The Simplest and Most Secure UTM Available. Secure everything. BYOD & Hotspot: Network Security: Endian Network All-in-one full UTM hardware,

Size: px

Start display at page:

Download "The Simplest and Most Secure UTM Available. Secure everything. BYOD & Hotspot: Network Security: Endian Network All-in-one full UTM hardware,"

Frederica Walker
6 years ago
Views:

Secure everything The Simplest and Most Secure UTM Available Network Security: BYOD & Hotspot: Quick & Easy Setup: Endian Network All-in-one full UTM hardware, Provide secure

1 Secure everything The Simplest and Most Secure UTM Available Network Security: BYOD & Hotspot: Quick & Easy Setup: Endian Network All-in-one full UTM hardware, Provide secure and simple Get your network protected Endian s centralized software and virtual appli- Internet access for guests in a matter of minutes. management portal ances. and coworkers.

About Endian Founded in Appiano, Italy in 2003 by a team of experienced network specialists and security enthusiasts.

2 Endian s mission is to protect global communication networks and provide secure information access to anyone. We help companies meet these challenges by providing an appliancebased architecture for network protection and for network management that is easy to buy, easy to own and easy to use. About Endian Founded in Appiano, Italy in 2003 by a team of experienced network specialists and security enthusiasts. Endian s goal is clear: Develop the world s most powerful and easy-to-use Open Source Unified Threat Management system. With over 1.7 million users of the Community Edition and thousands of installations of the professional product in over 50 countries, Endian continues to deliver on its mission! The number of Internet-connected devices is growing at an incredible rate every day in both the business and consumer markets. Endian understands that each of these appliances becomes exposed to millions of potential threats the minute it s connected. Our solution set is unique in that it can provide a comprehensive security layer combined with a unique level of simplicity within the IoT industry. This can offer a tremendous value to businesses in terms of protecting their employees and users as well as enabling the creation of new service and support platforms that can save costs and drive revenue.

Unified Threat Management (UTM) A Unified Threat Management (UTM) appliance is an all-inclusive product able to deliver multiple security fuctionalities within one single system.

Endian UTM Network Security Solutions Endian security appliances are easy to use, all-in-one products: no extra module has to be added to guarantee maximum protection to your network.

3 Unified Threat Management (UTM) A Unified Threat Management (UTM) appliance is an all-inclusive product able to deliver multiple security fuctionalities within one single system. This approach allows to centrally manage all the needed services, including firewall, IPS/IDS, VPN, web and mail security. Endian UTM Network Security Solutions Endian security appliances are easy to use, all-in-one products: no extra module has to be added to guarantee maximum protection to your network. In order to offer to our customers even more, an advanced hotspot service is included in every appliance. Endian gateways are available as hardware, software or virtual appliances. Hardware Appliance A complete range of specifically designed appliances integrating our UTM software for everyone s security needs, from branch offices and industrial facilities to large networks. Virtual Appliance Protect your virtual networks and infrastructure in seconds. Support for all leading virtualization paltforms (VMware, Xen/XenServer, Hyper-V, KVM). Software Appliance Turn your favorite or existing hardware into a full-featured Endian UTM appliance. Scale your hardware resources up or down to suite your business network needs.

Endian UTM Using Endian UTM, your setup time is only a matter of minutes and with our intuitive web-based interface you can greatly reduce your network management time and costs.

Endian s Hotspot solution can help protect those networks and offer valuable Internet access-all while maximizing their potential value to your business.

Centralized Management and Updates Endian Network is a free cloud-based, centralized management portal for secure remote access to all your Endian hardware, software and virtual

A simple setup process and user-friendly web interface make managing, selling and supporting Endian a breeze.

Our UTM solution provides both secure site-to-site and remote access (road warrior) connectivity options that are sure to meet your needs.

4 Endian UTM Using Endian UTM, your setup time is only a matter of minutes and with our intuitive web-based interface you can greatly reduce your network management time and costs. Protect and connect your network so you can get back to focusing on your business. Wi-Fi and Bring Your Own Device (BYOD) Are you getting the most from your WIFI or guest networks? Endian s Hotspot solution can help protect those networks and offer valuable Internet access-all while maximizing their potential value to your business. Utilizing the Hotspot, you can collect user information and manage your guest network traffic so that your business can benefit from those resources. Centralized Management and Updates Endian Network is a free cloud-based, centralized management portal for secure remote access to all your Endian hardware, software and virtual appliances. This unified solution allows you to access, monitor, update and upgrade your Endian appliances. A simple setup process and user-friendly web interface make managing, selling and supporting Endian a breeze. Secure Remote Access Business happens everywhere and you need a solution to allow your business to stay connected and be protected from network threats. Our UTM solution provides both secure site-to-site and remote access (road warrior) connectivity options that are sure to meet your needs. In addition, our solution delivers strong access control and encryption which can help minimize data loss and/ or inappropriate access. Application Control Take control of the network by properly managing time-wasting, high bandwidth or non-business applications like Skype, WhatsApp, Dropbox, Facebook, Twitter and over 150 more. Endian makes it simple to manage applications on your network with just a few clicks, increasing productivity has never been easier.

