Array Networks AG1500/1500FIPS
Secure Access Gateway

Array Networks AG1500

Sorry, this product is no longer available, please contact us for a replacement.

Click here to jump to more pricing!

Overview:

The AG1500 and AG1500FIPS are 2RU dual-power appliances that support up 72,000 concurrent users and multiple communities of interest for providing secure remote access, remote desktop access and secure mobile access in large data centers and public and private clouds.

Array AG Series SSL VPNs

Enterprise

Array SSL VPNs allow enterprises to consolidate remote access for employees, partners, guests and other communities of interest on a single platform to minimize potential attack vectors, improve operational efficiency and provide a superior end-user experience. Drive productivity enterprise-wide, while keeping cost and complexity at a minimum.

Cloud

For cloud service providers standing up data centers and points of delivery around the world, Array secure access gateways provide a means to securely access cloud infrastructure and services from anywhere on any device. Leverage fully-partitioned virtual portals to enable segmented access for provider and customer administrators to specific networks, infrastructure and services.

Mobile

Whether you need to provide secure connectivity for native business applications or securely mobilize virtual desktops and applications, Array secure access gateways enable secure mobile access from smart phones and tablets including both Android and iOS devices. Create a secure mobile strategy around either managed devices or bring your own device (BYOD).

Business Continuity

Array secure access gateways are capable of supporting an entire enterprise user base on a single appliance without impacting the end-user experience. When the unforeseen occurs, and working from the office is simply not an option, any number of employees may seamlessly log in and remain productive leveraging Array’s cost-effective contingency SSL VPN user licenses.

Access Direct

Access Methods

AccessDirect is Array’s core SSL VPN feature set included with every AG Series physical appliance and vxAG virtual appliance; a range of access methods are supported including Layer-3 network level connectivity, application-level client-server access and Layer-7 Web access via a unified client that provides a superior mix of flexibility, control and security.

Authentication, Authorization & Auditing (AAA)

Device-based pre-authentication, dual and multi-factor authentication using Duo Security, RSA, SyferLock and others, per-user policy engine for identity-based access to URLs, files, networks and applications, and extensive logs and statistics.

End-to-End Security

High-performance 2048-bit SSL encryption, endpoint security including device-based identification, host-checking, cache cleaning and adaptive policies, and an integrated Web firewall for guarding servers and applications against attack.

Mobility

Secure mobile access from iOS and Android smart phones and tablets with support for VPN on demand, a secure browser for HTML5 apps and integrated mobile application management that includes device-based identification and enterprise app store capability.

User Experience

Up to 256 secure access portals per AG or vxAG appliance, each fully customizable to the security and usability preferences of multiple tenants and communities of interest, and Array’s SpeedCore® architecture for delivering industry-leading performance.

DesktopDirect & ABC

DesktopDirect

Array’s unique DesktopDirect feature set provides a scalable remote desktop capability from PCs and mobile devices that is both user and administrator friendly.

Array Registration Technology allows users to intuitively self-register desktops – offloading tasks from IT and assigning a user-selected name for registered desktops that is instantly recognizable upon login.

With DesktopDirect, established security policies remain in effect and data never leaves the corporate network; building on advantages inherent to RDP, data leakage is significantly mitigated to enable a greater degree of compliance and accountability.

Array Business Continuity (ABC)

Array Business Continuity (ABC) Contingency Licenses provide cost-effective insurance against snow days, transit strikes, natural disasters and other unforeseen or unplanned events.

Contingency licenses are sized to meet your requirements, offered at a fraction of the price of regular user licenses and made available as a 10-day license pack.

As usage exceeds the regular license, contingency licenses can be made available and consumed one day at a time, as necessary, on either consecutive or non-consecutive days.

Highlights & Benefits

Anytime, anywhere browser-based secure remote access, enables increased productivity for employees, partners, tenants, customers, contractors and guests
Simple, scalable and secure remote desktop that enables use of PCs and virtual desktops from any device in any location
Secure mobile access for individual native and Web applications for supporting bring your own device (BYOD) or secure access from managed smart phones and tablets
Hardware appliances supporting up to 3 Gbps throughput, 128,000 concurrent users and 500,000 user profiles for maintaining security and driving productivity at scale
Virtual appliances with non-disruptive upgrades up to 10,000 concurrent users and up to 500Mbps throughput
256 secure access portals, customizable to the security and usability preferences of multiple tenants and communities of interest
Range of access methods including Web, Layer-3, thin-client and client-server connectivity

