Trustix Enterprise Firewall

Publishers Review

Publishers Review Trustix Enterprise Firewall, protects assets and business transactions by ensuring fast, secure connections with the Internet and networks. It enables fast, controlled connectivity, providing strong protection against unwanted intrusion without slowing the flow of approved traffic. Specifically designed to protect corporate networks and intranets, Trustix Enterprise Firewall is the only WYSIWYG (What You See Is What You Get) firewall in the world. A fully-featured packet-filtering router, Trustix Enterprise Firewall has advanced capabilities including the intuitive Xsentry graphical user interface (GUI) for visualizing and editing the firewall policy and behaviour. The GUI enables you to manage traffic for up to 24 DMZ's (demilitarized zones) as well as port forwarding, network address translation (NAT) and virtual private network (VPN) configurations.. More critically the underlying rules are then fully optimised before being deployed - maximising the security and performance of your network architecture. Features   Firewall · Network address translation · Port Forwarding · Source Address Translation · Net Filter/ IPtable functionality · Dynamic Stateful Packet Filtering · MAC address Filtering/ Anti-Spoofing measures · Logical Subnet Support (Subnetting) · Transparent proxy · Classless Inter Domain Routing · Demilitarized Zones supported · Operating System Basis Content Filtering Integration · Web Content Filter · Multiple Content Filtering Technologies · Transparent Web Based Configuration · Continually Updated · Immediate, Realtime Monitoring tools VPN · Encryption of VPN tunnels · FreeS/wan 2.0 Opportunistic Encryption · FreeS/wan 2.0 Group Policy Security Management · IPSec compliant data authentication and encryption · Remote access VPN for connecting home users · Interoperability with other IPSec compliant firewalls · Multiple, concurrent VPN connections · VPN tunnel interfaces · Replay attack prevention · Layer 2 Tunneling Protocol within IPSEC · VPN Pass-through Support · VPN Clients for roaming and remote workstations High Availability and Load Balancing · Fault tolerant automatic failover · False failover avoidance · Firewall monitoring and alarms · Server load balancing · Non fatal software failure detection · Non fatal hardware failure detection PKI certificate user authentication · Authenticating of remote workers · Diffie-Hellman (DH) Public Key handling · GUI Management and issuance of X.509 certificates Traffic Control · Enhanced Traffic Shaping · Visual deployment of Traffic Shaping Rules Administration · Intuitive WYSIWYG deployment of firewall settings · Drag and Drop configuration of DMZs · Fully optimized and automatic rule generation · SSH client · OS independent firewall client · Remote, secure configuration of multiple firewalls Protocols and services · Protocols supported · Pre-defined services · Custom service creation Logging · Event Logging · Advanced logging utility Upgrading · Automated software update facility · Security in upgrading E-mail notification of upgrade · E-mail notification of upgrade IP Address assignment · Internal DHCP server Virtual LAN · Transparent configuration of Virtual Local Area Networks · Transparent Client Side Virtual LAN Configuration AntiSpam Integration · Productivity enhancing Spam Filter · Multiple Spam Detection techniques