Mail and Web Security Protect your employees from web and email threats like viruses, malware, phishing, spam and even policy violations and in the process increase productivity.

Our email filtering stops spam and viruses in their tracks and keeps your mail servers and users protected.

If not, your business could be losing valuable time and money.

Event Management The event notification engine was completely rewritten from the ground up to provide more advanced features and all new notification capabilities.

In addition, we ve added multiple notification options that include the ability to be notified via email or SMS or even have the system run a custom script upon an event occurring.

5 Mail and Web Security Protect your employees from web and threats like viruses, malware, phishing, spam and even policy violations and in the process increase productivity. Complete web security provides over 100+ million categorized URL and domains. Flexible web policies allow you to build rules based on users, groups, date, time and much more. Our filtering stops spam and viruses in their tracks and keeps your mail servers and users protected. Live Network Monitoring and Reporting Do you know what s happening on your network? Can you identify what users are doing and which applications they are using? If not, your business could be losing valuable time and money. Our solution provides intuitive real-time and historical traffic monitoring along with management reports including web, , security activity and more. Event Management The event notification engine was completely rewritten from the ground up to provide more advanced features and all new notification capabilities. Now you can keep track of things like IPsec and SSL VPN user activity (login/logout), errors and much more. In addition, we ve added multiple notification options that include the ability to be notified via or SMS or even have the system run a custom script upon an event occurring. Advanced Content Security Advanced Content Security is a powerful security bundle designed to enhance Endian s malware signature database for more comprehensive threat awareness. It includes: CYREN URL Filtering that by using predictive detection technology, can recognize harmful sites before users are exposed to them, CYREN Anti-Spam that makes Endian able to respond to threats within a couple of seconds while delivering the lowest false positives rate possible and Panda Anti-Virus, which helps Endian to provide maximum anti-virus protection.

6 Endian UTM Mini 10 The Mini 10 is based on the EndianOS platform, which guarantees high performance, stability and flexibility to the appliance. The Mini 10 provides a high, out-of-the box security level. It is a small but powerful, easy to install and to maintain security gateway that shows its full strength in subsidiaries and companies with many departments. Thanks to the integrated WiFi technology mobile devices can directly connect to the network. 4 Ports 2 GB RAM 8 GB Memory Desktop Appliance WIFI Upgrade Available Endian UTM Mini 25 The ideal network security solution for small businesses and remote branch office locations takes a step forward. The new set and forget Endian gateway is built on a completely new platform and has double the power of the previous generation. Endian UTM Mini 25 WiFi This product offers a complete set of UTM features including a powerful hotspot solution that when utilized with our WIFI option makes this the only SMB solution you need to connect and protect your small business network. 4 Ports 2 GB RAM 16 GB Memory Desktop Appliance WIFI Upgrade Available

Endian UTM Mercury 50 Conceived to handle the processing of heavy Internet traffic, emails and VPN connections to branch offices, the Mercury 50 is the

This high-performance appliance provides Endian s best-in-class security features to midsize organizations.

5 Ports 4 GB RAM 320 GB Hard Disk Desktop Appliance Endian UTM Mercury 100 Fast, flexible and easy to use.

7 Endian UTM Mercury 50 Conceived to handle the processing of heavy Internet traffic, s and VPN connections to branch offices, the Mercury 50 is the ideal scalable solution to support your network growth. This high-performance appliance provides Endian s best-in-class security features to midsize organizations. The complete set of Unified Threat Management functionalities in combination with advanced hotspot gives you the most comprehensive features available. 5 Ports 4 GB RAM 320 GB Hard Disk Desktop Appliance Endian UTM Mercury 100 Fast, flexible and easy to use. The Mercury 100 guarantees high security standards combined with the globally recognized Endian Hotspot technology. Application level filters, anti-virus, anti-spam, web filtering, VPN functionality and much more create a complete and reliable shield for your network from all internal and external threats. 6 Ports 4 GB RAM 2x320 GB Hard Disk LAN-Bypass Rack 1U

Endian UTM Macro 250 and 500 Large organizations and distributed enterprises often experience critical security issues.

