Theme Colors
Layouts
Wide Boxed

Carrier Grade URL Filter Solution

SNI Based SSL Interception

TRscaler URL Filter is looking for the configured domains matching with the SNI name passed by the client. Once a match is found, the SSL session will be intercepted

HTTPS URL FILTERING

TRscaler URL Filter keeps all the other X.509 attributes that are already present in the server certificate, including the green bar extended validation attributes.

PARALLEL CLUSTER

In parallel mode, all traffic will be shared by each TRscaler parallel devices. These nodes use the hash of the source and destination addresses of the IP packet.

HTTPS (SSL INTERCEPTION) URL FILTERING

When configured for SSL Interception, TRscaler URL Filter will listen for incoming connections. Before accepting and negotiating the incoming SSL connection as a server, it will look up the original destination address on the socket, and pre-connect to the target server as an SSL client (with client IP address) to obtain the remote SSL certificate. TRscaler URL Filter will update or "patch" the obtained SSL certificate by replacing the included public key with its local server key because it doesn\t have the private key of the remote server certificate. It also updates the X.509 issuer name to the local CA or local Intermediate CA subject name and signs the certificate with its local CA or local intermediate.

SNI & SSL V3.0

TRscaler URL Filter is looking for the configured domain names matching with the SNI-name passed by the client. If no match is found, then allow them directly. Once a match is found, the SSL connection will be intercepted. Not all clients are compatible with SNI. Some web browsers are still not compatible with TLS protocol extension. For SSL v3.0 connections, TRscaler gives 3 alternative ways. 1. Do not touch 2.filter all SSL sessions 3.redirect to another SSL web site.

PARALLEL CLUSTER

In parallel mode, all traffic will be shared by each TRscaler parallel devices. These nodes use the hash of the source and destination addresses of the IP packet to determine which node should accept the packet. This will cause TRscaler to use a multicast MAC address, forcing the switch to send incoming traffic to all nodes in the redundancy group. Each group can use maximum 32 physical devices.

URL AUTOMATION

TRscaler URL Filter can update local URL lists from central management (CM). CM lists can be updated from multi user and location at the same time. CM also automatically can get new updates from different locations

Multi Language Web GUI

Unique flat design and responsive layout is crafted one of a kind. Supports over tens of languages. English, Arabic, Persian, Turkish , etc. Voice commands, (supported by all browsers that have speech recognition.)

Real Time Monitoring

Real-Time Monitoring Tool allows you to monitor a set of predefined management objects that monitor the health of the system. Generate various alerts, in the form of emails, for objects when values go over/below user-configured thresholds and work with performance - monitoring counters. Android phones and tablets, iOS devices are supported

HTTP URL FILTERING

TRscaler URL Filter already supports running as an ultra speed transparent non-caching HTTP proxy that can be used for URL filtering and policy enforcements

When configured for SSL Interception, TRscaler URL Filter will listen for incoming connections. Before accepting and negotiating the incoming SSL connection as a server, it will look up the original destination address on the socket, and pre-connect to the target server as an SSL client (with client IP address) to obtain the remote SSL certificate. TRscaler URL Filter will update or "patch" the obtained SSL certificate by replacing the included public key with its local server key because it doesn't have the private key of the remote server certificate. It also updates the X.509 issuer name to the local CA or local Intermediate CA subject name and signs the certificate with its local CA or local intermediate.

TRscaler URL Filter already supports running as an ultra speed transparent non-caching HTTP proxy that can be used for URL filtering and policy enforcements

TRscaler URL Filter is looking for the configured domain names matching with the SNI-name passed by the client. If no match is found, then allow them directly. Once a match is found, the SSL connection will be intercepted. Not all clients are compatible with SNI. Some web browsers are still not compatible with TLS protocol extension. For SSL v3.0 connections, TRscaler gives 3 alternative ways. 1. Do not touch 2.filter all SSL sessions 3.redirect to another SSL web site.

Not all clients are compatible with SNI. Some web browsers are still not compatible with TLS protocol extension. For SSL v3.0 connections, TRscaler gives 3 alternative ways.

