Dual 10G PUF-Anchored Quantum-Resilient Cybersecurity Gateway with Wi-Fi 7 5100BE

PUF-Anchored Quantum-Resilient Cybersecurity Gateway

The PLANET PQCG-800BE is an enterprise-grade PUF-Anchored Quantum-Resilient Cybersecurity Gateway built with a PUF-based Hardware Root of Trust to strengthen device security from the hardware level. Combining hardware-rooted protection, post-quantum cryptography, IDS/IPS, Layer 7 DPI, Zero Trust authentication and multi-protocol VPN, the PQCG-800 provides comprehensive protection for enterprise and critical network environments. Its PUF-based security architecture also supports hardware-backed configuration authorization through the PLANET CoreTrust Key, helping prevent unauthorized changes to critical gateway settings even when login credentials are compromised. Powered by a quad-core processor with dual 10G interfaces and Wi-Fi 7 connectivity, it delivers high-performance secure connectivity for demanding network deployments.

PUF-Based Hardware Root of Trust and Configuration Protection

At the core of the PQCG-800BE is Physical Unclonable Function (PUF) technology, which establishes a hardware-rooted trust foundation for protecting security-critical operations. For configuration change authorization, the gateway works with the CoreTrust Key and a paired management device to provide an additional hardware-backed control layer. Only a device that has completed pairing and has the authorized CoreTrust Key inserted can modify protected gateway settings. Even if an unauthorized user gains network access or valid login credentials, configuration changes remain restricted without the required hardware authorization, helping reduce the risk of credential-based takeover and unauthorized security policy modification.

Post-Quantum Cryptography for Long-Term Data Protection

Building on its PUF-based Hardware Root of Trust, the PQCG-800BE incorporates post-quantum cryptographic technologies to strengthen communications against emerging quantum-computing threats. This quantum-resilient security architecture is designed to address risks such as “harvest now, decrypt later”, where encrypted information captured today could potentially be decrypted by future quantum computers. By combining hardware-rooted trust with post-quantum protection, the PQCG-800BE provides a stronger security foundation for long-term protection of sensitive enterprise and critical infrastructure communications.

Anti-SCA Protection and PUF-Assisted Hardware TRNG

The PQCG-800BE integrates Anti-Side-Channel Attack (Anti-SCA) protection to help safeguard cryptographic keys against leakage through side-channel attacks. A PUF-assisted Hardware True Random Number Generator (TRNG) supports secure cryptographic key generation, further strengthening the gateway’s hardware security foundation.

Advanced Threat Protection with Built-in IDS/IPS and Layer 7 Deep Packet Inspection

The PQCG-800BE integrates built-in Intrusion Detection and Prevention (IDS/IPS) with Layer 7 Deep Packet Inspection (DPI) to continuously inspect network traffic and identify malicious activities before they impact business operations. By analyzing application-layer traffic in real time, the gateway detects known threats, blocks suspicious connections, and enhances application visibility, helping organizations reduce cyber risks while maintaining reliable network communications.

Continuous Security Monitoring with Security Logs and Scheduled Signature Updates

The PQCG-800BE provides security logs, event reports, and scheduled signature updates to simplify cybersecurity management and improve threat visibility. Administrators can monitor network activities, analyze security incidents, and identify potential threats, while scheduled threat signature updates help maintain protection against newly emerging cyber attacks with reduced management effort.

Zero Trust-Protected Access with Identity-Based Authentication

The PQCG-800BE supports Zero Trust access control, FIDO2 Passkey authentication, TOTP-based MFA, and certificate-based authentication to strengthen identity verification for enterprise resources. Built-in ZTNA enables secure application-level access, helping reduce the risks of credential compromise and unauthorized access across distributed enterprise environments.

Secure Boot for Trusted System Integrity

The PQCG-800BE incorporates Secure Boot technology to ensure that only authenticated and trusted firmware is executed during system startup. Cryptographic image signature verification establishes a Chain of Trust across boot stages, helping protect system integrity against firmware tampering.

Automatic Failover between Dual WAN

Featuring 10GBASE-T RJ45 and 10GBASE-X SFP+ WAN interfaces, the PQCG-800BE supports intelligent Dual-WAN failover to maintain Internet connectivity. When the primary WAN connection becomes unavailable, the secondary WAN interface automatically takes over, minimizing downtime for business-critical applications.

Flexible WAN Interfaces for Network Expansion

The PQCG-800BE provides flexible WAN deployment through its 10G RJ45 and 10G SFP+ interfaces, allowing administrators to choose copper or fiber connectivity according to deployment requirements. Supporting long-distance fiber transmission and high-speed Ethernet connectivity, it enables flexible network expansion for headquarters, branch offices, data centers, and industrial facilities.

