FortiGate Security Systems

FortiNet Inc.

http://www.fortinet.com

FortiGate Multi-Threat Security Systems for the Small Office/Home Office (SOHO) and the Small to Medium Business (SMB)
The FortiGate-50B, 60-series, 100A, 200A and 300A model Multi-Threat Security systems are the ultimate all-in-one, network-based solution to protect smaller deployments from blended threats. These easy-to-deploy and easy-to-administer systems deliver exceptional value and performance for small offices, home offices, small and medium sized businesses and branch office applications. With a complete complement of security services - including firewall, VPN, intrusion prevention, antivirus, web filtering, and traffic shaping - a wide range of organizations can now enjoy complete protection from the most damaging threats without penalties in performance, cost, or manageability. The FortiGate installation wizard guides users through a simple process that enables most installations to be up and running in minutes. With models ranging in throughput from 30Mbps to 200Mbps, FortiGate-50B, 60-series, 100A, 200A and 300A can enable organizations to stay connected and protected against network-based threats.

FortiGate Antivirus Firewalls for Enterprise
The FortiGate™ Enterprise Series, which includes the FortiGate-400, 400A, 500, 500A, and 800 Antivirus Firewall models, meets enterprise-class requirement for performance, availability and reliability. They include all of the key capabilities provided by other FortiGate models, with integrated, real-time antivirus, firewall, VPN, network intrusion detection and prevention, and traffic-shaping services. With throughputs up to 1Gbps, high-availability features including automatic failover with no session loss, and multi-zone capabilities, units in the FortiGate Enterprise Series are the choice for mission critical applications.

Commercial

Information updated: 07 March 07

Sidewinder G2

Secure Computing Corporation

http://www.securecomputing.com

Consolidating all major Internet security functions in one system, the Sidewinder G2® Security Appliance is the strongest self-defending platform in the world. Built on a unique Zero-hour Attack Protections (ZAP™) technology, Sidewinder G2 defends your networks and applications from all types of Internet threats, both known and unknown.

At the center of the Sidewinder G2 attack protections design are secure application pathways that allow your tightly defined and recognized traffic through at Gigabit speeds. Simultaneously, our self-defending ZAP technology has zero tolerance for all suspicious and undesirable traffic—including known threats before security patches or attack signatures are available or applied—providing you with essential 24x7 Application Defenses™ for your mission-critical operations.

A unified threat management (UTM) device as defined by IDC, Sidewinder G2 goes even further to include best-of-breed security so you gain greater manageability, more control, and stronger security than other UTM and firewall appliances. Sidewinder G2's comprehensive yet flexible platform protects you instantly out of the box. It also allows you to customize and implement your security policy as you see fit using any or all of the protective features of Sidewinder G2, including over 200,000 known virus, spyware, and attack signatures, Web content filtering, and much more.

Our unique unequalled CERT advisory record and zero emergency security patches over the 11-year life of Sidewinder G2 sets us apart. Broadly deployed world-wide, the Sidewinder G2 Security Appliance is extensively used by all types of organizations from small to enterprise, and is the only security appliance to have achieved the pre-eminent EAL4+ common criteria certification for application firewalls.

Commercial

Information updated: 07 March 07

Astaro Security Gateway

Astaro AG

http://www.astaro.com

More than 30,000 organizations around the globe rely on Astaro Security Gateways to protect networks, filter web access, and secure email communications. ICSA and Common Criteria certified, Astaro Security Gateways are ready for deployment in large, mid-size and small IT environments.

Features
All Astaro Security Gateway models feature full network protection, web filtering, and email security capabilities:

Network Protection - Firewall and IPS
- SSL & IPSec VPN
- Bandwidth Optimization

Web Filtering
- Content Filtering
- Anti Virus and Spyware
- IM and P2P Control

Email Security
- Anti Spam and Phishing
- Dual Anti Virus
- Email Encryption

Security Management
- Easy User Interface
- 1-Click Internet Updates
- Hot Standby & Clustering

Commercial

Information updated: 07 March 07

Crossbeam Security Devices

Crossbeam Systems

http://www.crossbeamsystems.com

Crossbeam security devices lead the high-end Unified Threat Management (UTM) market by coupling multiple best-in-class security applications with non-stop high availability, high performance purpose-built network security hardware. The end result is massive appliance consolidation, eliminating up to 100 separate devices per Crossbeam security switch, and the ability to build defense in depth infrastructures without breaking the bank.

