SmoothWall

Network Guardian is an independent software appliance that incorporates SmoothWall's exclusively dynamic and intelligent approach to web content filtering alongside anti-spyware, anti-virus and browser exploit prevention.

For a hardware version of Guardian, see the SWG panel to the right.

		Web Content Filtering With today's web consisting of tens of billions of pages, intelligent content analysis is the only reliable way to protect against the unexpected. Guardian's Dynamic Content Analysis™ technology examines not just the content but the context and construction of every web page requested. In this way, all undesirable material (including anonymous proxy sites) can be accurately detected and blocked.
		Employee Productivity Allowing your staff to surf unsupervised can be costly. Guardian ensures that employees use their time productively by controlling access to non work-related sites, such as sport, gaming, social networking and shopping. Time-based controls also mean managers can allow reasonable access to such sites at break times and outside of core working hours. To calculate the annual cost of casual web surfing to your company click here.
		Web Security and Anti-Virus Protect against web-borne spyware, viruses and browser exploits. Due to better email security, attackers are increasingly turning to the web as the most effective way of delivering malware. Hacking a blog or other poorly protected website to introduce JavaScript, Applets or ActiveX controls is a common technique. Every unprotected visitor to the site will be infected with their spyware, viruses or Trojans. Guardian is the solution - anti-virus scanning all downloads and blocking potentially malicious code except from a list of trusted sites.
		Instant Messaging Control the use of Instant Messaging applications such as MSN, AOL and ICQ. As a fast and often more efficient alternative to email, instant messaging use is growing every day. However, when unmonitored it can encourage misuse, time-wasting and expose organizations to significant legal risks. Guardian incorporates tools to help managers block, monitor, log or censor IM conversations, so that misuse can be minimized and its advantages can be more easily evaluated.
		Reporting Monitor Internet behavior and resource utilization. A comprehensive selection of in-built reports includes most visited sites, user activity, attempted access to blocked pages, bandwidth utilization and performance. Managers can use the new template facility to create, store and schedule their own customized reports in PDF, HTML and Excel formats, or export to Crystal Reports®. A powerful drill-down facility allows summary report information to be explored down to the underlying data.
		User Authentication Determine filtering policies and provide user level reporting. Of Guardian's many user authentication systems, NTLM is the most popular because it transparently passes the users' Windows login information to Guardian. Subsequent interrogation of a Microsoft Active Directory®, Novell eDirectory™, LDAP or RADIUS authentication system establishes the user identity, whereupon Guardian maps their group membership to the appropriate content filtering policies.

Documentation

The following documents are available:

• Brochure 
• Datasheet

Technical Requirements

• Minimum:
  1 GHz processor, 512 Mbytes RAM, 80 GBytes disk.
  
  
• 1000+ Users:
  2 GHz+ Intel® Core™ 2 Duo or similar processor, 2 GBytes fast RAM (DDR2/DDR), 250 GBytes SATA, SAS or SCSI disk.
  
  
• 2000+ Users:
  3 GHz+ dual or multi-processor Intel® Xeon, Core™ 2 Duo, AMD Opteron or similar processors, 4 GBytes fast RAM (DDR2/DDR), 500 GBytes SATA, SAS or SCSI disk.
  
  
• Processor:
  Intel Pentium compatible processors including VIA, AMD Athlon, Athlon 64, Opteron, Intel® Core™ 2 Duo, Xeon and Celeron processors.
  
  
• Multi-Processor:
  Symmetric Multi-Processor (SMP) support.
  
  
• RAM:
  512 MBytes minimum to 4 GBytes maximum RAM (additional RAM improves performance).
  
  
• Disk:
  A single SCSI, SATA, SAS or IDE disk (8 GBytes minimum) is required.
  
  
• Software RAID:
  Optionally two disks of the same type (but can be of different capacity) may be configured for software RAID1 (mirrored disks).
  
  
• Hardware RAID:
  Hardware (SCSI and SAS) RAID systems and controller cards are supported.
  
  
• CDROM:
  An IDE or SCSI CDROM or bootable USB CDROM drive is recommended for software installation (not required after installation).
  
  
• Network Cards (NICs):
  All common Network Interface Cards are supported including Gigabit and fiber NICs.
  
  
• Monitor and Keyboard:
  Required for software installation but not for subsequent configuration and use (headless operation).
  
  
• Operating System:
  Integral Security Hardened Operating System included.

• Microsoft Windows 2003 server
• Microsoft Windows 2000 server
• Microsoft Small Business Server
• Novell eDirectory
• Sun Directory
• Netscape Directory
• RedHat Directory
• Fedora Directory
• OpenLDAP

School Guardian is an independent software appliance which combines SmoothWall's dynamic and intelligent approach to web content filtering with a high-performance firewall and VPN.

For a standalone version of Guardian, see Network Guardian on the panel to the left.

NOTE: only available to schools and other educational institutions.