SSL encryption for data in transit
Supports a range of AAA and dual-factor authentication schemes
Endpoint security including device-based identification, host-checking, cache cleaning and adaptive policies
Per-user policy engine for identity-based access to URLs, files, networks and applications
Cross-platform support for a range of operating systems and browsers
Array Business Continuity (ABC) contingency licenses for affordably supporting surge remote access
N+1 clustering and redundant power for business-critical application environments requiring 24/7 uptime
Compact 1RU and 2RU form factors for environments where space is at a premium
Familiar CLI, intuitive WebUI and centralized management for ease of use and configuration

Features:

Enterprise-Wide Secure Access

AG Infographic

AG Series physical and virtual appliances are deployed at the network perimeter or in front of business-critical resources to provide secure remote and mobile access for employees, guests, partners and other communities of interest.

Array secure access gateways are ideal for consolidating remote and mobile access on a single robust platform to provide end-users with a consistent login experience, ensure consistent access policies and minimize potential attack vectors.

Each Array SSL VPN shares a comprehensive secure access feature set, right-sized seat license packs and an option for low-cost business continuity contingency licenses.

Array AG Series secure access gateways integrate SSL VPN, remote desktop access and secure mobile access to deliver scalable and flexible secure access for both remote and mobile users. From a single platform, secure access can be enabled for multiple communities of interest including employees, partners, guests and customers.

In addition, AG Series physical and virtual appliances support next-generation “any-to-any” secure access via robust feature sets for bring your own device (BYOD) and controlled access to cloud services.

SSL VPN Remote Access

SSL VPN secure remote access enables anytime, anywhere access to business applications – increasing productivity while maintaining security and compliance. Users need only a common Web browser to quickly and securely access resources and applications for which they are authorized. Using SSL, the security protocol present in all Web browsers, AG Series appliances can enable a range of remote access methods across a broad spectrum of managed and unmanaged devices.

Web applications can be made available within a secure Web portal, while network-level connectivity and connectivity for specific clientserver applications over SSL can be enabled via a universally-compatible client.

Remote Desktop Access

Remote desktop access allows employees to access their work PCs and laptops from any location as if they were in the office. Using remote desktop, workers can control their physical and virtual office desktops from any remote location – whether they are at their home office, a customer or partner site or on a tablet or smart phone.

Remote desktop access is different from traditional VPN access. Because sensitive files and data never leave the corporate network and never reside on remote and mobile devices, security is assured. Leveraging existing office PCs and unique Array remote desktop technologies such as user selfregistration and wake-on-LAN, remote access and BYOD can be extended enterprise-wide in a manner that is both secure and cost-effective.

Secure Mobile Access

AG Network

In addition to supporting remote desktop for iPhone, iPad and Android devices, AG Series appliances also support secure access for native business apps and HTML5 apps developed for mobile environments.

After installing Array’s mobile client on tablets and smart phones, native business apps can be authorized for specific users and automatically installed on end-user devices from an integrated enterprise app store. HTML5 apps can also be provisioned on a per-user basis and are accessible from a secure browser within the mobile client.

Mobile VPN connections may be enabled per application, and applications may be authorized per user at the administrator’s discretion; moreover, all data associated with enterprise apps are stored in a secure container to prevent data leakage.

In the event that devices become lost or stolen, contents of the secure container may be remotely wiped; in addition, device-based identification may be used to prevent future connectivity to the Array appliance from lost or stolen devices.

Virtual Portals

Built on Array virtualization technology, AG Series appliances can support up to 256 secure access virtual portals to meet the unique needs of multiple user groups and tenants. Each virtual portal is fully independent, with separate management, access policies, access methods and resources.

Built-in templates make creating virtual portals easy, and provide a starting point for further customization. In addition, features and functions can be seamlessly integrated into existing Web pages and custom layouts with minimal effort using Array portal theme technology.

Per-User Policy Engine

AG Series appliances enable access policies on per user basis. In addition to validating hardware IDs, AG appliances check remote devices for required OS version, service packs and anti-virus software before granting access to protected networks and resources.

Roles may be assigned based on username, group name, source IP, login time and authentication method and can specify which resources are available to which access methods. Each role may be assigned different resources and QoS policies. With capacity for 500,000 users in its local database, access policies can be stored on the Array appliance or can be provided via integration with external AAA servers. In addition, Single Sign-On (SSO) settings can be customized to store multiple usernames and passwords for different backend application servers. Moreover, authentication may be set such that users must authenticate to multiple AAA servers for added security, in a manner similar to multi-factor authentication.