The Crossbeam X-Series and C-Series are based on the groundbreaking patent-pending technology that makes up their core architecture. This architecture yields significant advantages over traditional appliances and servers, including an unmatched degree of scalability high availability, multi-app support, a lower total cost of ownership, and ease of management.

Most importantly, Crossbeam Systems technology delivers a series of benefits unlike any other solution on the market. It helps companies better protect their valuable IT assets. It increases end-user satisfaction and trust. It reduces the risk of introducing new applications and the complexity of managing multiple single-purpose appliances. And finally, it reduces the cost of the surrounding equipment required to achieve full reliability.

Commercial

Information updated: 07 March 07

Watchguard Security Appliances

Watchguard Technologies, Inc.

http://www.watchguard.com

WatchGuard® security appliances deliver the most complete unified threat management (UTM) in their class, with built-in zero day protection, superior performance, ease of use, and value for your growing network. Our fully integrated security services give you continually updated, multifaceted network protection from spyware, spam, viruses, worms, trojans, Web-based exploits, and blended threats. From firewall and VPN protection to secure remote access, WatchGuard solutions provide security for a broad range of network environments.

Commercial

Information updated: 07 March 07

BorderWare Firewall Server

Borderware Tecnologies, Inc.

http://www.borderware.com

The First EAL4+ Certified Firewall
For more than ten years, the BorderWare Firewall Server has secured thousands of organizations around the globe. Built upon a secure platform, the BorderWare Firewall Server was the first firewall to achieve Common Criteria EAL 4+ certification. It is designed to secure your company from network level threats and attacks that come from the internet.

Powerful & Flexible Control
Based on S-Core™ OS, a hardened operating system, the Firewall Server secures your organization with hybrid proxy technology, offering powerful and flexible control over all inbound and outbound network traffic.

Easy To Use
The BorderWare Firewall Server is easy to use, and has built-in logic to protect organizations against mis-configuration – a common source of security vulnerabilities. At the same time, the Firewall Server provides maximum flexibility for the most stringent requirements.
* Secure Platform
* Traffic Management
* High-Availability
* VPN Services
* Transaction Management
* Anti-Virus
* Anti-Spyware

Also see the SteelGate product.
SteelGate™ is a high-performance VPN firewall appliance that enables organizations to prevent attacks and block malicious behavior, control network traffic both inbound and outbound and centrally manage the perimeter defense infrastructure in a single security solution. SteelGate is a comprehensive firewall appliance that is based on the Common Criteria certified BorderWare Firewall Server™ software.

Commercial

Information updated: 07 March 07

Celestix MSA Appliance

Celestix Networks Inc.

http://www.celestix.com

The MSA security appliance is based on new Celestix’s Scorpio-X appliance hardware platform. Specifically designed for network security, Scorpio-X, with its great capabilities and high-speed I/O device, has the best price/performance hardware platform to deliver Microsoft ISA Server 2006 security solutions. Each appliance offers a single, integrated solution and features:
* Microsoft ISA Server 2006
* Celestix SlingShot appliance engine - includes Web based UI for easy configurations, one button recovery system and update services
* A purpose-built, hardened Celestix Windows based MSA platform
* LCD coupled with jog dial for easy configurations
* True Gigabit network throughput
* PCI-Express architecture

Features at a glance
* High performance appliance with Microsoft ISA Server 2006
* Integrated solution with security-optimized hardware, operating system,and applications
* Enhanced security architecture with application layer filtering
* Websense Web Security Suite or Surfcontrol Web Filter (optional and licenses sold seperately)
* PCI-Express Interface
* Supports all industry standard protocols
* Appliance form factor
* Management through graphical Web UI
* 1:1 Failover Safeguards Appliances when configured as active/passive pairs (MSA2000i/3000i/4000i) or active/active (MSA3000b/4000b/5000e)
* LCD front panel for easy network configuration and status display
* One button system recovery to factory default and last known good version
* Deploy Firewall, VPN and Caching solution in less than 15 minutes
* Hardened Microsoft Windows Server 2003
* RoHS compliant hardware platform

Commercial

Information updated: 08 March 07

Check Point UTM-1

Check Point Software Technologies Ltd.

http://www.checkpoint.com

The uncompromising level of security that has made Check Point a security leader is now available in an easy to deploy and manage unified threat management (UTM) appliance. Check Point UTM-1 blends the simplicity of a UTM appliance with the proven security technologies that secure the world’s most demanding networks. UTM-1 provides a complete solution based on the industry’s most renowned firewall and VPN technologies.