		Web Content Filtering With today's web consisting of tens of billions of pages, intelligent content analysis is the only reliable way to protect against the unexpected. Guardian's Dynamic Content Analysis™ technology examines not just the content but the context and construction of every web page requested. In this way, all undesirable material (including anonymous proxy sites) can be accurately detected and blocked.
		SmoothWall's Guardian filters are accredited by Becta (The British Educational Communications Technology Agency) and meet all the requirements of CIPA, the US Children's Internet Protection Act. Blocklists incorporate content from the Internet Watch Foundation CAIC database (Child Abuse & Illegal Content) and are automatically updated on a daily basis.
		Perimeter Firewall Perimeter security is always best; keeping the bad guys, their attacks, viruses, spyware and malware from ever getting beyond the gatekeeper to your network. As well as the traditional role of blocking access to hackers and other Internet threats, School Guardian firewall controls what Internet services students and staff can access. Deep packet inspection techniques are used to block problematic block port agile traffic such as Peer to Peer (P2P) networks, including KaZaA, BitTorrent, Gnutella and eDonkey.
		Web Security and Anti-Virus Due to better email security, attackers are turning to the web as their favored way of delivering malicious payloads. Hacking a blog or other poorly protected website to introduce JavaScript, Applets or ActiveX controls is a common technique. Every unprotected visitor to the site will be infected with their spyware, viruses or Trojans. Guardian is the solution - anti-virus scanning all downloads and blocking all potentially malicious code except from an administrator maintainable list of trusted sites.
		VPN Gateway School Guardian provides simple yet secure remote access for students and staff to the school network. The integrated VPN gateway supports Layer 2 Tunneling Protocol (L2TP) for clientless, authenticated remote access from Windows and Mac systems, as well as industry standard IPSec VPN for site-to-site network connections.
		Reporting A comprehensive selection of in-built reports includes most visited sites, user activity, attempted access to blocked pages, bandwidth utilization and performance. Managers can use the new template facility to create, store and schedule their own customized reports in PDF, HTML and Excel formats, or export to Crystal Reports®. A powerful drill-down facility allows summary report information to be explored down to the underlying data (for example, the names of students attempting to access a blocked site).
		User Authentication Of the many available user authentication methods, NTLM is the most popular because it transparently passes the users' Windows login information to School Guardian. Subsequent interrogation of a Microsoft Active Directory®, Novell eDirectory™, LDAP or RADIUS authentication system establishes the user identity, whereupon Guardian maps their group membership to the appropriate content filtering policy.
		Instant Messaging MSN and other Instant Messaging systems have become incredibly popular with students, yet they present a great risk of unseen bullying and other inappropriate use. Control and monitoring can be difficult - but School Guardian provides network managers with the tools needed to block, monitor, log or censor IM conversations.

Documentation

The following documents are available:

• Brochure 
• Datasheet

Technical Requirements

• Minimum:
  1 GHz processor, 512 Mbytes RAM, 80 GBytes disk.
  
  
• 1000+ Users:
  2 GHz+ Intel® Core™ 2 Duo or similar processor, 2 GBytes fast RAM (DDR2/DDR), 250 GBytes SATA, SAS or SCSI disk.
  
  
• 2000+ Users:
  3 GHz+ dual or multi-processor Intel® Xeon, Core™ 2 Duo, AMD Opteron or similar processors, 4 GBytes fast RAM (DDR2/DDR), 500 GBytes SATA, SAS or SCSI disk.
  
  
• Processor:
  Intel Pentium compatible processors including VIA, AMD Athlon, Athlon 64, Opteron, Intel® Core™ 2 Duo, Xeon and Celeron processors.
  
  
• Multi-Processor:
  Symmetric Multi-Processor (SMP) support.
  
  
• RAM:
  512 MBytes minimum to 4 GBytes maximum RAM (additional RAM improves performance).
  
  
• Disk:
  A single SCSI, SATA, SAS or IDE disk (8 GBytes minimum) is required.
  
  
• Software RAID:
  Optionally two disks of the same type (but can be of different capacity) may be configured for software RAID1 (mirrored disks).
  
  
• Hardware RAID:
  Hardware (SCSI and SAS) RAID systems and controller cards are supported.
  
  
• CDROM:
  An IDE or SCSI CDROM or bootable USB CDROM drive is recommended for software installation (not required after installation).
  
  
• Network Cards (NICs):
  All common Network Interface Cards are supported including Gigabit and fiber NICs.
  
  
• Monitor and Keyboard:
  Required for software installation but not for subsequent configuration and use (headless operation).
  
  
• Operating System:
  Integral Security Hardened Operating System included.

