Allot Multiservice Platforms

Service Gateway 9000 Series
Delivering Complete Network Intelligence
Visibility, Control, and Security for the Enterprise
Network service performance and application delivery
assurance are critical to user satisfaction and businesssuccess.
The Allot Service Gateway 9000 (SG-9000) series
enables your IT, network and security teams to assure
and protect network services and application delivery.
Seamlessly integrated into enterprise networks, theSG-9000 provides centralized traffic management
and QoE based application control for high levels ofuser satisfaction, network hygiene, a reduced attack
surface, and bot and DDoS mitigation for higher levels ofWith terabit performance the SG-9000 can be placed atprotection.

central network junctions, providing visibility, control andsecurity across the WAN, datacenter LAN and Internet.

Together with business analytics, the SG-9000 enables
you to see and understand everything that is happening

These multi-service platforms enable medium and large

on your company network. As a result, you can act faster

enterprises, MSPs, datacenter and cloud service providers

and more decisively to make any size network operate

to ensure that the network is optimized to best meetbetter, faster, and more safely.

business requirements.

Benefitso Assures and protects network service and application delivery

oIdentifies and solves problems before they escalate with realtime traffic monitoring for increased operational efficiency

oIdentifies and manages apps and devices that create potential
security risksoDelivers high capacity for demanding environments; up to 2 Tbps
in a cluster

oSupplies high-density 1/10/40/100 Gigabit Ethernet connectivity

oEasy installation and pay-as-you-grow scalability

o Empowers informed, data-driven decisions with businessanalytics (e.g., making infrastructure investments and upgrades
where and when they are needed)o Allows you to know and control everything that is on yournetwork

o Provides control of recreational traffic and prevents abuse ofcorporate resources

See. Control. Secure.

Features
Accurate Traffic Visibilityand Policy Control
The SG-9000 Dynamic Actionable Recognition Technology(DART) engine, provides granular visibility of application, user,device, quality-of-experience (QoE), and network topology traffic.
Our extensive signature library accurately identifies hundreds ofapplications and protocols and supports user-defined signatures forhome-grown web applications. Frequent and automated updates
to the signature library keep Allot Service Gateways up-to-date withthe latest applications and internet developments, ensuring accurate
traffic detection and classification. Moreover, Allot’s flexible andpowerful policy editor makes it easy to prioritize business-criticalapps and enforce real-time Quality of Service (QoS).

Service Gateway 9000 Series

Single Point of Service Integration
In addition to industry-leading DPI-based visibility and control, theAllot SG-9000 series supports the growing portfolio of value-added
services from Allot, including:o Allot NetworkSecure (Web security)o

Allot ServiceProtector (DDoS protection and anti-bot)

oAllot ContentProtector (URL filtering)

The platform also supports real-time traffic steering to third-party
applications or virtualized services with seamless service chaining.
As a single point of integration for these services, Allot helps you
minimize interoperability and service integration issues to facilitate
fast and efficient service rollout.

Encrypted Traffic Classification

Efficient PerformanceWith superior traffic classification, Allot appliances proactively learnand adapt to the changing tactics of traffic encryption widely usedby internet services and data privacy applications. From heuristic
analysis of IP flow behavior to peer learning and predictive DPI,
Allot’s synergistic range of inspection methods provides andaccurate recognition of encrypted traffic, even during peak loads.

Allot SG 9000 series appliances pack rich functionality into efficient,small- footprint components. High-density 1/10/40/100 Gigabit
Ethernet connectivity and scalable design allow the IT department tokeep pace with the demand for high- quality network-based services ina cost-efficient manner.

Supports SME to Large Enterprises
Maintaining Network Hygiene
In the era of BYOD, shadow IT, and the use of unsanctioned
apps, security is a major concern for IT staff. The Allot SG-9000
series allows you to monitor recreational and risky traffic that cancompromise enterprise business apps. For example, you can prevent
network abuse in the following ways:
o Allocate quotas for employees to limit the downloading ofsubscriber VOD, such as Netflix
o Deny the use of private VPNs that can be used to circumvent
security controlso Deny the running of peer-to-peer apps that pose a liability for
pirated content and can introduce malware with “license-free”
softwareo Identify apps, such as crypto-mining, that possibly indicate acompromised server or abuse of corporate resources.

Collecting Network Data Records
From their vantage point on your network, Allot Service Gateway
platforms collect and export a rich variety of high-resolution usage
and performance data, including real-time activity per user, perapplication, per device, per VoIP & video session, per web session,and more. Network data records may be exported in standard
formats to business intelligence systems, such as Allot ClearSee
Network Analytics and other systems, such as SIEM systems forfurther security analysis. Furthermore, datacenter and cloud service
providers can validate network SLAs in addition to providing analytics
as a service. Frequency and triggers for data record export are
configurable parameters, providing ready access to critical usage
data. Network data records are configurable and easily customized
by Allot Data Science Services for any destination or use caserequirements.

