CSG-800BE — Dual 10G Cybersecurity Gateway with Wi-Fi 7 5100BE

Descripción

Enterprise Cybersecurity Gateway for Intelligent Threat Protection The PLANET CSG-800BE is an enterprise-grade cybersecurity gateway designed to protect modern business, industrial, and critical infrastructure networks through comprehensive threat protection, identity-based access control, and high-performance VPN connectivity. By integrating built-in IDS/IPS , Layer 7 Deep Packet Inspection (DPI) , security monitoring, Zero Trust authentication , and Hybrid VPN into a unified security platform, the CSG-800BE enables organizations to proactively defend against cyber threats while ensuring secure and reliable network communications. Powered by a high-performance quad-core processor with dual 10G WAN interfaces, Secure Boot, Hardware TRNG, and PQC-ready TLS architecture, it delivers enterprise-class performance, trusted platform security, and flexible deployment for distributed enterprise environments. Advanced Threat Protection with Built-in IDS/IPS and Layer 7 Deep Packet Inspection The CSG-800BE integrates built-in Intrusion Detection and Prevention (IDS/IPS) with Layer 7 Deep Packet Inspection (DPI) to continuously inspect network traffic and identify malicious activities before they impact business operations. By analyzing application-layer traffic in real time, the gateway detects known threats, blocks suspicious connections, enhances application visibility, and helps organizations minimize cyber risks while maintaining stable, reliable, and high-performance network operations. Continuous Security Monitoring with Security Log and Scheduled Signature Updates The CSG-800BE provides comprehensive security logs , event reports , and Scheduled Signature Updates to simplify cybersecurity management and improve threat visibility. Administrators can efficiently monitor network activities, analyze security incidents, and quickly identify potential threats, while continuously updated threat signatures ensure protection against newly emerging cyber attacks without manual intervention, maintaining an up-to-date security posture with reduced management effort. Zero Trust–Protected VPN Access with Identity-Based Authentication The CSG-800BE adopts a Zero Trust architecture by verifying every administrator, user, and device before granting access to enterprise resources. Supporting FIDO2 Passkey authentication , TOTP-based MFA, certificate-based authentication, and optional RADIUS integration , it strengthens identity verification and enables secure VPN access while reducing the risks of credential compromise, unauthorized access, and lateral movement across distributed enterprise environments. Secure Boot for Trusted System Integrity The CSG-800BE incorporates Secure Boot technology to ensure that only authenticated and trusted firmware is executed during system startup. Combined with a built-in Hardware True Random Number Generator (TRNG) for secure cryptographic key generation and Post-Quantum Cryptography (PQC)-ready TLS architecture, it establishes a trusted hardware foundation that protects against firmware tampering and strengthens long-term cybersecurity resilience. Automatic Failover between Dual WAN Featuring 10GBASE-T RJ45 and 10GBASE-X SFP+ WAN interfaces, the CSG-800BE supports intelligent Dual-WAN failover to maintain uninterrupted Internet connectivity. When the primary WAN connection becomes unavailable, the secondary WAN interface automatically takes over, ensuring continuous network operation and minimizing downtime for business-critical applications. Flexible WAN Interface Enables Extension of Network Deployment The CSG-800BE provides flexible WAN deployment through its 10G RJ45 and 10G SFP+ interfaces, allowing administrators to choose copper or fiber connectivity according to deployment requirements. Supporting long-distance fiber transmission and high-speed Ethernet connectivity, it enables secure, scalable, and flexible network expansion for headquarters, branch offices, data centers, and industrial facilities. Cybersecurity Network Solution to Minimize Security Risks The cybersecurity feature included to protect the switch management in a mission-critical network virtually needs no effort and cost to install. For efficient management, the CSG-800BE is equipped with HTTPS web and SNMP management interfaces. With the built-in web-based management interface, the CSG-800BE offers an easy-to-use, platform independent management and configuration facility. The CSG-800BE supports SNMP and it can be managed via any management software based on the standard SNMP protocol. With support for advanced security mechanisms such as Secure Boot and PQC TLS readiness, the CSG-800BE ensures long-term protection against evolving cyber threats, including quantum-era attacks. Excellent Ability in Threat Defense The CSG-800BE integrates Stateful Packet Inspection (SPI), Intrusion Detection and Prevention (IDS/IPS), Layer 