Stateful firewall with support for IPv4 and IPv6 and live view on blocked or passed traffic.
Multi WAN capable including load balancing and failover support.
Integrated support for IPsec (including route based), OpenVPN as well as pluggable support for Tinc (full mesh VPN) and WireGuard.
When you cannot afford downtime use our automatic and seamless hardware failover with state synchronization utilizing the common address redundancy protocol (CARP) to get the highest possible availability.
For easy setup, configuration and monitoring the ZeroTier plugin can be used to setup your Software Defined WAN within minutes.
Get rid of the Trojans & CNC bots with state of the art inline intrusion prevention utilizing Suricata and Proofpoint's Emerging Threats Open rules integrated. Optional ET PRO (commercial subscription) or ET PRO Telemetry (sign-up for free).
2FA is supported throughout the system, for both the user interface as services such as VPN.
Pluggable support for OSPF and BGP using the Free Range Router project.
Fully integrated web proxy with access control and support for external blacklists to filter unwanted traffic. Other options include firewall aliases and DNS blacklisting