Call a Specialist Today! 888-785-4405

Cyberoam Virtual Cyberoam CRiV-8C
Take Control of Your Security Infrastructure!

Cyberoam – a Sophos Company, secures organizations with its wide range of product offerings at the network gateway. For the latest Cyberoam products, please visit our Sophos's store

Cyberoam Virtual UTM Appliances

Sorry, this product is no longer available, please contact us for a replacement.


Virtualization is taking organizations beyond the boundaries of their physical network infrastructure, empowering them to leverage their resources better and more flexibly, while quickly responding to the changing needs of their business. While higher efficiencies and lower total cost are few benefits of virtualization, security in virtual environments is an issue that organizations are struggling with, in the wake of virtualization!

Cyberoam Virtual UTM Appliances

Get complete control of your security infrastructure with Cyberoam virtual UTM appliances that offer industry-leading network security for your virtualized environments. Cyberoam virtual UTMs give you the flexibility to deploy a mix of physical and virtual appliances in your network, which can be managed centrally.

With the ability to scan all traffic in the virtual environment, Cyberoam virtual UTM protects virtual networks from attacks on hypervisor management console, hypervisor & Guest OS, virtualized web-facing applications and servers and allows organizations to secure Zero Trust Networks with its comprehensive security features in virtualized form.

Get a complete virtual security solution with Cyberoam virtual UTM, virtual Cyberoam Central Console and Cyberoam iView – Logging & Reporting software.

If you are an MSSP, reduce your operational and capital expenditure, and serve your customers better and at reduced costs, by having elastic network infrastructure utilization with virtualization.

If you are an SMB with virtual infrastructure, you can now extend your existing infrastructure to include security for your network without the need to add hardware security appliances, thus saving cost and time.

Take control of what you want, how much you want, how you want it, with Cyberoam virtual UTMs!


  • Security for dynamic virtual environments and Cloud
  • Choice of individual or mixed virtual and physical network infrastructure
  • Single virtual appliance to deploy and manage for comprehensive network security and single vendor to contact
  • Easy scale-up of security infrastructure as business grows
  • Deployment flexibility with licensing based on number of vCPUs
  • Management and display of regulatory compliance

UTM Security features

  • Stateful Inspection Firewall
  • Gateway Anti-Virus and Anti-spyware
  • Intrusion Prevention System
  • Gateway Anti-spam
  • Web Filtering
  • Application Visibility & Control
  • Web Application Firewall
  • Virtual Private Network (VPN)
  • IM Archiving & Controls
  • Bandwidth Management
  • On-Appliance Reporting
  • Identity-based Security

WHAT you want

Virtual Security solution: Cyberoam virtual UTM appliances give complete control of security in virtual data-centers, Security-in-a-Box and Office-in-a- Box set-ups to organizations. Get comprehensive security in virtualized environments without the need for deploying a hardware security appliance anymore.

Support for infrastructure scale-up as the business grows: By providing a virtual network security solution to organizations and MSSPs, Cyberoam virtual UTMs allow security in virtual networks to be scaled up as the business needs of organizations/MSSP customers grow.

HOW MUCH you want

Easy Upgrade: Cyberoam virtual UTM appliances can be upgraded in no time and with maximum ease, using a simple activation key, to match the growing business needs of organizations/MSSP customers.

Benefit of shared infrastructure: By capitalizing on lean and peak periods of activities in the networks, organizations and MSSPs can optimize the resource utilization in their own/customer networks, using Cyberoam’s security in virtualized form.

HOW you want

Choice of Virtual and Physical Infrastructure: get the flexibility to choose between individual and a mix of physical and virtualized environments without worrying about security, with Cyberoam’s security solution for both physical and virtualized environments.

Deployment Flexibility: The licensing model for Cyberoam virtual UTM appliances is based on the number of vCPUs, giving deployment flexibility to organizations and MSSPs, unlike most competitor models that are based on concurrent sessions and number of users. Cyberoam virtual UTMs allow organizations to get maximum benefits of Cyberoam’s multi-core processing architecture by flexibly allotting vCPUs from the virtual infrastructure to the virtualUTMappliance.

No Hard Limits on Usage: If the number of network users in organizations or MSSP customer networks increase beyond the recommended number for a given model, Cyberoam virtual UTMs continue to secure these networks, allowing organizations and MSSPs to upgrade to a higher model only when they want to.