7 Deep Packet Inspection (DPI), and DoS/DDoS mitigation technologies to provide comprehensive threat protection. Thus, virtual server and DMZ functions can let you set up servers in the Intranet and still provide services to the Internet users. High-Availability VPN Security Router Designed for SMB Applications The CSG-800BE ensures strong data privacy and secure remote access through its comprehensive VPN suite. It supports IPSec VPN with DES/3DES/AES encryption and MD5, SHA-1, SHA-256, SHA-384, and SHA-512 authentication, as well as GRE tunneling, SSL VPN, PPTP, L2TP, and WireGuard for modern, lightweight, high-speed encrypted connections. With this extensive VPN capability, the CSG-800BE provides secure, flexible, and resilient connectivity for branch sites, remote workers, and sensitive business operations. Flexible Routing with NAT Disable Capability The CSG-800BE supports NAT disable functionality, allowing it to operate in pure routing mode for advanced network deployment scenarios. This feature is particularly beneficial for environments requiring end-to-end IP transparency, such as enterprise backbone networks, data centers, or integration with upstream security systems. By disabling NAT, administrators can achieve greater control over traffic flow and routing policies. Ultra-Wide Channel for High-Speed Wi-Fi 7 Connectivity The CSG-800BE supports up to 160 MHz channel bandwidth and delivers a peak wireless transmission rate of up to 5100 Mbps. Designed for commercial environments, it provides the speed, efficiency, and reliable performance required for bandwidth-intensive network services. Higher Throughput with 4096-QAM With 4096-QAM encoding, the XVR-800BE transmits more data within each signal, increasing wireless throughput and transmission efficiency. It is ideal for high-bandwidth applications such as 4K/8K video streaming, AR/VR experiences, and real-time cloud services. Reliable Dual-Band Wireless Connectivity Supporting concurrent 2.4 GHz and 5 GHz wireless connectivity, the CSG-800BE provides flexible coverage and high-speed data transmission. Its robust dual-band design maintains stable and reliable connections in high-density or interference-prone commercial environments. Maximizing Work Efficiency with PLANET SD-WAN Gateway PLANET CSG-800BE incorporated in SD-WAN (software-defined wide area network) function can greatly increase WAN optimization for multiple WAN links to be managed. With SD-WAN, users can connect any application across all available network connections at every site. It improves application performance and provides a high-quality user experience for increasing business productivity and reducing IT costs. Integrated Wi-Fi Management for Secure and Easy Deployment The CSG-800BE integrates an AP Controller, Captive Portal, RADIUS authentication, and DHCP server to streamline Wi-Fi deployment for small and medium-sized businesses. These built-in services eliminate the need for external servers, enabling administrators to centrally manage APs, enforce access policies, and deliver secure employee and guest Wi-Fi networks with reduced setup complexity. Centralized Remote Control of Managed APs Through its intuitive web-based interface, the CSG-800BE allows easy centralized control of PLANET Smart APs, with simple configuration of SSIDs, radio settings, and security policies. A quick four-step setup pushes wireless profiles to multiple APs or groups at once, enabling fast rollout and reduced deployment cost. Administrators can cluster APs of the same model for unified management, flexibly expand or remove APs, and perform bulk provisioning or firmware upgrades—all from a single control point. This ensures scalable, efficient, and low-maintenance Wi-Fi management. Intelligent SFP Diagnosis Mechanism The CSG-800BE supports SFP-DDM (digital diagnostic monitor) function that greatly helps network administrator to easily monitor real-time parameters of the SFP, such as optical output power, optical input power, temperature, laser bias current, and transceiver supply voltage. PLANET CloudNMS – Cloud-Based Universal Network Management PLANET’s CloudNMS platform and mobile app empower IT staff to remotely manage all network devices and Powered Devices (PDs) in real time. Designed for enterprises and industries, CloudNMS minimizes the need for on-site troubleshooting by providing centralized monitoring, fault detection, and instant alerts. With CloudNMS , businesses can manage diverse network deployments more efficiently , securely , and intelligently —all from a single cloud-based platform. Applications Intelligent Threat Detection for Enterprise Network Security The CSG-800BE provides comprehensive cybersecurity protection for enterprise headquarters, branch offices, and industrial networks by continuously inspecting inbound and outbound traffic with built-in IDS/IPS and Layer 7 Deep Packet Inspection (DPI) . It automatically detects malicious activities, blocks