The 310 adds a first level of SSL inspection on top of what the 210 offers, but it isn't full inspection of every encrypted session. If you need complete visibility into HTTPS traffic across the board, the Web Security Gateway 410 is the model that adds it.

It lets the appliance sit directly inline on the network wire, between your switch and your internet connection, rather than being deployed as a separate proxy the way the desktop 210 is. That's a simpler network setup for a single-location office once you're past a handful of users.

Up to 400 concurrent users at 100 to 150 Mbps of throughput. That's roughly four times the 210's user ceiling, which makes sense for a small-to-midsize office moving off a desktop appliance.

It's a subscription add-on across the whole Web Security Gateway line, including the 310. It detonates suspicious files in an isolated environment before they reach your network and checks them against Barracuda's global threat intelligence, on top of the standard content filtering.

Yes. It ships with hot-swap RAID, so a single drive failure doesn't take the appliance down or lose your logs and reporting history while a replacement drive is installed.