In addition to firewall, VPN and antivirus capabilities, UTM-1 appliances deliver functionality above and beyond traditional UTMs with advanced capabilities such as a Web application firewall, advanced VoIP security, SSL VPN connectivity, anti-spyware, URL filtering and IM/P2P blocking. And, UTM-1 appliances provide total visibility and control of all security functions from a single console without requiring additional hardware or software.

Check Point UTM-1 gives you the security you need and the simplicity you want. A variety of models ensures the right fit for any business and features:
* Security technologies trusted by 100% of the Fortune 100
* Simple set up and configuration for any organization
* Advanced UTM features including SSL VPN, IM and P2P blocking, and more
* Fully integrated centralized management and reporting
* Real-time security updates via SmartDefense Services

Commercial

Information updated: 08 March 07

DeepNines Security Edge Platform

Deep Nines Inc.

http://www.deepnines.com

DeepNines Security Edge Platform™ (SEP) is a unified threat management (UTM) appliance that is deployed in front of the router or at critical points in the network architecture and acts as the first line of defense for the network. The SEP evaluates all network traffic at the packet level, both ingress and egress, to determine what is valid and what is malicious. The SEP’s patent-pending technology is behavior and signature-based in order to mitigate both known and unknown attacks. Since the SEP is a software-based solution, it does not require fork-lift upgrades like many other hardware-based networking solutions.

The SEP has two families of products:
* .9s Edge Series: WAN interfaces ranging from T1 to OC12
* .9s Frontline Series: Ethernet interfaces with throughputs ranging from10 Mbps to 1.4 Gbps

Multi-Method Inspection
DeepNines has developed a unique, Multi-Method Inspection (MMI) process to inspect all network traffic at wire speed. The BBX looks at 250+ protocols and ports, including those that have in the past made the router vulnerable (i.e. routing protocols) versus solutions from most vendors that only inspect between four and 13 protocols. The BBX understands the routing of the network and how packets should behave. The MMI process is linear in nature and includes:
* Intelligent Firewall
* Stateful Fragmentation Control
* Policy Checking
* Behavior-Based Intrusion Prevention
* Signature-Based Intrusion Prevention
* Anti-Virus, Anti-Spyware, Anti-Phishing
* Adaptive Rate Control

Commercial

Information updated: 08 March 07

Cyberoam CR Series

Elitecore Technologies Ltd.

http://www.cyberoam.com

Cyberoam CR series are dedicated Internet Security Appliances, delivering user identity-based security to enterprises. Cyberoam appliances offer powerful security against a range of Internet threats, including viruses, worms, Trojans, spyware, phishing, pharming and more. With a unique identity-based firewall that can offer throughput of upto 2.25 Gbps, VPN, gateway anti-virus, anti-spam, intrusion detection and prevention, content filtering, in addition to bandwidth management, multiple link management and inbuilt reporting, Cyberoam offers comprehensive Internet security to enterprises, including corporations, educational institutions and government organizations effectively.

CR Series - The Cyberoam CR series ranges from CR50i to CR1500i, serving the Internet security requirements of small, medium and large enterprises. The Cyberoam security appliances are accelerated for high speed through proprietary algorithms to deliver enterprise class performance. They offer reliable, round the clock security through high availability.

Cyberoam Appliance Strengths - By offering a single, powerful appliance that meets the enterprise’s complete Internet security requirements, Cyberoam eliminates the need for individual security appliances. In doing so, it lowers the capital and operating expenses involved in the purchase, operation and renewal of dedicated Internet security appliances.

They are easy to deploy and manage, supporting remote management through a web-based GUI. Cyberoam security appliances offer complete configuration flexibility by enabling temporary and permanent policies based on user identity and profile, protecting enterprises from external and internal threats. Their architectural flexibility accommodates emerging applications and meets new threats effectively.

