|
Stealth Mode & mGuard Security Appliances
 |
| Stealth Mode |
|
Unassailable with the Innominate Stealth Mode
Firewalls are normally implemented on routers that direct data traffic between separate IP networks. The use of one or more firewalls thus requires a segmentation or even a reorganisation of single or multiple networks. This covers typical business use scenarios, in which an enterprise level firewall protects a company’s Internet access – or in which firewalls have been set up between a firm’s various departments and network segments. |
 |
Stealth Mode firewalling
Innominate's mGuard systems are equipped with a special and innovative function, the Stealth Mode. In this mode, the systems operate absolutely transparently, requiring no IP address of their own. Instead, they utilize the same IP as the protected computer – making them unidentifiable for invaders and therefore impervious to attack. With Stealth Mode firewalls, as implemented in the Innominate mGuard, there is no need to reconfigure the network. Should access take place from within a company network which has been classified as unsafe, the mGuard firewall can be accessed and configured under the address of the computer to which it is assigned in the network. |
Back to Products
|
| Innominate Stateful Inspection Firewall |
|
The hardware firewall integrated in mGuard devices can be individually configured depending on specific requirements. The packet filter scrutinizes data packets based on the originating and target address, blocking undesired data traffic. Only explicitly approved protocols, such as web use (http), mail (smtp, pop3, imap) and administration (ssh, vnc) are allowed access to the Internet. All other access attempts are prevented and immediately reported.
mGuard Firewall-Features
- Stateful Packet Inspection
- Anti-spoofing
- NAT (IP masquerading)
- Port forwarding
- Throughput rates of up to 100 MBit/s
|
Back to Products
|
| Virtual Private Network (VPN) |
|
Innominate VPN Tunnelling
Instead of costly dedicated or switched lines, virtual private network (VPN) technologies use Internet connections for data exchange, which are significantly less expensive. Standard application areas include dial-up procedures from home workstations to the company network or the connection of a branch office to the company network.
The VPN router in the mGuard devices works with IPSec as a transmission protocol. Strictly speaking, IPSec is a set of several protocols for the implementation of secure connections as well as key exchange in the Internet Protocol (IP). For this process, two communication channels are generally used – one for the key exchange and one as the data transportation channel.
mGuard VPN-Features
- Protocol: IPsec (Tunnel und Transport Mode)
- IPsec DES encryption with 56 bits
- IPsec 3DES encryption with 168 Bit
- IPsec AES encryption with 128, 192 und 256 Bit
- Packet authentication: MD5, SHA-1
- Internet Key Exchange (IKE) with Main and Quick Modes
- Authentication: Pre-Shared Key (PSK), X.509v3 certificates
- DynDNS
- NAT-T
- Dead Peer Detection (DPD)
- Throughput rates of up to 70 Mbps
- Default route through the tunnel
|
Back to Products
|
| Anti-virus engine |
|
| Virus protection technologies are an important part of every security strategy. mGuard appliances are optionally integrated with Clam AV anti-virus software. This software supports the HTTP, SMTP, FTP and POP3 protocols and functions for all file formats. Even compressed archives are carefully checked by the virus programme. |
Back to Products
|
|
| |
| Quickfinder |
|
|
| Contact |
| Are you interested in our mGuard security products? Then simply contact us! |
|
| Links |
|
|
| Quote |
| "... a simple way to protect a single computer without adding any processor overhead, it is an excellent piece of kit." SC Magazine, 5/2005 |
|
 |
|
|
