Traditional Firewalls authorise traffic based on three criteria: Source/Destination IP Address and the Port that is used. The Port number is meant to indicate the protocol or application that is using/generating the traffic. For example Internet surfing traffic (HTTP) uses port 80, while email traffic (SMTP) uses port 25. Unfortunately, although this is just a widely used recommendation it is not a fixed rule. Often ports like 80 are not exclusively used for HTTP, but also by other applications that need an open port and of cause malicious purposes too.

The Collax Multi-Level Firewall takes firewalls to a new level and eliminates these and other issues by expanding the authorisation criteria. The Collax Multi-Level Firewall examines the Source/Destination IP Address, the Port and also the User ID, Operating System and also the Type of Application used. In this way it no longer replies on this arbitrary port number, but now knows what the actual application is.

Another issue resolved by the Collax Multi-Level Firewall is the use of unauthorised or harmful software. Traditionally this was very hard to achieve as lists of banned software had to be maintained. With the Collax Multi-Level Firewall a Whitelist principle can be used: Block all applications and then authorise them on a need to use basis. In this way you are not reliant on such malicious applications lists and you can guarantee the blocking of harmful traffic. With the user identification feature can also be employed on a user group basis too giving you centralised control over your environment.

The Collax Multi-Level Firewall consists of a set of rules on the Firewall and client software on the client machines. The Client software conveys information about users, used applications and operating system to the Collax Multi-Level Firewall. This means administrators can block unwanted programs central or for defined user groups without the need to translate IP addresses or Ports. This means that the rules pertain to users and not their physical machine. The result is staff can change machines (desktops in the office, laptops on the road) without having to change or write complex rules in the Firewall.

At a Glance: