Cyberoam CR2500iNG-XP is a next-generation firewall appliance designed for large enterprise networks. The product is no longer available and has been succeeded by Sophos products. The appliance provides Layer 8 identity-based security that treats user identity as the eighth layer in the network protocol stack, enabling administrators to control network access and set policies based on usernames. The firewall performs stateful inspection across Layers 2-7 and integrates user authentication, service authorization, and audit capabilities. The device offers inline application inspection and control with coverage of over 2000 applications, allowing administrators to prioritize and control applications based on user identity, time, and bandwidth requirements. It includes intrusion prevention system capabilities to protect against network and application-level attacks, malware, trojans, DoS and DDoS attacks. Additional security features include web filtering with a URL database covering 89+ categories, HTTPS/SSL inspection, VPN connectivity (IPSec and SSL), and web application firewall protection against OWASP Top 10 vulnerabilities. The appliance provides gateway anti-virus, anti-spam filtering, and bandwidth management with QoS controls. The CR2500iNG-XP includes 10 fixed copper Gigabit Ethernet ports and 4 FleXi Port module slots that support additional copper 1G, fiber 1G, or 10G fiber ports. The device provides on-appliance reporting with over 1200 reports for real-time visibility into user and network activities. Performance specifications include firewall throughput up to 60 Gbps (UDP), support for 10 million concurrent sessions, 300,000 new sessions per second, and 5,000 IPSec VPN tunnels.