Allot Traffic Intelligence and Assurance Platform

Secure Service Gateway (SSG)
Assuring excellent Digital
Experience for youremployees and customers

The necessity for your employees and customers toconnect and work productively with mission-criticalapplications, from any location and at any time,
significantly increases your need for full network
visibility, control and security.
The performance and efficiency of your network canbe easily compromised by the ever-increasing demandfor LAN, WAN and Internet bandwidth driven by cloud,mobile and video applications. Moreover, the growing
use of BYOD and shadow IT have opened complex
attack vectors for web threats to infect user devices, getinto your network, and harm business productivity andviability.
Allot Secure Service Gateway (SSG) supports yourdemands with a single, scalable solution for yourevolving requirements for application and user visibility,performance, and security.

Benefitso Increase IT efficiency through rapid
root cause analysis to network andapplications issues
Thanks to its complete visibility andcontrol of business applications
performance, web access, user quality ofexperience, shadow IT and web threats,
Allot SSG enables enterprise's IT to quicklyidentify network and applications qualityof Digital Experience issues.

o Assure business continuity througho Assure employees productivity andpowerful Web Security and Anti-DDoSprotection
Allot SSG helps you embrace andmaximize the business value of cloud(web) applications by detecting andblocking malware, phishing and otherweb threats before they harm application
performance and user productivity.
Allot SSG provides DDoS detection andmitigation. It detects and surgically filters
Hosts and Network Anomaly Behavior
and bot traffic before it affects yournetwork and external networks.

minimize revenue loss, due to network
down time
Real Time troubleshooting of network
and applications issues and rapid
identification of behavioral anomalies inyour network and servers in seconds.

oGrow with your network with low TCO
Allot SSG integrates multiple functionsin an platform that protects yourinvestment and lets you scale from 2
to 20 ports of 1GbE/10GbE network
connectivity in a single appliance.
Allot SSG supports deployment flexibility,available in HW appliance or VirtualEdition.

Features

Secure Service Gateway

Complete Traffic Visibility
Efficient and high performing networks begin with your ability to obtaina 360° view of network traffic and the quality of Digital Experience thatyour employees, customers, and branches are getting from datacenterand cloud applications. It also sheds light on shadow IT, BYOD, andmobile app usage that might otherwise go unnoticed.
Allot Secure Service Gateway monitors network traffic in real timeand delivers full Layer 7+ visibility of application performance,
capacity utilization and network health. Integration with Microsoft
Active Directory provides traffic intelligence per user and perorganizational unit, so you can understand how employees consume
business applications and network resources. The granular traffic
intelligence you get with Allot accelerates root cause analysis so you
can pinpoint the cause of service degradation and quickly resolve
the problem at its source.
Allot Secure Service Gateway also integrates comprehensive web
threat visibility, enabling you to neutralize the impact of malware,phishing, and other web threats as well as inappropriate content that
often accompanies recreational web usage and may cause legal orcompliance concerns for your business. Key visibility features include:o Layer 7 application visibilityo In-line SSL encrypted traffic visibility with no SSL decryptiono Web content and web threat visibility
o User and endpoint visibility with L4-L7 quality of DigitalExperience KPIs

o Dashboard monitoring and analytics
o Live, self-refreshing performance metrics reportingin a granularity of seconds

Dynamic ActionableRecognition
Technology (DART)
Allot’s DART engine, embedded in theplatform inspects every single packet
and classifies traffic per application, user,
IP address, location, and by any staticor dynamic policy element you define.
Allot's extensive application and protocols
classification logic consist on powerful
ML and AI engine, which constantly
adapt to detect new applications andmaintain up-to-date definition logic to
Allot deployed devices. Allot SSG contains
comprehensive signature library which
identifies thousands of web applications
and protocols and also supports userdefined signatures. Automated DART
protocol pack updates from the Allot
cloud keep your deployment up to datewith the latest application and web
developments to ensure accurate trafficclassification.

