OSIgate Firewall

OPNSense Firmware

1sthost@tops.hk (Administrator) — Mon, 11 Dec 2017 18:06:26 +0000

OPNsense firmware is an NEXT Generation firewall and router distribution based on hardenBSD that is functionally competitive with expensive, proprietary commercial firewalls.

OPNSense software-based appliances can be configured as a stateful packet filtering firewall, a LAN or WAN router, VPN Appliance, DHCP Server, DNS Server, or can be configured for other applications and special purpose appliances. This next generation pfSense security appliance features include:

Stateful packet filtering firewall or pure router
Routing policy per gateway and per-rule for failover and load balancing
Transparent layer 2 firewall
Support for IPV6, NAT, BGP
Captive portal with MAC filtering, RADIUS support, etc
VPN: IPsec, OpenVPN, L2TP
Dynamic DNS client
Reporting and monitoring features with real time information

Overview

Configuration

How you configure the pfSense software is largely dependant on the needs you're trying to meet.

If you need professional assistance configuring your deployment, you can use our commercial support and local implementation to help get you up and running.

OPNsense Firmware Features

OPNsense is a highly configurable, full-featured solution that meets any need from the edge to the cloud.

Applications

VPN Server
High Availability
Load Balancing
Traffic Shaping

Captive Portal
UTM Device
Firewall / Router
DNS / DHCP Server

IDS / IPS
Transparent Caching Proxy
Web Content Filter
And more ...

Features

Firewall and Router

Stateful Packet Inspection (SPI)
GeoIP blocking
Anti-Spoofing
Time based rules
Connection limits
Dynamic DNS
Reverse proxy
Captive portal guest network
Supports concurrent IPv4 and IPv6
NAT mapping (inbound/outbound)
VLAN support (802.1q)
Configurable static routing
IPv6 network prefix translation
IPv6 router advertisements
Multiple IP addresses per interface
DHCP server
DNS forwarding
Wake-on-LAN
PPPoE Server

VPN

IPsec and OpenVPN
Site-to-site and remote access VPN support
SSL encryption
VPN client for multiple operating systems
L2TP/IPsec for mobile devices
Multi-WAN for failover
IPv6 support
Split tunneling
Multiple tunnels
VPN tunnel failover
NAT support
Automatic or custom routing
Local user authentication or RADIUS/LDAP

Intrusion Prevention System

Snort-based packet analyzer
Multiple rules sources and categories
Emerging threats database
IP blacklist database
Pre-set rule profiles
Per-interface configuration
Suppressing false positive alerts
Deep Packet Inspection (DPI)
Optional open-source packages for application blocking

Enterprise Reliability

Optional multi-node High Availability Clustering
Multi-WAN load balancing
Automatic connection failover
Bandwidth throttling
Traffic shaping wizard
Reserve or restrict bandwidth based on traffic priority
Fair sharing bandwidth
User data transfer quotas

User Authentication

Local user and group database
User and group-based privileges
Optional automatic account expiration
External RADIUS authentication
Automatic lockout after repeated attempts

Proxy and Content Filtering

HTTP and HTTPS proxy
Non Transparent or Transparent caching proxy
Domain/URL filtering
Anti-virus filtering
SafeSearch for search engines
HTTPS URL and content screening
Website access reporting
Domain Name blacklisting (DNSBL)
Usage reporting for daily, monthly, etc.

Administration

Configuration

Web-based configuration
Setup wizard for initial configuration
Remote web-based administration
Customizable dashboard
Easy configuration backup/restore
Configuration export/import
Encrypted automatic backup to Netgate server
Variable level administrative rights
Multi-language support
Simple updates
Forward-compatible configuration
Serial console for shell access and recovery options

System Security

Web interface security protection
CSRF protection
HTTP Referer enforcement
DNS Rebinding protection
HTTP Strict Transport Security
Frame protection
Optional key-based SSH access

Reporting & Monitoring

Dashboard with configurable widgets
Local logging
Remote logging
Local monitoring graphs
Real-time interface traffic graphs
SNMP monitoring
Notifications via web interface, SMTP, or Growl
Hardware monitoring
Networking diagnostic tools

OSIgate 5000i

1sthost@tops.hk (Administrator) — Mon, 11 Dec 2017 09:02:40 +0000

The OSIgate 5000i Security Gateway Appliance can be configured as a firewall, LAN or WAN router, VPN appliance, DHCP Server, DNS Server, and IDS/IPS with optional packages to deliver a high performance, high throughput front-line security appliance at an excellent price in a compact footprint. With preloaded pfSense software, the OSIgate 5000i is a fast networking security solution unencumbered by traditional annual contracts, licensing fees, or artificial limitations.