• Microsoft Windows 2003 server
• Microsoft Windows 2000 server
• Microsoft Small Business Server
• Novell eDirectory
• Sun Directory
• Netscape Directory
• RedHat Directory
• Fedora Directory
• OpenLDAP

		As an independent hardware appliance, the Guardian Secure Web Gateway offers the same features as the software version of Network Guardian but on a 1U rack mounted appliance with 3 GBytes of RAM and a powerful Intel processor. The SWG-700 also benefits from Bridge Mode (inline transparent proxy) which means it can be easily 'dropped' into a network between a perimeter firewall and an internal switch without the need for client configuration.
		Web Content Filtering With today's web consisting of tens of billions of pages, intelligent content analysis is the only reliable way to protect against the unexpected. Guardian's Dynamic Content Analysis™ technology examines not just the content but the context and construction of every web page requested. In this way, all undesirable material (including anonymous proxy sites) can be accurately detected and blocked.
		Employee Productivity Chatting to friends? Booking a vacation? Browsing eBay? Guardian ensures that employees use their time productively by controlling access to non work-related sites, such as news, sport, travel and auctions. Obviously many organizations allow their employees reasonable access to such sites, where Guardian's time-based policies can permit access to non work-related categories at break times and outside of core working hours.
		Web Security and Anti-Virus Protect against web-borne spyware, viruses and browser exploits. Due to better email security, attackers are increasingly turning to the web as the most effective way of delivering malware. Hacking a blog or other poorly protected website to introduce JavaScript, Applets or ActiveX controls is a common technique. Every unprotected visitor to the site will be infected with their spyware, viruses or Trojans. Guardian is the solution - anti-virus scanning all downloads and blocking potentially malicious code except from a list of trusted sites.
		Instant Messaging Control the use of Instant Messaging applications such as MSN, AOL and ICQ. As a fast and often more efficient alternative to email, instant messaging use is growing every day. However, when unmonitored it can encourage misuse, time-wasting and expose organizations to significant legal risks. Guardian incorporates tools to help managers block, monitor, log or censor IM conversations, so that misuse can be minimized and its advantages can be more easily evaluated.
		Reporting Monitor Internet behavior and resource utilization. A comprehensive selection of in-built reports includes most visited sites, user activity, attempted access to blocked pages, bandwidth utilization and performance. Managers can use the new template facility to create, store and schedule their own customized reports in PDF, HTML and Excel formats, or export to Crystal Reports®. A powerful drill-down facility allows summary report information to be explored down to the underlying data.
		User Authentication Determine filtering policies and provide user level reporting. Of Guardian's many user authentication systems, NTLM is the most popular because it transparently passes the users' Windows login information to Guardian. Subsequent interrogation of a Microsoft Active Directory®, Novell eDirectory™, LDAP or RADIUS authentication system establishes the user identity, whereupon Guardian maps their group membership to the appropriate content filtering policies.

		SmoothZap The SmoothZap module protects mail servers and users by blocking spam and email viruses at the network perimeter, so that dangerous and unwanted email does not get through to user inboxes and vulnerable mail servers. (Incorporates the highly effective Mailshell anti-spam engine)

Documentation

The following documents are available:

• Brochure 
• Datasheet

Hardware Specification

• Intel® Core™ 2 Duo 2.4GHz CPU
• 3 GBytes RAM
• 4 x Gigabit Ethernet interfaces on PCI Express® bus
• 2 x USB2 on front-panel (for system upgrades), 1 x RS232 for serial console
• Multi function front-panel LCD display with four push buttons for system information
• 19" 1 U rack-mount (width=16.92"/430mm, depth=11.99"/301mm, height=1.73"/44mm)
• CE, RoHS and FCC approved
• WEEE compliant

SmoothGuardian is an add-on web security module for SmoothWall firewalls and cannot be purchased independently (If you are looking for a standalone web filtering solution please see Network Guardian in the panel to the left). It incorporates SmoothWall's exclusively dynamic and intelligent approach to web content filtering alongside anti-spyware, anti-virus and browser exploit prevention.

		Objectionable Content Block pornography and objectionable content. Dynamic Content Analysis is the key technology that makes Guardian so much more effective than other filtering products. The Dynamic Content Analysis filter scans every web page for words and phrases from numerous categories of objectionable content, including pornography, violence, drugs, racial hatred and gambling. Any page containing unsuitable content will be blocked, even if it comes from a reputable source such as a major news site or search engine.
		Employee Productivity Allowing your staff to surf unsupervised can be costly. Guardian ensures that employees use their time productively by controlling access to non work-related sites, such as sport, gaming, social networking and shopping. Time-based controls also mean managers can allow reasonable access to such sites at break times and outside of core working hours. To calculate the annual cost of casual web surfing to your company click here.
		Web Security and Anti-Virus Protect against web-borne spyware, viruses and browser exploits. Due to better email security, attackers are increasingly turning to the web as the most effective way of delivering malware. Hacking a blog or other poorly protected website to introduce JavaScript, Applets or ActiveX controls is a common technique. Every unprotected visitor to the site will be infected with their spyware, viruses or Trojans. Guardian is the solution - anti-virus scanning all downloads and blocking potentially malicious code except from a list of trusted sites.
		Instant Messaging Control the use of Instant Messaging applications such as MSN, AOL and ICQ. As a fast and often more efficient alternative to email, instant messaging use is growing every day. However, when unmonitored it can encourage misuse, time-wasting and expose organizations to significant legal risks. Guardian incorporates tools to help managers block, monitor, log or censor IM conversations, so that misuse can be minimized and its advantages can be more easily evaluated.
		Reporting Monitor Internet behavior and resource utilization. A comprehensive selection of in-built reports includes most visited sites, user activity, attempted access to blocked pages, bandwidth utilization and performance. Managers can use the new template facility to create, store and schedule their own customized reports in PDF, HTML and Excel formats, or export to Crystal Reports®. A powerful drill-down facility allows summary report information to be explored down to the underlying data.
		User Authentication Determine filtering policies and provide user level reporting. Of Guardian's many user authentication systems, NTLM is the most popular because it transparently passes the users' Windows login information to Guardian. Subsequent interrogation of a Microsoft Active Directory®, Novell eDirectory™, LDAP or RADIUS authentication system establishes the user identity, whereupon Guardian maps their group membership to the appropriate content filtering policies.

