 2.0 (ex. Google, Facebook login), POP3 servers, LDAP (AD) account authentication, remote MAC batch authentication, and guest access. It also supports web authentication Captive Portal, providing diverse authentication methods to meet the requirements of numerous users.

Account and Password Voucher Control Output Functionality.
By purchasing the SP-800-PRINTER (optional) account voucher printer POS system (network control server + thermal printer), you can quickly select and print account and password vouchers for authenticated personnel using a controller. This feature is a great benefit for both the image and network security of the company, especially for one-time visitors.

Time Scheduling
The built-in time policy supports daily scheduling with up to 300 detailed time slot rules. These rules can be applied to advanced features, including timed activation of IP/MAC filtering and virtual server access control based on open ports, enabling time-based restrictions for allowing or disallowing access. For example, if the mail server’s port 25 is targeted by bots resulting in prolonged IP lockouts and continuous malicious attempts to log in. Therefore, use this function to make necessary port arrangements and allow multiple changes in the access interval to reduce daily malicious attacks and the possibility of IP paralysis.

Ping Watchdog
Supports Ping Watchdog for automatic monitoring and can be configured for repeated reboots to ensure operation. Administrators don’t need to worry about network crashes, and it also supports Auto Reboot by scheduling. Administrators can set to automatically reboot daily, weekly, or monthly as per their requirements.

Wake-on-LAN
Supports Wake-on-LAN function to wake up specified network members based on their MAC addresses. Administrators can schedule automatic wake-up for these devices daily, weekly, or monthly according to their needs.

Supports DC In and PoE In
In addition to providing DC In power input, it also supports PoE input allowing the device to receive both network data and power signals through a UTP cable. This meets the needs of long-distance cabling, eliminating the need for traditional power outlets and simplifying the construction of your network environment.

Hardware Overview

Software Specifications