Cyberoam’s architectural flexibility can easily accommodate emerging applications like VoIP through own enhancements and easy third party plug-ins with no architectural changes, keeping enterprises in a state of constant threat-readiness in a rapidly evolving threat scenario.

Cyberoam balances its comprehensive solution through fine granular controls with user identity-based policies, delivering high flexibility in implementation and future-proofing network security.

Commercial

Information updated: 08 March 07

SecurePilot

Equiinet

http://www.equiinet.com

The high performance SecurePilot is a new sister product to Equiinet's marketing leading CachePilot product. The standard SecurePilot comes in desktop format. The higher end SecurePilot Max model is available in 2U rack format or as a tower system.

All SecurePilot models have multiple Ethernet interfaces for tasks such as DMZ or segregated pupil/faculty LANs. SecurePilots come with a range of Unified Threat Management (UTM) services. SecurePilot integrates an array of threat management options, into a single secure appliance for schools. An advanced firewall ensures those outside your school cannot hack in and cause harm to servers and individual computers. Equally, the network administrator can be assured that he can control who and with what type of traffic, goes beyond the school network.

In addition, SecurePilot enables secure inter-school communication. Internet based VPNs can securely connect schools – be they local or international. SecurePilot can also act as an H.323 gateway for inter-school video conferencing.

First year subscriptions of all standard unified threat management options are bundled for advanced firewall, intrusion detection and prevention. SecurePilot additionally has options for countering email threats of viruses and spam.

Multiple, configurable Ethernet ports allow flexible deployment of DMZs, and multiple LAN interfaces. Models are available with optional WAN interfaces for ISDN and leased lines.

The standard SecurePilot is ideal for primary and smaller secondary schools. The larger SecurePilot Max models are available for larger secondary schools and colleges and come in two formats – a 2U unit for rack mounting in a cabinet or as a floor standing tower which offers ultra quiet operation for locating in a computer suite environment. SecurePilot works either in a standalone mode or in conjunction with its award winning sister product CachePilot.

Commercial

Information updated: 08 March 07

Cisco ASA 5500 Series Adaptive Security Appliances

Cisco Systems Inc.

http://www.cisco.com

The Cisco ASA 5500 Series Business Edition provides small and medium-sized companies with comprehensive gateway security and VPN connectivity. With its combined firewall and anti-X capabilities, the Cisco ASA 5500 Series stops threats at the gateway before they enter the network and affect business operations. These same services are extended to remote-access users providing a threat-protected VPN connection. The Cisco ASA 5500 Series Business Edition offers:
• Most trusted and deployed firewall technology-Building on the Cisco PIX® Family of security appliances, the Cisco ASA 5500 Series allows valid business traffic to flow, while keeping out unwelcome visitors. And with its application control capabilities, the solution can limit peer-to-peer file sharing, instant messaging, and malicious traffic, while enabling secure deployment of new business applications for improved profitability and competitiveness. This prevents security leaks and the introduction of threats to the network.
• Market-leading anti-X capabilities-With robust anti-X capabilities delivered via the optional Content Security and Control Security Services Module (CSC-SSM), the Cisco ASA 5510 Adaptive Security Appliance provides critical perimeter security services needed for comprehensive protection.
–Antivirus
–Anti-spyware
–Anti-spam
–Anti-phishing
–Real-time protection for Web access, e-mail, and file transfer
–URL filtering
–E-mail content filtering

Commercial

Information updated: 08 March 07

GB-xxxx Firewall Appliances

Global Technology Associates, Inc.

http://www.gta.com

The GB-3000 firewall appliance is GTA's flagship firewall designed for corporate offices and mid-sized data centers that desire true gigabit throughput and powerful features to secure their complex network environments and multiple Internet security zones. The GB-3000 standard configuration includes two 10/100/1000 and two 10/100 interfaces and can be expanded to include up to ten 10/100/1000 interfaces. With two user installable expansion modules, it's easy to add or change interface modules. The four-port expansion modules are available with either 1000TX or miniGBIC interfaces. Increased processing power provided by an Intel Xeon processor easily handles network traffic. Powered by GB-OS 4.0, the GB-3000 integrates powerful security capabilities with advanced network features into a single, easy-to-use solution.