Documentation

The following documents are available:

• Brochure

Technical Requirements

• Microsoft Windows 2003 server
• Microsoft Windows 2000 server
• Microsoft Small Business Server
• Novell eDirectory
• Sun Directory
• Netscape Directory
• RedHat Directory
• Fedora Directory
• OpenLDAP

Michael Ingham, Systems Manager, Blessed Trinity RC College, Burnley, Lancashire

"We have been very impressed by the ability of the system to not only detect and block access to known sites (listed under various categories that SmoothWall update and maintain), but to also detect and block access to various categories of material on unknown sites by analysing the volume and frequency of inappropriate words and phrases on each page at the moment the page is requested.”

Steven Wright, IT Manager, Bootham School, York

 

“When we tried the software we were really impressed by how
simple and flexible it really was”

Tom Ranson, Network & Systems Engineer, Taunton School, Somerset, UK

"The 'Rolls Royce' of web filtering software"

Rachel Dombrowski, Governor, Mifflin School District, Pennsylvania

"Twice as effective as our previous content filter"

David Palmer, Rock Creek Schools, Oklahoma

Advanced Firewall is a software appliance firewall and VPN system, complete with integrated security hardened operating system. It can be extended to a full Unified Threat Management (UTM) solution via add-on modules, combining multiple security functions on a single UTM appliance located at the network perimeter. Advanced Firewall provides the highest possible level of network security, with reduced initial and ongoing support costs compared to the traditional approach of multiple independent systems.

		Perimeter Firewall: Perimeter security is always best; keeping the bad guys, their attacks, viruses, spyware and malware from ever getting beyond the gatekeeper to your network. Advanced Firewall controls what Internet services users can access, as well as the traditional role of blocking access to hackers and other Internet threats. Automatic fail-over to a standby Advanced Firewall system guards against the risk of hardware failure.
		Load Balancer: Advanced Firewall is the ideal solution for the efficient and resilient use of multiple Internet connections. Both outgoing and incoming traffic can be load balanced across two or more connections, or use protocol specific routing to separate high priority traffic onto a dedicated connection. In the event of an ISP/connection failure, all affected traffic is automatically re-routed to an alternate ISP/connection.
		Internal Firewall: Often ignored, the threat from within can be greater than from external hackers. Advanced Firewall allows local networks and DeMilitarized Zones (DMZs) to be segregated into multiple physically separate zones, with policy based user-level control of who can access what systems and services in other zones. Such segregation protects mission critical systems and confidential information from accidental access, inquisitive users or malicious interference.
		VPN Gateway: Advanced Firewall provides simple yet secure remote access to corporate networks. The integrated VPN gateway supports site-to-site (inter office) VPN connectivity to both SmoothWall and other manufacturers' systems, as well as clientless Secure Remote Access for mobile users, home workers and wireless (WiFi) connections.
		Web Security and Content Filtering: Inadequate web security has led to increasing web delivery of spyware and malware. The SmoothGuardian module protects against web threats by blocking spyware and browser exploits, controlling the use of active code such as ActiveX and JavaScript, and by anti-virus scanning web pages and file downloads. Pornography and all objectionable content is blocked, access to non work-related content can be controlled and limited to specific times, as can the download of executable and potentially copyright files.
		Email Security and Anti-Spam: The SmoothZap module enforces email security at the network perimeter, before threats reach their intended mail server or client target. SmoothZap incorporates the highly effective Mailshell anti-spam engine which combines content analysis with sender reputation checking and bulk email detection via continuous updates to detection signatures.
		Bandwidth Management (QoS): If you want to prioritize interactive traffic such as VoIP and web browsing for consistent performance and quality while maximizing the utilization of Internet connections, then the SmoothTraffic module is your solution.
		User Authentication: Policy based access control and user authentication are the keys to Advanced Firewall security; based on authenticated user identity rather than assumed identity derived from a computer's IP address. Microsoft Active Directory®, Novell eDirectory™ and other LDAP authentication servers can be used to verify user identity, their group membership and hence determine the security policies to be applied.
		Hardware Platforms: Advanced Firewall exploits the power, reliability and versatility of commodity server hardware to provide a cost effective UTM solution of unrivaled performance and flexibility. Entry level servers from major manufacturers such as Dell, HP and IBM are a common choice due to their excellent price performance and on-site support services.
		Instant Messaging: Control the use of Instant Messaging applications such as MSN, Yahoo, AOL and ICQ. As a fast and often more efficient alternative to email, instant messaging use is growing every day. However, when unmonitored it can encourage misuse, time-wasting and expose organizations to significant legal risks. Guardian incorporates tools to help managers block, monitor, log or censor IM conversations, so that misuse can be minimized and its advantages can be more easily evaluated.

