PLANET Technology Expands Its Portfolio with Five New Networking Products

XVR-800

The XVR-800 is a high-performance 1U enterprise VPN gateway designed for organizations that need fast, secure, and resilient WAN connectivity. It combines a 10GBASE-T copper WAN port (supporting 1G/2.5G/5G/10G) and a 10GBASE-X SFP+ fiber WAN slot — both configurable as WAN or LAN — with four Gigabit LAN ports, offering a maximum NAT throughput of 9.4 Gbps.

The VPN suite covers IPSec (Net-to-Net and Host-to-Net), SSL/OpenVPN, WireGuard, GRE, PPTP, and L2TP. WireGuard throughput reaches up to 1,890 Mbps over 10G, while IPSec/AES128 delivers up to 1,310 Mbps. Up to 200 concurrent SSL VPN sessions are supported. Dual-WAN automatic failover and weighted outbound load balancing ensure continuous connectivity for mission-critical applications.

Security is a central design pillar: the XVR-800 includes Secure Boot with hardware-verified firmware integrity, a built-in Hardware TRNG (True Random Number Generator) for high-entropy cryptographic key generation, and Post-Quantum Cryptography TLS (PQC TLS) readiness using ML-KEM (Kyber) for hybrid key exchange — making it prepared for quantum-era cryptographic threats. The SPI firewall provides DoS/DDoS mitigation, content filtering, MAC and IP filtering, and NAT ALG support.

Additional integrated services include an AP Controller for centralized management of PLANET Smart APs, Captive Portal, RADIUS authentication, DHCP server, High Availability failover, and SD-WAN support. The SFP+ slot supports fiber modules reaching distances from 550 m (multi-mode) up to 120 km (single-mode WDM), enabling flexible connectivity to backbone infrastructure or remote monitoring centers.

ZT-800

The ZT-800 shares the same hardware platform as the XVR-800 — dual 10G WAN interfaces, four Gigabit LAN ports, 9.4 Gbps NAT throughput, and an identical VPN stack — but adds a dedicated Zero Trust security layer on top, making it purpose-built for identity-centric network access control in enterprise and infrastructure environments.

Its Zero Trust implementation starts at the management access layer: administrators authenticate via FIDO2 passkey (supporting hardware security keys such as the PLANET CoreTrust Key), TOTP-based Multi-Factor Authentication (MFA), or certificate-based login — ensuring that only verified identities can access the gateway management interface. This eliminates password-only access as an attack vector on critical network infrastructure.

For site-to-site and remote connectivity, the ZT-800 enables Zero Trust Network Access (ZTNA) overlay networking: authenticated gateways establish encrypted peer-to-peer tunnels without exposing internal services to the public internet. VPN profile distribution for OpenVPN and WireGuard clients is also protected by the same identity verification portal, with optional external RADIUS integration. Role-based access policies control which users can access which network segments across wired, wireless, and remote connections.

Like the XVR-800, the ZT-800 includes Secure Boot, Hardware TRNG, PQC TLS (ML-KEM/Kyber), SPI firewall, AP Controller, Captive Portal, High Availability, SD-WAN, and SFP+ long-distance fiber support. Its security design follows the principles of the EU Cyber Resilience Act (CRA), making it well positioned for compliance-sensitive deployments in European infrastructure.

VR-300

The VR-300 is an entry-level enterprise VPN security router designed for small and medium-sized businesses with up to 60–100 users. Its compact fanless desktop/rack-mount chassis houses five 10/100/1000BASE-T ports — three fixed LAN ports, one configurable LAN/WAN port for dual-WAN operation, and one WAN port — delivering up to 900 Mbps NAT throughput.

The VPN stack supports IPSec (Net-to-Net and Host-to-Net), GRE, PPTP, L2TP, and SSL/OpenVPN, with up to 60 simultaneous VPN tunnels and 60 Mbps VPN throughput. Encryption options cover DES, 3DES, AES-128/192/256 with MD5, SHA-1, SHA-256, SHA-384, and SHA-512 authentication. The built-in SPI firewall provides DoS/DDoS mitigation, web content filtering, MAC and IP filtering, and DMZ support.