* Unrestricted concurrent outbound users
* 512,000 concurrent sessions
* 2-RU appliance with processing power for complex Internet connectivity environments
* Expansion modules for up to eight additional 1000TX or miniGBIX interfaces
* Threat management features including support for Mail Sentinel Anti-Spam and Mail Sentinel Anti-Virus
* ICSA 4.1 Corporate Certified GB-OS System Software

See the full line of GB Appliances, for businesses of all sizes.

Commercial

Information updated: 08 March 07

iPolicy Intrusion Prevention Firewalls

iPolicy Networks Private Limited

http://www.ipolicynetworks.com

All iPolicy Networks Intrusion Prevention Firewalls support multiple security services delivered in parallel at very high performance. This is made possible by iPolicy Networks’ Single Pass Architecture™, a unique approach to network security that enables enterprises to realize a comprehensive security model that delivers integrated network security at superior performance even under heavy traffic flows. Multiple defense mechanisms, including IPS/IDS, Layer 7 stateful firewall and URL filtering, are intrinsically built into the solution. They successfully block worms/botnets, server exploits, spyware and Trojans, mitigate DoS/DDoS attacks and prevent blended threats from entering the network in addition to providing access control.

The Intrusion Prevention Firewall protects data networks from a wide range of security threats for mid-sized to large enterprises and service providers while offering a significant reduction in TCO. Customers who choose the iPolicy Intrusion Prevention Firewall no longer have to buy separate firewall, IPS, and URL filtering products to protect their network from today’s sophisticated threats.

Key Benefits of the iPolicy Intrusion Prevention Firewall:
* Comprehensive security: Firewall, IPS/IDS, DoS/DDoS, URL filtering
* Real-time worm, spyware and attack protection
* Layer 3 to 7 firewall-based control
* High-speed transparent URL filtering
* VLAN and NAT support in both transparent and gateway mode
* Security Domain (virtualization) for all security functions
* High-availability support
* Exceptional performance, high throughput and low latency
* Ease of deployment and use
* Centralized management with hierarchical delegation
* Web-based updates (software, attack signatures, URL database, etc.)
* Comprehensive real-time reporting and monitoring

Commercial

Information updated: 08 March 07

IBM Proventia Network Multi-Function Security

IBM Internet Security Systems

http://www.iss.net

IBM Proventia Network Multi-Function Security (MFS) appliances are powerful yet cost-effective unified threat management (UTM) devices. They stop all types of Internet threats before they penetrate your network and impact your business.

These all-in-one UTM appliances ensure maximum network uptime, improving workforce productivity by blocking viruses, worms, hackers, spam and unwanted Web content.

Complete Network Protection
Proventia Network MFS combines industrial strength intrusion prevention with firewall, VPN, behavioral and signature antivirus, Web filtering and antispam technologies in a single, easy-to-manage UTM appliance.

You benefit from:
* Preemptive protection with the only unified threat management (UTM) solution available that offers immediate protection against attacks targeting software weaknesses, or vulnerabilities. Proventia Network MFS is also the only solution that offers a protection guarantee, when managed by Internet Security Systems.
* The world’s leading protection capability. Proventia Network MFS delivers the most comprehensive protection in a single appliance. These UTM appliances block more attacks with off-the-shelf coverage for more than 1,000 vulnerabilities to protect against malicious worms, over 120,000 known viruses, over 93% of unknown viruses and other blended threats. Automatic updates continuously protect your systems from new threats as they are discovered.
* A single solution that offers the easiest and most economical way to protect against all types of Internet threats. Proventia Network MFS eliminates the need to acquire, install and manage multiple solutions from different vendors.

Commercial

Information updated: 08 March 07

NETASQ UTM Appliances

NETASQ

http://www.netasq.com

NETASQ appliances include all the necessary functions for the effective protection of small, midsized and large enterprises, service providers and remote users (real-time intrusion prevention, network and application firewall, advanced content filtering, embedded KASPERSKY antivirus, antispam, antispyware, URL filtering, IPSEC and SSL VPN and bandwidth management).

NETASQ UTM appliances have been tailored around a unique real-time intrusion prevention technology - ASQ.

The ASQ technology offers multi-layer security protection that prevents attacks on the network and on contents without compromising performance and throughput.

