Network and security services stateful firewall, 1:1 nat, dhcp, dmz, static routing identity-based policies auto vpn self-configuring site-to-site vpn client vpn (ipsec) user and device quarantine vlan support and dhcp services advanced security services content filtering (webroot brightcloud cipa-compliant url database) web search filtering (including google and bing safesearch) youtube for schools intrusion prevention (sourcefire snort based) cisco advanced malware protection (amp) requires advanced security license wan performance management web caching wan link aggregation application level (layer 7) traffic analysis and shaping automatic layer 3 failover (including vpn connections) wan uplink selection based on traffic type monitoring and management web based management and configuration throughput, connectivity monitoring