NetFilter Firewall

• TCP/UDP port forwarding
• Intrusion detection system (Snort)
• IPSec based VPN Support (FreeSWAN) with Control Area and support for Check Point SecuRemote
• A secure, stable and highly configurable Linux based firewall
• Easy administration through the built in web server
• A DHCP client that allows Net Filter to, optionally, obtain its IP address from your ISP
• A DHCP server that can help configure machines on your internal network
• A caching DNS proxy, to help speed up Domain Name queries
• A web caching proxy, to speed up web access
• An intrusion detection system to detect external attacks on your network
• The ability to partition your network into a GREEN, safe, network protected from the Internet, a BLUE network for your wireless LAN and a DMZ or ORANGE network containing publicly accessible servers, partially protected from the Internet
• A VPN faclity that allows you to connect your internal network to another network across the Internet, forming a single logical network or to securely connect PCs on your BLUE, wireless, network to the wired GREEN network
• Traffic shaping capabilities to give highest priority to interactive services such as ssh and telnet, high priority to web browsing, and lower priority to bulk services such as FTP.
• Improved VPN support with x509 certificates.
• Built from the ground up with ProPolice to prevent stack smashing attacks in all applications.
• A choice of four kernel configurations, allowing you to choose an optimum configuration for your circumstances.
• Can block adverts by the use of an advert URL block list.
• Can filter text and HTML pages for obscene (sexual, racial, violent, etc)content.
• Can block all IP based URLs.
• Is able to block sites when users try using the IP address of the site instead
• Can block specified source IPs and usernames
• Uses an advanced phrase weighting system to reduce over or under blocking.
• Can filter according to MIME type and file extension.
• Can filter according to URLs including Regular Expression URLs.
• URL filtering is compatible with squidGuard black lists.
• The URL filtering is able to filter https requests.
• Can work in a 'whitelist' mode where all sites except those listed are blocked.
• Can block or limit web uploading (e.g. attachments in Hotmail).
• Has the ability to work in a stealth mode where it logs sites that would have been blocked, but does not block them. This allows you to monitor your users without them knowing.
• Uses a very intelligent algorithm to match phrases in web pages mixed in with HTML code and white space

page 4 of 4 <<prev 1st page >>