As a scalable family of DPI-based multi-service platforms, AllotService Gateway Appliances can accommodate both small andlarge-sized enterprise networks.

oCapacity: The 9000 series can support up to 9 million active
users (concurrently attached and active) and 144 million
concurrent IP flows

oMaximum Connectivity: up to 40 x 1/10 Gigabit Ethernet orup to 8 x 40/100 Gigabit Ethernet

oThroughput: up to 300 Gbps in a single platform, and up
to 2 Tbps of aggregate throughput in a seamless cluster
configurationoCentral Management and configuration by Allot Gateway
Managero

Allot Service Gateways are also available in NFV-compliant
virtual editions. For more information, please consult with your
Allot representative, or visit www.allot.com

Efficient Clustering
Allot maintains accurate Layer-7 visibility and control of userapplication traffic across multiple platforms even when asymmetric
upstream and/or downstream IP flows are processed by different
appliances. Clustering utilizes dedicated interfaces with very low
synchronization traffic overhead.

Technical Specifications

Service Gateway 9000 Series

Allot SG-9008

Allot SG-9100 V2

Allot SG-9500
Configuration A

Allot SG-9500
Configuration B

Throughput per Platform

8 Gbps

50 Gbps

140 Gbps

140 Gbps

Throughput per Cluster of 860 Gbps

350 Gbps

1 Tbps

1 TbpsNumber of Connections / Flows

2,250,000 / 4,5000,000

12,000,000 / 24,000,000

36,000,000 / 72,000,000

36,000,000 / 72,000,000

Number of registered Users /Subscribers

270,000

1,500,000

4,500,000

4,500,000

Number of Static Lines /Pipes / Virtual Channels

512 / 5,000 / 15,000

512 / 5,000 / 15,000

512 / 5,000 / 15,000

512 / 5,000 / 15,000

Number of Active Lines /Pipes / Virtual Channels

10,512 / 250,000 / 500,000

10,512 / 1,000,000 / 2,000,000

10,512 / 3,000,000 / 6,000,000

10,512 / 3,000,000 / 6,000,000

8 ports of 1 GE Copper (RJ45)

16 ports of 1GE/10GE (SFP+)

24 ports of 1GE/10GE (SFP+)

8 ports of 1GE/10GE (SFP+)

1GBASE-LX/SX

1GBASE-LX/SX

1GBASE-LX/SX

1 GE Copper (RJ45)

1 GE Copper (RJ45)

1 GE Copper (RJ45)

10GBASE-SR/LR

10GBASE-SR/LR

10GBASE-SR/LR

2 x 1 Gigabit Ethernet

2 x 1 Gigabit Ethernet

2 x 10 Gigabit Ethernet or

2 x 10 Gigabit Ethernet or(Copper)(Copper)2 x 1 Gigabit Ethernet

2 x 1 Gigabit Ethernet

Capacity *devicesStandards
Ethernet Interfaces

4 ports of 100 GE QSFP28
Management
Networking Standards
Tunnel and Encapsulation
SupportIncluding L2TP v1/2, MPLS, PPPoE, GRE, GTP, 6rd, Teredo, SNAP, DS-Lite/MAP-E

IP Version

IPv4, IPv6

Access Technology Support

2G, 3G, 4G/LTE, CDMA, DOCSIS, WiMAX, DSL, FTTx, PON

Product Options
Network Analytics

Real-time/Long-Term Monitoring and Reporting

High Availability

Active redundancy (1:1, 1+1), Bypass

Asymmetric Traffic ControlYes

Physical Characteristics
Form Factor

1U 19” rack mount2U 19” rack mount2U 19” rack mount2U 19” rack mountSize

4.29 x 43.46 x 70.7 cm

8.7 x 44.5 x 72 cm

8.73 x 4.45 x 73.02 cm,

8.73 x 4.45 x 73.02 cm,

without Bezel

without Bezel

Weight13.04 kg

20 kg

19.5 kg

17.7 kgPower (PSU input/output)

100 to 120 VAC,

Dual Hot Plug

Dual Hot Plug, Redundant

Dual Hot Plug, Redundant

200 to 240 VAC,

100 to 127 VAC,

100/240VAC or -48VDC,

100/240VAC or -48VDC,

500W

200 to 240 VAC

efficiency of up to 94%,

efficiency of up to 94%,

750 W

Energy star, 80PLUS, 800W

Energy star, 80PLUS, 800W

1979 BTU/hr (at 100 VAC), 1911 3357 BTU/hr (at 100VAC)

3207 BTU/hr (at 100 VAC),

3207 BTU/hr (at 100 VAC),

BTU/hr (at 200 VAC), 1965

3269 BTU /hr (at 200VAC)

3071 BTU/hr (at 200 VAC),

3071 BTU/hr (at 200 VAC),

BTU/hr (at 240 VDC) for China

3269 BTU /hr (at 240 VDC)

3112 BTU/hr (at 240 VAC) for

3112 BTU/hr (at 240 VAC) foronlyfor China only

China only

China only

10° to 35°C (50° to 95°F),

10°C to 35°C (50°F to 95°F),

10°C to 35°C (50°F to 95°F),

10°C to 35°C (50°F to 95°F),

Relative humidity (%RH) 8%

Relative humidity (%RH) 8%

Relative humidity (%RH) 8%

Relative humidity (%RH) 8%

to 90%

to 90%

to 90%

to 90%

Operating Temperature/Environment* Throughput values in this document were measured in the Allot lab under specific use cases and settings.
Actual throughput and performance metrics depend on enabled features, policy configuration, traffic mix, and other deployment characteristics.

