Utm Offload - Allied Telesis AR Series Technical Manual

Feature Overview

UTM Offload

UTM Offload is supported in version 5.4.8-1.2 or later on the AR4050.
How does UTM Offload work?
UTM Offload enables some security and threat protection features (IPS, IP Reputation, Malware
Protection, and URL Filtering) to be offloaded to a secondary physical or virtual machine that is
automatically managed by the AR4050S.
UTM Offload can up to double WAN connection throughput when using these features for real-time
threat protection.
The forwarding device—AR4050S:

boots and manages the offload device.

configures the offload device.

presents the status of all features, whether being processed locally on the AR4050S, or on the
offload device.

uses Service Function Chaining (SFC) methodology to send received traffic to the offload device
for processing.

gets the result of that processing back from the offload device and continues packet processing
as normal.
Figure 4: The forwarding device—AR4050S
Which UTM features can be Offloaded?
Security features are configured as normal on the AR4050S device, but whenever UTM Offload is
enabled, the following advanced threat protection features are all offloaded, if they are configured:

IPS

IP Reputation

Malware Protection

URL Filtering
C613-22104-00 REV B
Advanced Network Protection
|
UTM Offload Page 22