 |
Phion is one of the leading European providers of communication protection solutions. With its netfence product portfolio, phion offers solutions that meet the highest standards of availability, security and management. phion netfence provides a comprehensive answer to all security-related issues, ranging from guarding the perimeter, networking branch offices via reliable and highly available connections, to protecting against malicious content and securing internal networks. All phion products feature centralised management and a very favourable TCO. |
 netfence gateways integrate gigabit-performance firewall, cutting-edge technology VPN, intrusion prevention, DDos/DoS protection, intelligent application-selective bandwidth and multipath management with other critical application gateway functionality.
A netfence gateway may also act as a fully fledged SMTP mail router, DNS server, or HTTP proxy thereby protecting and strengthening your infrastructures both on the network and the application security level.
|
| Features & Benefits: |
| • |
Comprehensive protection with stateful inspection firewall and IPS |
| • |
Matured HA functionality |
| • |
High Availability |
| • |
VPN with traffic intelligence |
| • |
Content Security |
| • |
Local and central management |
| • |
Real-time accounting |
| • |
Flexibility and scalability |
| • |
Complete life-cycle management |
| • |
Optimum cost/benefit relationship |
|
The netfence contegrity solutions provide mail security and anti-virus, SPAM Filter, Web Protection and URL Filters. Traditional infrastructure services, such as DNS, NTP, DHCP servers and also SSH/FTP in the case of the bigger variants, can also be used. |
| netfence contegrity is available as a software and appliance solution. |
| Features & Benefits: |
| • |
Real-time accounting |
| • |
Spam filter |
| • |
Anti-virus solution |
| • |
Malware & Spyware Protection |
| • |
URL filter |
| • |
High Availability |
| • |
Troubleshooting and diagnosis |
| • |
Infrastructure strengthening |
| • |
Local and central management |
| • |
Complete life-cycle management |
| • |
Optimum cost/benefit ratio |
|
 The netfence sintegra Appliances are integrative security gateways offering remote sites in particular more security and a high level of accessibility for their digital communication pathways at significantly lower operating costs. This means that branches not having their own security personnel can be optimally integrated within the existing, group-wide security infrastructure. |
| Features & Benefits: |
| • |
High level of accessibility with traffic intelligence |
| • |
Optimization of WAN bandwidths |
| • |
Comprehensive enterprise level protection through stateful inspection firewall, application protection and content security |
| • |
Local and central management |
| • |
Simple roll-out and recovery |
| • |
Plug-and-play appliance for maximum requirements |
| • |
Scalability |
| • |
Optimum cost/benefit ratio |
| • |
Real-time accounting
|
|
 The design of netfence edge appliances has been strongly influenced by the insight that also the smallest remote offices require fully performant protection against threats. The netfence edge appliances from phion are integrative security gateways that provide small sites connected through DSL or an internet provider with optimal security and maximum availability. This combined with a significant reduction of the ownership and operating costs results in an optimal solution that precisely meets the needs of small remote offices. |
| Features: |
| • |
Stateful Inspection Firewall |
| • |
Leading VPN technology with Traffic Intelligence |
| • |
Traffic Intelligence |
| • |
Fanless design |
|
| Benefits: |
| • |
Comprehensive enterprise level protection for micro offices |
| • |
Superior High Availability through Traffic Intelligence |
| • |
Local and central management |
| • |
Simple roll-out and recovery |
| • |
Plug & Play appliance |
| • |
Optimum value for money |
| • |
Scalability |
|
The netfence sectorwall from phion offers the optimum solution for internal firewalling and LAN segmentation. It is intended for use in the central corporate network. With netfence sectorwall, company-wide security policies are not restricted to the perimeter and field offices, they can also be implemented in the increasingly important core area. netfence sectorwall is available as a software and appliance solution. |
| Features & Benefits: |
| • |
Protection across the company against internal threats and misuse |
| • |
Implementation of global security policies |
| • |
Local and central management |
| • |
Complete life-cycle management |
| • |
Optimum cost/benefit ratio |
| • |
Easy roll-out |
|
| netfence entegra provides powerful and effective endpoint security and network access control functionality that protects endpoints inside and outside the perimeter. It offers centralised policy management and distribution, pre-connect and periodic post-connect client health assessments, and endpoint threat remediation functionality that allows the implementation of a ready to use network access control framework that does not require expensive investments into the basic network infrastructure. entegra seamlessly integrates with the existing corporate netfence UTM infrastructure so that clients and policy servers can be completely administered, monitored, and reviewed from a netfence Management Centre. An online update service is provided by phion that helps entegra clients to recognize and activate AV and AntiSpyware products and diagnose the up-to-dateness of their signature databases. |
| netfence entegra offers two different endpoint security clients: |
| • |
entegra office client: This client allows to easily manage and enforce security policies on endpoints located within the corporated network. It provides strong managed desktop firewall protection and repeated client health checks to assert ongoing policy compliance. |
| • |
entegra global client: The ideal solution to secure laptops used inside and outside the perimeter. It combines connectivity friendly netfence VPN-based remote access protection with the extensive policy compliance checks and threat mitigation capabilities of the entegra framework. The entegra global client is the successor to the netfence VPN secure connector. |
|
 The entegra clients are complemented by the netfence VPN connector R8 which is a simpler VPN-only product that does not offer health state checking and auto-remediation capabilities It provides limitless secure connectivity by means of an advanced user controlled personal firewall and a centrally administered VPN component.
