Security Gateways – Secure Remote Access

Below, we highlight the features and capabilities of our complete range of security gateways. While you will see differences in hardware, note the many standard features shared by all models. This is enabled by our proprietary, PCI-certified network platform, the Mako System, and its cloud-based network management and monitoring application, the Mako Central Management System (CMS).

Secure Remote Access is a critical aspect of modern network security, ensuring that users can connect to the network securely from any location. Our security gateways leverage advanced encryption protocols and authentication mechanisms to safeguard remote connections. With Secure Remote Access, employees can work remotely without compromising the integrity of sensitive data or exposing the network to potential threats.

Security Gateways

Below, we highlight the features and capabilities of our complete range of security gateways. While you will see differences in hardware, note the many standard features shared by all models. This is enabled by our proprietary, PCI-certified network platform, the Mako System, and its cloud-based network management and monitoring application, the Mako Central Management System (CMS).

Mako security gateways combine a multitude of networking functions within a single device, including next-gen firewall protection, VLAN routing and switching, encrypted Mako VPN Cloud tunneling, wired and wireless connectivity, SD-WAN failover and more. Deploying a Mako security gateway to each of your distributed sites, could eliminate several routers, firewalls or other devices at each site, greatly simplifying your network and potentially reducing costs.

Furthermore, Mako security gateways ensure Secure Remote Access, enabling employees to connect to the network securely from any location, enhancing productivity while maintaining robust security measures.

6000 Series

The 6000 Series is the flagship Mako security gateway design, deployed to the majority of our customers’ remote sites, such as retailers and branch offices, as well as many of their central sites, such as hospitals or airports. In addition to delivering maximum security, 6000 Series Mako security gateways are optimized for fast SD-WAN failover performance and support the widest range of WAN connections, including Gigabit Ethernet, cable, xDSL, SFP, fiber and cellular.

image-box
Mako 6600-M

This is tailored for your business if you’re a merchant location with a need for up to 20 VPNs. Offers a range of connectivity options, including SFP, Ethernet, Dual-SIM LTE and xDSL.

4000 and 5000 Series

Mako access points in the 4000 and 5000 Series can be configured via the Mako CMS to function as either a security gateway or Wi-Fi Access Point. This brings advanced security features to these smaller, cost-effective Mako devices that are optimized to extend wireless range and to improve broadcast/reception quality.

image-box
Mako 4500

Keep your remote offices connected using our smallest networking device, built with affordability and flexibility in mind. Can be deployed as a secure zone router, edge router or wireless access point.

image-box
Mako 4600

Add the latest high-speed Wi-Fi 6 technology to the flexible deployment feature of the 4000 series, operating as your secure zone router, edge router or wireless access point.

image-box
Mako 5600

The Mako 5600 is our first device to offer 5G cellular broadband connectivity. Also featuring Wi-Fi 6, this model is designed to operate as either a high-end access point or a feature-rich security gateway.

7000 and 8000 Series

Rackmount models in the 7000 and 8000 Series of Mako VPN concentrators can do double duty as a security gateway for their deployment site. These secure, fully cloud-managed Mako devices are optimized for hardware/geographic redundancy and high-throughput, low-overhead performance, resulting in maximum speed and reliability.

image-box
Mako 7600

Rely on a 1U rack-mountable device designed for large companies that need to connect hundreds of sites together via secure VPNs.

image-box
Mako 8600

Connect your distributed enterprise using our most powerful enterprise-grade data center device, designed to integrate thousands of sites into a single secure corporate network.

Key Features

SECURE EDGE OR ZONE ROUTER

Mako security gateways provide robust SD-WAN connectivity for both Internet access and VPN tunneling alongside VLAN support for advanced segmentation. They can be deployed as either an edge router for securing a site’s entire network, such as a gas station or restaurant, or as a zone router for securing a segmented zone or zones within a site’s network, such as a POS system at a hospital or school. Mako security gateways are also ideal for remote workers, employees and contractors whose home networks require segmentation of corporate assets from personal devices and secure connections to corporate networks.

PCI DSS CERTIFIED

Unlike other networking solutions, the entire Mako System, including the Mako CMS and all Mako devices, is end‐to‐end PCI DSS certified, providing peace of mind that your sensitive data is handled properly. Mako’s PCI-certified enterprise templates facilitate bulk security configuration of Mako devices and make it easy to demonstrate compliance when necessary.

