Firewalls and VPN Solutions

Advanced Firewall is a software appliance firewall and VPN system, complete with integrated security hardened operating system. It can be extended to a full Unified Threat Management (UTM) solution via add-on modules, combining multiple security functions on a single UTM appliance located at the network perimeter. Advanced Firewall provides the highest possible level of network security, with reduced initial and ongoing support costs compared to the traditional approach of multiple independent systems.

		Perimeter Firewall: Perimeter security is always best; keeping the bad guys, their attacks, viruses, spyware and malware from ever getting beyond the gatekeeper to your network. Advanced Firewall controls what Internet services users can access, as well as the traditional role of blocking access to hackers and other Internet threats. Automatic fail-over to a standby Advanced Firewall system guards against the risk of hardware failure.
		Load Balancer: Advanced Firewall is the ideal solution for the efficient and resilient use of multiple Internet connections. Both outgoing and incoming traffic can be load balanced across two or more connections, or use protocol specific routing to separate high priority traffic onto a dedicated connection. In the event of an ISP/connection failure, all affected traffic is automatically re-routed to an alternate ISP/connection.
		Internal Firewall: Often ignored, the threat from within can be greater than from external hackers. Advanced Firewall allows local networks and DeMilitarized Zones (DMZs) to be segregated into multiple physically separate zones, with policy based user-level control of who can access what systems and services in other zones. Such segregation protects mission critical systems and confidential information from accidental access, inquisitive users or malicious interference.
		VPN Gateway: Advanced Firewall provides simple yet secure remote access to corporate networks. The integrated VPN gateway supports site-to-site (inter office) VPN connectivity to both SmoothWall and other manufacturers' systems, as well as clientless Secure Remote Access for mobile users, home workers and wireless (WiFi) connections.
		Web Security and Content Filtering: Inadequate web security has led to increasing web delivery of spyware and malware. The SmoothGuardian module protects against web threats by blocking spyware and browser exploits, controlling the use of active code such as ActiveX and JavaScript, and by anti-virus scanning web pages and file downloads. Pornography and all objectionable content is blocked, access to non work-related content can be controlled and limited to specific times, as can the download of executable and potentially copyright files.
		Email Security and Anti-Spam: The SmoothZap module enforces email security at the network perimeter, before threats reach their intended mail server or client target. SmoothZap incorporates the highly effective Mailshell anti-spam engine which combines content analysis with sender reputation checking and bulk email detection via continuous updates to detection signatures.
		Bandwidth Management (QoS): If you want to prioritize interactive traffic such as VoIP and web browsing for consistent performance and quality while maximizing the utilization of Internet connections, then the SmoothTraffic module is your solution.
		User Authentication: Policy based access control and user authentication are the keys to Advanced Firewall security; based on authenticated user identity rather than assumed identity derived from a computer's IP address. Microsoft Active Directory®, Novell eDirectory™ and other LDAP authentication servers can be used to verify user identity, their group membership and hence determine the security policies to be applied.
		Hardware Platforms: Advanced Firewall exploits the power, reliability and versatility of commodity server hardware to provide a cost effective UTM solution of unrivaled performance and flexibility. Entry level servers from major manufacturers such as Dell, HP and IBM are a common choice due to their excellent price performance and on-site support services.
		Instant Messaging: Control the use of Instant Messaging applications such as MSN, Yahoo, AOL and ICQ. As a fast and often more efficient alternative to email, instant messaging use is growing every day. However, when unmonitored it can encourage misuse, time-wasting and expose organizations to significant legal risks. Guardian incorporates tools to help managers block, monitor, log or censor IM conversations, so that misuse can be minimized and its advantages can be more easily evaluated.

Documentation

The following documents are available:

• Brochure 
• Datasheet

System Requirements / Hardware Support

• Processor:
  Intel Pentium compatible processor (500 MHz minimum, 1 GHz recommended), including VIA, AMD Athlon, Athlon 64, Opteron, Intel® Core™ 2 Duo, Xeon and Celeron processors.
  
  
• Multi-Processor:
  Symmetric Multi-Processor (SMP) support.
  
  
• RAM Memory:
  128 MBytes minimum to 4 GBytes maximum RAM (additional RAM improves performance). Additional RAM required if either SmoothGuardian or SmoothZap modules are installed (see their System Requirements pages for further information).
  
  
• Disk:
  A single SCSI, SATA, SAS or IDE disk (4 GBytes minimum) is required. Additional disk space is required if either the SmoothGuardian or SmoothZap modules are installed (see their System Requirements pages for further information).
  
