Firewall

Threats to today's networks continue to grow, with attacks coming from both outside and within corporate networks. These threats can have devastating effects, ranging from business disruption due to a network outage, financial risk resulting from information loss, or liability issues stemming from information tampering. Meanwhile, businesses are striving to improve their profitability and competitiveness through continued business process optimization and automation, leading to increased connectivity with their business partners and customers. These applications offer many benefits, but can also introduce a variety of risks, if not secured properly.

Using the world-class security and networking services provided by the iPolicy, businesses can securely deploy mission-critical applications and networks in a highly reliable manner, while benefiting from the significant investment protection and lower operational costs offered by this unique, modular solution.

A Firewall helps to control access to or from a network. It provides a network boundary with a single point of entry and exit. Since all traffic to or from the organization boundary should pass through the Firewall, one can configure the firewall to reject or allow specific type of traffic according to the needs of the organization. Firewall allows creation of rules to enable or disable access to a zone or specific network(s) in a zone.

iPolicy IPF provides a stateful firewall which is capable of Deep-Packet Inspection (up to Layer 7). It allows you to create rules in which you can specify source and destination zones, source and destination IP Addresses, application, application transactions, severity, the time during when the rule will be effective and the corresponding action on encountering the specified traffic. You can also specify whether the action needs to be logged and the target logging device.

Key Features and Benefits

• L3-7 Stateful Firewall
  • Layer3- 7 Protocol Inspection
  • Dynamic application detection and decode (parameter & transaction, e.g., HTTP Get/Put, Yahoo Messenger Text/Webcam)
• Firewall Policies
  • Time of Day policies
  • Hierarchical model of policies (global, customer specific)
• Authentication
  • User and group authentication: Radius, LDAP, NTLM
• High-Availability
  • Active-Active and Active-Passive (state synchronization)
• Network segmentation
  • VLAN, subnet, group of IPs
• Security zones
  • Trusted, Un-trusted, DMZ
• Deployments
  • Transparent and gateway modes
  • VLAN and NAT support in both transparent and gateway mode
  • Virtualization support in both transparent and gateway mode
• Single point of Audit
  • Firewall logs can be used for audit trails