• High-performance SD-WAN gateway designed for small and medium-sized enterprises

• Quad core 2.2 GHz processor for greater speed and power

• Dual-WAN Fiber SFP+ and 2.5 GbE for maximum performance

• 2.5 GbE PoE+ to power up a Wi-Fi 6E AP, IP camera or IP phone

• Multi-Gig and cellular WAN optimization with built-in load balancing and failover

• Enhance security with a high throughput stateful firewall

• Effortless control with the easiest enterprise-level cloud management platform in the industry

• Auto-VPN with healing and NAT traversal for multi-peer SD-WAN setup

• Seamless and secure VPN Client, SecuPoint to ensure hassle-free remote connections

• Robust and straightforward VLAN configuration for intelligent traffic segmentation

• Real-time visibility into WAN monitoring, VPN status, and network topology

• Passthrough mode for easy integration into existing networks

• TPM chipset to enhance the security level of the gateway

• Intuitive and centralized device visibility from anywhere

• Touchless system maintenance and automatic updates

• Sleek rack mountable compact design

• No licensing or subscription fees needed

CPU Processor
Quad-Core

Operating Frequency
2.2 GHz

Memory
8 GB

Storage
16 GB

Network Ports (Copper Ports)
8 x 10/100/1000/2500 BASE-T, RJ-45 Ethernet ports
2 SFP+ Ports

Console Port
1 x 10/100/1000, RJ-45 Ethernet port

PoE+ Capable Port
4 (802.3af/at) LAN (P1-P4)

Mounting Method
1U Rackmount 13"

USB Interface
1 x USB 3.0

Security Chip
TPM

Firewall (SPI Throughput)
9.5 Gbps

VPN Throughput
1.7 Gbps

Max. TCP Concurrent Sessions
1,500,000

Max. Concurrent VPN Tunnels
300

Max. VLAN
256

Firewall Features
Stateful Packet Inspection
Policy Rules
Port Forwarding
1:1 NAT
Allow Inbound Services
Export Outbound and Port Forwarding Rules
Apply firewall rules universally

Site-to-Site VPN
Mesh VPN/Hub-and-Spoke

Encryption
DES, 3DES, AES (256-bit)

Authentication
MD5, SHA1, SHA2 (512-bit)

Key Management
IKEv1 (x-auth, mode-config)
IKEv2 (EAP, configuration payload)

VPN Features
Site-to-Site VPN
VPN Client – IPSec IKEv1
SecuPoint VPN Client
Policy-based VPN
IPsec NAT traversal (NAT-T)
Dead Peer Detection (DPD)
Auto-VPN Connection
Auto NAT traversal

Operation Mode
Routed/Passthrough

Multiple WANS
Dual-WAN (WAN 1 SFP+ Fiber & WAN 2 /P7)
WWAN Cellular Backup (USB 3.0)

Bandwidth Limit
Per Interface

Traffic Load Balancing
WAN load balancing with WRR

Networking Features
Static Route
Multiple WANs
USB Cellular
User Authentication
PPPoE
VLAN Tagging
Captive Portal
Custom Splash Page
Dynamic Routing
Bandwidth Limiting
Traffic Load Balancing
DHCP client/server/relay
Dynamic DNS support

Power
54V/1.2A

Operating Temperature
0°C to 40°C

Humidity (non-condensing)
5 to 95% non-condensing

Package Contents
1x Cloud Managed SD-WAN Gateway
1x Power cord
1x RJ-45 Console Cable
1x Rackmount Kit

ESG620 Device
Weight: 5.82 lbs. (2.64 kg)
Width: 13” (330 mm)
Length: 9.06” (230 mm)
Height: 1.73” (44 mm)

ESG620 Packaging
Weight: 7.38lbs. (3.35 kg)
Width: 15.43” (392 mm)
Length: 12.20” (310 mm)
Height: 4.05” (103 mm)

Regulatory Compliance
- FCC Part 15 (Class B)
- IC
- CE EMC (Class B)
- RCM
- BSMI

Warranty
5 years

Certifications
CE
FCC
IC