QGD-1602P

Deploy ADRA NDR cybersecurity software on a PoE Switch: The most cost-efficient enterprise LAN security solution for all your edge devices

QGD-1602P

Use as ADRA NDR

QGD-1602P PoE Switch allows installation of ADRA NDR cybersecurity software, which can detect suspicious packets across all the connected end devices on your LAN to protect against targeted ransomware at an early stage. It’s an affordable wide-ranging LAN security solution.

Economic, convenient
Without installing expensive EDR software for each end device, all you need is a switch with ADRA NDR for early detecting potential threats on all the end devices.
Threat trap
By simulating a threat trap for malware to initiate attacks, hostile behaviors will be detected by QGD-1602P.
Threat analysis
Once suspicious activities are captured by Threat Detection, the Deep Threat Analysis and Threat Correlation Analysis will determine its attack type and evaluate associated risk levels.
Automated Isolation
Only affected devices are automatically isolated, assisting in containing malware attacks without shutting down the entire network.
Layer 2 management & PoE
QGD-1602P provides user-friendly Layer 2 management and 90-watt PoE++ capability.
Without impacting performance
ADRA NDR can be deployed and operated without impacting network performance and existing infrastructure.

Available Models

QGD-1602P-C3758-16G

4 x RJ45 2.5GbE 802.3bt 90-watt PoE ports, 4 x RJ45 2.5GbE 802.3at 30-watt PoE ports, 8 x RJ45 Gigabit 802.3at 30-watt PoE ports, 2 x 10GbE SFP+ ports; Intel® Atom® C3758 octa-core 2.2 GHz processor, 16 GB DDR4 RAM

QGD-1602P-C3558-8G

4 x RJ45 2.5GbE 802.3bt 90-watt PoE ports, 4 x RJ45 2.5GbE 802.3at 30-watt PoE ports, 8 x RJ45 Gigabit 802.3at 30-watt PoE ports, 2 x 10GbE SFP+ ports; Intel® Atom® C3558 quad-core 2.2 GHz processor, 8 GB DDR4 RAM

Modern IT challenges: Hidden lateral movements in LAN are hard to uncover

As targeted ransomware often attack via lateral movement in LAN, it is no longer safe to solely rely on network-based firewall appliances (perimeter) at the edge of your local network. If you can’t detect and deal with a threat early enough, your business will be at stake, and the time and costs involved in restoring your IT infrastructure and reputation will be significant.

Learn More: Network security with NDR solutions

Why not detect targeted ransomware early with a LAN switch?

By simply installing on QGD-1602P PoE switch, you can provide network-level security for all your end devices in LAN. While other EDR solutions are expensive and have hardware/software limitations, ADRA NDR is an economic and high-performance LAN security solution.

ADRA NDR Architecture

Installed on the access switch
EDR Architecture

Installed on each client

Affordable for SMBs	Without impacting performance	For all end devices
EDR solutions must be deployed on each client device with individual licensing. The budget friendly ADRA NDR can be deployed on the access switch.	ADRA NDR checks specific network packets passing through the 1~7 layer switching for suspicious activities. As it only checks part of the network traffic, throughput is unaffected and high-performance storage and services is ensured.	EDR solutions cannot be used on all types of client devices due to hardware/software limitations. QGD-1602P offers full protection for all connected end devices such as computers, servers, NAS, printers, and IP cameras.

Detect, Analyze, Isolate

Automating cybersecurity with ADRA NDR

QNAP ADRA NDR automatically detects, analyzes, and stops threat in time to protect against internal security threats.

Active detection
The ADRA appliance checks specific network packets passing through the switch for suspicious activities. A Threat Trap is a Virtual Machine simulating several common services as a lure for malware to attack. Once an attack is initiated, the suspicious activity can be detected by ADRA NDR.
Automated analysis
When suspicious activities are detected, network traffic packets are analyzed through Deep Threat Analysis and Threat Correlation Analysis to determine the malware attack type and evaluate its associated risk levels.
Automated Isolation
ADRA NDR automatically notifies or blocks infected devices once a threat is defined as medium or high risks, while ensuring the connections of other devices. When suspicious activities are captured by Threat Detection, ADRA NDR directly notifies or blocks infected devices without analyzing process.

Automated and flexible cybersecurity responses

Once malware activities are detected, configured response actions will be taken based on the selected rule.

