Firewall Core features

From SOHO to Enterprises, the Next Generation Firewall, with Auto-sense/Auto Threats Detective /Auto defense Engine ...

 



  • Traffic Shaper, QOS
  • Two-factor Authentication
  • Captive portal
  • Transparent Caching Proxy
  • with Blacklist support
  • Virtual Private Network (site to site & road warrior, IPsec, OpenVPN & legacy PPTP support)
  • High Availability & Hardware Fail over ( with configuration synchronization & synchronized state tables)
  • Intrusion Detection and Prevention Build-in reporting and monitoring tools including RRD
  • Graphs Netflow Exporter
  • Network Flow Monitoring Support for plugins
  • DNS Server & DNS Forwarder
  • DHCP Server and Relay
  • Dynamic DNS
  • Encrypted configuration backup to Google Drive
  • Stateful inspection firewall
  • Granular control over state table
  • 802.1Q VLAN support 
  • Hardened BSD
  • rSpamD
  • Shadowsock server
  • ClamAV antivirus engine
  • Suracata
  • Snort
  • Squid Web Cache
  • Malware, Trojan, Ransomware detective engine
  • Emerging Threat rulesets and live update
  • Local/remote support
  • Optional onsite support
  • Optional custom development, portal integration, cloud integration 

Web Cache Squid

Squid: Optimizing Web Delivery via Web Cache Server

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. It reduces bandwidth and improves response times by caching and reusing frequently-requested web pages. Squid has extensive access controls and makes a great server accelerator. It runs on most available operating systems, including Windows and is licensed under the GNU GPL.

Making the most of your Internet Connection

Squid is used by hundreds of Internet Providers world-wide to provide their users with the best possible web access. Squid optimises the data flow between client and server to improve performance and caches frequently-used content to save bandwidth. Squid can also route content requests to servers in a wide variety of ways to build cache server hierarchies which optimise network throughput.

Website Content Acceleration and Distribution

Thousands of web-sites around the Internet use Squid to drastically increase their content delivery. Squid can reduce your server load and improve delivery speeds to clients. Squid can also be used to deliver content from around the world - copying only the content being used, rather than inefficiently copying everything. Finally, Squid's advanced content routing configuration allows you to build content clusters to route and load balance requests via a variety of web servers.

[The Squid systems] are currently running at a hit-rate of approximately 75%, effectively quadrupling the capacity of the Apache servers behind them. This is particularly noticeable when a large surge of traffic arrives directed to a particular page via a web link from another site, as the caching efficiency for that page will be nearly 100%. - Wikimedia Deployment Information.

Backup; Restore and Rollback

Always keep an up to date backup of your configuration. History and Changes Automatic backups of configuration changes make it possible to review history and restore previous settings.

  • Preventive Backup Easily download a backup from within the GUI and store on a safe place.
  • Encrypt the backup with a strong password and make plain text unreadable for unauthorized persons.
  • Restore and Rollback Upload your configuration backup file and restore it with ease.
  • Supports encrypted Cloud backup of your configuration with the option to keep backups of older files.
  • For this purpose Google drive support has been integrated into the user interface.

OSIGATE Firewall Core

Dashboard to quickly show status of your OSIgate Firewall with drag and drop multi column support.

 

The modern Web GUI offers a great user experience with multi language support, build-in help and quick navigation tab, shown is the fast search option,

Next Generation Firewall Modules Really Protects Your Network.

Suricon 2021

Network Throughput

Throughput with standard IDS/IPS setting. 

100 Mbps  Single Core, clocked 500MHz 
200 Mbps  Single Core, clocked 1GHz 
500 Mbps  Single Core, clocked 2GHz 
   
250 Mbps  Dual Core CPU, 1.2GHz
500 Mbps  Dual Core CPU, 1.6Ghz
985 Mbps  Quad Core CPU, 2.0Ghz 
4.5 Gbps  Quad Core CPU, 2.5Ghz 
10 Gbps  8 Core CPU, 1.7Ghz 
15 Gbps  8 Core CPU, 2.1Ghz 

Traffic shaping is very flexible and is organised around pipes, queues and corresponding rules. The pipes define the allowed bandwidth, the queues can be used to set a weight within the pipe and finally the rules are used to apply the shaping to a certain package flow. The shaping rules are handled independently from the firewall rules and other settings.

 
 

Two-factor authentication also known as 2FA or 2-Step Verification is an authentication method that requires two components, such as a pin/password + a token. OSIgate offers full support for Two-factor authentication ( 2FA ) throughout the entire system utilising TOTP with for instance Google Authenticator.
Supported 2FA services include:

  • Graphical User Interface
  • Captive Portal
  • Virtual Private Networking - OpenVPN & IPsec
  • Caching Proxy
 

Stateful Firewall

Stateful Firewall a firewall that keeps track of the state of network connections (such as TCP streams, UDP communication) traveling across it. OSIgate offers grouping of Firewall Rules by Category, a great feature for more demanding network setups.

 

Aliases & GeoLite Country DB Managing firewall rules have never been this easy. By using Aliases you can group mulitple IP's or Host into one list, to be used in firewall rules. Additionally IP or Hostnames can be fetched from external URLs, examples are DROP (Do Not Route Or Peer), Abuse or Ransomware tracker and the build-in Maxmind GeoLite2 Country database.

OSIgate Global Support 24x7

From initial setup to mission-critical Firewall, SDWAN, NAS HA implementation and support ... 
please call HK: +852 3694 0408, CN: +86.755 25904562 or email to sales_team @ osigate.com for enquiry.