Endian Firewall Systeme und Features
|
Durch uns als zertifizierten Endian Partner haben Sie die Garantie immer auf dem neusten Stand zu sein und Ihr Firmennetzwerk erfolgreich gegen Angriffe aus dem Internet abzusichern.
Die Endian Firewall ist eine schlüsselfertige Linux-Sicherheits-Distribution, die jedes System zu einer vollwertigen Sicherheits-Appliance macht. Features sind eine Firewall mit zustandsabhängiger Paketinspektion, Proxys auf Anwendungsebene für verschiedene Protokolle (HTTP, POP3, SMTP), Antiviren-Unterstützung, Viren- und Spamfilterung für Email-Traffic (POP und SMTP), Inhaltsfilterung von Web-Traffic und ein stressfreies VPN-System
|
 |
 |
Endian Features
Web Interface
- Completely redesigned web interface
- Many usability enhancements
Enhanced management of WAN/RED connections
- Support for multiple uplinks
- Multiple IPs/networks on each WAN/RED interface
- Uplink monitoring with automatic failover (ISP failover)
- Easy editing/management of uplinks
- Support for new uplink types: UMTS, PPTP
Networking
- VLAN support (IEEE 802.1Q trunking)
- Policy Routing: routing based on user, interface, mac, protocol or port
Port Forwarding / NAT
- Multiple uplink support, allowing different rules per uplink
- Port Forwarding of traffic coming from VPN endpoints
- Source NAT management
- Option for rule based Logging
System Access
- External Access has now been enhanced and renamed to System Access
- Fine grained management of permissions regarding access to the system from LAN, WAN, DMZ and VPN endpoints
- Default policy for firewall/system access is now set to DENY
- Firewall services automatically define ports required for their proper function, but access can be restricted
- Support for ICMP protocol
Outgoing Firewall
- Support for ICMP protocol
- Handling of multiple sources/ports/protocols per Rule
Zone Firewall
- DMZ Pinholes has been enhanced and renamed to Zone Firewall
- Fine grained filtering of local network traffic
- Rules based on zones, physical interfaces, MAC addresses
- Support for ICMP protocol
- Handling of multiple sources/ports/protocols per rule
|
Intrusion Detection
- New version of Snort IDS with reduced RAM usage and enhanced performance
- Support for inline intrusion detection
High Availability
- Multi-Node Appliance Cluster
- Hot Standby (active/passive)
- Automatic Node Data Synchronization
- Process monitoring/watchdog
HTTP Proxy
- Time based access control with multiple time intervals
- Group based web access policies
- Zone based operation mode: transparent, authentication or no authentication
Content Filter
- Better handling of content filter categories
- Enhanced performance
SMTP Proxy
- Enhanced performance
- Optional setting for Smarthost port
- Additionally secures SMTP traffic coming from VPNs (Roadwarrior and Gateway2Gateway)
DNS Proxy
- Route specific domains to a custom DNS
Hotspot
- Better account listing, with pagination, sorting and search
- Per user and global bandwidth limiting
- MAC-address based user accounts
- User accounts import/export per CSV
- Single-click ticket generation (Quick ticket)
- Automatic client network configuration (support for DHCP and static IP)
- Hotspot for Hotels
- Generic JSON-API for external accounting and third party integration (like Hotel Management Software)
- Support for multiple network interfaces
|
|
OpenVPN
- X.509 and 2 factor based authentication
- Pushing of DNS settings to clients
- Pushing of global or per client routes
- Support for NATed VPN endpoints
- Support for VPN over HTTP Proxy
- Automatic connection failover
- Every VPN endpoint is resolvable through DNS (vpn.<username>.domain)
|
Endian VPN Client
- Downloadable from Endian Network
- Works with Windows (Vista, XP, 2000), MacOSX, Linux
- Multiple connections at once
- Encrypted configuration profiles
- PSK, X509 based and 2 factor authentication
- Runs as service and allows unprivileged users to start a connection
- Can start the connection automatically on boot / on user logon
- Supports openvpn server fallback, when primary server fails
|
|
Live Log Viewer
- Realtime log viewer with filtering and highlighting
- Displays all the logfiles you are interested in at the same time
|
Logs
- Every service supports remote logging
- Daily log rotation
|
|
Backup
- Zero-configuration backups to USB stick: just plug in a USB stick and it "just works"
- Restore a from any USB stick
|
Support
- One click to grant access to Endian Support Team
- Integrated ticketing support
|
|
IPSEC
- Rewrite of the base
- Added debugging possibilities
- Ipsec on orange
- Default MTU can be overridden
- Simplified GUI by removing Side (Left/Right) configuration and swapped completely to Local/Remote labeling
- added ID fields
- Added Dead Peer Detection options
|
Backup
- Zero-configuration backups to USB stick: just plug in a USB stick and it "just works"
- Restore a from any USB stick
|
