Kerio Control
Unified Thread Management & Network Intelligence
|
Kerio Control
Intrusion Prevention System
- Signature based packet analysis
- IP blacklisting
- Rule management
ICSA Labs Certified Firewall
- Industry accepted standard test criteria
- Corporate level criteria - enforces default security policy immediately after installation
- Secure access remote administration - all changes to security policy are logged
Application Layer and Network Firewall
- Create inbound and outbound traffic policies.
- Protect servers without the need for a DMZ through application-friendly NAT traversal.
- Perform stateful packet and protocol inspection and logging.
Anti-virus Protection
- Filter viruses and worms from incoming and outgoing traffic.
- Simplify deployment with integrated Sophos engine.
- Dual anti-virus ready for extra protection.
Web Filter
- Block access to websites with harmful or inappropriate content
- 53 different categories of web content
- Apply categorization to traffic statistics
VPN Server
- Unlimited site to site connections
- Mac, Windows, and Linux VPN clients
- Clientless SSL-VPN for Windows networks
Kerio Control 7
Firewall and Router - Connection tracking (SPI)
- Connection Limit
- Anti-Spoofing
- Protocol Inspection
- Traffic Rules Configuration Wizard
- DHCP server
- DNS Forwarder
- IDS/IPS (Snort based)
- Kerio Certified IDS Signatures
- IP Blacklists
- Three severity levels
Reporting - Historical analysis
- Individual, Group, Entire Network Internet Usage Reports
- User based reports
- Bandwidth utilization
- Security
- Kerio Web Filter Reports
- External Logging to Syslog
- Email Alerts
- Web site usage
- Protocol usage
- Browser based activity
User Authentication - Kerberos/Active Directory
- NT Domain
- Web login
- Proxy Server authentication (for Terminal services)
- NTLM authentication
Virtual Private Networking - Split tunnel support
- Windows/MacOS/Linux clients
- VPN Client can run as service
- User based authentication
- Multiple tunnels (site to site)
- Web SSL-VPN (Windows only)
NAT and traffic rules
- Pre-configured services
- User based traffic rules
- Time based rules
- NAT Mapping
- Group Based rules
- Dynamic DNS
- MAC filtering
- Blacklist in IDS/IPS
- Rule Exemption Capability
Content Filtering - Time interval restriction
- P2P Eliminator
- URL Categories
- Custom denial page
- Administrative alerts
- Custom URLs
- Forbidden Words
- FTP Policy
- Proxy server
- URL White-listing
- Anti-Virus Filtering
- Sophos integration
- Dual scanning with plug-in
Load Balancing and QoS - Supports multiple Internet links
- Policy based routing
- Implicit failover
- Bandwidth Limiter
Administration - Administration
- Web-based administration
- Multiple IP addresses on a single network interface
- Customizable routing table
- Variable Level Administrative Rights
- Update Checker Option
- Configuration Export/Import
- Active Directory Integration
- Local User Database
- Domain Template for default user configuration
- Auto Logout after Timeout
- Configurable Time Ranges for groups
- Multi-Language Support
Certifications - ICSA Labs Certified – Corporate Firewall
- Windows 7
Kerio Control files
- Control_vs_Fortinet
- Control_vs_SonicWALL
- Datasheet Control_7_US_0610
- IPS_Technology_Overview_US_Letter
- Kerio Control 7 - technical specifications