cyber threats, and provides application-level visibility, while security logs , event reports , and Scheduled Signature Updates enable administrators to monitor security events and respond quickly to newly emerging threats. This proactive security architecture helps organizations maintain continuous protection without interrupting normal network operations. Secure Wi-Fi 7 Connectivity with Centralized Network Management The CSG-800BE combines Wi-Fi 7 5100BE wireless connectivity with enterprise cybersecurity and centralized network management for small and medium-sized businesses. With built-in AP Controller , Captive Portal , RADIUS authentication , and DHCP server , administrators can efficiently deploy and manage secure employee and guest networks. Integrated IDS/IPS , Layer 7 DPI , and firewall protection further help protect wired and wireless communications from potential cyber threats. Key Features Highlights Wi-Fi 7 5100BE dual-band wireless connectivity with up to 5100Mbps Trusted platform security with Secure Boot and hardware TRNG Advanced threat protection with IDS/IPS, Layer 7 DPI, content filtering and application visibility Zero Trust and identity-based access with FIDO2 Passkey, TOTP MFA, certificate authentication and ZTNA Multi-protocol VPN with IPSec, OpenVPN, WireGuard, GRE, PPTP and L2TP PQC-ready TLS architecture for post-quantum migration Dual 10G WAN interfaces with SD-WAN, load balancing, automatic failover and High Availability Integrated AP Controller, Captive Portal, RADIUS, CloudNMS and security monitoring Hardware 4 10/100/1000BASE-T RJ45 ports 1 1G/2.5G/5G/10GBASE-T RJ45 Port for WAN/LAN interface 1 1G/2.5G/10GBASE-X SFP+ slot for WAN/LAN interface 1 USB port for system configuration backup and restoration Reset button Desktop installation or rack mounting Wi-Fi 7 Wireless Interface Supports Wi-Fi 7 (802.11be) dual-band wireless connectivity Provides combined wireless speeds of up to 5100Mbps , with approximately 689Mbps at 2.4GHz and 4324Mbps at 5GHz Supports up to 160MHz channel bandwidth Supports 4096-QAM (4K-QAM) for increased wireless throughput Advanced MIMO technology for high-performance wireless connectivity Dual-band 2.4GHz and 5GHz operation for flexible wireless deployment Trusted Platform Security Secure Boot to ensure only authenticated and trusted firmware is executed during system startup Hardware TRNG (True Random Number Generator) for high-entropy cryptographic key generation Security design follows EU Cyber Resilience Act (CRA) principles Firewall & Traffic Control Stateful Packet Inspection (SPI) firewall MAC Filtering and IP Filtering NAT ALGs (Application Layer Gateway) Port forwarding and DMZ support Advanced Threat Protection & Application Security Intrusion Detection and Prevention (IDS/IPS) Layer 7 Deep Packet Inspection (DPI) Application-level traffic visibility Content Filtering DoS/DDoS mitigation SYN/ICMP flooding protection Automatic and scheduled threat signature updates Zero Trust & ZTNA Zero Trust access control Identity-based access policy Built-in ZTNA for secure application-level access Zero Trust-protected VPN access Identity-based VPN authentication Identity, Authentication & Access Services FIDO2 Passkey authentication TOTP-based multi-factor authentication (MFA/2FA) Certificate-based authentication RADIUS Server/Client Captive Portal for controlled employee and guest access VPN & Secure Tunneling IPSec/Remote Server (Net-to-Net, Host-to-Net) GRE, PPTP Server L2TP Server SSL Server/Client (OpenVPN, compatible with VPN services such as Surfshark and NordVPN) WireGuard Server/Client Encryption methods: DES, 3DES, AES, AES-128/192/256 Authentication methods: MD5, SHA-1, SHA-256, SHA-384, SHA-512 Supports up to 100 concurrent SSL VPN connections Cryptography & Quantum Readiness PQC-ready TLS architecture for future post-quantum cryptographic migration Routing, SD-WAN & WAN Optimization Static Route Dynamic Route OSPF SD-WAN for multi-WAN traffic optimization Outbound load balancing NAT disable support for pure routing mode deployment High Availability & WAN Resilience Automatic failover for dual-WAN High Availability (HA) Network Services Static IP/PPPoE/DHCP client for WAN DHCP server and NTP client for LAN Protocols: TCP/IP, UDP, ARP, IPv4, IPv6 QoS, IGMP and UPnP MAC address clone DDNS: PLANET DDNS, Easy DDNS, DynDNS and No-IP Wireless & AP Management Built-in AP Controller for centralized PLANET Smart AP management Centralized SSID, radio and security policy provisioning Bulk AP provisioning and firmware upgrade System Management, Monitoring & Reporting Setup wizard Dashboard for system and security monitoring Security log viewer and event reports SFP-DDM (Digital Diagnostic Monitor) Secure management access via HTTPS; HTTP access supported SNMPv1, SNMPv2c and SNMPv3 management Auto reboot PLANET NMS System and Smart Discovery Utility for deployment management PLANET CloudNMS app for real-time monitoring