Commercial

Information updated: 08 March 07

Juniper Networks Firewall / IPSEC VPN

Juniper Networks Inc.

http://www.juniper.net

o Complete line of firewall / VPN solutions for enterprises and service providers
o Protection from worms, Spyware, Trojans, and malware with a complete set of Unified Threat Management (UTM) security features including Stateful firewall, IPSec VPN, IPS, Antivirus (includes Anti-Spyware, Anti-Adware, Anti-Phishing), Anti-Spam, and Web Filter)
o Multiple management mechanisms including complete CLI, WebUI or centralized management via NetScreen Security-Manager facilitate rapid deployment while minimizing ongoing operational costs

The Juniper Networks family of purpose-built security solutions are designed to satisfy customer networking and security requirements that range from small branch office and telecommuter locations to high speed carrier and data center environments.

Commercial

Information updated: 08 March 07

NetGear ProSafe VPN Firewalls

NetGear

http://www.netgear.com

NETGEAR’s ProSafe business-class VPN Firewall routers deliver full network access between headquarter locations, remote/branch offices and telecommuters. All-in-one devices offer Stateful Packet Inspection (SPI) firewall, Virtual Private Network (VPN) intrusion detection/prevention, Network Address Translation (NAT), AES and 3DES Encryption, Denial of Service (DoS) protection. anti-spam policy enforcement (select models), content filtering and more.

Commercial

Information updated: 08 March 07

Network Box Series

Network Box Corporation

http://www.network-box.com

Network Box provides an enterprise security solution using best of breed technology; a complete Internet Threat Protection appliance that includes all the essential components required for computer security (firewall, intrusion detection and prevention, anti-virus, anti-spam, virtual private networking, content filtering).

Key Technology Components
Firewall - The Firewall provides an impenetrable wall to restrict access to your network to only authorised entry points.
IDP - The Intrusion Detection and Prevention System is a security guard that monitors the entry points to your network, and blocks malicious traffic and intrusion attempts.
VPN - The Virtual Private Network provides encyrpted and authenticated secure communication channels between offices and remote users.
Anti-Virus - The Anti-Virus System checks messages for malicious content and protects your network at the gateway.
Anti-Spam - The Anti-Spam System reduces the amount of junk spam received at your gateway, before it enters your network.
Content Filtering - The Content Filtering System imposes company policy on access to restricted content.

Additional Components Others - In addition to the six core technologies for protection of your computer network, the Network Box includes an array of other technologies to permit enterprises to maintain control of their Internet access policies.

A full range of Network Box models are available to support diverse performance and environmental requirements. These models are designated “S” for Small, “M” for Medium or “E” for Enterprise; and are designed to suit the typical workloads encountered in each organizational type. For example: The Network Box S-80 is designed for small offices. The Network Box M-380 is designed for medium sized offices. And the Network Box E-1000 is designed for enterprises.

The security software running, services available, and protection afforded by all models however, are identical. The differences between models are purely hardware features and performance. Network Boxes can also be easily combined into clusters, running in either high-availability (for redundancy against failure) or load-balancing (for sharing load) modes. Every Network Box is manufactured using quality components and offers an identical combination of world-class, best of breed security solutions.

Commercial

Information updated: 08 March 07

Reflex IPS Systems

Reflex Security Inc.

http://www.reflexsecurity.com

Reflex Security's award-winning Intrusion Prevention, Everywhere!™ solutions provide end-to-end enterprise network security at speeds up to 10 Gbps.

Next-generation Reflex IPS™ intrusion prevention solutions protect your network perimeter, multi-gigabit network core and virtualized server environments.
* Advanced Security: Integrated intrusion prevention, antivirus, security information management, network access control, network discovery, host quarantine and more.
* Easy to Use: Intuitive management and reporting tools maximize protection and manageability.
* High Performance: Appliances deliver network security at up to 10 Gbps.
* Reliable: High availability configurations and patent-pending Sentrium™ solid-state architecture provide rugged, dependable performance.
* Scalable: Solutions for global enterprise, branch office, institutional, single-site SMB and managed security service provider (MSSP) applications.

Commercial

Information updated: 12 March 07

RetiEdge

Reti Corporation

http://www.reticorp.com

The RetiEdge is an innovative USM device with a built-in Sensor that monitors and records network activities. It is an integrated IPS, Virus-Wall, VPN, and Firewall appliance that protects the network against any type of threat.