The Macro 250 and 500 offer integrated security services such as stateful inspection firewall, VPN, gateway anti-virus, anti-spam, web and email content filtering as well as a

8 Ports 4 / 8 GB RAM 2x320 / 2x500 GB Hard Disk LAN-Bypass Rack 1U Endian UTM Macro 1000 and 2500 Discover the new powerful Endian appliances equipped with twice the memory

8 Endian UTM Macro 250 and 500 Large organizations and distributed enterprises often experience critical security issues. To constantly keep the protection at a high level the support of a reliable hardware appliance is needed. The Macro 250 and 500 offer integrated security services such as stateful inspection firewall, VPN, gateway anti-virus, anti-spam, web and content filtering as well as a powerful hotspot in a single product. 8 Ports 4 / 8 GB RAM 2x320 / 2x500 GB Hard Disk LAN-Bypass Rack 1U Endian UTM Macro 1000 and 2500 Discover the new powerful Endian appliances equipped with twice the memory and the latest multi-core processor technology to boost your network performance. The Macro 1000 and 2500 are the ideal gateways to manage and filter the traffic of the most demanding networks. These high-performance hardware appliances are specially conceived to offer a great combination of performance and protection to large enterprises. 10/18 Ports 16/32 GB RAM 2x500/2x1000 GB Hard Disk LAN-Bypass Rack 2U 2x 10Gigabit SFP+ (optional)

9 Endian UTM Hardware Comparison Performance Mini 10 Mini 10 WiFi Mini 25 Mini 25 WiFi Mercury 50 Mercury 100 Macro 250 Macro 500 Macro 1000 Macro 2500 Firewall Throughput 1 Gbit/s 1,5 Gbit/s 3.0 Gbit/s 3.5 Gbit/s 5.5 Gbit/s 10 Gbit/s 20 Gbit/s 30 Gbit/s VPN Throughput (IPsec & SSL) 50 Mbit/s 120 Mbit/s 300 Mbit/s 320 Mbit/s 900 Mbit/s 1.4 Gbit/s 2.5 Gbit/s 4 Gbit/s IPS Throughput 120 Mbit/s 150 Mbit/s 320 Mbit/s 350 Mbit/s 1.5 Gbit/s 2.2 Gbit/s 3.5 Gbit/s 6 Gbit/s Antivirus Throughput (Proxy) 90 Mbit/s 175 Mbit/s 500 Mbit/s 600 Mbit/s 1.8 Gbit/s 3.1 Gbit/s 4.5 Gbit/s 7 Gbit/s Web Security Throughput 250 Mbit/s 400 Mbit/s 1.0 Gbit/s 1.2 Gbit/s 5 Gbit/s 6 Gbit/s 10 Gbit/s 20 Gbit/s Concurrent Sessions 300, , , ,000 1,500,000 2,500,000 2,500,000 5,000,000 Max Concurrent Hotspot Connections - 30 Unlimited Unlimited Unlimited Unlimited Unlimited Unlimited Hardware Mini 10 Mini 10 WiFi Mini 25 Mini 25 WiFi Mercury 50 Mercury 100 Macro 250 Macro 500 Macro 1000 Macro 2500 Case Desktop Desktop Desktop Rack 1U Rack 1U Rack 1U Rack 2U Rack 2U Dimensions (mm) 44 x 232 x x 232 x x 245 x x 430 x x 430 x x 430 x x 430 x x 430 x 580 Weight 1.1 kg 1.1 kg 2 kg 5 kg 8 kg 8 kg 19 kg 19 kg Memory 2 GB 2 GB 4 GB 4 GB 4 GB 8 GB 16 GB 32 GB Storage 8 GB 16 GB 320 GB HDD 2x 320 GB HDD Raid 2x 320 GB HDD Raid 2x 500 GB HDD Raid 2x 500 GB HDD Raid 2x 1 TB HDD Raid Networking 4x Gigabit 4x Gigabit 5x Gigabit 6x Gigabit 8x Gigabit 8x Gigabit 10x Gigabit 2x 10Gigabit SFP+ (optional) 18x Gigabit 2x 10Gigabit SFP+ (optional) LAN Bypass Pairs 4 Pairs 4 Pairs 4 Pairs 8 Pairs Power Supply 40W External 40W External 60W External 65W Internal 250W Internal 250W Internal 2x 460W Internal Redundant 2x 460W Internal Redundant Cooling Fans Fans Fans Fans Fans Fans Fans Fans LCD Display Yes Yes Yes Yes Yes VGA Yes Yes Yes Yes Yes Hardware Warranty Certifications