Especificaciones técnicas

Ethernet

4 10/100/1000BASE-T RJ45 Ethernet ports (Port 1 to 4) 1 1G/2.5G/5G/10GBASE-T RJ45 port (Port 5) Supports WAN port mode or LAN port mode over software configuration

Fiber

One 1G/2.5G/10GBASE-X SFP+ port (Port 6) Supports WAN port mode or LAN port mode over software configuration

USB Port

1 USB 2.0 port for system configuration backup and restoration

Reset Button

Reset to factory default

Thermal Fan

1

LED Indicators

System: PWR, Internet ( Green ) Wireless Interfaces (2.4G & 5G) LNK/ACT ( Green ) Ethernet Interfaces (Port 1-4): 10/100/1000 LNK/ACT ( Green ) Ethernet Interfaces (Port 5): 1G/2.5G/5G/10G LNK/ACT ( Green ) Fiber Interfaces (Port 6): 1G/2.5G/10G LNK/ACT ( Green )

Installation

Desktop installation or rack mounting

Power Requirements

100-240V AC, 50/60Hz, auto-sensing

Power Consumption / Dissipation

Max. 3.3 watts/10.92 BTU (Power on without any connection) Max. 11 watts/37.53 BTU (Full loading)

Weight

1725g

Dimensions (W x D x H)

330.2 x 200 x 43.1 mm, 1U height

Enclosure

Metal

Wireless Standard

IEEE 802.11be (Wi-Fi 7)

Frequency Band

2.4GHz and 5GHz

Wireless Data Rate

Up to 5100Mbps

2.4GHz Data Rate

Up to approximately 689Mbps

5GHz Data Rate

Up to approximately 4324Mbps

Channel Width

Up to 160MHz

Modulation

4096-QAM (4K-QAM)

MIMO

Advanced MIMO technology

Firewall Security

Hardware TRNG for secure cryptographic key generation Stateful Packet Inspection (SPI) Security log and event reporting Automatic threat signature updates Blocks DoS/DDoS attack Role-based access policy enforcement

ALG (Application Layer Gateway)

SIP, RTSP, FTP, H.323, TFTP

NAT

Port forwarding DMZ Host UPnP NAT disable (supports routing mode)

Content Filtering

MAC filtering IP filtering Web filtering

Bandwidth Management

Outbound load balancing Failover for dual-WAN QoS (Quality of Service)

Zero Trust

Zero Trust access control with identity verification Multi-factor authentication via external hardware security key support

Intrusion Prevention System

Intrusion Detection and Prevention (IDS/IPS) Layer 7 Deep Packet Inspection (DPI) Application-level traffic visibility

Secure Boot

Establishes a Chain of Trust (CoT) across all boot stages via cryptographic image signature verification

Operation Mode

Routing mode

Routing Protocol

Static Route, Dynamic Route (RIP), OSPF

VLAN

802.1q Tag-based, Port-based, Multi-VLAN

Multicast

IGMP Proxy

NAT Throughput

Max. 9.4Gbps

Outbound Load Balancing

Supported algorithms: Weight

Protocol

IPv4, IPv6, TCP/IP, UDP, ARP, HTTP, HTTPS, NTP, DNS, PLANET DDNS, PLANET Easy DDNS, DHCP, PPPoE, SNMPv1/v2c/v3

Key Features

HA (High Availability) Captive Portal RADIUS Server/Client AP Control

VPN Function

IPSec (Net-to-Net, Host-to-Net) IPSec Remote Server GRE PPTP Server L2TP Server SSL Server SSL Client (Open VPN, Surfshark, NordVPN, PureVPN) WireGuard VPN Server/Client

VPN Tunnel Capacity by Protocol

IPSec: 16 GRE: 5 PPTP: 100 SSL VPN: 200

VPN Throughput

L2TP (1Gbps): 145~463Mbps L2TP (10Gbps): 483~885Mbps L2TP/IPSec (1Gbps): 150~334Mbps L2TP/IPSec (10Gbps): 438~498Mbps IPSec/AES128 (1Gbps): 894~910Mbps IPSec/AES128 (10Gbps): 1,110~1,310Mbps IPSec/AES256 (1Gbps): 752~842Mbps IPSec/AES256 (10Gbps): 864~1,080Mbps WireGuard (1Gbps): 815~883Mbps WireGuard (10Gbps): 1,430~1,890Mbps

Encryption Methods

DES, 3DES, AES or AES-128/192/256 encryption PQC TLS (Post-Quantum Cryptography TLS) ready Supports Hybrid Post-Quantum TLS key exchange using ML-KEM (Kyber)

Authentication Methods

SHA-256/SHA-384/SHA-512 authentication algorithm TLS_KYBER_RSA_WITH_AES_256_GCM_SHA384 FIDO2 Passkey authentication Certificate-based authentication TOTP MFA RADIUS authentication

Basic Management Interfaces

Web browser SNMP v1, v2c PLANET Smart Discovery utility/UNI-NMS supported PLANET NMS System/CloudNMS

Secure Management Interfaces

SSHv2, TLSv1.3, SNMP v3

System Log

System Event Log Security Log Event Report Scheduled Signature Update

Others

Setup wizard Dashboard System status/service Statistics Security Monitoring Dashboard Connection status Auto reboot Diagnostics

Regulatory Compliance

CE, FCC

Operating

Temperature: 0 ~ 50 degrees C Relative Humidity: 5 ~ 95% (non-condensing)

Storage

Temperature: -10 ~ 60 degrees C Relative Humidity: 5 ~ 95% (non-condensing)