The Network Security module fulfills all the demanding criteria of a sophisticated Internet gateway. It provides highly adaptable routing functions, cutting edge security and solves your remote access issues. In addition new networking features such as Voice of over IP (VoIP) are placing new demands on how networks have to be used. The Collax Network Security module enables you to handle all of this is a single and easy to use way.

Networking

The Collax Net Security module provides mature routing technologies such as connection failover for high availability, masquerading etc. By means of traffic shaping, bandwidths can also be limited or guaranteed for preferment and vital network connections. All types of Internet connections are supported (e.g. DSL) and various Internet connections can even be bundled (MultiWAN).

Remote Access Methods

The Collax Net Security module combines both the VPN technologies: IPsec and SSL VPN, allowing companies to benefit from the strengths of both technologies without deploying two separate servers for a similar purpose. The module also enables RAS access via ISDN or even analogue modems.

Security

The built-in security mechanisms of the Collax Net Security module forms a vital, yet often invisible, part of for your network strategy. Once in place it silently starts to protect your network against attacks and unauthorized access. A business security firewall is mandatory to protection your network, but the correct configuration can be complex and if incorrectly done it will leave your company vulnerable again. The innovative security firewall matrix from Collax make firewall configuration simple and minimizes the risk of miss-configuration. Additionally, the security package also features the leading intrusion detection and prevention system "snort". Here too, it is easy to configure and ensures effective customizing of the filters.

Multi-Level Firewall

This unique method of protection has many advantages. To start with it improves the sensitivity of its ability to filter over conventional firewalls. It can instantly filter out all unwanted application communication such as file sharing or Instant Messaging by working with white lists (only authorized applications are able to communicate, all others are not). This method instinctively protects you against hacking with tools such as Trojans, Spyware or worms that may be missed otherwise.

Administrators benefit a lot from centralized control of the network and now the applications therein.

Because the Multi-Level-Firewall also takes into account User, OS and Application the rules become more ‘real life’ based, granular and holes are avoided by default (if you miss the rule then you are still safe).

In order to optimize the security firewall and to simplify administration work this security firewall can use the supplied client agent on the protected machines. This means that users can be directly identified instead of having to deal with IP addresses or IP ranges. Instead the administrator deals with users and user groups. This results in easier to administer and easier to understand rules.

Today many people are mobile and use a combination of equipment. They may use notebooks in some situations, other times they may use a fixed PC and they may even share computing equipment or use a terminal server. The question then arises why a user should have different access rights when they are on different equipment. A user is, after all, the same person and should have the same rights. Normally this is a complex, or even an impossible task, but with the new Collax Multi-Level-Firewall this is very easy to achieve, even with terminal servers. The Security Firewall recognizes the user and grants access in relation to who they are.

This is by far the best way to administer as security solution: Easy for your staff and cost savings everywhere.

The Collax Net Security module combines all important security functions and network functionalities that you would expect from a gateway. Sophisticated security at the fraction of the price (cheap security solution):

• Inelegant routing
• Advanced security
• Full remote access techniques

Security:

Security is always important and this module has a very high focus on this. This includes the following features:

• The security firewall contained in the Collax Net Security module can filter the entire traffic with modern stateful inspection technology.
• Configuration errors are avoided with the help of a firewall matrix. The innovative firewall matrix provides a comprehensive overview of all rules.
• Fully and freely configurable for all services (ports) and an unlimited number of networks.
• All common services are predefined.
• Additional services can easily be configured.
• Built in analysis tool grants insight into the current situation in front of the firewall and in the local network.
• Layer 7 protocol support is available for SIP, FTP, IRC and PPTP.
• Defragmentation is carried out in order to ward off fragmentation attacks
• ICMP filter
• Spoof protection
• Intrusion detection and prevention
• Snort-based IDP with 4,000 rules in 46 categories provides comprehensive protection against known attacks.
  
  •  Host-based intrusion detection system
  •  Network-based IDS
  •  Inline snort

• The Collax Platform Server is a requirement
• Two network interfaces
• For ISDN-Einwahl: ISDN-interface

Demo-System

The link bellow will take you to a demonstration system. This is a live running Collax Platform Server with the following modules installed on it:

• Collax Communication
• Collax Network Storage
• Collax Web Application
• Collax Mail Security
• Collax Net Security
• Collax Web Security
• Collax Surf Protection

The system will refresh itself every hour so feel free to investigate the system. To enter the system your login credentials are:

Username: admin

Password: server2010

To enter the demo system, please click here:

Note:

As the demo server resets itself regularly it is possible that you make changes during the reset process. If this happens, obviously, nothing may happen. Also your changes will be cleared after an hour.

Also note that the link opens up in a new browser window.