Enforcement Policy Editor

Granular Traffic Control
Allot Secure Service Gateway allows you to virtually partition LAN,
WAN and Internet resources so that users and applications no longer
compete with one another for bandwidth and Quality of Service (QoS).
The highly granular visibility provided by Allot allows you to act with thesame level of granularity to maintain optimal network efficiency andhigh application performance. Powerful policy tools help you define andenforce Acceptable Use Policy and prioritize applications that are criticalto your business. For example, to improve user experience, you candedicate minimum bandwidth to collaboration applications or prioritize
real-time point-of-sale and inventory transactions over non-essential
traffic. Likewise, you can block access to shadow IT or limit the useof recreational apps that could impact network and data security. Key
control capabilities include:

oCentral and simple QoS policy management

oSupporting hundreds of thousands of dynamic traffic policies

oAutomated QoS policy propagation to all deployed appliancesoAsymmetric QoS policy synchronized in real time
across multiple datacentersoThreshold-based enforcement (e.g., CER, live connections)oActionable alarms

Real-Time Monitor and NetworkMetrics Dashboards

Features

Secure Service Gateway

Web Security

Anti DDoS ProtectionLeft unprotected, your business can easily fall victim to malware,ransomware and other web threats. Allot Secure Service Gateway
combines superior application visibility and control with SSL
inspection and web security so you can prevent malicious attacks
from threatening your optimized network while enabling employees
and customers to use the Internet and cloud applications safely andproductively. Key web security capabilities include:

Allot Secure Service Gateway employs large enterprises anti DDoS
solution to protect your network and data center resources against
DDoS and bot attacks that are designed to flood your network anddisrupt service availability. Every inbound and outbound packet isinspected to ensure no threat goes undetected. Dynamic creation offiltering rules and surgical filtering of DDoS attack packets avoids overblocking and allows legitimate traffic to flow unimpeded, keeping yourbusiness online and protected at all times. Allot also help you pinpoint
host infection and abusive behavior according to abnormal outboundconnection activity and malicious connection patterns, so you cantreat the root cause of outbound spam, worm propagation and portscanning, and eliminate the additional load it puts on your network.

o Internet Threat Visibility: Get a clear picture of online usage andunderstand how web security threats are impacting businessproductivity and viability.

o Web Filtering: Assure safe Internet use and prevent employee
exposure to illegal or inappropriate web content in theworkplace. Set the URLs and content categories you want tofilter; limit access to certain times of the day; enable unblock
requests; and receive admin alerts on filtering events.

Scalability and Lower TCO

o Anti-Malware: Prevent viruses, worms, Trojans, spyware,adware, phishing, and other malware from damaging mobile
devices, infiltrating your network and causing loss of businessdata. Requires no action from users and no resources from theirdevices.

o Risky Apps Control: Block or limit use of risky applications thatare often a conduit for malware insertion, data leakage andcircumvention of your security measures.

Modular licensing of capacity and functionality gives you the ability
to tailor the security and performance levels of Allot Secure Service
Gateway to the evolving needs of your organization. Allot maximizes
your investment and dramatically lowers TCO by integrating visibility,
security and control in a single appliance and providing out-of-thebox support for more static and dynamic QoS policies than any
comparable solution in the market.

SSG/ACG

Paris Remote Office

WFH

VDI

Router(SD-WAN)

Internet

SSG/ACG

Web, EMail,
Citrix Servers

Users / Clients

Madrid Remote Office

WAN / MPLS
Network

SAP / Oracle
SSG

Router(MPLS)Video

SSG/ACGHQ LAN

Users / Clients

Allot SSG Architecture - assures excellent Digital Experience, available
on-premise or on a cloud based virtual edition

Users / ClientsSpecifications

Secure Service GatewaySSG-200/400

SSG-500/600

Maximum Capacity*Throughput

1 Gbps / 8 Gbps

8 Gbps / 40 Gbps

IP Flows

4.5 million

24 million

Number of Traffic Control Policies:
Lines / Pipes / Virtual Channels

512 / 250K / 500K

512 / 1M / 2M

Employee Count Number

60,00090,000 / 180,000

System Interfaces
Ethernet Interfaces

8 x 1GbE (RJ-45)

16 x 1GbE/10GbE (SFP+)

Ethernet Interface Types

1GbE RJ-45 Copper

10GbE SR/LR
1GbE SX/LX
1GbE RJ-45 CopperManagement2 x 1GbE (RJ-45)

2 x 1GbE (RJ-45)

Availability
External BypassIndependent, passive bypass unit. All units are 1U 19" rack mount.