Documentation

The following documents are available:

• Brochure 
• Datasheet

System Requirements / Hardware Support

• Processor:
  Intel Pentium compatible processor (500 MHz minimum, 1 GHz recommended), including VIA, AMD Athlon, Athlon 64, Opteron, Intel® Core™ 2 Duo, Xeon and Celeron processors.
  
  
• Multi-Processor:
  Symmetric Multi-Processor (SMP) support.
  
  
• RAM Memory:
  128 MBytes minimum to 4 GBytes maximum RAM (additional RAM improves performance). Additional RAM required if either SmoothGuardian or SmoothZap modules are installed (see their System Requirements pages for further information).
  
  
• Disk:
  A single SCSI, SATA, SAS or IDE disk (4 GBytes minimum) is required. Additional disk space is required if either the SmoothGuardian or SmoothZap modules are installed (see their System Requirements pages for further information).
  
  
• Software RAID:
  Optionally two disks of the same type (but can be of different capacity) may be configured for software RAID1 (mirrored disks).
  
  
• Hardware RAID:
  Hardware (SCSI and SAS) RAID systems and controller cards are supported.
  
  
• Flash Memory:
  Can be used as an alternative to a hard disk (256 MBytes minimum), unless either SmoothGuardian or SmoothZap modules are installed.
  
  
• CDROM:
  An IDE or SCSI CDROM or bootable USB CDROM drive is recommended for software installation (not required after installation).
  
  
• Network Cards (NICs):
  All common Network Interface Cards are supported including Gigabit and fiber NICs.
  
  
• Monitor and Keyboard:
  Required for software installation but not for subsequent configuration and use (headless operation).
  
  
• Operating System:
  Integral Security Hardened Operating System included.

Corporate Firewall is a software appliance firewall and VPN system complete with integrated security hardened operating system. Deployed on standard server or PC hardware, it is designed to fulfill the Internet security needs of small to medium size organizations and corporate branch offices. It can be extended to a full Unified Threat Management (UTM) solution via add-on modules, combining multiple security functions on a single UTM appliance located at the network perimeter.

		Perimeter Firewall: Perimeter security is always best; keeping the bad guys, their attacks, viruses, spyware and malware from ever getting beyond the gatekeeper to your network. Corporate Firewall controls what Internet services users can access, as well as the traditional role of blocking access to hackers and other Internet threats.
		VPN Gateway: Corporate Firewall provides simple yet secure remote network access with a fully featured VPN gateway. It supports SSL, IPSec and L2TP to provide site-to-site (inter office) connectivity to both SmoothWall and other manufacturers' systems, as well as clientless Secure Remote Access for mobile users, home workers and wireless (WiFi) connections.
		Web Security and Content Filtering: Non work-related browsing can have a very detrimental impact upon your organization's productivity. Guardian is the answer, controlling or monitoring access to social networking, news, shopping and dozens of other website categories; as well as blocking pornography and all objectionable content. The SmoothGuardian module also protects against web threats by blocking spyware and browser exploits, controlling the use of active code such as ActiveX and JavaScript and by anti-virus scanning web pages and file downloads.
		Email Security and Anti-Spam: The SmoothZap module enforces email security at the network perimeter, before threats reach their intended mail server or client target. SmoothZap incorporates the highly effective Mailshell anti-spam engine which combines content analysis with sender reputation checking and bulk email detection via continuous updates to detection signatures.
		Bandwidth Management (QoS): If you want to prioritize interactive traffic such as VoIP and web browsing for consistent performance and quality while maximizing the utilization of Internet connections, then the SmoothTraffic module is your solution.
		Instant Messaging: Instant Messaging can be a great business tool but unmonitored it can encourage misuse, inappropriate personal communications, time-wasting and exposes organizations to significant legal risks. Corporate Firewall provides the tools to allow managers to block, monitor, log or censor IM conversations, so that misuse can be minimized and its advantages can be more easily evaluated.
		Hardware Platforms: Corporate Firewall exploits the power, reliability and versatility of commodity PC hardware to produce a cost effective security appliance that is easy to support and maintain. Compatible with a huge range of both the latest and not-so-new hardware, almost any Pentium compatible PC is a suitable platform for Corporate Firewall. Entry level server or workstation computers from major manufacturers such as Dell, HP and IBM are a common choice due to the excellent on-site support services available.