  
• Software RAID:
  Optionally two disks of the same type (but can be of different capacity) may be configured for software RAID1 (mirrored disks).
  
  
• Hardware RAID:
  Hardware (SCSI and SAS) RAID systems and controller cards are supported.
  
  
• Flash Memory:
  Can be used as an alternative to a hard disk (256 MBytes minimum), unless either SmoothGuardian or SmoothZap modules are installed.
  
  
• CDROM:
  An IDE or SCSI CDROM or bootable USB CDROM drive is recommended for software installation (not required after installation).
  
  
• Network Cards (NICs):
  All common Network Interface Cards are supported including Gigabit and fiber NICs.
  
  
• Monitor and Keyboard:
  Required for software installation but not for subsequent configuration and use (headless operation).
  
  
• Operating System:
  Integral Security Hardened Operating System included.

Corporate Firewall is a software appliance firewall and VPN system complete with integrated security hardened operating system. Deployed on standard server or PC hardware, it is designed to fulfill the Internet security needs of small to medium size organizations and corporate branch offices. It can be extended to a full Unified Threat Management (UTM) solution via add-on modules, combining multiple security functions on a single UTM appliance located at the network perimeter.

		Perimeter Firewall: Perimeter security is always best; keeping the bad guys, their attacks, viruses, spyware and malware from ever getting beyond the gatekeeper to your network. Corporate Firewall controls what Internet services users can access, as well as the traditional role of blocking access to hackers and other Internet threats.
		VPN Gateway: Corporate Firewall provides simple yet secure remote network access with a fully featured VPN gateway. It supports SSL, IPSec and L2TP to provide site-to-site (inter office) connectivity to both SmoothWall and other manufacturers' systems, as well as clientless Secure Remote Access for mobile users, home workers and wireless (WiFi) connections.
		Web Security and Content Filtering: Non work-related browsing can have a very detrimental impact upon your organization's productivity. Guardian is the answer, controlling or monitoring access to social networking, news, shopping and dozens of other website categories; as well as blocking pornography and all objectionable content. The SmoothGuardian module also protects against web threats by blocking spyware and browser exploits, controlling the use of active code such as ActiveX and JavaScript and by anti-virus scanning web pages and file downloads.
		Email Security and Anti-Spam: The SmoothZap module enforces email security at the network perimeter, before threats reach their intended mail server or client target. SmoothZap incorporates the highly effective Mailshell anti-spam engine which combines content analysis with sender reputation checking and bulk email detection via continuous updates to detection signatures.
		Bandwidth Management (QoS): If you want to prioritize interactive traffic such as VoIP and web browsing for consistent performance and quality while maximizing the utilization of Internet connections, then the SmoothTraffic module is your solution.
		Instant Messaging: Instant Messaging can be a great business tool but unmonitored it can encourage misuse, inappropriate personal communications, time-wasting and exposes organizations to significant legal risks. Corporate Firewall provides the tools to allow managers to block, monitor, log or censor IM conversations, so that misuse can be minimized and its advantages can be more easily evaluated.
		Hardware Platforms: Corporate Firewall exploits the power, reliability and versatility of commodity PC hardware to produce a cost effective security appliance that is easy to support and maintain. Compatible with a huge range of both the latest and not-so-new hardware, almost any Pentium compatible PC is a suitable platform for Corporate Firewall. Entry level server or workstation computers from major manufacturers such as Dell, HP and IBM are a common choice due to the excellent on-site support services available.

Ease-of-use was a primary design goal for Corporate Firewall, in recognition of the fact that most mid-size organizations have limited IT resources and specialized skills. This philosophy starts with comprehensive yet easy to understand documentation, a Quick-Start Guide and full reference manuals, which include tutorial sections and examples. Software installation has also been made quick and painless; using automatic hardware detection and configuration it takes less than 10 minutes. Avoiding the need to install special client software, final configuration is performed from any computer with a web browser, using an intuitive Ajax enhanced GUI with on-line and tooltip help.

Documentation

The following documents are available:

• Brochure 
• Datasheet

System Requirements / Hardware Support

• Processor:
  Intel Pentium compatible processor (200 MHz minimum, 500 MHz recommended), including VIA, AMD Athlon, Athlon 64, Opteron, Intel® Core™ 2 Duo, Xeon and Celeron processors.
  
  
• RAM Memory:
  128 MBytes minimum to 4 GBytes maximum RAM (additional RAM improves performance). Additional RAM required if either SmoothGuardian or SmoothZap modules are installed (see their System Requirements pages for further information).
  