HD Multi-Port Bypass Units

8-port unit 2.44kg (5.38lb); 16-port unit 2.64kg (5.82lb); 24-port unit 2.86kg (6.3lb)

Management

Active-Standby HA on management ports

SystemRedundancy for PSUs and fansDimensions
Appliance form factor

Standard 1U by 19” rack mountStandard 2U by 19” rack mountSize (L x W x H)

429 x 434.6 x 707 mm

Height: 87 mm (3.4 in), width: 445 mm (17.5 in),depth: 720 mm (28.3 in)

Weight (max)13.04 kg

Approximal 20 kg (44 lb)

PowerInput

100 to 120 VAC ,200 to 240 VAC

Dual Hot Plug, 230/115VAC

Number of PSUs

12

PSU Redundancy

Optional

Yes

Total Output Power

500 Watts

750 Watts

Heat Dissipation

1979 BTU/hr (at 100 VAC), 1911 BTU/hr (at200 VAC), 1965 BTU/hr (at 240 VDC) for
China Only

3269 BTU/hour

Operating Environment
Temperature

10° to 35°C

10° to 35°C

Humidity

8% to 90%

Relative humidity (%RH) 8% to 90%

Management
Allot SSG Network Management System is available pre-installed on a 1U server appliance, or as software components designed to run on virtual machines:
VMWare ESXi (vSphere 6.5 or higher) or KVM (RedHat RHEL 7.6 and above). See Allot SSG Network Management System datasheet for details.
Security Capabilities
Allot NetworkSecure is available either embedded in the SSG appliance, standalone appliance or virtual edition, per ordering option. Please refer toNetworkSecure data sheet for more details (https://www.allot.com/resources/DS-NetworkSecure.pdf)
Standards Compliance
SafetyUL60950, CE, CB

UL60950, CE, CB

EMC (Electromagnetic Compliance)

FCC, CE, VCCIFCC, CE, VCCI

Environmental

RoHS, China RoHSWEEEREACH

RoHS, China RoHS
WEEE
REACH

* Actual throughput and performance metrics depend on enabled features, policy configuration, traffic mix, and other deployment characteristics.

Specifications

Secure Service Gateway

Allot Secure Service
Gateway Virtual Edition
Allot Secure Service Gateway Virtual Edition supports popular virtualization platforms enabling easy deployment on any public or private
cloud. Performance specifications are calculated on the basis of virtual cores and assuming an Intel® Xeon® processor with SR-IOV enabled. Actual
throughput performance will be affected by underlying hardware and hypervisor configurations, software licenses, and enabled policies.

Parameters

SSG-VE01

SSG-VE04

SSG-VE08

SSG-VE16

SSG-VE32

vCPU

4481632

RAM

10GB

10GB

20GB

40GB

80GB

100GB

100GB

100GB

100GB

Virtual Storage

100GB

OS

Linus CentOS 7, 64-bit x86

Hypervisor VMWare ESXi / KVM

VMware vSphere 6.5 and above
KVM RHEL version 7.6

Throughput

200Mbps

4Gbps

8Gbps

16Gbps32GbpsIP Flows

8M

8M

16M

32M

64M

Number of Traffic Control Policies:
Lines / Pipes / Virtual Channels

512 / 40k / 80k

512 / 40k /80k

512 / 320k / 640k

512 /640k / 1.3M512 / 1.3M / 2.6M

Employee Count

500240k

480k

960k

1.9M

June 2023© 2023 Allot Ltd. All rights reserved. Specifications subject to change without notice. Allot and the Allot logo are registered trademarks of Allot. All other brand or product names are trademarks of theirrespective holders.
www.allot.com