LightBox LB30
Small offices and branches
- Firewall
- 900 Mbps
- UTM / NGFW
- 90 Mbps
- Sessions
- 150,000
- Ports
- 4 × GbE
Next-generation UTM firewall
One box at the edge. Every layer of defense in it.
Quedra UTM Firewalls are next-generation, unified threat management appliances. Firewall, intrusion prevention, antivirus, URL and application control, SD-WAN, VPN and a built-in HotSpot run together on one appliance, sized from the smallest branch to the headquarters.
Appliance family4 models
LightBox desktop units for branches · BigBox rack units for headquarters. Every model runs the same software and is managed the same way.
The range
Four appliances, one operating system.
LightBox desktop models protect offices and branches. BigBox rack models carry multi-gigabit traffic at headquarters and data centers. All four support SD-WAN.
LightBox LB60
Growing offices and busy branches
- Firewall
- 1,200 Mbps
- UTM / NGFW
- 120 Mbps
- Sessions
- 200,000
- Ports
- 4 × GbE
BigBox BB500
Mid-size and enterprise sites
- Firewall
- 3,000 Mbps
- UTM / NGFW
- 500 Mbps
- Sessions
- 1,000,000
- Ports
- 8 × 2.5G + 2 SFP+
BigBox BB1000
Enterprise headquarters and data centers
- Firewall
- 5,000 Mbps
- UTM / NGFW
- 1,000 Mbps
- Sessions
- 1,600,000
- Ports
- 8 × 2.5G + 2 SFP+
Specifications
Compare the models.
| Specification | LightBox LB30LightBox · desktop | LightBox LB60LightBox · desktop | BigBox BB500BigBox · 19-inch rack | BigBox BB1000BigBox · 19-inch rack |
|---|---|---|---|---|
| Performance | ||||
| Firewall throughput | 900 Mbps | 1,200 Mbps | 3,000 Mbps | 5,000 Mbps |
| UTM / NGFW throughput | 90 Mbps | 120 Mbps | 500 Mbps | 1,000 Mbps |
| IPS throughput | 100 Mbps | 100 Mbps | 500 Mbps | 800 Mbps |
| Antivirus throughput | 80 Mbps | 80 Mbps | 350 Mbps | 400 Mbps |
| IPsec VPN throughput | 90 Mbps | 90 Mbps | 550 Mbps | 650 Mbps |
| SSL VPN throughput | 60 Mbps | 60 Mbps | 350 Mbps | 450 Mbps |
| Capacity | ||||
| Concurrent sessions | 150,000 | 200,000 | 1,000,000 | 1,600,000 |
| New sessions / second | 15,000 | 20,000 | 75,000 | 110,000 |
| IPsec VPN tunnels | 30 | 60 | 500 | 1,000 |
| SSL VPN tunnels | 30 | 60 | 500 | 1,000 |
| Firewall rules | 1,000 | 2,000 | 5,000 | 5,000 |
| Hardware | ||||
| Interfaces | 4 × GbE RJ45 | 4 × GbE RJ45 | 8 × 2.5GbE RJ45, 2 × SFP+ | 8 × 2.5GbE RJ45, 2 × SFP+ |
| Storage | 240 GB SSD | 240 GB SSD | 256 GB SSD | 256 GB SSD |
| Form factor | Desktop, external PSU | Desktop, external PSU | 19-inch rack, internal PSU | 19-inch rack, internal PSU |
| Dimensions (W × D × H) | 135 × 127 × 39 mm | 135 × 127 × 39 mm | 177 × 125 × 55 mm | 177 × 125 × 55 mm |
| Weight | 0.6 kg | 0.6 kg | 1.3 kg | 1.3 kg |
| Operating temperature | −10 to 60 °C | −10 to 60 °C | −10 to 50 °C | −10 to 50 °C |
Throughput figures are measured under laboratory conditions and vary with traffic mix and enabled services.
Built in
Everything a site needs at its edge.
Threat prevention
Traffic is inspected in depth before it reaches users and servers.
- Next-generation firewall with DPI
- IPS with signature-based detection
- Gateway antivirus and anti-spam
- URL and application filtering
- DoS and botnet protection
SD-WAN & routing
Links, branches and clouds are joined and balanced from the same box.
- SD-WAN with WAN load balancing and failover
- Static, policy-based and dynamic routing (OSPF, BGP, RIP)
- VLAN, NAT, DHCP and PPPoE
- Bandwidth management and LACP
- Server load balancing
VPN & HotSpot
Remote users, branches and guests connect under one policy.
- IPsec, SSL VPN and OpenVPN
- Site-to-site and remote access
- Built-in HotSpot with captive portal
- SMS, LDAP, RADIUS and Active Directory login
- Two-factor authentication
Logging and services
Proof of what happened, and protection that stays current.
Detailed logging
Syslog export, detailed activity logs and a live dashboard on every model.
Regulatory logs
Log retention designed for local rules such as Law 5651 in Türkiye.
Security services
Signature and filtering updates through an online-activated subscription.
1, 2 or 3 years
Each appliance is sold with a security service subscription of one, two or three years.
Questions
Choosing and buying a Quedra UTM Firewall.
How do I pick the right model?
Start from the internet bandwidth you need to inspect and the number of users and sites. Tell us those and we will recommend a model and a subscription term.
Is the security service subscription required?
Yes. Each appliance is activated online with a one-, two- or three-year security service subscription that keeps signatures and filters up to date.
Can the firewall run guest Wi-Fi as well?
Yes. HotSpot is built in, with a captive portal and SMS, LDAP, RADIUS or directory login. For many sites or operator scale, use Quedra HotSpot.
Where can I buy?
Through Quedra partners and distributors. Contact us and we will connect you with one near you.
One stack
Works with the rest of the Quedra stack
Size the right firewall for your site.
Send us your bandwidth, user count and number of sites, and we will recommend a model and subscription.