| Specifications | Herculon SSL i5800 | Herculon SSL i2800 | Herculon SSL i10800 |
|---|---|---|---|
| Processor | One 4-Core Intel Xeon processor (total 8 hyperthreaded logical processing cores) |
One 2-Core Intel Xeon processor (total 4 hyperthreaded logical processor cores) |
One 8-Core Intel Xeon processor (total 16 hyperthreaded logical processor cores |
| Memory | 48 GB DDR4 | 16 GB DDR4 | 128 GB DDR4 |
| Hard Drive Capacity | 1x 480 GB enterprise class SSD | 1x 500 GB Enterprise Class HDD | 1x 480 GB Enterprise Class SSD |
| Power Supply | 1x 650W Platinum AC PSU (2x 650W DC PSU optional) | 1x 250W Platinum AC PSU (Additional PSU optional, 2x 650W DC PSU optional) |
2x 650W Platinum AC PSU (2x 650W DC PSU optional) |
| Typical Consumption | 265W (dual power supply, 110V input)** | 95W (single power supply, 110V input)* | 415W (dual power supply, 110V input)** |
| Input Voltage / Typical Heat generated | 100-240 VAC +/- 10% auto switching, 50/60hz | 100–240 VAC +/- 10% auto switching, 50/60hz | 100–240 VAC +/- 10% auto switching, 50/60hz |
| Dimensions | 1.72″ (4.37 cm) H x 17.4″ (44.2 cm) W x 30.6″ (77.72 cm) D 1U industrial standard rack-mount chassis |
1.72″ (4.37 cm) H x 17.4″ (44.2 cm) W x 30.6″ (77.72 cm) D 1U industrial standard rack-mount chassis |
1.72″ (4.37 cm) H x 17.4″ (44.2 cm) W x 30.6″ (77.72 cm) D 1U industrial standard rack-mount chassis |
| Weight | 26 lbs. (16.3 kg) (dual power supply) | 20 lbs. (16.3 kg) (dual power supply) | 36 lbs. (16.3 kg) (dual power supply) |
| Operating Temperature | 32° to 104° F (0° to 40° C) | 32° to 104° F (0° to 40° C) | 32° to 104° F (0° to 40° C) |
| Operational Relative Humidity | 5 to 85% at 40° C | 5 to 85% at 40º C | 5 to 85% at 40º C |
| Safety Agency / Approval | ANSI/UL 60950-1-2014 CSA 60950-1-07, including A1:2011+A2:2014 IEC 60950-1:2005, A1:2009 + A2:2013 EN 60950-1:2006 + A11:2009 + A1:2010 + A12:2011 + A2:2013 |
ANSI/UL 60950-1-2014 CSA 60950-1-07, including A1:2011 + A2:2014 IEC 60950-1:2005, A1:2009 + A2:2013 EN 60950-1:2006 + A11:2009 + A1:2010 + A12:2011 + A2:2013 |
ANSI/UL 60950-1-2014 CSA 60950-1-07, including A1:2011 + A2:2014 IEC 60950-1:2005, A1:2009 + A2:2013 EN 60950-1:2006 + A11:2009 + A1:2010 + A12:2011 + A2:2013 |
| Certifications / Susceptibility Standards | ETSI EN 300 386 V1.6.1 (2012) | ETSI EN 300 386 V1.6.1 (2012) | ETSI EN 300 386 V1.6.1 (2012) |
| Standards | EN 55032:2012 Class A; EN 61000-3-2:2014 EN 61000-3-3:2013; EN 55024:2010 FCC Class A (Part 15), IC Class A, VCCI Class A |
EN 55032:2012 Class A; EN 61000-3-2:2014 EN 61000-3-3:2013; EN 55024:2010 FCC Class A (Part 15), IC Class A, VCCI Class A |
EN 55032:2012 Class A; EN 61000-3-2:2014 EN 61000-3-3:2013; EN 55024:2010 FCC Class A (Part 15), IC Class A, VCCI Class A |
| Typical Heat Output | 905 BTU/hour (dual power supply, 110V input)** | 325 BTU/hour (dual power supply, 110V input)** | 1420 BTU/hour (dual power supply, 110V input)** |
| Gigabit Fiber Ports (SFP) | Optional SFP+ (SX or LX) | 4 SX or LX (sold separately) | Optional SFP+ (SX or LX) |
| Gigabit Ethernet CU Ports | Optional SFP | Optional SFP | Optional SFP |
| 10 Gigabit Fiber Ports (SFP+) | 8 SR/LR (sold separately); optional 10G copper direct attach | 2 SR or LR (sold separately); Optional 10G copper direct attach |
8 SR/LR (sold separately); optional 10G copper direct attach |
| 40 Gigabit Fiber Ports (QSFP+) | 4 SR4/LR4 (sold separately) (QSFP+ optical breakout cable assemblies available to convert to 10 gigabit ports) |
6 SR4/LR4 (sold separately); QSFP + optical breakout cable assemblies available to convert to 10 gigabit ports |
The SSL Orchestrator is able to dynamically steer unencrypted traffic using policy-based management to multiple security tools. Performing outbound decryption & encryption at the Herculon allows organizations to purchase smaller security devices, and extend their life by performing CPU-expensive SSL termination at a device made for it.
The following table contains key features for the Herculon SSL Orchestrator.
| SSL visibility | Deployment modes |
|---|---|
| High performance SSL decryption/re-encryption | Inline routed layer 3 |
| Forward proxy architecture | Inline layer 2 |
| SSL/TLS decryption independent of TCP port | ICAP service to DLP and antivirus/antimalware devices |
| Dynamic service chaining | Receive-only |
| Policy-based steering of decrypted traffic | Support for one and two-box deployments |
| Decoupled from physical interface, port, or VLANs | High availability with TCP session resiliency |
| Simplified security service insertion | Load balancing of multiple security devices |
| Service resiliency | Network HSM |
| Policy context engine | Thales |
| Source and destination IP and Subnet | Gemalto |
| Port | Add-ons |
| Protocol | F5 IP Intelligence Services |
| Domain | URL filtering |
| IP Geolocation | Network HSM |
| IP reputation (subscription) | F5 BIG-IP® Access Policy Manager® (APM®) |
| URL categorization (subscription) | F5 Secure Web Gateway Services |
| Policy-based Block, Bypass, Forward for Inspection actions |
|
| Robust cipher and protocol support | |
| TLS 1/1.1/1.2, DTLS1 | |
| RSA/DHE/ECDHE with Forward Secrecy support | |
| SHA, SHA2, AES, AES-GCM | |
| Proxy-level control over ciphers and protocols |