Ease-of-use was a primary design goal for Corporate Firewall, in recognition of the fact that most mid-size organizations have limited IT resources and specialized skills. This philosophy starts with comprehensive yet easy to understand documentation, a Quick-Start Guide and full reference manuals, which include tutorial sections and examples. Software installation has also been made quick and painless; using automatic hardware detection and configuration it takes less than 10 minutes. Avoiding the need to install special client software, final configuration is performed from any computer with a web browser, using an intuitive Ajax enhanced GUI with on-line and tooltip help.

Documentation

The following documents are available:

• Brochure 
• Datasheet

System Requirements / Hardware Support

• Processor:
  Intel Pentium compatible processor (200 MHz minimum, 500 MHz recommended), including VIA, AMD Athlon, Athlon 64, Opteron, Intel® Core™ 2 Duo, Xeon and Celeron processors.
  
  
• RAM Memory:
  128 MBytes minimum to 4 GBytes maximum RAM (additional RAM improves performance). Additional RAM required if either SmoothGuardian or SmoothZap modules are installed (see their System Requirements pages for further information).
  
  
• Disk:
  A single SCSI, SATA, SAS or IDE disk (4 GBytes minimum) is required. Additional disk space is required if either the SmoothGuardian or SmoothZap modules are installed (see their System Requirements pages for further information).
  
  
• Flash Memory:
  Can be used as an alternative to hard disk (256 MBytes minimum), unless either SmoothGuardian or SmoothZap modules are installed.
  
  
• CDROM:
  An IDE or SCSI CDROM or bootable USB CDROM drive is recommended for software installation (not required after installation).
  
  
• Network Cards (NICs):
  All common Network Interface Cards are supported including Gigabit and fiber NICs.
  
  
• Monitor and Keyboard:
  Required for software installation but not for subsequent configuration and use (headless operation).
  
  
• Operating System:
  Integral Security Hardened Operating System included.
  

Michael Ingham, Systems Manager, Blessed Trinity RC College, Burnley, Lancashire

"We have been very impressed by the ability of the system to not only detect and block access to known sites (listed under various categories that SmoothWall update and maintain), but to also detect and block access to various categories of material on unknown sites by analysing the volume and frequency of inappropriate words and phrases on each page at the moment the page is requested.”

Steven Wright, IT Manager, Bootham School, York

 

“When we tried the software we were really impressed by how
simple and flexible it really was”

Tom Ranson, Network & Systems Engineer, Taunton School, Somerset, UK

"The 'Rolls Royce' of web filtering software"

Rachel Dombrowski, Governor, Mifflin School District, Pennsylvania

"Twice as effective as our previous content filter"

David Palmer, Rock Creek Schools, Oklahoma

		The UTM-1000 provides the highest possible level of network security, with a reduced total cost of ownership compared to the traditional approach of multiple independent appliances and systems. See summary (panel to the left) to compare UTM applicances.
		Advanced Hardware Performance is optimized with best of breed hardware technologies, which allow processor-intensive tasks to be offloaded from internal systems. The UTM-1000 ships with an Intel® Core™ 2 Duo processor, coupled with seven individual Ethernet interfaces on the PCI Express® bus and 2 Gigabytes of RAM.
		Perimeter Firewall Perimeter security prevents the bad guys, their attacks, viruses, spyware and malware from ever getting beyond the gatekeeper to your network. The UTM-1000 controls the Internet services users can access, as well as performing the traditional role of blocking access to hackers and other Internet threats. Automatic fail-over to a standby appliance protects against the unlikely event of hardware failure.
		Load Balancer The UTM-1000 makes efficient and resilient use of multiple Internet connections. Both outgoing and incoming traffic can be load balanced across two or more connections, or use protocol specific routing to separate high priority traffic onto a dedicated connection. In the event of an ISP/connection failure, all affected traffic is automatically re-routed to an alternate connection.
		Internal Firewall Often ignored, the threat from within can be greater than from external hackers. The UTM-1000 allows local networks and DeMilitarized Zones (DMZs) to be segregated into multiple physically separate zones, with policy based user-level control of who can access what systems and services in other zones. Such segregation protects mission critical systems and confidential information from accidental access, inquisitive users or malicious interference.
		VPN Gateway The UTM-1000 includes a fully featured VPN gateway that supports site-to-site (inter office) VPN connectivity to both SmoothWall and other manufacturers' systems, as well as clientless Secure Remote Access for mobile users, home workers and wireless connections.
		Web Security and Content Filtering The integrated SmoothGuardian module provides fully featured web security and content filtering (as opposed to simplistic blocking based on URL alone). Guardian dynamically analyzes, understands and categorizes web pages so that all undesirable material and hidden content (including viruses, malware, anonymous proxies and browser exploits) can be accurately detected and blocked. Time based controls facilitate flexible and user-friendly filtering and advanced reporting tools help managers to monitor, understand and interpret web use.
		Email Security and Anti-Spam The integrated SmoothZap module protects mail servers and user inboxes by enforcing email security at the network perimeter, before threats reach their intended targets. Optional support for the highly effective Mailshell anti-spam engine means unwanted emails can also be accurately identified and eliminated.
		User Authentication Policy based access control and user authentication are the keys to UTM security; based on authenticated user identity rather than assumed identity derived from a computer's IP address. Microsoft Active Directory®, Novell eDirectory™, LDAP and RADIUS authentication servers can be used to verify user identity, their group membership and hence determine the security policies to be applied.
		Instant Messaging As a fast and often more efficient alternative to email, instant messaging use is growing every day. However, when unmonitored it can encourage misuse, time-wasting and expose organizations to significant legal risks. Guardian incorporates tools to help managers block, monitor, log or censor IM conversations, so that misuse can be minimized and its advantages can be more easily evaluated.