CLOUD MANAGEMENT AND MONITORING

Mako security gateways are fully cloud-managed via the Mako CMS, making remote management, monitoring and support simple and straightforward. Using a patented communications protocol, each Mako device connects securely to the Mako CMS over the public Internet. User security features include multi-factor authentication and role-based permissions. Authorized users have 24/7 remote access from anywhere in the world to a complete suite of cloud-based tools for advanced configuration, automated real-time alerts, enterprise reporting and troubleshooting diagnostics, reducing or eliminating the need for on-site maintenance.

USER-DEFINED SD-WAN FAST FAILOVER

The WAN interfaces of Mako security gateways can be configured to failover from one to another in the event of a service outage. Choose the amount of internet reliability and resiliency your business needs. The Mako System supports circuit, hardware and geographic redundancy, allowing for flexible, reliable connectivity across any combination of broadband circuit types. Fast failover configurations deliver seamless connectivity that keeps stateful data like live voice calls connected through a failover event. These affordable high availability options offer businesses continuity during unexpected service interruptions.

MAKO VPN CLOUD MAKES VPNS EASY AND SECURE

Connect retail locations or other remote sites to head offices, data centers or third-party vendors easily. Using Mako’s cloud-based SD-WAN technology, Mako VPN Cloud, allows your Mako security gateway to connect to other sites in seconds with a few clicks in the Mako CMS, all without requiring static IP addresses. Your data is encrypted in both transmission directions for maximum security. And Mako VPN Cloud scales easily with your distributed enterprise, eliminating networking pain points caused by rapid growth and inconsistent environments.

THIRD-PARTY SERVICES

Deploy trusted third-party services with a few clicks in the Mako CMS. Mako VPN Cloud not only connects your distributed enterprise sites directly to one another, but can also connect to applications and services provided by your current or other leading vendors in your industry who participate in the Mako VPN Cloud Partner program.

SECURE WI-FI

Certain Mako security gateway models feature dual‐band wireless for customer hotspots or general business use and support up to eight wireless SSIDs per device. The Mako System’s PCI DSS certification covers both wired and wireless communications, so your Wi-Fi networks can be configured securely for wireless devices handling sensitive data, such as POS tablets or healthcare equipment.

Key Features

SECURE EDGE OR ZONE ROUTER

Mako security gateways provide robust SD-WAN connectivity for both Internet access and VPN tunneling alongside VLAN support for advanced segmentation. They can be deployed as either an edge router for securing a site’s entire network, such as a gas station or restaurant, or as a zone router for securing a segmented zone or zones within a site’s network, such as a POS system at a hospital or school. Mako security gateways are also ideal for remote workers, employees and contractors whose home networks require segmentation of corporate assets from personal devices and secure connections to corporate networks.

NEXT-GEN FIREWALL

Most Mako security gateways feature Next-Generation Firewall (NGFW) technology, including packet inspection and Intrusion Detection and Prevention (IDS/IPS). All traffic entering and leaving a network is scrutinized to ensure network connections are authorized and intrusion attempts are identified and blocked. Port scanning protection, worm detection, MAC address control and complex firewall rules can be templated and deployed to thousands of Mako devices at once via the Mako CMS, massively reducing the time to implement changes and ensuring an organization’s security posture is readily up to date.

PCI DSS CERTIFIED

Unlike other networking solutions, the entire Mako System, including the Mako CMS and all Mako devices, is end‐to‐end PCI DSS certified, providing peace of mind that your sensitive data is handled properly. Mako’s PCI-certified enterprise templates facilitate bulk security configuration of Mako devices and make it easy to demonstrate compliance when necessary.

CLOUD MANAGEMENT AND MONITORING

Mako security gateways are fully cloud-managed via the Mako CMS, making remote management, monitoring and support simple and straightforward. Using a patented communications protocol, each Mako device connects securely to the Mako CMS over the public Internet. User security features include multi-factor authentication and role-based permissions. Authorized users have 24/7 remote access from anywhere in the world to a complete suite of cloud-based tools for advanced configuration, automated real-time alerts, enterprise reporting and troubleshooting diagnostics, reducing or eliminating the need for on-site maintenance.

USER-DEFINED SD-WAN FAST FAILOVER

The WAN interfaces of Mako security gateways can be configured to failover from one to another in the event of a service outage. Choose the amount of internet reliability and resiliency your business needs. The Mako System supports circuit, hardware and geographic redundancy, allowing for flexible, reliable connectivity across any combination of broadband circuit types. Fast failover configurations deliver seamless connectivity that keeps stateful data like live voice calls connected through a failover event. These affordable high availability options offer businesses continuity during unexpected service interruptions.

MAKO VPN CLOUD MAKES VPNS EASY AND SECURE

Connect retail locations or other remote sites to head offices, data centers or third-party vendors easily. Using Mako’s cloud-based SD-WAN technology, Mako VPN Cloud, allows your Mako security gateway to connect to other sites in seconds with a few clicks in the Mako CMS, all without requiring static IP addresses. Your data is encrypted in both transmission directions for maximum security. And Mako VPN Cloud scales easily with your distributed enterprise, eliminating networking pain points caused by rapid growth and inconsistent environments.

THIRD-PARTY SERVICES

Deploy trusted third-party services with a few clicks in the Mako CMS. Mako VPN Cloud not only connects your distributed enterprise sites directly to one another, but can also connect to applications and services provided by your current or other leading vendors in your industry who participate in the Mako VPN Cloud Partner program.

SECURE WI-FI

Certain Mako security gateway models feature dual‐band wireless for customer hotspots or general business use and support up to eight wireless SSIDs per device. The Mako System’s PCI DSS certification covers both wired and wireless communications, so your Wi-Fi networks can be configured securely for wireless devices handling sensitive data, such as POS tablets or healthcare equipment.

SECURITY GATEWAY COMPARISION CHART

Desktop Models Rackmount Models
4500 4600 5600 6500-M 6600-M 7600-E 8600-E 7600-S 8600-S
WAN Connection Types 1 Gb Ethernet 2.5 Gb Ethernet 2.5 Gb Ethernet, Dual SIM Single Radio 5G or LTE (Active/Standby) VDSL, ADSL2+, 1 Gb Ethernet, LTE 1 Gb Ethernet, SFP, Dual SIM Single Radio LTE (Active/Standby) 1 Gb Ethernet 1 Gb Ethernet 1 Gb Ethernet, 4x 10Gb SFP+ WAN/LAN 1 Gb Ethernet, 4x 10Gb SFP+ WAN/LAN
WAN Throughput 1 Gbps 2.5 Gbps 2.5 Gbps 1 Gbps 1 Gbps 1 Gbps 1 Gbps 1-10 Gbps 1-10 Gbps
Automated WAN Failover No No
Failover Between Two or More Devices No No
Number of Power Supplies 1 1 1 1 1 1 2 1 2
Number of Physical LAN Ports 2x 1 Gb Ethernet as AP, 1x 1 Gb Ethernet as Router 2 Ethernet (1x 1 Gb, 1x 2.5 Gb) as AP, 1x 1 Gb Ethernet as Router 4x 1 Gb Ethernet 4x 1 Gb Ethernet 4x 1 Gb Ethernet 5x 1 Gb Ethernet 7x 1 Gb Ethernet 5x 1 Gb Ethernet, 4x 10Gb SFP+ WAN/LAN 7x 1 Gb Ethernet, 4x 10Gb SFP+ WAN/LAN
Wi-Fi 2 x 2 802.11 a/b/g/n/ac 4 x 4 802.11 a/b/g/n/ac/ax 2 x 2 802.11 a/b/g/n/ac/ax 2 x 2 802.11b/g/n 2 x 2 802.11b/g/n/ac N/A N/A N/A N/A
External Antenna/SMA No No N/A N/A N/A N/A
VPN Cloud SD-WAN Throughput Up to 40 Mbps Up to 40 Mbps Up to 150 Mbps Up to 5 Mbps Up to 150 Mbps Up to 850 Mbps Up to 850 Mbps Up to 850 Mbps Up to 850 Mbps
IPSec VPN Throughput Up to 40 Mbps Up to 40 Mbps Up to 150 Mbps Up to 5 Mbps Up to 150 Mbps Up to 850 Mbps Up to 850 Mbps Up to 850 Mbps Up to 850 Mbps
Number of Concurrent VPNs 10 10 20 10 20 3000 8000 3000 8000
Cloud Managed Zero Touch Deployment
IDS / IPS No No No
Content Filtering No No
Firewall in Router mode in Router mode in Router mode
Automatic Software Updates
Traffic Prioritization in Router mode in Router mode in Router mode
Detailed Usage Reporting in Router mode in Router mode in Router mode
Diagnostics
PCI DSS Compliance