10 Software Solutions Turn any PC into a Unified Threat Management Appliance The software appliance is ideal for those who are looking to leverage existing hardware (x86_64) for their networking and security needs. The product functionality is identical to our hardware appliances so no tradeoffs required. The Endian UTM Software Appliance offers the same technology that resides in the Endian Unified Threat Management (UTM) hardware appliances, thus making it possible to turn any PC into a full featured security appliance. Unleash the power of Endian UTM using your preferred hardware to enable comprehensive security for your whole network infrastructure. Integrated security services such as stateful inspection firewall, VPN, gateway anti-virus, anti-spam, Web security, and content filtering offer granular protection in a single system, hence reducing management time and costs. System Requirements CPU Multi-Processor RAM Disk Software RAID Hardware RAID CD-ROM Network Cards Monitor Keyboard Operating System Intel x86_64 compatible / 1GHz minimum (dual-core 2 GHz recommended) Symmetric Multi-Processor (SMP) support included 2 GB minimum (4 GB recommended) SCSI, SATA, SAS or IDE disk is required (8GB minimum 20GB recommended) For software RAID1 (mirroring) two disks of the same type are required (capacity can be different) SCSI and SAS RAID systems and controllers are supported An IDE, SCSI or USB CDROM drive is required for installation (not required after installation) Most common Network Interface Cards are supported including Gigabit and fiber NICs Only required for the installation but not for configuration and use Endian UTM includes a hardened Linux-based Operating System Virtual Cloud Solutions Secure and Protect your Virtual Infrastructure Protect your virtual infrastructure from any potential threat with Endian s cutting-edge network security! Whether you are securing your internal virtual business environment, running a world-class hosting or colocation facility, or providing cloud services the Endian UTM Virtual Appliance can provide superior network security to protect your virtual infrastructure from any potential threats. System Requirements CPU Multi-Processor RAM Disk CD-ROM Network Cards Operating System Hypervisors Intel x86_64 compatible / 1 GHz minimum (dual-core 2 GHz recommended) Symmetric Multi-Processor (SMP) support included 2 GB minimum (4 GB recommended) Support for full virtualization and paravirtualization / 8GB minimum (20 GB recommended) Physical and virtual drives as supported by the hypervisor Support for full virtualization and paravirtualization Endian UTM includes a hardened Linux-based Operating System

Endian Network: Check the status of your appliances and verify that the is active Let Endian technical support remotely access your machines Download upgrades and security updates in a

Endian hardware, software and virtual appliances. This unified solution allows you to access, monitor, update and upgrade your Endian appliances.

11 Endian Network: Check the status of your appliances and verify that the is active Let Endian technical support remotely access your machines Download upgrades and security updates in a single click Endian Network Endian s free centralized management platform Endian Network is a free cloud-based, centralized management portal for secure remote access to all your Endian hardware, software and virtual appliances. This unified solution allows you to access, monitor, update and upgrade your Endian appliances. A simple setup process and a user-friendly web interface will help you in managing, selling and supporting Endian products. Real-time status update of your appliances Remote access Centralized updates and upgrades Remote support

