قابلیت‌های فایروال Kerio Control


۱۳۹۸/۰۹/۱۹ Study time ۳ دقیقه
Reporting & Monitoring
Reporting via Kerio Control StatisticsAutomated email reportsAndroid, Apple Watch and iOS app (notifications and monitoring)Detailed usage reports (web sites, protocols, bandwidth, etc.)Traffic categorization (multimedia, messaging, large file transfers, etc.)Top visited websites & top users per web categoryFilter reports by individual user, group, or entire networkReporting of Google search keywordsReal-time host activity monitoringTraffic charts of users and interfacesSystem Health MonitorSNMP monitoringEmail alerts for firewall eventsExternal logging to syslog
VPN
  • VPN client for Windows, Mac & Linux
  • Split tunneling
  • Multiple client-to-site and site-to-site tunnels
  • IPsec client-to-site/site-to-site
  • L2TP/IPsec for mobile devices
  • Persistent connection
  • SSL encryption
  • VPN tunnel failover
  • NAT support
  • Automatic or custom routing
  • User authentication via directory services
Firewall and Router
  • ICSA Labs certified corporate firewall
  • Deep Packet Inspection (DPI)
  • Stateful Packet Inspection (SPI)
  • Intrusion Detection and Prevention System (IDPS)
  • Application awareness
  • DHCP server
  • DNS forwarding
  • NAT mapping (inbound/outbound)
  • MAC filtering
  • GeoIP filtering
  • Zero-configuration networking
  • Service Discovery forwarding
  • Anti-Spoofing
  • Guest network with captive portal
  • 802.1Q VLAN support
  • Traffic rules configuration wizard
  • Time based rules
  • Connection limits (DoS protection)
  • Dynamic DNS
  • Customizable routing table
  • Reverse proxy
  • Simultaneous IPv4 and IPv6 support
  • IPv6 network prefix translation
  • IPv6 router advertisements
  • Multiple IP addresses on a single network interface (multihoming)
Content Filtering
  • URL categories with whitelist (Kerio Control Web Filter)
  • Content rules based on time intervals, users, applications, web categories, URL groups, file types, etc.
  • Forbidden words filtering
  • SafeSearch for search engines
  • HTTPS filtering
  • Pre-defined and custom URL groups
  • Regular expressions in URL rules
  • Proxy server with cache
  • P2P (peer-to-peer) traffic filtering
  • Antivirus filtering
  • Customizable denial page
Administration
  • MyKerio centralized web based management to monitor and manage multiple Kerio Control deployments
  • Remote web-based administration
  • Customizable administration dashboard
  • Zero-touch or self-provisioning
  • Share configuration (definitions) between appliances
  • Configuration export/import
  • Backup configuration to MyKerio or FTP server
  • Template for user configuration
  • Variable level administrative rights
  • Automatic software updates
  • Web-based debugging tools
  • Multi-language support
    Load Balancing and QoS
    • Internet link-load balancing
    • Policy-based routing
    • Automatic connection failover
    • Reserve bandwidth for high priority traffic
    • Restrict bandwidth for low priority traffic
    • User data transfer quotas
    • Bandwidth rules based on time intervals, traffic and content rules, traffic type, users, service, DSCP, etc
    Application Awareness
    • Database of common applications (Skype, Facebook, BitTorrent, etc.)
    • Categories of applications
    • Real-time and detailed reporting of application activity
    • Content rules per applications by user, host or time interval (permit or deny)
    • Bandwidth rules per application (restrict or reserve)
    Intrusion Prevention System
    • Snort-based packet analyzer
    • Emerging threats rules database
    • IP blacklist database
    • Multiple security levels
    • False positives exception handling
    User Authentication
    • Active Directory
    • Apple Open Directory
    • Local user database
    • 2-step verification for remote access
    • Proxy authentication for terminal servers
    • Kerberos and NTLM authentication
    • RADIUS server
    • Password guessing protection