1.Protection for Virtualized networks

Inter-VM traffic scanning

External hardware security devices are incapable of scanning inter-VM traffic, creating blind spots in traffic within the virtualized environments. With their ability to scan Inter-VM traffic, Cyberoam virtual UTMs remove the network blind spots and allow granular firewall and security policies over inter-VMtraffic.

Hyperjacking & Hypervisor vulnerabilities

In cases where the hypervisor management console is placed in live production virtual environment due to lack of segmentation within virtual environments, the virtual networks are prone to attacks that exploit vulnerabilities on software layers like the hypervisor management console, hypervisor & Guest OS, putting the security of entire virtual network at risk.

Cyberoam virtual UTMs enable administrators to segment the hypervisor management console in DMZ and route all traffic through Cyberoam virtual UTM appliances. The Intrusion Prevention System on Cyberoam virtual UTMs scans Inter-VM traffic, VM to hypervisor traffic and ensures threat-free traffic. Web Application Firewall protection on Cyberoam virtual UTM blocks attacks that exploit vulnerabilities in the virtualized web applications.

Separation of duties

In case of external network security solutions, a level of Separation Of Duties (SOD) is achieved by default because the functions are hosted on separate physical systems that are managed and configured by separate teams. However, in case of collapsed DMZ, loss of SOD by default between security/network security and operations leads to security risks and potential conflict of interest between the roles.

Role-based administrator controls in Cyberoam virtual UTM allow separation of administrator duties. Cyberoam offers logs of administrator events and audit trails with its Layer 8 identity-based security and on-appliance reporting.

Zero Trust Networks

In an office-in-a-box setup, since the virtual infrastructure hosts the entire user workgroup, User-Identity based control and visibility becomes even more important.

Cyberoam’s Layer 8 Identity-based security policies over user authentication, service authorization and reporting (AAA) secure the Zero Trust virtual networks. Deployed at the perimeter or within the virtual infrastructure, Cyberoam virtual UTMs offer visibility and user-based access control in the virtualized environment. Ensure consistent security policy across your network – virtual and physical, with Cyberoam.

2.Comprehensive security:

Cyberoam virtual UTMs simplify the security for your virtual environments by consolidating multiple security functions in a single virtual appliance. Get all security features found in Cyberoam’s hardware appliances, viz. firewall, VPN, Gateway Anti-Spam, Gateway Anti-Virus, IPS, Web Application Firewall, Web Filtering, Application Visibility & Control and much more, to make your virtualized environments as secure as your physical network infrastructure.

3.Easy to deploy

Cyberoam virtual UTMs are easy to deploy with a licensing model that provides the flexibility to allot the number of vCPUs for Cyberoam virtual UTM based on your requirements. A simple key activation to upgrade to higher models and no hard limits on crossing recommended usage limits make Cyberoam virtual UTMs easy to deploy in your virtualized set-ups.

4.Compliance Management

In case of collapsed DMZs that hold sensitive information and office-in-a-box setup, compliance and privacy requirements become difficult to achieve, especially in a virtual environment. By segregating and securing traffic and data between and around your virtual entities, Cyberoam virtual UTMs help you stay regulatory compliant. The integrated logging and reporting feature offers in-depth reports of activities in your virtual infrastructure to support your organization to display compliance.

5.Centralized Management of Hardware and Virtual appliances

Centrally manage your physical and virtual infrastructure using a single interface with Cyberoam Central Console, available in hardware and virtual forms. Reduce the expense of separate management consoles for your physical and virtual environment needs as well as ensure centralized, consistent and quick security actions across your network.


Cyberoam virtual UTMs offer security in the following set-ups:

Virtual Data Center Office-in-a-box
SP/ Enterprise Security-in-a-box


Cyberoam virtual UTM appliances give complete control of security in virtual data-centers, Security-in-a-Box or Office-in-a-Box set-ups, to organizations and MSSPs. With virtualized security appliance for virtual environments, Cyberoam enables scanning of inter-VM traffic, allowing granular firewall and security policies over inter-VM traffic, and offers comprehensive network security in virtualized environments to organizations without the need for deploying a hardware security appliance anymore. Cyberoam virtual UTMs allow organizations and MSSPs to optimize the resource utilization in their own/customer networks by capitalizing on lean and peak periods of activities in the networks.