Strict Protection

Auto-block all potential risks
Advanced Protection

Auto-block medium and high risks
Basic Protection

Auto-block high risk attacks only
Risk Inform

Notify and monitor all potential risks

Cyber risks at a glance

ADRA NDR provides an at-a-glance Dashboard and user-friendly graphical management UI, helping IT staff to quickly detect and analyze potential threats.

Dashboard
View the overall risk level and information of the total medium/high risk attacks, total high-risk devices, and Top 5 IP addresses with most threats in real time.
Threat Analysis
Lists the information of all potential threats, including Trigger, Risk, and IP address. You can quickly search by grouping for efficient management.
Rules
Once malware activities are detected, configured response actions are taken based on the selected rule, including Strict Protection, Advanced Protection, Basic Protection and Risk Inform.
Threat Traps
Add Trap instances and edit the hostname and IP address.

Guards all enterprise LAN devices

For enterprises with medium-to-large LAN infrastructure, QGD-1602P can be deployed as an Access Switch for connecting all the end devices to offer comprehensive protection in LAN.

QNAP ADRA NDR solution

"We are amazed at the network risk visualization, rapid network isolation, and stable operation of QNAP’s low-cost ADRA NDR."

- Mutsuo Nakato, CEO of Marunaka Transportation

Read customer story More customer stories

"Through its LAN ports, QNAP ADRA NDR provides security for networked NAS by rapidly detecting ransomware and similar threats."

- Ing. Errico Di Domenico – Operation Manager, Centrale del Latte di Salerno

Read customer story More customer stories

Level up your cybersecurity with the ADRA NDR – Upgrade Now!

Quickly detect unknown threats and bolster your defenses by upgrading your QGD-1602P to an ADRA NDR appliance. Licenses start at US$ 399 per year.

ADRA NDR Software License

Upgrade your QGD QTS to ADRA NDR System

Learn more
Activate your ADRA NDR license on QGD

Learn more

Note: After upgrading to ADRA NDR software, the QGD switch cannot run QTS OS and VMs.

Suspicious network activities detected by ADRA

Suspicious Network Activity Types	Contents
Scan	• Device/network scanning • TCP/UDP/ICMP/ARP scanning
Abnormal operation	• Network flooding • TCP flag attacking • Unknown domain requests • Credential phishing
Vulnerability	• CVE vulnerability zero-day attacks • Microsoft Active Protections Program zero-day attacks • “Patch Tuesday” zero-day attacks
Malware/Ransomware suspicious operation*	• C&C call back • Exploit-kit detect • Network spoofing • DDoS

Note: ADRA only detects suspicious network activities caused by malware/ransomware. ADRA does not perform file-based decryption/detection/analysis.

Here’s why: Not only Firewalls but also ADRA NDR

	QNAP ADRA NDR	Firewall	EDR (Endpoint Detection and Response)
Major goal	Detects and stops in-progress suspicious activity in LAN	Block threats from the Internet	Makes sure edge devices in LAN operate and data is secure
Location in your network infrastructure	Acts as an edge/access switch, between client devices on the Intranet	Act as a gatekeeper between the Internet and Intranet	On individual client devices
Protects against	Attacks from inside the Intranet (between client devices)	Attacks from Internet	Attacks from anywhere to client devices
Advantages	• A switch with NDR functions for easy deployment and lowest TCO. • Comprehensive protection for all the end devices connected to the QGD-1602P. • Monitors and intercepts malware that is laterally moving on the Intranet to infect client devices. • Focuses on the early stages of cyberattack; stops suspicious traffic at the beginning.	• First line of defense. • Rich UTM functions handle multiple threats from the Internet and provides features necessary for routing/internet connections.	Protection for a single client device, including its network operation and stored data.
Limitations	Only detects suspicious network activities caused by malware/ransomware. File-based decryption, detection, and analysis are not supported.	Cannot monitor threats if Intranet traffic does not pass through the firewall.	• First line of defense. • Due to hardware/software limitations, not all client devices can use EDR (such as computers, servers, NAS, printers, and IP cameras.)

Choose the right model based on your number of detection edge devices and Threat Traps

Model series	Recommended max. number of detection devices	Recommended max. number of high-bandwidth detection devices	Recommended max. number of Threat Traps
QGD-1600P Series	1-50	1-10	1-2
QGD-1602P-C3558-8G	51-80	11-30	3-6
QGD-1602P-C3758-16G	81-110	31-60	6-8

A virtual machine of a Threat Trap running on a QGD switch will be calculated as a high-bandwidth detection device. For example, a QGD-1600P running two Threat Traps can only accommodate an additional eight physical high-bandwidth detection devices (such as computers transferring large files or streaming high-quality videos).