  
• Disk:
  A single SCSI, SATA, SAS or IDE disk (4 GBytes minimum) is required. Additional disk space is required if either the SmoothGuardian or SmoothZap modules are installed (see their System Requirements pages for further information).
  
  
• Flash Memory:
  Can be used as an alternative to hard disk (256 MBytes minimum), unless either SmoothGuardian or SmoothZap modules are installed.
  
  
• CDROM:
  An IDE or SCSI CDROM or bootable USB CDROM drive is recommended for software installation (not required after installation).
  
  
• Network Cards (NICs):
  All common Network Interface Cards are supported including Gigabit and fiber NICs.
  
  
• Monitor and Keyboard:
  Required for software installation but not for subsequent configuration and use (headless operation).
  
  
• Operating System:
  Integral Security Hardened Operating System included.
  

Michael Ingham, Systems Manager, Blessed Trinity RC College, Burnley, Lancashire

"We have been very impressed by the ability of the system to not only detect and block access to known sites (listed under various categories that SmoothWall update and maintain), but to also detect and block access to various categories of material on unknown sites by analysing the volume and frequency of inappropriate words and phrases on each page at the moment the page is requested.”

Steven Wright, IT Manager, Bootham School, York

 

“When we tried the software we were really impressed by how
simple and flexible it really was”

Tom Ranson, Network & Systems Engineer, Taunton School, Somerset, UK

"The 'Rolls Royce' of web filtering software"

Rachel Dombrowski, Governor, Mifflin School District, Pennsylvania

"Twice as effective as our previous content filter"

David Palmer, Rock Creek Schools, Oklahoma

		The UTM-1000 provides the highest possible level of network security, with a reduced total cost of ownership compared to the traditional approach of multiple independent appliances and systems. See summary (panel to the left) to compare UTM applicances.
		Advanced Hardware Performance is optimized with best of breed hardware technologies, which allow processor-intensive tasks to be offloaded from internal systems. The UTM-1000 ships with an Intel® Core™ 2 Duo processor, coupled with seven individual Ethernet interfaces on the PCI Express® bus and 2 Gigabytes of RAM.
		Perimeter Firewall Perimeter security prevents the bad guys, their attacks, viruses, spyware and malware from ever getting beyond the gatekeeper to your network. The UTM-1000 controls the Internet services users can access, as well as performing the traditional role of blocking access to hackers and other Internet threats. Automatic fail-over to a standby appliance protects against the unlikely event of hardware failure.
		Load Balancer The UTM-1000 makes efficient and resilient use of multiple Internet connections. Both outgoing and incoming traffic can be load balanced across two or more connections, or use protocol specific routing to separate high priority traffic onto a dedicated connection. In the event of an ISP/connection failure, all affected traffic is automatically re-routed to an alternate connection.
		Internal Firewall Often ignored, the threat from within can be greater than from external hackers. The UTM-1000 allows local networks and DeMilitarized Zones (DMZs) to be segregated into multiple physically separate zones, with policy based user-level control of who can access what systems and services in other zones. Such segregation protects mission critical systems and confidential information from accidental access, inquisitive users or malicious interference.
		VPN Gateway The UTM-1000 includes a fully featured VPN gateway that supports site-to-site (inter office) VPN connectivity to both SmoothWall and other manufacturers' systems, as well as clientless Secure Remote Access for mobile users, home workers and wireless connections.
		Web Security and Content Filtering The integrated SmoothGuardian module provides fully featured web security and content filtering (as opposed to simplistic blocking based on URL alone). Guardian dynamically analyzes, understands and categorizes web pages so that all undesirable material and hidden content (including viruses, malware, anonymous proxies and browser exploits) can be accurately detected and blocked. Time based controls facilitate flexible and user-friendly filtering and advanced reporting tools help managers to monitor, understand and interpret web use.
		Email Security and Anti-Spam The integrated SmoothZap module protects mail servers and user inboxes by enforcing email security at the network perimeter, before threats reach their intended targets. Optional support for the highly effective Mailshell anti-spam engine means unwanted emails can also be accurately identified and eliminated.
		User Authentication Policy based access control and user authentication are the keys to UTM security; based on authenticated user identity rather than assumed identity derived from a computer's IP address. Microsoft Active Directory®, Novell eDirectory™, LDAP and RADIUS authentication servers can be used to verify user identity, their group membership and hence determine the security policies to be applied.
		Instant Messaging As a fast and often more efficient alternative to email, instant messaging use is growing every day. However, when unmonitored it can encourage misuse, time-wasting and expose organizations to significant legal risks. Guardian incorporates tools to help managers block, monitor, log or censor IM conversations, so that misuse can be minimized and its advantages can be more easily evaluated.