  • Do not touch SSL traffic for unknowing domains
  • Filter all SSL sessions
  • Redirect to another SSL web site for unknowing domains

TRscaler URL Filter can work with root CA or intermediate CA certificates

In parallel mode, all traffic will be shared by each TRscaler parallel devices. These nodes use the hash of the source and destination addresses of the IP packet to determine which node should accept the packet. This will cause TRscaler to use a multicast MAC address, forcing the switch to send incoming traffic to all nodes in the redundancy group. Each group can use maximum 32 physical devices.

WITHOUT LOOSING CLIENT IP
CENTRAL MANAGEMENT
CUSTOM LOG MANAGEMENT
CUSTOM URL LIST AUTOMATION
MILLIONS OF URL SUPPORT
ON THE FLY URL LIST RELOAD
MULTI-LANGUAGE WEB GUI
EMBEDDEB FIREWALL
REAL-TIME MONITORING
HW Models
TR-5150
TR-8877
TR-8993
TR-8895
TR-7120
TR-10520
Platform attributes
Processor Intel® Xeon® Processor E3-1200 Series Intel® Xeon® Processor E5-2600 Series Dual Intel® Xeon® Processor E5-2600 Series Intel® Xeon® Processor E5-2600 Series Dual Intel® Xeon® Processor E5-2600 Series Quad Intel® Xeon® Processor E5-2600 Series
Core/Thread 4 Core / 8 Thread 8 Core / 16 Thread 2 x (10 Core / 20 Thread) 2 x (8 Core / 16 Thread) 2 x (6/8 Core / 12/16 Thread) 4 x (8 Core / 16 Thread)
Memory 32 GB 64 GB 128 GB 128 GB 96 GB (up to 384 GB) 128 GB (up to 256 GB)
Ethernet ports* 8 x GbE copper RJ45 ports
1xNetwork Module
4x Network Modules 14 x GbE copper RJ45 ports
6 x 10G SFP+
A-8x Network Modules (Up to 64 x GbE)
D-4x Network Modules(Up to 32 x GbE)
5x Network Modules* (Up to 40 x GbE) 14 x GbE copper RJ45 ports,
6 x 10G SFP+
Transceivers 10GE SFP+: SR, LR;
1 GE SFP: SX, LX
10GE SFP+: SR, LR;
1 GE SFP: SX, LX
10GE SFP+: SR, LR 10GE SFP+: SR, LR;
1 GE SFP: SX, LX
10GE SFP+: SR, LR;
1 GE SFP: SX, LX
10GE SFP+: SR, LR;
1 GE SFP: SX, LX
On-Demand Upgradable N/A Yes N/A Yes Yes Yes
Hard Drive 2x1TB SATA or 2x 500GB SSD (RAID) 2x1TB SATA or 2x 500GB SSD (RAID) 1TB SATA or 500GB SSD (RAID) 4x2TB SATA(D) or 2x2TB SSD(A) (RAID) 2x1TB SATA or 2x500GB SSD (RAID) 3x2TB SATA (RAID)
Platform performance
System throughput, Gbps 8 16 40 32 32 64
L7 HTTP requests/sec 400.000 800.000 2.000.000 1.600.000 1.600.000 3.200.000
SSL transactions/sec
(2K key certificates)
5.500 11.000 25.000 22.000 22.000 44.000
Total SSL throughput, Gbps
(* bulk encryption)
2.5 6 15 12 12 24
Compression throughput, Gbps
Intel Compression Benchmark
6 12 30 24 24 48
Platform mechanical, environmental and regulatory
Height 1U 1U 1U 2U 2U 2U
Power Supplies 250W 1+1 redundant power supply 400W 1+1 redundant power supply 650W 1+1 redundant power supply 650W 1+1 redundant power supply 460W 1+1 redundant power supply 910W 1+1 redundant power supply