Firewall Features

OSIgate firewall OPNsense edition and router distribution based on HardenBSD that is functionally competitive with expensive, proprietary commercial firewalls. pfSense software-based appliances can be configured as a stateful packet filtering firewall, a LAN or WAN router, VPN Appliance, DHCP Server, DNS Server, or can be configured for other applications and special purpose appliances. This next generation pfSense security appliance features include:

Stateful packet filtering firewall or pure router
Routing policy per gateway and per-rule for failover and load balancing
Transparent layer 2 firewall
Support for IPV6, NAT, BGP
Captive portal with MAC filtering, RADIUS support, etc
VPN: IPsec, OpenVPN, L2TP
Dynamic DNS client
Reporting and monitoring features with real time information

Technical Specifications

CPU	Intel 3865 1.8G Dual Core, Low power consumption CPU
CPU Cores	2
Memory Options	2GB
Storage Options	32GB SSD
Network Interfaces	6 x Intel 1GbE, configured as dual WAN or one WAN one LAN

USB Ports	2x 2.0 USB, 2x 3.0USB
Console Port	VGA
Max Active Connections	2 Million
Power	External ITE P/S AC/DC 100-240V, 50-60 Hz, 12V 2AA
Case	Desktop case
Dimensions	1.56" tall x 7" deep x 8" wide
Cooling	Passive, Industrial fanless cooling
Operating Temperature	0°C (32°F) to 65°C (149°F)
Hardware Warranty	12 Months
Certifications	CE, FCC, RoHS, UL
Power Consumption	5W (idle)
Support Options	Local installation, setup, local support, Onsite and Remote support

Traditional firewall can only defense Layer 2~4, OSIgate can defense Layers 2 to 7

OSIgate NDS-5000

1sthost@tops.hk (Administrator) — Mon, 11 Dec 2017 09:02:40 +0000

The OSIgate NDS-5000 Security Gateway Appliance can be configured as a firewall, LAN or WAN router, VPN appliance, DHCP Server, DNS Server, and IDS/IPS with optional packages to deliver a high performance, high throughput front-line security appliance at an excellent price in a compact footprint. With preloaded pfSense software, the OSIgate NDS-5000 is a fast networking security solution unencumbered by traditional annual contracts, licensing fees, or artificial limitations.

Firewall Features

Stateful packet filtering firewall or pure router
Routing policy per gateway and per-rule for failover and load balancing
Transparent layer 2 firewall
Support for IPV6, NAT, BGP
Captive portal with MAC filtering, RADIUS support, etc
VPN: IPsec, OpenVPN, L2TP
Dynamic DNS client
Reporting and monitoring features with real time information

Technical Specifications

CPU	Intel 3865 1.8G Dual Core, Low power consumption CPU
CPU Cores	2
Memory Options	4GB
Storage Options	32GB SSD
Network Interfaces	6 x Intel 1GbE, configured as dual WAN or one WAN one LAN

USB Ports	2x 2.0 USB, 2x 3.0USB
Console Port	VGA
Max Active Connections	3 Million
Power	Internet AC/DC 100-240V, 50-60 Hz, 12V 4A
Case	1U rack mount case
Dimensions	430mm x 50mm x 250mm
Cooling	Active temperture senior Cooling fan
Operating Temperature	0°C (32°F) to 65°C (149°F)
Hardware Warranty	12 Months
Certifications	CE, FCC, RoHS, UL
Power Consumption	5W (idle)
Support Options	Local installation, setup, local support, Onsite and Remote support

Traditional firewall can only defense Layer 2~4, OSIgate can defense Layers 2 to 7

OSIgate 6000i

1sthost@tops.hk (Administrator) — Mon, 11 Dec 2017 09:02:40 +0000

The OSIgate 6000i Security Gateway Appliance can be configured as a firewall, LAN or WAN router, VPN appliance, DHCP Server, DNS Server, and IDS/IPS with optional packages to deliver a high performance, high throughput front-line security appliance at an excellent price in a compact footprint. With preloaded pfSense software, the OSIgate 6000i is a fast networking security solution unencumbered by traditional annual contracts, licensing fees, or artificial limitations.

Firewall Features

Stateful packet filtering firewall or pure router
Routing policy per gateway and per-rule for failover and load balancing
Transparent layer 2 firewall
Support for IPV6, NAT, BGP
Captive portal with MAC filtering, RADIUS support, etc
VPN: IPsec, OpenVPN, L2TP
Dynamic DNS client
Reporting and monitoring features with real time information

Technical Specifications

CPU	Intel 4205 2.4 Quad Core, Low power consumption CPU
CPU Cores	4
Memory Options	4GB
Storage Options	64GB SSD
Network Interfaces	4 x Intel 1GbE, configured as dual WAN or one WAN one LAN, 1 realtek HA port

USB Ports	2x 2.0 USB, 2x 3.0USB
Console Port	VGA
Max Active Connections	4 Million
Power	External ITE P/S AC/DC 100-240V, 50-60 Hz, 12V 2A
Case	Desktop case
Dimensions	1.56" tall x 7" deep x 8" wide
Cooling	Passive, Industrial fanless cooling
Operating Temperature	0°C (32°F) to 65°C (149°F)
Hardware Warranty	12 Months
Certifications	CE, FCC, RoHS, UL
Power Consumption	5W (idle)
Support Options	Local installation, setup, local support, Onsite and Remote support

Traditional firewall can only defense Layer 2~4, OSIgate can defense Layers 2 to 7

SDWAN optimizer

1sthost@tops.hk (Web master) — Wed, 12 May 2004 11:54:06 +0000

Reduce bandwidth cost and Accelerate Internet application

20%~200% speeds up after SDWAN Optimization.

**by using Packet Compression, Packet Correction, Packets Deduplication, Packet cache, Software Define WAN (similiar as lease line), gain 20%~200% Bandwidth.**