		Bandwidth Management (QoS) If you want to prioritize interactive traffic such as VoIP and web browsing for consistent performance and quality, while maximizing the utilization of Internet connections, then the optional SmoothTraffic module is your solution.
		Mailshell Anti-Spam The highly effective Mailshell anti-spam engine accurately identifies and eliminates unwanted email at the network perimeter, before it reaches vulnerable mail servers and users.

Documentation

The following documents are available:

• Brochure 
• Datasheet

Specification

		The UTM-300 provides an advanced level of network security, with a reduced total cost of ownership compared to the traditional approach of multiple independent appliances and systems. See summary (panel to the left) to compare UTM applicances.
		Advanced Hardware Performance is optimized with best of breed hardware technologies, which allow processor-intensive tasks to be offloaded from internal systems. The UTM-300 ships with a powerful Intel® processor, coupled with four individual Ethernet interfaces on the PCI Express® bus and 2 Gigabytes of RAM.
		Perimeter Firewall Perimeter security prevents the bad guys, their attacks, viruses, spyware and malware from ever getting beyond the gatekeeper to your network. The UTM-300 controls the Internet services users can access, as well as performing the traditional role of blocking access to hackers and other Internet threats. Automatic fail-over to a standby appliance protects against the unlikely event of hardware failure.
		Load Balancer The UTM-300 makes efficient and resilient use of multiple Internet connections. Both outgoing and incoming traffic can be load balanced across two or more connections, or use protocol specific routing to separate high priority traffic onto a dedicated connection. In the event of an ISP/connection failure, all affected traffic is automatically re-routed to an alternate connection.
		Internal Firewall Often ignored, the threat from within can be greater than from external hackers. The UTM-300 allows local networks and DeMilitarized Zones (DMZs) to be segregated into multiple physically separate zones, with policy based user-level control of who can access what systems and services in other zones. Such segregation protects mission critical systems and confidential information from accidental access, inquisitive users or malicious interference.
		VPN Gateway The UTM-300 includes a fully featured VPN gateway that supports site-to-site (inter office) VPN connectivity to both SmoothWall and other manufacturers' systems, as well as clientless Secure Remote Access for mobile users, home workers and wireless connections.
		Email Security and Anti-Spam The integrated SmoothZap module protects mail servers and user inboxes by enforcing email security at the network perimeter, before threats reach their intended targets. Optional support for the highly effective Mailshell anti-spam engine means unwanted emails can also be accurately identified and eliminated.
		User Authentication Policy based access control and user authentication are the keys to UTM security; based on authenticated user identity rather than assumed identity derived from a computer's IP address. Microsoft Active Directory®, Novell eDirectory™, LDAP and RADIUS authentication servers can be used to verify user identity, their group membership and hence determine the security policies to be applied.
		Instant Messaging As a fast and often more efficient alternative to email, instant messaging use is growing every day. However, when unmonitored it can encourage misuse, time-wasting and expose organizations to significant legal risks. Guardian incorporates tools to help managers block, monitor, log or censor IM conversations, so that misuse can be minimized and its advantages can be more easily evaluated.

		Web Security and Content Filtering The SmoothGuardian module provides fully featured web security and content filtering (as opposed to simplistic blocking based on URL alone). Guardian dynamically analyzes, understands and categorizes web pages so that all undesirable material and hidden content (including viruses, malware, anonymous proxies and browser exploits) can be accurately detected and blocked. Time based controls facilitate flexible and user-friendly filtering and advanced reporting tools help managers to monitor, understand and interpret web use.
		Bandwidth Management (QoS) If you want to prioritize interactive traffic such as VoIP and web browsing for consistent performance and quality, while maximizing the utilization of Internet connections, then the optional SmoothTraffic module is your solution.
		Mailshell Anti-Spam The highly effective Mailshell anti-spam engine accurately identifies and eliminates unwanted email at the network perimeter, before it reaches vulnerable mail servers and users.