Optional Accessories

QM2-2P-344A

Dual M.2 PCIe SSD expansion card; M.2 2280/22110 PCIe NVMe(Gen 3x4) SSDs; PCIe Gen3x4 host interface
Dimension (L × W × H): 17.05 × 6.89 × 1.93 (cm)
Weight: 0.30 (kg)
QM2-2P-384 (EOL)

Dual M.2 PCIe SSD expansion card; supports up to two M.2 2280/22110 formfactor M.2 PCIe (Gen3 x4) SSDs; PCIe Gen3 x8 host interface; Low-profile bracket pre-loaded, Low-profile flat and Full-height are bundled
Dimension (L × W × H): 19.50 × 5.30 × 12.30 (cm)
Weight: 0.30 (kg)
QM2-2P-384A

Dual M.2 PCIe SSD expansion card; M.2 2280/22110 PCIe NVMe(Gen 3x4) SSDs; PCIe Gen3x8 host interface
Dimension (L × W × H): 17.05 × 6.89 × 1.93 (cm)
Weight: 0.30 (kg)

FAN-4CM-R01

40x40x25mm fan, 12V, 4PIN
QNA-UC5G1T
RAIL-B02

new rail kit for new 1U & 2U NAS: TVS-471U, 1253U, etc
Dimension (L × W × H): 73.80 × 10.00 × 7.00 (cm)
Weight: 2.48 (kg)
This rail kit is designed for racks with 25-inch mounting depth. You may need to reserve some space when installing and adjusting the rail kit for racks with 18-inch mounting depth. For installation details, click https://qnap.to/rail-b02.
HS-M2SSD-01

Heatsink for M.2 SSD module,14*14MM, Black, self adhesive.8 pcs
Dimension (L × W × H): 12.70 × 2.70 × 6.80 (cm)
Weight: 0.04 (kg)

LAN-10G2T-X550 (EOL)

QNAP Dual-port 10 Gigabit Network Expansion Card for rackmount and tower models (10GBASE-T interface)
Dimension (L × W × H): 6.00 × 10.50 × 26.00 (cm)
Weight: 0.42 (kg)
QXG-10G1T

Single-port (10Gbase-T) 10GbE network expansion card, PCIe Gen3 x4, Low-profile bracket pre-loaded, Low-profile flat and Full-height are bundled
Dimension (L × W × H): 14.30 × 19.30 × 5.20 (cm)
Weight: 0.17 (kg)
QXG-10G2T

Dual-port 10GBASE-T 10Gb network expansion card; low-profile formfactor; PCIe Gen3 x4
Dimension (L × W × H): 5.45 × 3.95 × 1.80 (cm)
Weight: 0.29 (kg)
QXG-10G2T-107 (EOL)

Dual-port 10GBASE-T 10Gb network expansion card; low-profile formfactor; PCIe Gen2 x4
Dimension (L × W × H): 14.50 × 19.00 × 5.20 (cm)
Weight: 0.24 (kg)
QXG-25G2SF-CX6

Dual-port SFP28 25Gb network expansion card; Mellanox ConnectX-6 Lx;low-profile formfactor; PCIe Gen4 x8
Dimension (L × W × H): 12.00 × 1.65 × 6.90 (cm)
Weight: 0.15 (kg)
QXG-2G1T-I225

Single port 2.5GbE 4-speed Network card
Dimension (L × W × H): 6.73 × 6.89 × 2.52 (cm)
Weight: 0.19 (kg)
QXG-2G2T-I225

Dual port 2.5GbE 4-speed Network card
Dimension (L × W × H): 8.13 × 6.89 × 2.52 (cm)
Weight: 0.23 (kg)

QXP-10G2U3A

Dual-port USB 3.2 Gen 2 10Gbps Type-A PCIe Gen 3 x2 Card, Asmedia ASM3142
Dimension (L × W × H): 8.96 × 6.89 × 1.40 (cm)
Weight: 0.09 (kg)
USB-U31A2P01 (EOL)

USB 3.2 Gen 2 10Gbps Type-A Dual-port PCIe Card
Dimension (L × W × H): 11.30 × 18.50 × 5.20 (cm)
Weight: 0.17 (kg)
USB cabe is not included.

