Web Interface
- Completely redesigned web interface
- Many usability enhancements
Enhanced management of WAN/RED connections
- Support for multiple uplinks
- Multiple IPs/networks on each WAN/RED interface
- Uplink monitoring with automatic failover (ISP failover)
- Easy editing/management of uplinks
- Support for new uplink types: UMTS, PPTP
Networking
- VLAN support (IEEE 802.1Q trunking)
- Policy Routing: routing based on user, interface, mac, protocol or port
Port Forwarding / NAT
- Multiple uplink support, allowing different rules per uplink
- Port Forwarding of traffic coming from VPN endpoints
- Source NAT management
- Option for rule based Logging
System Access
- External Access has now been enhanced and renamed to System Access
- Fine grained management of permissions regarding access to the system from LAN, WAN, DMZ and VPN endpoints
- Default policy for firewall/system access is now set to DENY
- Firewall services automatically define ports required for their proper function, but access can be restricted
- Support for ICMP protocol
Outgoing Firewall
- Support for ICMP protocol
- Handling of multiple sources/ports/protocols per Rule
Zone Firewall
- DMZ Pinholes has been enhanced and renamed to Zone Firewall
- Fine grained filtering of local network traffic
- Rules based on zones, physical interfaces, MAC addresses
- Support for ICMP protocol
- Handling of multiple sources/ports/protocols per rule
|
Intrusion Detection
- New version of Snort IDS with reduced RAM usage and enhanced performance
- Support for inline intrusion detection
High Availability
- Multi-Node Appliance Cluster
- Hot Standby (active/passive)
- Automatic Node Data Synchronization
- Process monitoring/watchdog
HTTP Proxy
- Time based access control with multiple time intervals
- Group based web access policies
- Zone based operation mode: transparent, authentication or no authentication
Content Filter
- Better handling of content filter categories
- Enhanced performance
SMTP Proxy
- Enhanced performance
- Optional setting for Smarthost port
- Additionally secures SMTP traffic coming from VPNs (Roadwarrior and Gateway2Gateway)
DNS Proxy
- Route specific domains to a custom DNS
Hotspot
- Better account listing, with pagination, sorting and search
- Per user and global bandwidth limiting
- MAC-address based user accounts
- User accounts import/export per CSV
- Single-click ticket generation (Quick ticket)
- Automatic client network configuration (support for DHCP and static IP)
- Hotspot for Hotels
- Generic JSON-API for external accounting and third party integration (like Hotel Management Software)
- Support for multiple network interfaces
|
|
OpenVPN
- X.509 and 2 factor based authentication
- Pushing of DNS settings to clients
- Pushing of global or per client routes
- Support for NATed VPN endpoints
- Support for VPN over HTTP Proxy
- Automatic connection failover
- Every VPN endpoint is resolvable through DNS (vpn.<username>.domain)
|
Endian VPN Client
- Downloadable from Endian Network
- Works with Windows (Vista, XP, 2000), MacOSX, Linux
- Multiple connections at once
- Encrypted configuration profiles
- PSK, X509 based and 2 factor authentication
- Runs as service and allows unprivileged users to start a connection
- Can start the connection automatically on boot / on user logon
- Supports openvpn server fallback, when primary server fails
|
|
Live Log Viewer
- Realtime log viewer with filtering and highlighting
- Displays all the logfiles you are interested in at the same time
|
Logs
- Every service supports remote logging
- Daily log rotation
|
|
Backup
- Zero-configuration backups to USB stick: just plug in a USB stick and it "just works"
- Restore a from any USB stick
|
Support
- One click to grant access to Endian Support Team
- Integrated ticketing support
|
|
IPSEC
- Rewrite of the base
- Added debugging possibilities
- Ipsec on orange
- Default MTU can be overridden
- Simplified GUI by removing Side (Left/Right) configuration and swapped completely to Local/Remote labeling
- added ID fields
- Added Dead Peer Detection options
|
Backup
- Zero-configuration backups to USB stick: just plug in a USB stick and it "just works"
- Restore a from any USB stick
|