Secure and Convenient Network Management

The PQCG-800BE provides HTTPS web management and SNMP management interfaces for convenient configuration and monitoring. Its built-in web interface offers an easy-to-use, platform-independent management facility, while SNMPv1, SNMPv2c, and SNMPv3 support integration with standard network management software. These management options help administrators efficiently maintain distributed network deployments.

Comprehensive Firewall and Threat Defense

The PQCG-800BE integrates Stateful Packet Inspection (SPI), IDS/IPS, Layer 7 DPI, and DoS/DDoS mitigation to provide comprehensive network protection. MAC and IP filtering help enforce traffic policies, while port forwarding and DMZ functions allow internal servers to provide services to Internet users according to configured access rules.

Multi-Protocol VPN Connectivity for Distributed Networks

The PQCG-800BE provides secure remote access and site-to-site connectivity through its comprehensive VPN suite. Supporting IPSec, OpenVPN, WireGuard, GRE, PPTP, and L2TP, it offers flexible tunneling options for branch offices, remote workers, and distributed business operations. Combined with identity-based access control, these VPN capabilities help organizations establish secure connections across public networks.

Flexible Routing with NAT Disable Capability

The PQCG-800BE supports NAT disable functionality, allowing it to operate in pure routing mode for advanced network deployment scenarios. This feature is particularly beneficial for environments requiring end-to-end IP transparency, such as enterprise backbone networks, data centers, or integration with upstream security systems. By disabling NAT, administrators can achieve greater control over traffic flow and routing policies.

Ultra-Wide Channel for High-Speed Wi-Fi 7 Connectivity

The PQCG-800BE supports up to 160 MHz channel bandwidth and delivers a peak wireless transmission rate of up to 5100 Mbps. Designed for commercial environments, it provides the speed, efficiency, and reliable performance required for bandwidth-intensive network services.

Higher Throughput with 4096-QAM

With 4096-QAM encoding, the PQCG-800BE transmits more data within each signal, increasing wireless throughput and transmission efficiency. It is ideal for high-bandwidth applications such as 4K/8K video streaming, AR/VR experiences, and real-time cloud services.

Reliable Dual-Band Wireless Connectivity

Supporting concurrent 2.4 GHz and 5 GHz wireless connectivity, the PQCG-800BE provides flexible coverage and high-speed data transmission. Its dual-band design supports reliable wireless connectivity for diverse commercial deployment requirements.

Maximizing Work Efficiency with PLANET SD-WAN Gateway

The PQCG-800BE incorporates SD-WAN (Software-Defined Wide Area Network) functionality to optimize traffic across multiple WAN links. By managing available network connections at each site, it helps improve application performance, enhance the user experience, and simplify connectivity for distributed business operations.

Integrated Wi-Fi Management for Secure and Easy Deployment

The PQCG-800BE integrates an AP Controller, Captive Portal, RADIUS authentication, and DHCP server to streamline Wi-Fi deployment for small and medium-sized businesses. These built-in services reduce the need for external servers, enabling administrators to centrally manage APs, enforce access policies, and deliver secure employee and guest Wi-Fi networks with reduced setup complexity.

Centralized Remote Control of Managed APs

Through its intuitive web-based interface, the PQCG-800BE allows centralized control of PLANET Smart APs, with simple configuration of SSIDs, radio settings, and security policies. A quick four-step setup pushes wireless profiles to multiple APs or groups at once, enabling fast rollout and reduced deployment cost.

Administrators can cluster APs of the same model for unified management, flexibly expand or remove APs, and perform bulk provisioning or firmware upgrades from a single control point. This ensures scalable and efficient Wi-Fi management.

Intelligent SFP Diagnosis Mechanism

The PQCG-800BE supports SFP-DDM (Digital Diagnostic Monitor) functionality, allowing network administrators to monitor real-time transceiver parameters such as optical output power, optical input power, temperature, laser bias current, and supply voltage. This simplifies fiber-link monitoring and troubleshooting.

PLANET CloudNMS – Cloud-Based Universal Network Management

PLANET’s CloudNMS platform and mobile app empower IT staff to remotely manage all network devices and Powered Devices (PDs) in real time. Designed for enterprises and industries, CloudNMS minimizes the need for on-site troubleshooting by providing centralized monitoring, fault detection, and instant alerts. 

With CloudNMS, businesses can manage diverse network deployments more efficiently, securely, and intelligently—all from a single cloud-based platform.