The RetiEdge supports up to one million concurrent sessions, more than 30,000 signatures, and Virus scanning with unlimited file sizes – all without slowing down the network. The virus scan is based on patent-pending technologies; its unparalleled ability to scan every TCP connection at high speeds surpasses all other UTM appliances in the market in addition to out performing them, in terms of, speed, number of signatures, and number of supported applications.

The RetiEdge provides the following features for Enterprise and SMB:
* Unique USM design incorporates the best of Security Management and UTM features; it is the only security appliance on the market that prevents as well as protects
* Integrated Firewall, VPN, IPS, and Anti-Virus offer comprehensive protection against viruses, attacks, and unauthorized access attempts
* Top speed Anti-Virus Scanning algorithms scan all TCP applications
* Built-in Sensors monitor all network activities for business auditing and protection
* High Availability ensures that business networks can resist failure and run without downtime
* Licensable software features allow users to adapt to fast-changing network requirements
* Flexible software upgrades reduce total cost of ownership
* Easy-to-use WebUI allows the start-up configuration to be completed within 10 minutes
* Transparent mode allows for easy integration into existing networks without topology changes or reconfigurations
* Open Architecture supports third party signatures, software add-ons, and third party applications

Commercial

Information updated: 12 March 07

SonicWall TZ and PRO Series Appliances

SonicWALL Inc.

http://www.sonicwall.com

SonicWALL's family of network security appliances combines robust security services with high-speed deep packet inspection to provide organizations of all size the best protection. SonicWALL TZ and PRO Series appliances are designed reduce cost, risk and complexity by integrating automated and dynamic security capabilities for comprehensive protection and maximum performance.

ADVANCED NETWORK SECURITY SERVICES - SonicWALL's layered approach to network security removes the burden and complication created by other solutions while providing a higher level of protection. Each SonicWALL network security appliance can be configured and customized with an expanding array of security services into a solution which will integrate seamlessly into any network while providing complete protection. Every appliance is capable of integrating support for gateway anti-virus, anti-spyware, intrusion prevention, enforced desktop anti-virus, content filtering, wireless security and more. SonicWALL appliances also intelligently enforce and dynamically update each of these services as new updates become available.

SECURE DISTRIBUTED NETWORKING AND REMOTE WORKERS
DEEP PACKET INSPECTION
ENTERPRISE CLASS MULTI-SERVICE SECURITY PLATFORM
SECURITY PLATFORM FOR HOME, SMALL AND REMOTE/BRANCH OFFICES
SIMPLE TO USE, SIMPLE TO MANAGE

Commercial

Information updated: 12 March 07

Nokia Firewall/VPN Appliance

Nokia

http://www.nokia.com

Protect and extend your network perimeter with a Firewall/VPN appliance from Nokia's comprehensive product suite. Each appliance offers a single, integrated solution and features:
* Market-leading VPN-1 Power or VPN-1 UTM software from Check Point Software Technologies
* Nokia IPSO™ - a proprietary and security-specific operating system
* A purpose-built, hardened Nokia platform

Commercial

Information updated: 12 March 07

ZyWALL UTM

ZyXEL Communications Corp.

http://www.zyxel.com

High-Performance 8-in-1 UTM Solution

The traditional way of installing multiple dedicated security devices for network protection is no longer practical in today’s complex network infrastructure and size. Although with multiple dedicated security appliances, you may pay a small price and quick fix to your problem in a short time. Still, you are faced with complicated compatibility issues with devices from various vendors and growing management blues. In short, corporate IT managers should consider ZyXEL’s approach of UTM (Unified Threat Management) solution for comprehensive security. With ZyXEL’s UTM Solution, you get amazing performance and solid protection with the following features in one integrated device:
1) Anti-Virus - Let ZyWALL UTM be the first line of defense and safeguard your network from annoying virus infections and malicious attacks with the built-in world-class Kaspersky anti-virus scanning engine.
2) IDP - Get proactive action against possible attacks with ZyWALL UTM’s intelligent IDP (Intrusion Detection and Prevention). Free yourself from 24/7 screen-staring monitor toil, let ZyWALL UTM do the job for you with real-time traffic inspection and block potential break-in attempts.
3) Anti-Spam - Reduce unsolicited e-mail and increase business productivity with ZyWALL UTM’s robust anti-spam function (powered by Mailshell). It allows you to block spam on the network edge and unburdens the load on your email servers.
4) Firewall - As the term implies, a firewall is used to stop any intrusion attacks or block unusual network traffic in your network.
5) VPN - Keep your remote network communication private with our VPN (Virtual Private Network). A VPN allows you to create secure connections between your branch offices, telecommutors or business partners and your headquarters.
6) Load Balancing - Afraid of over-loading one dedicated network connection? ZyXEL’s flexible load balancing features come to your call. You can share traffic load between ports and get the reliable network performance you want.
7) Bandwidth Management - No more resource-hogging or bandwidth cruching moments with ZyXEL’s flexible load balancing features. Now you can divide bandwidth according to your application needs and keep every user and customer happy.
8) Content Filtering - Curb those unruly web surfing with ZyXEL’s top-notched content filtering feature. Partner with world-class BlueCoat content filtering service provider, you finally block access to non-work related or questionable websites and increase business productivity.

