Cyberoam CR2500iNG is a next-generation firewall appliance designed for large enterprise networks. The product is no longer available and has been replaced by Sophos offerings. The appliance implements Layer 8 Identity-based technology that treats user identity as an abstract layer in the network protocol stack, enabling administrators to identify users, control network activity, and create policies based on usernames across Layers 2-7. Hardware specifications include 14 copper GbE ports, 4x 1GbE SFP ports, 4x 10GbE SFP ports, 2 hardware bypass segments, and RAID 1 configuration. Performance metrics include 40 Gbps firewall throughput (UDP), 28 Gbps (TCP), 200,000 new sessions per second, and 3.5 million concurrent sessions. Security features include inline application inspection covering 2000+ applications, intrusion prevention system, web filtering with 89+ URL categories, VPN (IPSec and SSL), HTTPS inspection, and bandwidth management. Optional subscriptions provide web application firewall, gateway anti-virus, and anti-spam capabilities. The system offers on-appliance reporting with 1200+ reports for real-time visibility into user and network activities. Application controls classify applications by risk level, characteristics, and technology. Bandwidth policies can be tied to users, user groups, applications, website categories, and firewall rules for granular QoS management.