Cyberoam’s licensing model for its virtual UTM appliances is based on the number of vCPUs, that gives deployment flexibility to organizations and MSSPs, unlike most competitor models that are based on concurrent sessions and number of users. Organizations get maximum benefits of Cyberoam’s multi-core processing architecture with virtual UTM appliances by flexibly allotting vCPUs from the virtual infrastructure to the virtual UTM appliance. With an easy upgrade feature using a simple activation key, organizations and MSSPs can match the growing needs of their business and customers in no time.


Stateful Inspection Firewall
- Layer 8 (User - Identity) Firewall
- Multiple Security Zones
- Access Control Criteria (ACC) : User-Identity, Source and Destination Zone, MAC and IP address, Service
- UTM policies - IPS, Web Filtering, Application Filtering, Anti- virus, Anti-spam and Bandwidth Management
- Application (Layer 7) Control and Visibility
- Access Scheduling
- Policy based Source and Destination NAT
- H.323, SIP NAT Traversal
- 802.1q VLAN Support
- DoS and DDoS attack prevention
- MAC and IP-MAC filtering and Spoof prevention

Gateway Anti-Virus & Anti-Spyware

- Virus, Worm, Trojan Detection and Removal
- Spyware, Malware, Phishing protection
- Automatic virus signature database update
- Customize individual user scanning
- Self Service Quarantine area
- Scan and deliver by file size
- Block by file types
- Add disclaimer/signature

Gateway Anti-Spam

- Inbound/Outbound Scanning
- Real-time Blacklist (RBL), MIME header check
- Filter based on message header, size, sender, recipient
- Subject line tagging
- Redirect spam mails to dedicated email address
- Image-spam filtering using RPD Technology
- Zero hour Virus Outbreak Protection
- Self Service Quarantine area
- IP address Black list/White list
- Spam Notification through Digest
- IP Reputation-based Spam filtering

Intrusion Prevention System

- Signatures: Default (4500+), Custom
- IPS Policies: Multiple, Custom
- User-based policy creation
- Automatic real-time updates from CRProtect networks
- Protocol Anomaly Detection
- DDoS attack prevention

Web Filtering

- Inbuilt Web Category Database
- URL, keyword, File type block
- Web Categories: Default(82+), Custom
- Protocols supported: HTTP, HTTPS
- Block Malware, Phishing, Pharming URLs
- Category-based Bandwidth allocation and prioritization
- Block Java Applets, Cookies, Active x
- CIPA Compliant
- Data leakage control via HTTP, HTTPS upload
- Schedule-based access control
- Custom block messages per category

Application Filtering

- Inbuilt Application Category Database
- 11+ Application Categories e.g. Gaming, IM, P2P, Proxy
- Schedule-based access control
- Block
- P2P applications e.g. Skype
- Anonymous proxies e.g. UItra surf
- “Phone home” activities
- Keylogger
- Layer 7 (Applications) & Layer 8 (User - Identity) Visibility

Web Application Firewall

- Positive Protection model
- Unique "Intuitive Website Flow Detector" technology
- Protection against SQL Injections, Cross-site Scripting (xSS),
Session Hijacking, URL Tampering, Cookie Poisoning etc.
- Support for HTTP 0.9/1.0/1.1
- Extensive Logging and Reporting
- Back-end servers supported: 5 to 200 servers

Virtual Private Network

- Encryption - 3DES, DES, AES, Twofish, Blowfish, Serpent
- Hash Algorithms - MD5, SHA-1
- Authentication: Preshared key, Digital certificates
- IPSec NAT Traversal
- Dead peer detection and PFS support
- Diffie Hellman Groups - 1,2,5,14,15,16
- External Certificate Authority support
- Export Road Warrior connection configuration
- Domain name support for tunnel end points
- VPN connection redundancy
- Overlapping Network support
- Hub & Spoke VPN support


- TCP & UDP Tunneling
- Authentication - Active Directory, LDAP, RADIUS, Cyberoam (Local)
- Multi-layered Client Authentication - Certificate,
- User & Group policy enforcement
- Network access - Split and Full tunneling
- Browser-based (Portal) Access - Clientless access
- Lightweight SSL VPN Tunneling Client
- Granular access control to all the enterprise network resources
- Administrative controls - Session timeout, Dead Peer Detection,
Portal customization
- TCP-based Application Access - HTTP, HTTPS, RDP, TELNET, SSH