Technical Specifications

Service Gateway 9000 Series

Allot Service Gateway 9000 Series Appliances
Allot SG-9008

Allot SG-9100 V2

Allot SG-9500

Availability
System Redundancy

Redundancy for PSUs and fans (PSU optional on SG-9008)

Hardware Bypass

Independent, passive bypass unit

Bypass Configuration (up to twoper SG)

8 port copper Bypass Unit

External 1U 19” rack mount, 2.44kg (5.38lb)

8 port Single/Multi-Mode Bypass Unit

External 1U 19” rack mount, 2.64kg (5.82lb)

16 port Single/Multi-Mode Bypass Unit

External 1U 19” rack mount, 2.86kg (6.3lb)

24 port Single/Multi-Mode Bypass Unit

External 1U 19” rack mount

4 100Gbps ports Multi-Mode Bypass Unit
Standards Compliance
SafetyUL60950
CECB

EMC (ElectromagneticCompliance)

FCCCEVCC

Environmental

RoHS, China RoHS
WEEE
REACH

Allot Service Gateway 9700
Allot SG-9700
Capacity
Throughput per Platform *300 Gbps

Throughput per Cluster *2 Tbps; up to 10 devices

Number of Connections / Flows

80,000,000 / 160,000,000

Number of registered Users /Subscribers

10,000,000

Number of Static Lines /Pipes / Virtual Channels

512 / 5,000 / 15,000

Number of Active Lines /Pipes / Virtual Channels

10,512 / 250,000 / 500,000

Standards
Ethernet Interfaces

Management

Configuration A

Configuration B

Configuration C

40 ports of 10GE

8 ports of 100GE

4 ports of 100GE(8QSFP with breakout cables)(QSFP28):(QSFP28):

10GBASE-SR/LR

100GBASE-SR4/LR4100GBASE-SR4/LR4PlusPlus

8 ports of 1GE /10GE (SFP+):

24 ports of 1GE /10GE (SFP+):

1GBASE-LX/SX

1GBASE-LX/SX

1 GE Copper (RJ45)

1 GE Copper (RJ45)

10GBASE-SR/LR

10GBASE-SR/LR

2 x 10 Gigabit Ethernet or
2 x 1 Gigabit Ethernet

Networking Standards
Tunnel and Encapsulation
SupportIncluding L2TP v1/2, MPLS, PPPoE, GRE, GTP, 6rd, Teredo, SNAP, DS-Lite/MAP-E

IP VersionIPv4, IPv6Access Technology Support

2G, 3G, 4G/LTE, CDMA, DOCSIS, WiMAX, DSL, FTTx, PON* Throughput values in this document were measured in the Allot lab under specific use cases and settings.
Actual throughput and performance metrics depend on enabled features, policy configuration, traffic mix, and other deployment characteristics.

Technical Specifications

Service Gateway 9000 Series

Allot Service Gateway 9700
Allot SG-9700
Product Options
Network Analytics

Real-time/Long-Term Monitoring and Reporting

High Availability

Active redundancy (1:1, 1+1), Bypass

Asymmetric Traffic ControlYes

Physical Characteristics
Form Factor

1U 19” rack mountSize

8.73 x 44.54 x 67.94 cm (3.44 x 17.54 x 26.75 in), without Bezel

WeightConfiguration A

Configuration B

Configuration C18.5 kg

17.7 kg

18.5 kgPower (PSU input/output)

Dual Hot Plug, Redundan t 100/240VAC or -48VDC, efficiency of up to 94%, Energy star, 80PLUS 800W
3207 BTU/hr (at 100 VAC), 3071 BTU/hr (at 200 VAC), 3112 BTU/hr (at 240 VAC) for China only

Operating Temperature/Environment

10°C to 35°C (50°F to 95°F)
Relative humidity (%RH) 8% to 90%

Availability
System Redundancy

Redundancy for PSUs and fans

Hardware Bypass

Independent, passive bypass unit

Bypass Configuration (up to twoper SG)

8 port copper Bypass Unit
HD-8 port Single/Multi-Mode Bypass Unit
HD-16 port Single/Multi-Mode Bypass Unit
HD-24 port Single/Multi-Mode Bypass Unit
4 100Gbps ports Multi-Mode Bypass Unit

Standards Compliance
SafetyUL60950
CECB

EMC (ElectromagneticCompliance)

FCC
CE
VCCI
ICES

Environmental

RoHS, China ROHS
WEEE
REACH

P/N D265059 May 2020

See. Control. Secure.
© 2019 Allot Ltd. All rights reserved. Allot, Sigma and NetEnforcer and the Allot logo are trademarks of Allot. All other brand or product names are the trademarks of their respective holders. The informationin this document is for reference purpose only and constitutes neither an offer, a commitment nor an acceptance. Allot may change the information at any time without notice.
www.allot.com