End-to-End Security

A dissolvable client-side security agent mitigates network or resource exposure by enforcing preand post-admission policies and adapting access rights to suit changes in the client environment. Host-checking verifies device and user identity, and ensures clients meet pre-defined security parameters (anti-virus, anti-spyware, personal firewalls, patches, service packs) and determines adaptive policies. For additional control, cache cleaning can be enabled to wipe cached information from devices when sessions end.

All traffic between clients and the Array appliance is secured via SSL encryption, and a securityhardened OS ensures that Array appliances are as secure as the networks and resources they protect. Layer 2-7 authorization provides granular access control based on user identity and role within the organization and auditing tracks all activity on a per-user, per-event and per-resource level. URL blacklisting is also available to restrict access to undesirable Web sites.

Acceleration & Availability

Security often comes at the expense of performance and ease-of-use; in other words, secure access won’t enhance productivity unless users find it fast and friendly. To ensure both performance and security, AG Series appliances support integrated application acceleration features including connection multiplexing, SSL acceleration and compression.

Deployed at the largest enterprises and service providers in the world, AG Series appliances have proven their reliability – tallying up years of flawless performance in demanding production environments. In the event of a failure, Array N+1 clustering technology ensures a transparent and unaffected end-user experience.

Management & Reporting

AG Series appliances offer both a familiar CLI and an intuitive Web user interface that can easily be customized to create streamlined, integrated management systems. Monitoring is made simple with SNMP-based monitoring tools, and with support for XML-RPC, a range of third-party applications can be used to automate management tasks.

In addition, up to 100 AG appliances can be managed centrally to provide a single point of configuration, monitoring and reporting for Array products (requires Array Networks CMX100 centralized management appliance).

Integration & Extensibility

Taking advantage of extensible APIs, IT can marry secure access intelligence with threat and risk management platforms, virtual management platforms, and custom solutions for reporting, billing, SLAs and vertical-specific requirements. Developers can also create custom native apps with built-in security for mobile environments. From providing real-time usage intelligence to seamlessly interacting with 3rd party secure access and application delivery technologies to integrating with cloud management systems, the power of AG Series APIs is unprecedented.

Array Business Continuity (ABC)

Secure access is a compelling technology for business continuity planning; however, many vendors require businesses to buy contingency licenses outright and most competing products are designed with only enough capacity to support the limited needs of day-to-day remote access.

Only Array has the scalability to support an entire workforce on a single system while maintaining a premium experience for each user. And because helpdesk calls are the last thing you need in an emergency, Array offers the unique ability for first time users to log into a company URL and immediately see their familiar work desktop.

Ten-day contingency licenses are available in increments from 25 to 12,000 concurrent users and are activated by exceeding a base concurrent user license. Once activated, ABC contingency licenses augment standard concurrent user licenses for a period of one day. If usage returns to normal, the ABC contingency license is reduced by one day. If usage continues to exceed the standard concurrent user license, the ABC contingency license is reduced one day at a time until usage returns to normal.

Product Editions

AG Series physical appliances and vxAG virtual appliances support three product editions: AccessDirect™ enables SSL VPN remote access, DesktopDirect™ enables remote desktop access and MotionPro™ enables secure mobile access. In addition, all product editions support ABC business continuity contingency licenses.

Physical & Virtual Appliances

AG Series physical appliances leverage a multi-core architecture, SSL acceleration and compression, energy-efficient components and 10 GigE connectivity to create solutions purposebuilt for scalable secure access. The AG1500FIPS model offers FIPS 140-2 Level 2 compliance for organizations that require a higher level of security.

Available for common hypervisors, vxAG virtual appliances are ideal for organizations seeking to benefit from the flexibility of virtual environments, offer infrastructure services and new elastic business models or evaluate Array secure access with minimal risk and up-front cost.