12 Endian UTM Features Network Security Stateful packet firewall Application control (including Facebook, Twitter, Skype, WhatsApp and more) Demilitarized zone (DMZ) Intrusion detection and prevention Multiple public IP addresses Multiple WAN NEW Quality of service and bandwidth management SNMP support VoIP/SIP support SYN/ICMP flood protection VLAN support (IEEE 802.1Q trunking) DNS proxy/routing Anti-spyware Phishing protection Web Security HTTP & FTP proxies HTTPS filtering Transparent proxy support URL blacklist Authentication: Local, RADIUS, LDAP, Active Directory NTLM single sign-on Group-based and user-based web content filter Time based access control with multiple time intervals Panda cloud-based anti-virus Cyren URL filter SafeSearch enforcement Mail Security SMTP & POP3 proxies Anti-spam with bayes, pattern and SPF Heuristics, black- and whitelists support Anti-virus Transparent proxy support quarantine management Spam auto-learning Transparent mail forwarding (BCC) Greylisting Cyren anti-spam Panda cloud-based anti-virus WAN Failover Automatic WAN uplink failover Monitoring of WAN uplinks Uplink types: (static/dhcp), PPPoE, PPTP NEW Support for UMTS/GPRS/3G USB dongles User Authentication Active Directory / NTLM LDAP RADIUS Local Virtual Private Networking IPsec Encryption: Null, 3DES, CAST-128, AES 128/192/256-bit, Blowfish 128/192/256-bit, Twofish 128/192/256-bit, Serpent 128/192/256-bit, Camellia 128/192/256-bit Hash algorithms: MD5, SHA1, SHA2 256/384/512-bit, AESXCBC Diffie Hellman modes: 1, 2, 5, 14, 15, 16, 17, 18, 22, 23, 24 Authentication: pre-shared key (PSK), RSA keys X.509 certificates IKEv1, IKEv2 Dead Peer Detection (DPD) NAT traversal Compression Perfect Forward Secrecy (PFS) VPN Site-to-Site VPN Client-to-Site (roadwarrior) L2TP user authentication XAUTH user authentication OpenVPN Encryption: DES, 3DES, AES 128/192/256-bit, CAST5, Blowfish Authentication: pre-shared key, X.509 certificates Support for VPN over HTTP Proxy PPTP passthrough VPN client-to-site (roadwarrior) VPN client for Microsoft Windows and Apple OS X Possibility of multiple logins per user VPN failover Multiple server support Support for mobile devices (Android, ios) VPN Portal for Clientless Connections* Web-based access to internal resources Configurable portal page Support for multiple destinations Destination-based authentication SSL offloading User Management & Authentication Unified user management for Open- VPN, L2TP, XAUTH, VPN Portal Group management Integrated certificate authority External certificate authority support User password and certificate management Multiple authentication servers (local, LDAP, Active Directory, RADIUS) Fully integrated one-time password (OTP) support BYOD / Hotspot* Configurable captive portal NEW Use your website as portal (SurfNow Button) Free access to allowed sites (walled garden) Wired / wireless support Integrated RADIUS service Connection logging Bandwidth limiting based on user, ticket or global settings Social login (Facebook, Google) NEW Social Enabler (sharing on social networks) MAC-address based user accounts Configurable multiple logins per user User accounts import/export via CSV User password recovery Automatic client network configuration (support for DHCP and static IP) Fully integrated accounting Generic JSON API for external accounting and third party integration Instant WLAN ticket shop (Smart- Connect) Single-click ticket generation (Quick ticket) SMS/ user validation and ticketing Pre-/postpaid and free tickets Time-/traffic-based tickets Configurable ticket validity Terms of Service confirmation MAC address tracking for free hotspots Cyclic/recurring tickets (daily, weekly, monthly, yearly) Remember user after first authentication (SmartLogin) Multi-location setup through master/satellite configuration** External authentication server (Local, LDAP, Active Directory, RADIUS) Network Address Translation Destination NAT Incoming routed traffic One-to-one NAT Source NAT (SNAT) IPsec NAT traversal Routing Static routes Source-based routing Destination-based routing Policy-based routing (based on interface, MAC address, protocol or port) Bridging Firewall stealth mode OSI layer 2 firewall functionality Spanning tree Unlimited interfaces per bridge High Availability Hot standby (active/passive) Node data/configuration synchronization (not for BYOD/Hotspot) Event Management More Than 30 Individually Configurable Events Notifications SMS Notifications Powerful Python Scripting Engine Logging and Reporting Reporting dashboard Detailed system, web, , attack and virus reports Live network traffic monitoring (powered by ntopng) Live log viewer Detailed user-based web access report (not in Mini 10 and Mini 10 WiFi) Network/system/performance statistics Rule-based logging settings (firewall rules) Syslog: local or remote OpenTSA trusted timestamping Extra Services NTP (Network Time Protocol) DHCP server SNMP server Dynamic DNS Management / GUI Centralized management through Endian Network (SSL) Easy Web-Based Administration (SSL) Multi-language web-interface (English, Italian, German, Japanese, Spanish, Portuguese, Chinese, Russian, Turkish) Secure remote SSH/SCP access Serial console Updates and Backups Centralized updates through Endian Network Scheduled automatic backups Encrypted backups via Instant recovery / Backup to USB stick (Endian Recovery Key) 2018 Endian Spa. Subject to change without notice. Endian and Endian UTM are trademarks of Endian Spa. All other trademarks and registered trademarks are the property of their respective owners. * Not in UTM Software 10, UTM Virtual 10, UTM Mini 10, UTM Mini 10 WiFi ** Master functionality not in UTM Mini 25, UTM Mini 25 WiFi and UTM Mercury 50

The Simplest and Most Secure UTM Available. Secure everything. Quick & Easy Management: Network Security: BYOD & Hotspot:

Secure everything The Simplest and Most Secure UTM Available Network Security: All-in-one full UTM hardware, software and virtual appliances. BYOD & Hotspot: Provide secure and simple Internet access for