		Bandwidth Management (QoS) If you want to prioritize interactive traffic such as VoIP and web browsing for consistent performance and quality, while maximizing the utilization of Internet connections, then the optional SmoothTraffic module is your solution.
		Mailshell Anti-Spam The highly effective Mailshell anti-spam engine accurately identifies and eliminates unwanted email at the network perimeter, before it reaches vulnerable mail servers and users.

Documentation

The following documents are available:

• Brochure 
• Datasheet

Specification

		The UTM-300 provides an advanced level of network security, with a reduced total cost of ownership compared to the traditional approach of multiple independent appliances and systems. See summary (panel to the left) to compare UTM applicances.
		Advanced Hardware Performance is optimized with best of breed hardware technologies, which allow processor-intensive tasks to be offloaded from internal systems. The UTM-300 ships with a powerful Intel® processor, coupled with four individual Ethernet interfaces on the PCI Express® bus and 2 Gigabytes of RAM.
		Perimeter Firewall Perimeter security prevents the bad guys, their attacks, viruses, spyware and malware from ever getting beyond the gatekeeper to your network. The UTM-300 controls the Internet services users can access, as well as performing the traditional role of blocking access to hackers and other Internet threats. Automatic fail-over to a standby appliance protects against the unlikely event of hardware failure.
		Load Balancer The UTM-300 makes efficient and resilient use of multiple Internet connections. Both outgoing and incoming traffic can be load balanced across two or more connections, or use protocol specific routing to separate high priority traffic onto a dedicated connection. In the event of an ISP/connection failure, all affected traffic is automatically re-routed to an alternate connection.
		Internal Firewall Often ignored, the threat from within can be greater than from external hackers. The UTM-300 allows local networks and DeMilitarized Zones (DMZs) to be segregated into multiple physically separate zones, with policy based user-level control of who can access what systems and services in other zones. Such segregation protects mission critical systems and confidential information from accidental access, inquisitive users or malicious interference.
		VPN Gateway The UTM-300 includes a fully featured VPN gateway that supports site-to-site (inter office) VPN connectivity to both SmoothWall and other manufacturers' systems, as well as clientless Secure Remote Access for mobile users, home workers and wireless connections.
		Email Security and Anti-Spam The integrated SmoothZap module protects mail servers and user inboxes by enforcing email security at the network perimeter, before threats reach their intended targets. Optional support for the highly effective Mailshell anti-spam engine means unwanted emails can also be accurately identified and eliminated.
		User Authentication Policy based access control and user authentication are the keys to UTM security; based on authenticated user identity rather than assumed identity derived from a computer's IP address. Microsoft Active Directory®, Novell eDirectory™, LDAP and RADIUS authentication servers can be used to verify user identity, their group membership and hence determine the security policies to be applied.
		Instant Messaging As a fast and often more efficient alternative to email, instant messaging use is growing every day. However, when unmonitored it can encourage misuse, time-wasting and expose organizations to significant legal risks. Guardian incorporates tools to help managers block, monitor, log or censor IM conversations, so that misuse can be minimized and its advantages can be more easily evaluated.

		Web Security and Content Filtering The SmoothGuardian module provides fully featured web security and content filtering (as opposed to simplistic blocking based on URL alone). Guardian dynamically analyzes, understands and categorizes web pages so that all undesirable material and hidden content (including viruses, malware, anonymous proxies and browser exploits) can be accurately detected and blocked. Time based controls facilitate flexible and user-friendly filtering and advanced reporting tools help managers to monitor, understand and interpret web use.
		Bandwidth Management (QoS) If you want to prioritize interactive traffic such as VoIP and web browsing for consistent performance and quality, while maximizing the utilization of Internet connections, then the optional SmoothTraffic module is your solution.
		Mailshell Anti-Spam The highly effective Mailshell anti-spam engine accurately identifies and eliminates unwanted email at the network perimeter, before it reaches vulnerable mail servers and users.