Commercial

Information updated: 12 March 07

Arkoon Fast360 UTM Appliance

Arkoon Network Security

http://www.arkoon.net

Arkoon Fast360 UTM appliances are designed to provide maximum performance while protecting your network from the widest range of threats. Based on Arkoon’s patented FAST® (Fast Applicative Security Technology), Fast360 appliances integrate in-line intrusion detection and prevention, antivirus, antispam, url filtering, application-layer firewalling and more.

* A10/A20/A50 SERIES : Targeted at the smaller businesses and branch offices of larger corporations; include optional ADSL or ISDN connectivity.
* A200/A500/A800 SERIES : Mid-range appliances with higher performance (up to 430Mbps throughput) and extended connectivity for larger businesses and campus connectivity.
* A2000/A5000 SERIES : No compromise high performance, high connectivity appliances for enterprise datacenter and backbone protection. Up to 2Gbps throughput, fiber or copper Gigabit Ethernet options.

Arkoon Fast360 appliances are Common Criteria certified at level EAL2+.

Commercial

Information updated: 12 March 07

Funkwerk UTM Solutions

Funkwerk Enterprise Communications GmbH

http://www.funkwerk-ec.com

The Funkwerk UTM product family – perfect security for every application
Attacks and threats have become increasingly diverse over recent years. The times when firewalls and virus scanners were sufficient to build security solutions are now history. Thanks to Funkwerk UTM, however, comprehensive protection at the gateway does not need to be complex or involve numerous different systems. The new Funkwerk UTM technology is able to identify the various attacks and threats and specifically blocks them without impairing communication. Funkwerk UTM combines centralized remote administration with fine-tuned security components to boost security. It is easy to use and thereby dramatically reduces investment and running costs.
* Stateful Inspection Firewall and Application Level Gateway
* Intrusion Prevention
* Gateway Virus Scanner
* Spam Filter
* IPSec, PPTP, L2TP VPN Gateway
* Auto-Prevention
* Automatic security and software update
* Simple-to-use management interface
* Easy Configuration and Administration
* Setup Wizard

Commercial

Information updated: 12 March 07

BroadScan

SOHOware Inc.

http://www.sohoware.com

BroadScan™ changes the way all-in-one security works. No more subscription fees and add-on option charges to obtain a fully functional solution. BroadScan™ appliances offer business-class Spam, virus and Spyware filtering with automatic real-time updates included. Plus, BroadScan™ integrates Firewall, IDS/IPS, content filtering, policy control, VPN, Radius authentication and much more. For small and medium business, an integrated security appliance is recognized as the most cost efficient way to implement and manage a total security strategy, and BroadScan™ is the first solution to offer a no fees added approach to security minded VARs.

Commercial

Information updated: 12 March 07

ESS - Enterprise Security System

Centipede Networks

http://www.centipedenetworks.com/

The ESS (Enterprise Security System) is an all-in-one Internet security appliance. The product was developed to create a platform that is not only robust with essential features but also easy to use.
The core features of the ESS include a Firewall, Content Filter, Spam & Virus Filter, Centralized Management and Reports.

The ESS has a very friendly user interface, selectable modules, multiple levels of administrator rights, detailed reporting, DHCP administration, administrative email notifications as well as remote backup and restore.

Commercial

Information updated: 21 June 07

Last page update:  21 June 2007