vFirewall as a Service
Firewall is a network security device that monitors incoming as well as outgoing network traffic and choose whether to grant or prevent specific traffic based on a defined set of security rules. Firewalls is a first line of defence in network security from years.
Firewall provide prevention against external unwanted access by safeguarding computerand network from malicious or irrelevant network traffic. Firewall can also block malicious software from accessing an endpoint / computer / laptop or network through internet.
DC10G Virtual Firewall as a Service, almost like a physical firewall, works in partnership with switches and servers to avert unauthorized access to network or exfiltration of data. Our virtual firewall works in two modes.
Bridge mode : it works by monitoring and diagnosing all inbound and outbound traffic in a virtual machine.
Hypervisor mode : It sees the virtual firewall operating in isolation from the physical network. It manages the inbound and outbound traffic, residing in the corehypervisor kernel.
Now a days organizations are using virtual firewalls to protect their cloud infrastructure and services. Business houses can use a cloud-based virtual firewall, and following benefits pertaining to network security in the cloud can be ensured:
VPN ( Virtual Private Network )
- IPsec and OpenVPN
- Site-to-site and remote access VPN support
- VPN client for multiple operating systems
- L2TP/IPsec for mobile devices
- Multi-WAN for failover
- IPv6 support
- Split tunnelling
- Multiple tunnels
- VPN tunnel failover
- NAT support
- Automatic or custom routing
- Local user authentication or RADIUS/LDAP
- Intrusion Prevention System
- Multiple rules sources and categories
- Emerging threats database
- IP blacklist database
- Pre-set rule profiles
- Per-interface configuration
- Suppressing false positive alerts
- Deep Packet Inspection (DPI)
- Optional open-source packages for application blocking
- Enterprise Reliability
- Optional multi-node High Availability Clustering
- Multi-WAN load balancing
- Automatic connection failover
- Bandwidth throttling
- Traffic shaping wizard
- Reserve or restrict bandwidth based on traffic priority
- Fair sharing bandwidth
- User data transfer quotas
- User Authentication
- Local user and group database
- User and group-based privileges
- Optional automatic account expiration
- External RADIUS authentication
- Automatic lockout after repeated attempts
- Proxy and Content Filtering
- HTTP and HTTPS proxy
- Non Transparent or Transparent caching proxy
- Usage reporting for daily, monthly, etc.
Firewall and Router
- Stateful Packet Inspection (SPI)
- GeoIP blocking
- Anti-Spoofing
- Time based rules
- Connection limits
- Dynamic DNS
- Reverse proxy
- Captive portal guest network
- Supports concurrent IPv4 and IPv6
- NAT mapping (inbound/outbound)
- VLAN support (802.1q)
- Configurable static routing
- IPv6 network prefix translation
- IPv6 router advertisements
- Multiple IP addresses per interface
- DHCP server
- DNS forwarding
- Wake-on-LAN
- PPPoE Server
ADMINISTRATION
- Configuration
- Web-based configuration
- Setup wizard for initial configuration
- Remote web-based administration
- Customizable dashboard
- Easy configuration backup/restore
- Configuration export/import
- Encrypted automatic backup
- Variable level administrative rights
- Multi-language support
- Simple updates
- Forward-compatible configuration
- Serial console for shell access and recovery options
APPLICATIONS
- VPN Server
- High Availability
- Load Balancing
- Traffic Shaping
- Captive Portal
- UTM Device
- Firewall / Router
- DNS / DHCP Server
- Transparent Caching Proxy
- IDS / IPS