Allied Telesis AR4050S UTM Next Generation Firewall with 2 x GE WAN and 8 x Gigabit LAN Ports
PRODUCT DESCRIPTION
Allied Telesis AR4050S UTM Next Generation Firewall - Local Warranty
Firewall, Router and Switch in One Box
The AR4050S combines application-aware firewalling and threat protection with routing and switching. A 1.5GHz quad-core security processor and 2GB of RAM drive up to 1.9Gbps of raw firewall throughput and 300,000 concurrent sessions, so one appliance can secure and connect a busy branch or head office.
Application, Web and Threat Control
Deep Packet Inspection lets you see and control which online applications staff use, while web control helps enforce acceptable use and save bandwidth. With the optional subscriptions, an Intrusion Prevention System, IP reputation and malware protection add regularly updated defences against cyber-attacks.
Site-to-Site and Remote-Access VPN
IPsec VPNs link branch offices to headquarters, with multipoint VPN letting a single tunnel configuration reach many sites. Remote users connect securely over SSL/TLS using OpenVPN, with LDAP and two-factor authentication options. VPN throughput reaches 1Gbps.
SD-WAN and Centralised Management
Secure SD-WAN steers traffic between WAN links automatically to keep inter-branch applications performing. AMF Plus automates network and device management, and the built-in Vista Manager mini with AWC lets the AR4050S manage Allied Telesis TQ Series wireless access points.
AR4050S Datasheet — Technical Specifications
General
| Product Name | Allied Telesis AR4050S UTM Next Generation Firewall |
| Model | AR4050S |
| Order Code | AT-AR4050S-30 |
| Series | 1GbE UTM Firewalls (AR3050S / AR4050S) |
| Power Cord | -30 = UK power cord |
| Operating System | AlliedWare Plus |
Hardware
| Security Processor | 1.5GHz quad-core |
| Memory | 2GB RAM, 4GB flash |
Ports & Interfaces
| WAN Ports | 2 x 1000X SFP / 10/100/1000T RJ-45 combo |
| LAN Ports | 8 x 10/100/1000T RJ-45 |
| High Availability Bypass Ports | 2 x 10/100/1000T RJ-45 |
| Other Ports | 1 x USB, 1 x RJ-45 console, 1 x SDHC slot |
Performance
| Firewall Throughput (Raw) | 1,900 Mbps |
| Firewall Throughput (App Control) | 1,800 Mbps |
| Concurrent Sessions | 300,000 |
| New Sessions per Second | 12,000 |
| IPS Throughput | 750 Mbps |
| IP Reputation Throughput | 1,000 Mbps |
| Malware Protection Throughput | 1,300 Mbps |
| VPN Throughput | 1,000 Mbps |
| Note | Maximum values; actual performance varies with configuration |
Networking
| IPv4 Routing | Static, BGP4, OSPF, RIPv1/v2, source- and policy-based routing, VRF-Lite, SD-WAN |
| IPv6 Routing | Static, BGP4+, OSPFv3, RIPng, policy-based routing, SD-WAN |
| High Availability | VRRP, VRRPv3, hardware-controlled bypass ports |
| NAT | Static, dynamic NAPT, double NAT, subnet-based NAT, IPsec traversal |
| Other | 802.1Q VLANs, LACP link aggregation, IGMP/PIM multicast, 8 priority queues |
Power & Physical
| Input Power | 90V to 264V AC (47 to 63Hz) |
| Max Power Consumption | 27W |
| Dimensions (W x D x H) | 42.5 x 210 x 220 mm (1.67 x 8.26 x 8.66 in) |
| Weight | 1.7 kg unpackaged; 2.6 kg packaged |
| Noise | 28.4 dBA typical / 35.1 dBA max |
| MTBF | 260,000 hours |
Environmental
| Operating Temperature | 0°C to 50°C |
| Storage Temperature | -20°C to 60°C |
| Operating Humidity | 5% to 80% non-condensing |
| Operating Altitude | 2,000 m maximum |
| Certifications | UL, cUL, TuV; IPv6 Ready Phase 2 (Gold) |
Features & Applications
Key Security & Management Features
| Application-Aware Firewall | Deep Packet Inspection (DPI) with full application control |
| Intrusion Prevention | IPS for protection against network attacks (licence) |
| Web Control | Category-based web filtering for productivity and compliance (licence) |
| VPN | IPsec site-to-site, multipoint VPN, OpenVPN SSL/TLS remote access, IKEv1/IKEv2 |
| SD-WAN | Automated inter-branch traffic optimisation with dynamic route selection |
| AMF Plus | Autonomous Management Framework Plus network automation (master licence for up to 5 nodes per licence) |
| Wireless Management | Vista Manager mini and AWC for TQ Series APs (5 APs free; licences add more, up to 25) |
| Active Fiber Monitoring | Monitors fiber connections for tampering |
| UTM Offload | Offload security processing for increased throughput (licence) |
Typical Deployments
Head-office and branch-office perimeter security, multi-site organisations linking branches with IPsec or SD-WAN, and small to mid-size networks that want firewall, VPN and wireless control in one appliance.