Instant Messaging (IM) Management

- Yahoo and Windows Live Messenger
- Virus Scanning for IM traffic
- Allow/Block: Login, File Transfer, Webcam, One-to-one/group Chat
- Content-based blocking
- IM activities Log
- Archive files transferred
- Custom Alerts

Bandwidth Management

- Application and User Identity based Bandwidth Management
- Category-based Bandwidth restriction
- Guaranteed & Burstable bandwidth policy
- Application & User Identity based Traffic Discovery
- Multi WAN bandwidth reporting

User Identity and Group Based Controls

- Access time restriction
- Time and Data Quota restriction, P2P and IM Controls
- Schedule-based Committed and Burstable Bandwidth


- Automated Failover/Failback, Multi-WAN
- WRR based Load balancing
- Policy routing based on Application and User
- IP Address Assignment - Static, PPPoE, L2TP, PPTP & DDNS Client,
Proxy ARP, DHCP server, DHCP relay
- Supports HTTP Proxy, Parent Proxy with FQDN
- Dynamic Routing: RIP v1& v2, OSPF, BGP, Multicast Forwarding

High Availability*

- Active-Active
- Active-Passive with state synchronization
- Stateful Failover
- Alerts on Appliance Status change

Administration & System Management

-Web-based configuration wizard
- Role-based Access control
- Firmware Upgrades viaWeb UI
-Web 2.0 compliant UI (HTTPS)
- UI Color Styler
- Command line interface (Serial, SSH, Telnet)
- SNMP (v1, v2, v3)
- Multi-lingual support: Chinese, Hindi, French, Korean
- Cyberoam Central Console (Optional)
- NTP Support

User Authentication

- Internal database
- Active Directory Integration
- Automatic Windows Single Sign On
- External LDAP/RADIUS database Integration
- Thin Client support - Microsoft Windows Server 2003 Terminal
Services and Citrix xenApp
- RSA SecurID support
- External Authentication - Users and Administrators
- User/MAC Binding
- Multiple Authentication servers


- Graphical real-time and historical Monitoring
- Email notification of reports, viruses and attacks
- Syslog support
- Log Viewer - IPS, Web filter, Anti-Virus, Anti-Spam, Authentication,
System and Admin Events

On-Appliance Cyberoam-iView Reporting

- Integrated Web-based Reporting tool -
- 1000+ drilldown reports
- 45+ Compliance reports
- Historical and Real-time reports
- Multiple Dashboards
- Username, Host, Email ID specific Monitoring Dashboard
- Reports - Security, Spam, Virus, Traffic, Policy violations, VPN,
Search Engine keywords
- Multi-format reports - tabular, graphical
- Exportable formats - PDF, Excel
- Automated Report Scheduling


- Inter-operability with major IPSec VPN Gateways
- Supported platforms: Windows 2000, WinxP 32/64-bit, Windows
2003 32-bit, Windows 2008 32/64-bit, Windows Vista 32/64-
bit, Windows 7 RC1 32/64-bit, Windows 8 RC1 32/64-bit
- Import Connection configuration


- ICSA Firewall - Corporate
- Checkmark UTM Level 5 Certification
- VPNC - Basic and AES interoperability
- IPv6 Ready Gold Logo

* Additional Purchase Required
Needs e1000/e1000e drivers emulation
Technical Specifications
  CRiV-1C CRiV-2C CRiV-4C CRiV-8C CRiV-12C
Hypervisor Support Vmware ESx/ESxi 4.0/4.1/5.0, VMware Workstation 7.0/8.0/9.0, VMware Player 4.0/5.0, Microsoft Hyper-V 2008/2012
vCPU Support (Min / Max) 1 / 1 1 / 2 1 / 4 1 / 8 1 / 12
Network Interface Support (Min / Max) 3 / 10 3 / 10 3 / 10 3 / 10 3 / 10
Memory Support (Min / Max) 1 GB / 4 GB 1 GB / 4 GB 1 GB / 4 GB 1 GB / 4 GB 1 GB / 4 GB
System Performance*
  CRiV-1C CRiV-2C CRiV-4C CRiV-8C CRiV-12C
Firewall Throughput (UDP) (Mbps) 1,500 3,000 3,500 4,000 4,000
Firewall Throughput (TCP) (Mbps) 1,200 2,500 3,000 3,500 4,000
New sessions/second 25,000 30,000 40,000 50,000 60,000
Concurrent sessions 230,000 525,000 1,200,000 1,500,000 1,750,000
IPSec VPN Throughput (Mbps) 200 250 300 350 400
No. of IPSec Tunnels 200 1,000 1,500 2,000 2,500
SSL VPN Throughput (Mbps) 300 400 550 550 750
WAF Protected Throughput (Mbps) 300 500 800 1,400 1,550
Anti-Virus Throughput (Mbps) 900 1,500 2,000 2,200 2,450
IPS Throughput (Mbps) 450 750 1,200 1,800 1,900
UTM Throughput (Mbps) 250 450 1,000 1,400 1,550
Authenticated Users/Nodes Unlimited Unlimited Unlimited Unlimited Unlimited
* Antivirus, IPS and UTM performance is measured based on HTTP traffic as per RFC 3511 guidelines. Actual performance may vary depending on the real network traffic environments.