TRX-10GSFP-SR-MLX

Mellanox MFM1T02A-SR SFP+ Optical Module for 10GBASE-SR
Dimension (L × W × H): 12.00 × 19.50 × 3.50 (cm)
Weight: 0.10 (kg)
CAB-DAC15M-SFPP

SFP+ 10GbE twinaxial direct attach cable, 1.5M
Dimension (L × W × H): 1.00 × 24.00 × 29.50 (cm)
This 10GbE SFP+ network cable is designed for NAS models with an integrated 10GbE SFP+ LAN port or a 10GbE SFP+ network card.
CAB-DAC30M-SFPP

SFP+ 10GbE twinaxial direct attach cable, 3.0M
This 10GbE SFP+ network cable is designed for NAS models with an integrated 10GbE SFP+ LAN port or a 10GbE SFP+ network card.
CAB-DAC50M-SFPP

SFP+ 10GbE twinaxial direct attach cable, 5.0M
This 10GbE SFP+ network cable is designed for NAS models with an integrated 10GbE SFP+ LAN port or a 10GbE SFP+ network card.

RAM-16GDR4ECT0-SO-2666

DDR type: DDR4(260PIN)
Capacity: 16GB
Spec: 1G X 8
Frequency: DDR4-2666
Form(PIN): 260PIN
with ECC Supported: ECC
Power Supply: 1.2V
Dram Organization: 2048M*72
Temperature: 0℃~85℃
Environmental Regulation: RoHS
RAM-16GDR4T0-SO-2666

DDR type: DDR4(260PIN)
Capacity: 16GB
Spec: 1G X 8
Frequency: DDR4-2666
Form(PIN): 260PIN
Power Supply: 1.2V
Dram Organization: 1024M*64
Temperature: 0℃~85℃
Environmental Regulation: RoHS
RAM-32GDR4K0-SO-3200

DDR type: DDR4(260PIN)
Capacity: 32GB
Spec: 2G X 8
Frequency: DDR4-3200
Form(PIN): 260PIN
Power Supply: 1.2V
Dram Organization: 4G*64
Temperature: 0℃~85℃
Environmental Regulation: RoHS
RAM-8GDR4ECT0-SO-2666

DDR type: DDR4(260PIN)
Capacity: 8GB
Spec: 1G X 8
Frequency: DDR4-2666
Form(PIN): 260PIN
with ECC Supported: ECC
Power Supply: 1.2V
Dram Organization: 1024M*72
Temperature: 0℃~85℃
Environmental Regulation: RoHS
RAM-8GDR4T0-SO-2666

DDR type: DDR4(260PIN)
Capacity: 8GB
Spec: 1G X 8
Frequency: DDR4-2666
Form(PIN): 260PIN
Power Supply: 1.2V
Dram Organization: 1024M*64
Temperature: 0℃~85℃
Environmental Regulation: RoHS

Personal and Home NAS

Small and Midsize Business

Enterprise NAS

All-Flash NAS

2.5GbE NAS + Switch Bundle Pack

Storage Accessories

Resources

Expand NAS Capacity

Expand PC/Server Capacity

Resources

QNAP Cloud

Cloud NAS

Cloud Applications

Direct Attached Storage (PC/Workstations)

Accessories

Resources

QSW 2.5GbE Switches

QSW 10GbE Switches

QSW Full 10GbE Switches

PoE Switches

QSW Managed Switches

QSW Unmanaged Switches

QSW Industrial-grade Switches

QSW 25GbE Switches

QSW 100GbE Switches

QGD Smart Edge Switches

Resources

SD-WAN Router

Wi-Fi 6 SD-WAN Router

Wired SD-WAN Router

Resources

Intel x86 Smart Edge Switch

Smart Edge Switch Series

ADRA NDR Cybersecurity Appliances

NDR Cybersecurity Appliance Series

QuCPE Network Virtualization Premise Equipment

Virtualized IT Room Solutions

More Apps

Add network ports

Add Wi-Fi connectivity

Wake on Lan Device

Connect storage expansion units

Expand my storage

Add network ports

Add Wi-Fi connectivity

Customize drive usage

Resources

QVR Pro Appliances

Smart Video Surveillance System

Resources

Smart Video Products

Backup and Data Protection

Virtualization

Storage Management

Productivity

IT Management

Multimedia

Cloud

Surveillance & Smart Video

Security

Utilities and Mobile

Backup and Data Protection

Virtualization

Storage Management

Productivity

IT Management

Cloud

Surveillance & Smart Video

Security

Utilities and Mobile

Backup and Data Protection

Virtualization

Storage Management

Productivity

IT Management

Multimedia

Security

Cloud

IT Management

SD-WAN