firewalls

Utilizes the well-known interface, reporting, and monitoringfeatures included in all of WebTrends award-winningproducts. Analyze firewall log files and report on all incoming and outgoing activity showing IS Managers what protocols are being used, who is using them, and the bandwidth being consumed by each. General Firewall Activity reports on bandwidth usage by individual and by department, potential security issues, email activity, ftp transfers, telnet sessions, and more. Incoming Web Activity reports monitor and report on outside visits to a web site that is behind the firewall while Outgoing Web Activity reports on internal usage of the Internet through the firewall, including reports on most active users and the sites visited helping assess employee productivity.

Firewall Analyzer is a web-based firewall log analysis tool that collects, correlates, and reports on most enterprise firewalls, proxy servers, and VPNs.

It includes automatic threshold-based alerting, pre-defined traffic reports, historical trending and more. Supported firewalls include Check Point, Cisco PIX, SonicWALL, NetScreen, FortiGate, 3Com, and more.

VisNetic Firewall is a packet-filtering software firewall built to protect Windows-based Servers, telecommuters / mobile users, and LAN workstations not currently protected by a firewall. VisNetic Firewall is more secure than application-based personal firewalls, yet less expensive than high-end software firewalls.

Organizations running software and/or hardware Internet sharing solutions are as concerned about internal threats as they are about external threats. There is currently not a hardware firewall solution that protects companies against these threats and existing software firewall solutions are priced outside of the small to medium business market.

The BigFish Firewall is a suite PHP scripts that generates a firewall script for iptables based firewalls. The script is created following the configuration rules entered by the user or standard pre-configuration rules and protections for linux systems.

NeT Firewall is a comprehensive stateful firewall solution built to protect Windows-based systems not currently protected by a firewall. Stateful inspection technology tracks each packet traversing the firewall and makes sure that they are legitimate. A stateful inspection firewall also monitors the state of the connection and compiles the information in a state table ensuring that the source and destination of each packet is valid. NeT Firewall is more secure than application-based personal firewalls, yet less expensive than high-end firewalls, providing comprehensive intrusion protection.

This MULTI-PLATFORM Firewall is the easy, multi-purpose security application you have been looking for. It utilizes next-generation IDS technology to deliver enterprise-class Deep Packet Inspection, Application Layer vulnerability protection, and intelligent Intrusion Prevention.

Forget about run-of-the-mill commercial firewalls and expensive hardware devices. InJoy Firewall is what the name implies; a powerful "feel-good" product - easy for the average user, and a MUST-HAVE for advanced users. Install it and become an INSTANT SECURITY PROFESSIONAL with complete authority over your Internet connection and real-time transparent insight into almost any network activity.

InJoy Firewall is the ONLY Firewall in the security market that offers a total end-to-end multi-platform software solution. It solves the overwhelming problems related to managing multi-vendor security devices, now making it easier than ever to build enterprise-wide IPSec VPNs and set up identical cross-platform end-point security.
The intuitive user interface is highly customizable, allowing you to efficiently control and manage Firewall Servers - locally or remotely, and even across OS Platforms. In addition, A HOT NEW TOOLBAR application enables you to casually keep an eye on the "intrusion score", while preserving desktop space for other work.

InJoy Firewall is the ultimate firewall solution for organizations of all sizes. Put an end to the cost, confusion and complexity of managing multiple security devices. Use the power and simplicity of InJoy Firewall Pro to take control of your network security today.

Basic features include: 10+ Pre-configured Security Levels, Internet Gateway support, IPSec VPN tunnels, Bandwidth Management, Web Filtering, E-mail SMTP Server Protection, Remote Management, comprehensive rule-based Packet Filtering, PPPoE, and much more...

VisNetic Firewall delivers protection to security-conscious professionals.

More secure than the average personal firewall or application-level firewall, yet more cost effective than high-end firewalls, VisNetic Firewall provides peace-of-mind through comprehensive intrusion protection.

VisNetic Firewall examines each packet being sent, inside and outside of the network to verify whether the packet is allowed or denied access through the firewall.

VisNetic Firewall guards the computers of Telecommuters/Mobile Users, Windows-based Workstations, Windows-based Servers, and Business Networks.

Here are some key features of "VisNetic Firewall":

Stateful Packet Inspection

VisNetic Firewall falls into a class of firewalls called Stateful Inspection Firewalls. Stateful inspection firewalls determine whether packets can get through the firewall based on the protocol, port, and source and destination addresses. For every request that is allowed by this strategy, stateful inspection firewalls open up a limited time window to allow response packets, but ONLY from the same host.



Port Scan Detection

VisNetic Firewall detects the seven most common forms of port scans, alerting you with a log entry and optionally automatically banning the IP address of the scanner, ensuring that they are "cut off" before they can discover any useful information about your system.



SYN Flood Detection

A SYN Flood is a common type of denial of service (DoS) attack used against servers. When launching a SYN Flood, an attacker bombards you with so many connection requests that your computer is unable to accept legitimate connections, effectively shutting down your web, email, FTP or VPN server. VisNetic Firewall employs SYN cookies to protect you from SYN Flood attacks.



Remote Administration

Using the remote administration component of the Server version of VisNetic Firewall, you can now remotely administer any VisNetic Firewall using an encrypted communications link. You can also reboot or shut down the remote system using the remote admin controls. In addition to remotely administering other Server or Workstation firewalls, you can use the stand-alone Remote Administration Tool to remotely connect to your own Server firewall.



IP Address Ban List

VisNetic Firewall lets you block IP addresses or ranges of addresses to prevent unwanted connection attempts. This can be particularly effective in stopping repeated requests from a hacker who is trying a large number of hacks, looking for one that works.