The VR-300 also integrates an AP Controller for centralized management of PLANET Smart APs, a Captive Portal for guest Wi-Fi access management, RADIUS authentication, and a built-in DHCP server — eliminating the need for additional servers in small office deployments. Dual-WAN failover, outbound load balancing, High Availability, QoS, and OSPF dynamic routing complete the networking feature set. IPv4 and IPv6 dual-stack are supported throughout.

SGS-6341-24T6X

The SGS-6341-24T6X is a 1U Layer 3 stackable managed switch combining 24 Gigabit copper ports with six 10G SFP+ slots — each backward compatible with 1000BASE-SX/LX/BX SFP transceivers — in a 168 Gbps non-blocking switch fabric with 125 Mpps forwarding throughput. It is designed as a high-density aggregation or distribution switch for enterprise backbone networks, data centers, and campus environments.

The Layer 3 feature set includes static routing, RIPv1/v2, RIPng, OSPFv2, OSPFv3, BGP, and BGP4+ for both IPv4 and IPv6, enabling the switch to serve as a full-featured routing platform at the aggregation layer. VRRP with BFD (Bidirectional Forwarding Detection) provides gateway redundancy. Multicast routing is supported through PIM-DM, PIM-SM, and PIM-SSM alongside IGMPv1/v2/v3 snooping and MLDv1/v2 snooping.

Up to 8 SGS-6341-24T6X units can be combined using either IP Stacking (single management IP across all units via any Gigabit or 10G interface) or Hardware Stacking (forming a single logical switch via dedicated 10G SFP+ stacking ports, with ring redundancy and hot-swap support). Security features include IEEE 802.1x port authentication with RADIUS/TACACS+, L2–L4 ACLs, DHCP Snooping, Dynamic ARP Inspection, IP Source Guard, and Change of Authorization (CoA). Ring protection is provided via ITU-T G.8032 ERPS with sub-50ms recovery. ESD and surge protection are rated at 6kV.

GS-4210-8UP2X

The GS-4210-8UP2X is a compact managed switch delivering IEEE 802.3bt PoE++ on all eight Gigabit access ports, with a total PoE power budget of 240 W and up to 95 W per port — three times the output of conventional 802.3at PoE+. Two 10G SFP+ uplink ports (backward compatible with 100M/1G/2.5G SFP) connect to backbone infrastructure or aggregation switches. The 56 Gbps non-blocking switch fabric supports 41.66 Mpps throughput.

The 95 W per-port capability is suited for demanding powered devices including PTZ speed dome cameras, AIO touch PCs, POS terminals, digital signage displays, thin clients, and high-power wireless access points. Two PoE output modes are available: standard 802.3bt PoE++ mode (up to 95 W using all four cable pairs) and legacy 36 W 802.3at end-span mode. An Extend mode reduces port speed to 10 Mbps but extends PoE delivery distance to 250 meters, overcoming the standard 100 m UTP limitation.

Intelligent PoE management functions include PD Alive Check (automatic power cycle if a PD stops responding), Scheduled Power Recycling (scheduled per-port reboots to prevent camera or AP crashes), PoE Schedule (time-based port power enable/disable for energy savings), and real-time PoE Usage Monitoring via the web interface. Cybersecurity protection is provided via SSHv2 and TLSv1.3, with L2–L4 ACLs, DHCP Snooping, Dynamic ARP Inspection, IP Source Guard, and 802.1x port authentication with RADIUS/TACACS+. ITU-T G.8032 ERPS ring protection (recovery under 450 ms), MSTP, IGMP/MLD snooping, QoS with 8 priority queues, and IPv4/IPv6 dual-stack management are all included. The smart fan automatically adjusts speed based on load temperature.