Endian Firewall Appliances

 Zu den Angeboten

Endian Firewall Software

Zu den Angeboten

Endian Support / Maintenance

Zu den Angeboten

Endian Features

Web Interface

  • Completely redesigned web interface
  • Many usability enhancements
Enhanced management of WAN/RED connections
  • Support for multiple uplinks
  • Multiple IPs/networks on each WAN/RED interface
  • Uplink monitoring with automatic failover (ISP failover)
  • Easy editing/management of uplinks
  • Support for new uplink types: UMTS, PPTP
Networking
  • VLAN support (IEEE 802.1Q trunking)
  • Policy Routing: routing based on user, interface, mac, protocol or port
Port Forwarding / NAT
  • Multiple uplink support, allowing different rules per uplink
  • Port Forwarding of traffic coming from VPN endpoints
  • Source NAT management
  • Option for rule based Logging
System Access
  • External Access has now been enhanced and renamed to System Access
  • Fine grained management of permissions regarding access to the system from LAN, WAN, DMZ and VPN endpoints
  • Default policy for firewall/system access is now set to DENY
  • Firewall services automatically define ports required for their proper function, but access can be restricted
  • Support for ICMP protocol
Outgoing Firewall
  • Support for ICMP protocol
  • Handling of multiple sources/ports/protocols per Rule
Zone Firewall
  • DMZ Pinholes has been enhanced and renamed to Zone Firewall
  • Fine grained filtering of local network traffic
  • Rules based on zones, physical interfaces, MAC addresses
  • Support for ICMP protocol
  • Handling of multiple sources/ports/protocols per rule
Intrusion Detection
  • New version of Snort IDS with reduced RAM usage and enhanced performance
  • Support for inline intrusion detection
High Availability
  • Multi-Node Appliance Cluster
  • Hot Standby (active/passive)
  • Automatic Node Data Synchronization
  • Process monitoring/watchdog
HTTP Proxy
  • Time based access control with multiple time intervals
  • Group based web access policies
  • Zone based operation mode: transparent, authentication or no authentication
Content Filter
  • Better handling of content filter categories
  • Enhanced performance
SMTP Proxy
  • Enhanced performance
  • Optional setting for Smarthost port
  • Additionally secures SMTP traffic coming from VPNs (Roadwarrior and Gateway2Gateway)
DNS Proxy
  • Route specific domains to a custom DNS
Hotspot
  • Better account listing, with pagination, sorting and search
  • Per user and global bandwidth limiting
  • MAC-address based user accounts
  • User accounts import/export per CSV
  • Single-click ticket generation (Quick ticket)
  • Automatic client network configuration (support for DHCP and static IP)
  • Hotspot for Hotels   
  • Generic JSON-API for external accounting and third party integration (like Hotel Management Software)
  • Support for multiple network interfaces
 OpenVPN
  • X.509 and 2 factor based authentication
  • Pushing of DNS settings to clients
  • Pushing of global or per client routes
  • Support for NATed VPN endpoints
  • Support for VPN over HTTP Proxy
  • Automatic connection failover
  • Every VPN endpoint is resolvable through DNS (vpn.<username>.domain)
 Endian VPN Client
  • Downloadable from Endian Network
  • Works with Windows (Vista, XP, 2000), MacOSX, Linux
  • Multiple connections at once
  • Encrypted configuration profiles
  • PSK, X509 based and 2 factor authentication
  • Runs as service and allows unprivileged users to start a connection
  • Can start the connection automatically on boot / on user logon
  • Supports openvpn server fallback, when primary server fails
 
 Live Log Viewer
  • Realtime log viewer with filtering and highlighting
  • Displays all the logfiles you are interested in at the same time
 Logs
  • Every service supports remote logging
  • Daily log rotation
 
 Backup
  • Zero-configuration backups to USB stick: just plug in a USB stick and it "just works"
  • Restore a from any USB stick
 Support
  • One click to grant access to Endian Support Team
  • Integrated ticketing support
 
 IPSEC
  • Rewrite of the base
  • Added debugging possibilities
  • Ipsec on orange
  • Default MTU can be overridden
  • Simplified GUI by removing Side (Left/Right) configuration and swapped completely to Local/Remote labeling
  • added ID fields
  • Added Dead Peer Detection options
 Backup
  • Zero-configuration backups to USB stick: just plug in a USB stick and it "just works"
  • Restore a from any USB stick