Selection Tip
The AR4050S has wired WAN ports only. The AR3050S shares the same chassis and port layout with an 800MHz dual-core processor and lower performance ratings. If you need cellular WAN, the separate AR4050S-5G model adds 5G mobile broadband; that capability is not part of the AR4050S.
Package Contents & 1GbE UTM Firewalls Ordering Information
In the Box
1 x AR4050S firewall with UK power cord (-30 suffix). Security subscriptions and feature licences are ordered separately.
Power Cord Suffix
-10 = US, -30 = UK, -40 = Australian, -50 = European power cord.
1GbE UTM Firewall Models
| Model | Key difference |
| AR4050S (this listing) | 1.5GHz quad-core, 2GB RAM, 1.9Gbps firewall, 2 x GE WAN, 8 x GbE LAN |
| AR3050S | 800MHz dual-core, 1GB RAM, 750Mbps firewall, same port layout |
| AR4050S-5G | Separate model with 2 x RJ-45 WAN, 8 x GbE LAN and 5G mobile broadband with dual SIM slots |
Related Official Licences & Accessories
| AT-AR4-UTM-01-1YR / 3YR / 5YR | Advanced Firewall: Application Control and Web Control |
| AT-AR4-UTM-02-1YR / 3YR / 5YR | Advanced Threat Protection: Advanced IPS and IP Reputation (cannot be combined with UTM-01) |
| AT-FL-UTM-OFFLOAD-1YR / 3YR / 5YR | UTM Offload licence |
| AT-RT-APM5-1YR / 5YR | AMF Plus Master licence for up to 5 nodes |
| AT-RT-AWC5-1YR / 5YR | AWC licence for 5 additional access points |
| AT-RT-CB5-1YR-2022 / 5YR-2022 | AWC Channel Blanket and Smart Connect licence for up to 5 APs |
| AT-RKMT-J14 / AT-RKMT-J15 | 19-inch rack mount kit for one / two devices |
| AT-STND-J03 | Vertical stand kit |
Datasheet & Downloads
| 1GbE UTM Firewalls series page | 1GbE UTM Firewalls on alliedtelesis.com |
| AR3050S / AR4050S datasheet | AR3050S and AR4050S Datasheet (PDF) |
Frequently Asked Questions — Allied Telesis AR4050S
Does the AR4050S include 5G or 4G mobile connectivity?
No. The AR4050S uses wired WAN ports. 5G mobile broadband with dual SIM slots is only available on the separate AR4050S-5G model.
Which licences add security features?
AT-AR4-UTM-01 adds Application Control and Web Control; AT-AR4-UTM-02 adds Advanced IPS and IP Reputation. The two cannot be used together.
Can it manage wireless access points?
Yes. AWC on the AR4050S manages 5 Allied Telesis APs free of charge, with AWC licences adding 5 APs each up to 25.
What power cord is supplied?
The -30 order code ships with a UK power cord.
What warranty do I get?
Supplied by SourceIT with local warranty and a GST invoice.