HTTP Filtering

Using VisNetic Firewall s HTTP Filtering, you can prevent intrusion attempts targeted at your web server by screening requests and automatically banning the offender s IP address, preventing further access.



MAC Address Filtering

VisNetic Firewall now has the ability to filter traffic based on MAC addresses. Because a MAC address is specific to one individual network interface, this feature is particularly useful if you want to allow or block traffic from a particular computer whose IP address may change.

LutelWall (formerly known as Lutel Firewall) is high-level linux firewall configuration tool. It uses human-readable and easy to understand configuration to set up Netfilter in most secure way. Its flexibility allows firewall admins build from very simple, single-homed firewalls, to most complex ones - with multiple subnets, DMZs and traffic redirections. It can be used on a dedicated firewall system, a multi-function gateway/router/server or on a standalone system. Configuration method of this firewall is made to be as simple as possible without loosing Netfilter flexibility and its security facilities.

Here are some key features of "LutelFirewall":

· flexible control over traffic using rule set
· user-defined protocols support
· support for any kind multiple external and internal interaces (and aliases)
· automated MASQUERADE / SNAT support
· easy to set up DNAT (transparent proxy, redirections to LAN/DMZ etc.)
· rate limit extensions
· packet marking for 3rd party shapers
· TOS (Type of Service) traffic optimizer
· both passive and active FTP support
· DHCP support
· can work as "workstation" firewa
· stateful TCP connection tracking with restrictive TCP chain
· blocking all stealth mode scans (FIN, Xmas Tree, Null, Windows scan or ACK scan modes (nmap -sF -sX -sN -sW -sA)
· blocking IP protocol scans (nmap -sO)
· blocking UDP scans (nmap -sU)
· blocking identification via TCP/IP fingerprinting (nmap -O)
· anti-spoof protection, including protection for aliases
· anti-smurf protection
· TCP SYN Flood protection
· UDP / ICMP Flood protection
· IANA reserved addresses checking
· SYSCTL parameters set for increased strength
· logging stealth scans (FIN, Xmas Tree, Null), ACK scan modes (nmap -sF -sX -sN), IP protocol scans (nmap -sO), UDP scans (nmap -sU), nmap fingerprinting attempts.
· autodetect of connection type (static/dynamic, external/internal)
· auto update of firewall tool
· auto update IANA reserved list
· display firewall statistics in iptables native, csv or html format
· easy deployment on all distributions

Whats New in This Release:

· fixed iptables version checking

redWall is a bootable CD-ROM Firewall. redWall Firewalls goal is to provide a feature rich firewall solution, with the main goal, to provide a webinterface for all the logfiles generated!

Here are some key features of "redWall Firewall":

· Configuration is currenty stored on a floppy/USB Memory Stick/Harddrive or sent by email (see todo !)
· Due the fact, that most reporting functionality is done via mysql (except for the squid reports), its possible to use the cd as a Mangagement/Logging Console for other firewalls running in your environment using the same cd! Take snort for instance.. you can have 10 firewalls :) running snort, reporting back to the main database on the management/Logging system, in order to have a central "overview" of all your firewalls... Using the SAME CD !! Its all up to you how you configure your firewall and/or Management box !
· based on redhat 9.0
· bridging support
· Mail Virusscanning, spamfiltering and gateway functionality
· /etc is writable (tmpfs) feeded by the configuration medium
· /var is writable (ramdisk or harddisk) (you are not going to run squid on a ramdisk... arent you ?)
· The cd will (at least it should) detect all your network cards (using kudzu) during the initial boot
· During the initial boot, you can setup some basic things like IP Address, Services to start (all disabled by default) and so on

Whats New in This Release:

· A whole lot of new features have been added.
· vuurmuur has been installed again.
· The initial setup has been rewritten to be like a step-by-step configuration.
· A webmin module for openvpn has been added.
· A comprehensive reverse proxy called vultureng has been added.
· Major bugfixes have been applied.

Trustix Enterprise Firewall represents a revolution within firewall management software. Trustix Enterprise Firewall is the worlds first WYSIWYG Enterprise Firewall, making it easy-to-use and easy-to-deploy. By utilizing the WYSIWYG GUI, your Enterprise Firewall will be out of the box and implemented in an unbeatable 25 minutes- and without the need for a dedicated systems administrator!

A fully-featured packet-filtering router, Trustix Enterprise Firewall has advanced capabilities including an intuitive graphical user interface (GUI) for visualizing and editing firewall policy.

This unique GUI enables you to manage traffic for all your zones (up to 24) as well as port forwarding, network address translation (NAT) and virtual private network (VPN) configurations.

Packet-filtering enables Enterprise Firewall to act as a router to accelerate data transmission. Meaning no more bottle necks due to time consuming proxies.

IP-address sharing by masquerading or NAT.

The underlying rules generated by the program are then fully optimized before being deployed- thereby optimizing the security and performance of your firewalls architecture, and avoiding errors and duplications.

Trustix Enterprise Firewall uses the IPsec protocol to encrypt data transmitted over the net- extending the security of your network to all arms of your business. Communications between your office and home users are protected using 168-bit 3DES encryption- triple the encryption, triple the security! Enables remote, secure configuration of multiple firewalls from one Windows or Linux desktop.

Trustix Enterprise Firewall Blockades and repel malicious attacks from hackers, Trojans, worms and infected files.

Here are some key features of "Trustix Enterprise Firewall":

· Visualise DMZs - drag and drop security policy deployment
· Integrate branch offices with 3DES encrypted VPN tunnels
· Accelerate internet access times with proxy caching server
· Authenticate remote workers with PKI X.509 certificates
· Ensure high availability with fault tolerant automatic failover