Specifications:

AG Series Specifications
	1000	1000T	1100	1150	1200	1500	1500FIPS	1600
Concurrent Users	300	600	3000	10K	25K	72K	72K	128K
Local DB Users	10K	10K	200K	200K	200K	500K	500K	500K
Virtual Portals	10	20	50	256	256	256	256	256
SSL Throughput	100 Mbps	150 Mbps	200 Mbps	400 Mbps	800 Mbps	1.6 Gbps	1.6 Gbps	3.2 Gbps
Clustering	Active/Active Active/Standby
Form Factor	1U	1U	1U	1U	1U	2U		2U
Typical Power Consumption	134W	134W	134W	134W	153W	209W		209W
Input Voltage	Single Power: 90-264VAC, 6-3A, 47 63Hz		Single Power: 90-264VAC, 6-3A, 47 63Hz Dual Power: 4-2A, 47-63Hz, Auto-Ranging			Dual Power: 100-240VAC; 8.5A; 47-63 Hz Full-Range Input Redundant, Hot Swappable
Dimensions	Single Power: 17" W x 15" D x 1.75" H		Single Power: 17" W x 15" D x 1.75" H Dual Power: 17" W x 19.875" D x 1.75H			Dual Power: 17" W x 21.5" D x 3.5" H
Weight	Single Power: 13.6lbs		Single Power: 13.6lbs Dual Power: 17.2lbs			Dual Power: 28lbs
Environmental	Operating Temperature: 0° to 45°C, Humidity: 0% to 90%, Non condensing
Regulatory Compliance	ICES-003, EN 55024, CISPR 22, AS/NZS 3548, FCC, 47FR part 15 Class A, VCCI-A
Safety	CSA, C/US, CE, IEC 60950-1, LU/CSA 60950-1, EN 60950-1
Support	Gold, Silver and Bronze Level Support Plans
Warranty	1 Year Hardware, 90 Days Software
vxAG
Supported Hypervisors	VMware ESXi 4.1 or Later XenServer 5.6 or Later Open Xen 4.0 or Later
Virtual Machine Requirements	2 Virtual CPUs 4 Virtual Network Adapters 2GB RAM 40GB Disk

	AccessDirect	DesktopDirect	MotionPro
	SSL VPN Remote Access	Remote Desktop Access	Secure Mobile Access
Clustering	Standard	Standard	Standard
WebUI	Standard	Standard	Standard
SSL & IPSec Encryption	Standard	Standard	Standard
Virtual Portals	5 Included	5 Included	5 Included
Web Applications	Standard	N/A	N/A
L3 VPN Client	Standard	N/A	N/A
Host Checking & Cache Cleaning	Standard	N/A	N/A
L4 Thin Client	N/A	Standard	N/A
Array Registration Technology	N/A	Standard	N/A
Wake-on-LAN (WoL)	N/A	Standard	N/A
Enterprise App Store	N/A	N/A	Standard
L3 Mobile VPN	N/A	N/A	Standard
L4 SDK Tunneling	N/A	N/A	Standard
Secure Browser	N/A	N/A	Standard
Client, App & Device Security	N/A	N/A	Standard
Additional Virtual Portals	Optional	Optional	Optional
Array Business Continuity	Optional	Optional	Optional
Multi-language WebUI	Standard	Standard	Standard

Feature Specifications
Access Methods
Clientless: Web Access	100% clientless Support HTML, JavaScript and plug-in parameters Ensures proper function of application beyond the corporate network Masks internal DNS and IP addressing Supports browser-based access from any devices Web file sharing
On-Demand Client: Network & Application Access	Pre-installed or Web-delivered client through Java or ActiveX L3, L4 or autoselect tunneling Auto-launch upon login, transparent to users L3 & L4 for Windows XP (32-bit), Windows 7 (32/64-bit), Linux, MacOS Split tunneling and full tunneling control, create tunnel through HTTP forward proxy Supports any IP application including TCP, UDP, NetBIOS, Outlook, Terminal Devices, FTP, CRM and all CS and BS applications Internal static and dynamic IP address assignment and external DHCP server IP address assignment Network drive mapping Auto-launch of network scripts and commands Differentiated configurations per user or group roles Stand-alone, command line and SDK for Array VPN client Multi-language support Detailed traffic logs
Thin Client: Remote Desktop Access	Utilizes local RDP client (RDP 5.0 or higher) RDP auto-update/deployment User parameters including screen size, color depth, sound and redirection (if permitted) Multiple monitors Performance tuning Redirection control for drives, printers, ports, smart cards and clipboards
Mobile Client: Secure Mobile Access	MotionPro native app for secure mobile access for iPad, iPhone and Android device Downloadable from Apple AppStore and Google Play marketplace Enterprise app store Automated app installation IPSec and SSL mobile VPN Per application VPN SDK for native 3rd party apps with integrated application level VPN Secure browser for Web & HTML5 applications
Client-Side Security
Host Checking	Verifies device state prior to granting access Scan for personal firewalls, anti-virus, anti-spam and service packs Custom rules for a range of apps, registry checks and patches MAC address or hardware ID validation
Adaptive Policies	Access level conditional on end-point status Integrated policy management
Cache Cleaning	Wipes all stored browser information upon session termination Per-session with idle timeout and browser closure
End-Point Security	Device-based identification, data container and remote wipe for mobile devices Anti-key logging and antiscreen capture for remote PCs
Server-Side Security
Gateway	Security-hardened OS Passive and active Layer-7 content filtering Permit or deny policies DDoS prevention Reverse-proxy network separation
Encryption	TLS 1.0/SSL 3.0, TLS 1.1/1.2 AES128-SHA, AES256-SHA, DES/3DES, SHA/MD5 1024 and 2048-bit keys SSL session reuse Certificate field passing to backend Online/offline CRL OCSP
Authentication, Authorization & Auditing (AAA)
Authentication	LDAP, RADIUS, AD, LocalDB, RSA SecurID,Swivel, Vasco, Custom 500,000 users in LocalDB Enable/disable LocalDB user LocalDB password policy control Backup/restore LocalDB Export LocalDB in CSV format (Excel) Up to 1500 logins per second Certificate-based authentication Authentication server ranking (search user credential in multiple servers) RADIUS challenge response mode Restrict login based on date and time Single sign-on, NTLM, HTTP basic authentication and HTTP POST User lock-up by login failure, inactivity or manually by admin
Authorization	Granular access control Role-based access control Roles defined by username, group name, login time, source IP and login method Permit and deny policies Authorize user based on MAC address or hardware ID Provides high flexibility in configuration and detailed logging Available desktops and redirection conditional upon end-points
Auditing	Full audit trail in WebTrends WELF format Logs all user activity (success, failure, attack) Syslog Alarm/trap Stats/counters SNMP MIB
Multi-Factor	SSL client certificates, RSA SecurID, Entrust, other RADIUS-based authentication systems Multiple AAA server authentication
Performance & Scalability
System	64-bit Array SpeedCore multi-core platform Optimized packet flow with single-digit millisecond latency Up to 128,000 concurrent users on a single appliance Up to 3 Gbps SSL throughput on a single appliance Hardware SSL key exchange and bulk encryption performed in kernel Connection multiplexing for optimizing server efficiency and reducing back-end connections High-availability and scaleout (active/active, active/standby clustering)
Virtualization	256 virtual SSL VPN portals Single page virtual site creation Concurrent user session control per virtual portal Delegated management Portal theme technology for custom virtual portals or integrating AccessDirect with pre-existing Web pages Pure Javascript-based customization on per virtual portal basis No external server requirements Localized end-user GUI support for English, Japanese, simplified and traditional Chinese
Management
System Administration	Intuitive WebUI Quick-start wizard Role-based administration Strong administrator authentication RADIUS accounting No client installation or management Configuration synchronization Full device backup and restore including client security, portal theme , SSL certificates, keys, CRL, LocalDB User/feature license control NTP, NAT, RTS, Logging
Centralized Management	Array CMX centralized management appliance SSH/CLI, SSL/WebUI, SNMP, XML/RPC API Supports NRS2 (Array Networks multiple system reporting and analyzing tool)
Array Registration Technology (ART) for Remote Desktop	Manual/static registration User self-registration/automatic registration Bulk registration (import/export from external database) Scalable to 150K users and 300K desktops Registration portal wizard Remote power management via Wake-on-LAN (WoL) technology

Documentation:

Download the Array Networks AG Series Secure Access Gateway Datasheet (PDF).

Pricing Notes:

Pricing and product availability subject to change without notice.

Array Products

Misc Options

Note: Array Business Continuity Pre-paid Licenses on AG & vxAG - for any 10 days of Emergency usage (Support level is based on base system support - no additional support cost)

APV Field Upgrade: SX SFP Fiber Optical Transceiver (1G-Multi Mode 550M / LC / 850nm)

#AW220230
Our Price: $295.00

APV Field Upgrade: LX SFP Fiber Optical Transceiver (1G-Multi Mode 2KM / LC / 1310nm)

#AW220231
Our Price: $1,125.00

AG Field Upgrade: 1000Base-T SFP Copper Optical Transceiver (RJ45)

#AW220232
Our Price: $695.00

Array Networks AG1500/1500FIPS Secure Access Gateway