Documentation

The following documents are available:

• Brochure 
• Datasheet

Specification

UTM-308 - Front View

• Intel® Pentium D531 3Ghz
• 4 x Gigabit Ethernet interfaces on PCI Express® bus
• 2 x USB2 on front-panel (for system upgrades), 1 x RS232 for serial console
• Multi function front-panel LCD display with four push buttons for system information
• 19" 1 U rack-mount (width=16.92"/430mm, depth=11.99"/301mm, height=1.73"/44mm)
• CE, RoHS and FCC approved
• WEEE compliant

• Internal Routing: >900 Mbps full duplex between two Ethernet ports
• NAT: Approx > 500 Mbps (IDS enabled) Approx 800 Mbps (IDS disabled)
• VPN: Approx 200 Mbps IPSec (AES) per Ethernet port (IDS Enabled)

		Based on the firewalling capabilities of Corporate Firewall, the UTM-100 is a robust and efficient UTM security appliance designed to protect smaller networks. See summary (panel to the left) to compare UTM applicances.
		Advanced Hardware Advanced hardware technologies optimize the performance of the UTM-100 which ships with an Intel® processor, coupled with four individual Ethernet interfaces on the PCI Express® bus and a Gigabyte of RAM.
		Perimeter Firewall Perimeter security prevents the bad guys, their attacks, viruses, spyware and malware from ever getting beyond the gatekeeper to your network. The UTM-100 controls the Internet services users can access, as well as performing the traditional role of blocking access to hackers and other Internet threats. Automatic fail-over to a standby appliance protects against the unlikely event of hardware failure.
		Load Balancer The UTM-100 makes efficient and resilient use of multiple Internet connections. Both outgoing and incoming traffic can be load balanced across two or more connections, or use protocol specific routing to separate high priority traffic onto a dedicated connection. In the event of an ISP/connection failure, all affected traffic is automatically re-routed to an alternate connection.
		VPN Gateway The UTM-100 includes a fully featured VPN gateway that supports site-to-site (inter office) VPN connectivity to both SmoothWall and other manufacturers' systems, as well as clientless Secure Remote Access for mobile users, home workers and wireless connections.
		Email Security and Anti-Spam The integrated SmoothZap module protects mail servers and user inboxes by enforcing email security at the network perimeter, before threats reach their intended targets. Optional support for the highly effective Mailshell anti-spam engine means unwanted emails can also be accurately identified and eliminated.
		Instant essaging As a fast and often more efficient alternative to email, instant messaging use is growing every day. However, when unmonitored it can encourage misuse, time-wasting and expose organizations to significant legal risks. Guardian incorporates tools to help managers block, monitor, log or censor IM conversations, so that misuse can be minimized and its advantages can be more easily evaluated.

		Web Security and Content Filtering The SmoothGuardian module provides fully featured web security and content filtering (as opposed to simplistic blocking based on URL alone). Guardian dynamically analyzes, understands and categorizes web pages so that all undesirable material and hidden content (including viruses, malware, anonymous proxies and browser exploits) can be accurately detected and blocked. Time based controls facilitate flexible and user-friendly filtering and advanced reporting tools help managers to monitor, understand and interpret web use.
		Bandwidth Management (QoS) If you want to prioritize interactive traffic such as VoIP and web browsing for consistent performance and quality, while maximizing the utilization of Internet connections, then the optional SmoothTraffic module is your solution.
		Mailshell Anti-Spam The highly effective Mailshell anti-spam engine accurately identifies and eliminates unwanted email at the network perimeter, before it reaches vulnerable mail servers and users.

Documentation

The following documents are available:

• Brochure 
• Datasheet

Specification

UTM-108 - Front View

• Intel® Pentium D531 3Ghz
• 4 x Gigabit Ethernet interfaces on PCI Express® bus
• 2 x USB2 on front-panel (for system upgrades), 1 x RS232 for serial console
• Multi function front-panel LCD display with four push buttons for system information
• 19" 1 U rack-mount (width=16.92"/430mm, depth=11.99"/301mm, height=1.73"/44mm)
• CE, RoHS and FCC approved
• WEEE compliant

• Internal Routing: >900 Mbps full duplex between two Ethernet ports
• NAT: Approx > 500 Mbps (IDS enabled) Approx 800 Mbps (IDS disabled)
• VPN: Approx 200 Mbps IPSec (AES) per Ethernet port (IDS Enabled)

Michael Ingham, Systems Manager, Blessed Trinity RC College, Burnley, Lancashire

"We have been very impressed by the ability of the system to not only detect and block access to known sites (listed under various categories that SmoothWall update and maintain), but to also detect and block access to various categories of material on unknown sites by analysing the volume and frequency of inappropriate words and phrases on each page at the moment the page is requested.”

Steven Wright, IT Manager, Bootham School, York

 

“When we tried the software we were really impressed by how
simple and flexible it really was”

Tom Ranson, Network & Systems Engineer, Taunton School, Somerset, UK

"The 'Rolls Royce' of web filtering software"

Rachel Dombrowski, Governor, Mifflin School District, Pennsylvania

"Twice as effective as our previous content filter"

David Palmer, Rock Creek Schools, Oklahoma