Documentation

The following documents are available:

• Brochure 
• Datasheet

Specification

UTM-308 - Front View

• Intel® Pentium D531 3Ghz
• 4 x Gigabit Ethernet interfaces on PCI Express® bus
• 2 x USB2 on front-panel (for system upgrades), 1 x RS232 for serial console
• Multi function front-panel LCD display with four push buttons for system information
• 19" 1 U rack-mount (width=16.92"/430mm, depth=11.99"/301mm, height=1.73"/44mm)
• CE, RoHS and FCC approved
• WEEE compliant

• Internal Routing: >900 Mbps full duplex between two Ethernet ports
• NAT: Approx > 500 Mbps (IDS enabled) Approx 800 Mbps (IDS disabled)
• VPN: Approx 200 Mbps IPSec (AES) per Ethernet port (IDS Enabled)

		Based on the firewalling capabilities of Corporate Firewall, the UTM-100 is a robust and efficient UTM security appliance designed to protect smaller networks. See summary (panel to the left) to compare UTM applicances.
		Advanced Hardware Advanced hardware technologies optimize the performance of the UTM-100 which ships with an Intel® processor, coupled with four individual Ethernet interfaces on the PCI Express® bus and a Gigabyte of RAM.
		Perimeter Firewall Perimeter security prevents the bad guys, their attacks, viruses, spyware and malware from ever getting beyond the gatekeeper to your network. The UTM-100 controls the Internet services users can access, as well as performing the traditional role of blocking access to hackers and other Internet threats. Automatic fail-over to a standby appliance protects against the unlikely event of hardware failure.
		Load Balancer The UTM-100 makes efficient and resilient use of multiple Internet connections. Both outgoing and incoming traffic can be load balanced across two or more connections, or use protocol specific routing to separate high priority traffic onto a dedicated connection. In the event of an ISP/connection failure, all affected traffic is automatically re-routed to an alternate connection.
		VPN Gateway The UTM-100 includes a fully featured VPN gateway that supports site-to-site (inter office) VPN connectivity to both SmoothWall and other manufacturers' systems, as well as clientless Secure Remote Access for mobile users, home workers and wireless connections.
		Email Security and Anti-Spam The integrated SmoothZap module protects mail servers and user inboxes by enforcing email security at the network perimeter, before threats reach their intended targets. Optional support for the highly effective Mailshell anti-spam engine means unwanted emails can also be accurately identified and eliminated.
		Instant essaging As a fast and often more efficient alternative to email, instant messaging use is growing every day. However, when unmonitored it can encourage misuse, time-wasting and expose organizations to significant legal risks. Guardian incorporates tools to help managers block, monitor, log or censor IM conversations, so that misuse can be minimized and its advantages can be more easily evaluated.

		Web Security and Content Filtering The SmoothGuardian module provides fully featured web security and content filtering (as opposed to simplistic blocking based on URL alone). Guardian dynamically analyzes, understands and categorizes web pages so that all undesirable material and hidden content (including viruses, malware, anonymous proxies and browser exploits) can be accurately detected and blocked. Time based controls facilitate flexible and user-friendly filtering and advanced reporting tools help managers to monitor, understand and interpret web use.
		Bandwidth Management (QoS) If you want to prioritize interactive traffic such as VoIP and web browsing for consistent performance and quality, while maximizing the utilization of Internet connections, then the optional SmoothTraffic module is your solution.
		Mailshell Anti-Spam The highly effective Mailshell anti-spam engine accurately identifies and eliminates unwanted email at the network perimeter, before it reaches vulnerable mail servers and users.

Documentation

The following documents are available:

• Brochure 
• Datasheet

Specification

UTM-108 - Front View

• Intel® Pentium D531 3Ghz
• 4 x Gigabit Ethernet interfaces on PCI Express® bus
• 2 x USB2 on front-panel (for system upgrades), 1 x RS232 for serial console
• Multi function front-panel LCD display with four push buttons for system information
• 19" 1 U rack-mount (width=16.92"/430mm, depth=11.99"/301mm, height=1.73"/44mm)
• CE, RoHS and FCC approved
• WEEE compliant

• Internal Routing: >900 Mbps full duplex between two Ethernet ports
• NAT: Approx > 500 Mbps (IDS enabled) Approx 800 Mbps (IDS disabled)
• VPN: Approx 200 Mbps IPSec (AES) per Ethernet port (IDS Enabled)

Michael Ingham, Systems Manager, Blessed Trinity RC College, Burnley, Lancashire

"We have been very impressed by the ability of the system to not only detect and block access to known sites (listed under various categories that SmoothWall update and maintain), but to also detect and block access to various categories of material on unknown sites by analysing the volume and frequency of inappropriate words and phrases on each page at the moment the page is requested.”

Steven Wright, IT Manager, Bootham School, York

 

“When we tried the software we were really impressed by how
simple and flexible it really was”

Tom Ranson, Network & Systems Engineer, Taunton School, Somerset, UK

"The 'Rolls Royce' of web filtering software"

Rachel Dombrowski, Governor, Mifflin School District, Pennsylvania

"Twice as effective as our previous content filter"

David Palmer, Rock Creek Schools, Oklahoma