Input voltage and frequency ranges 100-240VAC full range, 47-63 Hz 100-240VAC full range, 47-63 Hz 100-240VAC full range, 47-63 Hz 100-240VAC full range, 47-63 Hz 100-240VAC full range, 47-63 Hz 100-240VAC full range, 47-63 Hz
Optional DC power supply No No No No Yes Yes
Max power supply 250W 850 BTU/Hr 400W 1360 BTU/Hr 650W 2210 BTU/Hr 650W 2210 BTU/Hr 460W 1564 BTU/Hr 910W 3094 BTU/Hr
Typical power consumption 185W 629 BTU/Hr 300W 1020 BTU/Hr 500W 1700 BTU/Hr 500W 1700 BTU/Hr 360W 1229 BTU/Hr 800W 2720 BTU/Hr
Weight Without packing: 8kg , With packing: 12kg Without packing: 10kg , With packing: 16kg Without packing: 12kg , With packing: 18kg Without packing: 20kg , With packing: 28kg Without packing: 19kg , With packing: 27kg Without packing: 28kg , With packing: 36kg
Chassis Dimensions 44mm x 430mm x 450mm 44mm x 580mm x 438mm 44mm x 550mm x 440mm 87,7mm x 600mm x 444mm 88mm x 579.8mm x 430mm 87mm x 690mm x 444mm
Carton Dimension 560mm x 620mm x 190mm 560mm x 620mm x 190mm 560mm x 620mm x 190mm 640mm x 800mm x 310mm 640mm x 800mm x 310mm 720mm x 960mm x 440mm
Operating temperature 0℃ - 40 ℃ 0℃ - 40 ℃ 0℃ - 40 ℃ 0℃ - 40 ℃ 0℃ - 40 ℃ 0℃ - 40 ℃
Operating / storage -20℃ ~70℃ -20℃~70℃ -20℃~70℃ -20℃ ~70℃ -20℃~70℃ -20℃~70℃
Allowed relative humity 5%-95%, non-condensing 5%-95%, non-condensing 5%-95%, non-condensing 5%-95%, non-condensing 5%-95%, non-condensing 5%-95%, non-condensing
Approvals and Compliance CE approval,FCC Class A, UL CE (EMC), FCC Class A, RoHS CE (EMC), FCC Class A, RoHS CE emission, FCC Class A, RoHS, UL CE approval,ΠFCC Class A,ΠUL CE emission, FCC Class A
Software attributes
Hardware Encryption Intel® Data Protection Technology with AES-NI and Secure Key *optional Intel®Cave Creek Technology Intel® Data Protection Technology with AES-NI and Secure Key *optional Intel®Cave Creek Technology Intel® Data Protection Technology with AES-NI and Secure Key *optional Intel®Cave Creek Technology Intel® Data Protection Technology with AES-NI and Secure Key *optional Intel®Cave Creek Technology Intel® Data Protection Technology with AES-NI and Secure Key *optional Intel®Cave Creek Technology Intel® Data Protection Technology with AES-NI and Secure Key *optional Intel®Cave Creek Technology
Software Encryption Intel ® Integrated Performance Primitives (IPP) crypto Intel ® Integrated Performance Primitives (IPP) crypto Intel ® Integrated Performance Primitives (IPP) crypto Intel ® Integrated Performance Primitives (IPP) crypto Intel ® Integrated Performance Primitives (IPP) crypto Intel ® Integrated Performance Primitives (IPP) crypto
L3 & L7 Security Yes Yes Yes Yes Yes Yes
WAF Yes Yes Yes Yes Yes Yes
GeoDNS Yes Yes Yes Yes Yes Yes
Tired Cache Yes Yes Yes Yes Yes Yes
Max. Cache (RAM) 30 GB 60 GB 120 GB 120 GB 360 GB 240 GB
Max. Cache (DISK) Up to Disk Limit (Stripe RAID) Up to Disk Limit (Stripe RAID) Up to Disk Limit (Stripe RAID) Up to Disk Limit (Stripe RAID) Up to Disk Limit (Stripe RAID) Up to Disk Limit (Stripe RAID)