Supports and Subscriptions:


  • Antivirus and Anti Spam Subscription: Protection against Internet and mail based malware
  • Comprehensive Value Subscription: Comprehensive Value Subscription includes Anti Malware, Anti Spam, Web and Application Filter, WAF, Intrusion Prevention System , 24x7 Support, hardware warranty and RMA fulfillment
  • Gateway Anti Spam: Zero-hour protection with industry’s highest spam detection capabilities
  • Gateway Anti Virus: Gateway level protection from viruses, worms and malicious code
  • Intrusion Prevention System: Protects from intrusion attempts, DoS attacks, malicious code transmission, backdoor activity and blended threats
  • Outbound Anti Spam: Protects service providers from recurring incidents of outbound spam in the network.
  • Security Value Subscription Plus: Cyberoam Security Value Subscription Plus includes Anti Malware, Web and Application Filter, Intrusion Prevention System , 24x7 Support, hardware warranty and RMA fulfillment
  • Security Value Subscription: Cyberoam Security Value Subscription includes Anti Malware, Web and Application Filter and Intrusion Prevention System, 8x5 Support, hardware warranty and RMA fulfillment
  • Total Value Subscription Plus: Cyberoam Total Value Subscription Plus includes Anti Malware, Anti Spam, Web and Application Filter, Intrusion Prevention System, 24x7 Support, hardware warranty and RMA fulfillment
  • Total Value Subscription: Cyberoam Total Value Subscription includes Anti Malware, Anti Spam, Web and Application Filter and Intrusion Prevention System, 8x5 Support, hardware warranty and RMA fulfillment
  • Web and Application Filter: Dependable web and application filtering to control and report non-work and malicious web and network traffic activity.
  • Web Application Firewall: Prevents exploitation of web applications vulnerabilities.


Basic 8x5 Support: 8x5 Phone, Email and Web Chat support with firmware upgrades , hardware warranty and RMA fulfillment

Premium Support 24x7: 24x7 Phone, Email and Web Chat support with firmware upgrades, hardware warranty and RMA fulfillment

  8x5 Basic Support 24x7 Premium Support
Technical Support
Timings 10AM - 6PM (Local Time Zone) Anytime during the day
Web Based Support Yes Yes
Phone Based Support Yes Yes
Chat Based Support Yes Yes
Number of support incidents per annual subscription Unlimited Unlimited
First Response Time 4 Hours 1 Hour
Onsite Support Services* - Fee Based Service
Software Support
Software & OS Upgrades and Patches Yes Yes
Hot Fixes and Enhancement upgrades Yes Yes
Signature & database update Yes Yes
Hardware Warranty
Limited Hardware warranty & Replacement Yes Yes
Return and Replacement policy 10 Days 4 Days
Advanced Hardware Replacement - Yes
Customer Portal
Product Documentation and Guides Yes Yes
Technical Trainings - CCNSP & CCNSE Certifications Fee Based Fee Based
Online Demo Yes Yes
Version Release Notes Yes Yes
Support Renewals
One, two and three (1, 2 and 3) Year Renewals Yes Yes

Download the Cyberoam Basic Support Plan Datasheet (PDF).

Download the Cyberoam Premium Support Plan Datasheet (PDF).


Download the Cyberoam Virtual UTM Brochure (PDF).

Download the Cyberoam Virtual UTM Tech Sheet(PDF).