FIREWALL

Stateful firewall with support for IPv4 and IPv6 and live view on blocked or passed traffic.

MULTI WAN

Multi WAN capable including load balancing and failover support.

VIRTUAL PRIVATE NETWORKING

Integrated support for IPsec (including route based), OpenVPN as well as pluggable support for Tinc (full mesh VPN) and WireGuard.

HARDWARE FAILOVER

When you cannot afford downtime use our automatic and seamless hardware failover with state synchronization utilizing the common address redundancy protocol (CARP) to get the highest possible availability.

SD-WAN

For easy setup, configuration and monitoring the ZeroTier plugin can be used to setup your Software Defined WAN within minutes.

INTRUSION DETECTION & PREVENTION

Get rid of the Trojans & CNC bots with state of the art inline intrusion prevention utilizing Suricata and Proofpoint's Emerging Threats Open rules integrated. Optional ET PRO (commercial subscription) or ET PRO Telemetry (sign-up for free).

TWO FACTOR AUTHENTICATION

2FA is supported throughout the system, for both the user interface as services such as VPN.

ROUTING PROTOCOLS

Pluggable support for OSPF and BGP using the Free Range Router project.

WEB FILTERING

Fully integrated web proxy with access control and support for external blacklists to filter unwanted traffic. Other options include firewall aliases and DNS blacklisting