Kerio Control, previously known as Kerio WinRoute Firewall provides multi-layered security architecture designed for make safe environments, servers and users in the network.
By integrating Firewall, VPN, antivirus and content filtering, Kerio lets administrators to protect their networks by allowing both branch offices and employees working remotely to connect safely and with maximum reliability.
Safe Firewall e VPN
Stateful network Firewall
Kerio Control, certified by ICSA Labs, provides a detailed definition of the rules to perform stateful inspection and protocol of all Internet traffic entering and leaving. A guide to the rules of the network will assist you in the rapid installation of the Firewall.
Policy on Traffic
The security is based on traffic rules, which allow you to configure, with the highest simplicity, packet filtering, the NAR (Network Address Translation), port mapping and access control from a full table. Before connecting to Internet, it is possible that each network user is prompted to log into Kerio Control. This allows you to apply a restrictive security and access policies within the parameters of the user, rather than by IP address.
VPN Gateway
Fully integrated into Kerio Control, VPN Gateway, based on SSL technology, can be configured very easily to create VPN tunnels, as a client-to-server and server-to-server mode. This flexibility allows both networks of branches and to individual users working remotely, connect to the corporate LAN with extreme security and ease.
Kerio VPN Client
Using SSL encryption, Kerio VPN Client for Windows provides a secure and instantaneous remote access to corporate network resources. After a simple installation process, Windows users will find themselves just one click from own files shared on the network or corporate intranet.
User Management
The main action for proper maintenance of a secure network environment is the management of policies for access to the Internet. Kerio Control allows the administrator to create not only the general rules of traffic to and from Internet but also to define restrictions for each user on the local network.
Defining users
With Kerio Control, users are considered:
-
recognized individual users with username and password,
-
groups of users,
-
IP addresses, groups of IP, host names,
-
entire networks
Users can be forced to authentication on Kerio Control, to gain access to Internet (or any external resource to their the local network).
Managing users through internal database and MS Active Directory
The data may be stored and managed both by the internal database of Kerio Control, and through a local or remote Microsoft Active Directory server. You can also configure mixed situations.
Introduced with Windows 2000 Server, Active Directory allows administrators to manage information about users and network resources, centrally and shared. Active Directory also allows different services to access the same information.
The support of Active Directory allows Kerio Control to access to the database of users in real time and, therefore, the authentication of users without their passwords should be stored locally. This eliminates the usual problems of synchronization of passwords or user-group associations. Any change in Microsoft Active Directory is automatically acquired by Kerio Control.
Transparent Active Directory
Kerio Control provides the administrator, who must manage multiple local domains, the ability to manage users in a transparent manner. Instead of having to manually import the accounts in Kerio Control database, the administrator, with Transparent Active Directory, uses in a transparent way the accounts of the various domains, which are automatically recognized by the firewall.
When a domain is correctly configured, users belonging to that domain are automatically seen by Kerio Control and the administrator can define, for each of them, the most appropriate access rules and filters on the contents.
Management of access rights
The administrator can assign or revoke specific rights for each user. For example, some users may have access only to determined websites, while others may only use the e-mail service. These rights could also be valid only during certain periods of time.
Controlling traffic volumes per user
Some people use the network to download files, listen to radio broadcasts and share videos ... Excessive use of resources by a few users, as well as generating often high cost, has the effect of a drastic reduction in resources available to all the others.
In these cases, prevention is the best strategy. The administrator can specify the following settings for each user:
-
traffic limit in upload and download
-
daily or monthly traffic limits
-
combination of limits on direction / period.
When the limit is reached, Kerio Control send an e-mail alert to the user and administrator, who may also decide, in the setting of limits, to block user traffic for the rest of the day or of the month.
Content control
Antivirus Gateway
Kerio Control offers an optional gateway anti-virus scanning of incoming and outgoing mail (POP3, SMTP) and web traffic (HTTP, FTP), protecting against viruses, worms and other malicious programs. With the antivirus installed on the perimeter network, Kerio Control ensures scanning all Internet traffic.
Virus protection with dual control
With two different anti-virus controls operating simultaneously, Kerio Control offrfe double protection against viruses. The integrated Sophos antivirus can work alone or together with the Eset antivirus, CA, Alwil, VisNetic or Clam AV.
Content Filters
Kerio Control offers multiple contents security features, such as blocking the download of music in MP3 format, filtering for potentially dangerous executable files or blocking of annoying pop-ups.
Control peer-to-peer
With Kerio Control administrators can manage the use of P2P applications to improve network usage, enhance security and protect against legal liability.
Surf Protection
With the Web Filter, Kerio Control prevents users from accessing unsuitable content. Thanks to the management of the network according to specific criteria for the user, administrators can assign each user the specific restrictions of access to the web. The database is updated continuously, divided into 58 different categories of content and contains well over 50 million URLs with more than 2.6 billion ranked web pages.
Statistics and reporting
Access to on-demand reporting can be done from any web browser by administrators, managers and company owners to view the Internet activity of users such as: the most visited websites, the used protocols and the use of bandwidth. The statistics are displayed in graphic charts to permit identification of the abuse on the use of the Internet, to locate bottlenecks and to map other problems in the network.
Restriction of bandwidth
The limitation of bandwidth allows Kerio Control to provide optimal data for interactive applications or business critical applications such as VoIP.
Administrators can block users who download files that are too heavy to ensure that others are not damaged.
Alternatively, the limitation of bandwidth can slow down the use of the Internet for all users who exceed their configured daily or monthly quotas.
Lines Binding
With Kerio Control we can use multiple connections simultaneously, balancing between the lines or by specifying the delivery of a given protocol to a specific connection.
Who is online