NetDefendOS supports features such as Virtual LANs, Route
Monitoring, Proxy ARP and Transparency.
For more information about this, see
Firewalling Policies
NetDefendOS provides stateful inspection-based firewalling
for a wide range of protocols such as TCP, UDP and ICMP.
The administrator can define detailed firewalling policies
based on source/destination network/interface, protocol,
ports, user credentials, time-of-day and more.
Section 3.6, “IP Rules and IP Policies”
describes how to set up
these policies to determine what traffic is allowed or
rejected by NetDefendOS.
Address Translation
For functionality as well as security reasons, NetDefendOS
supports
policy-based
address
translation.
Dynamic
Address Translation (NAT) as well as Static Address
Translation (SAT) is supported, and resolves most types of
address translation needs.
This feature is covered in
Chapter 7, Address Translation
.
VPN
NetDefendOS supports a range of Virtual Private Network
(VPN) solutions. Support exists for IPsec, L2TP, L2TPv3,
PPTP, as well as SSL VPN, with security policies definable for
individual VPN connections.
This topic is covered in
.
TLS Termination
NetDefendOS supports TLS termination so that the
NetDefend Firewall can act as the endpoint for connections
by HTTP web-browser clients (this feature is sometimes
called
SSL termination
).
For detailed information, see
.
Application Control
NetDefendOS is able to identify data connections relating
to particular applications and perform defined actions for
those data streams such as blocking or traffic shaping. An
example of an application is
BitTorrent
peer to peer
streaming but could also relate to accessing certain
websites such as
.
For detailed information, see
.
Anti-Virus Scanning
NetDefendOS features integrated anti-virus functionality.
Traffic passing through the NetDefend Firewall can be
subjected to in-depth scanning for viruses, and virus
sending hosts can be black-listed and blocked.
For details of this feature, see
Intrusion Detection and
Prevention
To mitigate application-layer attacks towards vulnerabilities
in services and applications, NetDefendOS provides a
powerful
Intrusion Detection and Prevention
(IDP) engine.
The IDP engine is policy-based and is able to perform
high-performance scanning and detection of attacks and
can perform blocking and optional black-listing of attacking
hosts.
Chapter 1: NetDefendOS Overview
21
Summary of Contents for NetDefendOS
Page 30: ...Figure 1 3 Packet Flow Schematic Part III Chapter 1 NetDefendOS Overview 30 ...
Page 32: ...Chapter 1 NetDefendOS Overview 32 ...
Page 144: ...Chapter 2 Management and Maintenance 144 ...
Page 284: ...Chapter 3 Fundamentals 284 ...
Page 392: ...Chapter 4 Routing 392 ...
Page 419: ... Host 2001 DB8 1 MAC 00 90 12 13 14 15 5 Click OK Chapter 5 DHCP Services 419 ...
Page 420: ...Chapter 5 DHCP Services 420 ...
Page 573: ...Chapter 6 Security Mechanisms 573 ...
Page 607: ...Chapter 7 Address Translation 607 ...
Page 666: ...Chapter 8 User Authentication 666 ...
Page 775: ...Chapter 9 VPN 775 ...
Page 819: ...Chapter 10 Traffic Management 819 ...
Page 842: ...Chapter 11 High Availability 842 ...
Page 866: ...Default Enabled Chapter 13 Advanced Settings 866 ...
Page 879: ...Chapter 13 Advanced Settings 879 ...