On the UTM side, netfence industrial offers an enterprise grade network firewall and application gateways for FTP, HTTP, and SSH terminal access. Web and FTP traffic can be scanned for viruses. When combined with URL filtering netfence industrial supplies integral protection against Phishing, Malware, DoS and Spyware attacks targeted at the protected systems.
An advanced capability of netfence industrial is its ability to handle DCE RPC calls cleanly without opening all ports for service discovery. This advanced capability solves a critical administration issue and positions netfence industrial ahead of the market.
To cater to the needs of off-site equipment netfence industrial has built-in transparent HTTP and DNS caching capabilities and DHCP/NTP servers useful for reducing effective bandwidth usage. By combining the traffic management power of the firewall with fault-resilient VPN technology true traffic intelligence (TI) is achieved. netfence’s unrivalled intelligent traffic management capabilities may be further extended by using its integrated OSPF router to span OSPF clouds even across VPN tunnels.
netfence industrial features a highly robust aluminium sealed casing construction for rough industrial environments. The special cushion design allows the appliance to absorb vibrations ensuring optimal reliability under harsh conditions. Fanless design and compact flash-based hard disk provides optimum energy savings while guaranteeing continuous operation and information consistency even under critical shock conditions. It features top-hat rails for wall, desk or the like mounting, which combined with the very modest height requirements, allows using the appliance at locations where space is in short supply.
netfence industrial supports multiple uplinks, optional HA operation and is fully compatible with the central management of the netfence communication protection architecture. Thereby large scale deployments in cost efficient fashion are fully supported.
|
 |
The netfence management centres permit comprehensive management of the entire security infrastructure with cost-effective deployment of resources. The netfence solutions and phionOS-based servers are administered via dedicated and centralized servers. Using the netfence management centres, administrators monitor the status of remote gateways, administer the netfence configurations and software, define global standards and record information about individual or multiple gateways. Central configuration management includes VPN and firewall policies, as well parameters such as software licences. This means that disaster recovery is possible in less than 4 minutes.
Benefits:
| • |
Central management increases security and reduces costs |
| • |
Impressive real-time visualization |
| • |
VPN GTI (Graphical Tunnel Interface) for configuration and visualization of VPN tunnels |
| • |
Scalability |
| • |
Remote management |
| • |
Easy disaster recovery |
| • |
Audit trail with Revision Control System |
| • |
phion PKI for preparing and administering digital x.509v3 certificates |
The all-in-one phion M appliance offers comprehensive and effective protection by combining state-of-the-art firewalling and VPN technology with content and email security in a single box.
All of these functions can be centrally managed from a single GUI:
| • |
A firewall to guarantee that only secured data traffic reaches the internal network regardless of the origin (VPN/Internet). |
| • |
A powerful content protection platform combining a URL filter and anti-virus, which ensures optimum protection against viruses, spyware, trojans, rootkits and other malicious content. |
| • |
Protection from threats hidden inside SSL encrypted HTTPS traffic. |
| • |
Control over traffic generated by popular file sharing, peer-to-peer and instant messaging applications. |
| • |
A comprehensive email security gateway that protects against spam and other undesirable emails as well as file attachments. |
| • |
Traffic intelligence with automatic activation of backup links or UMTS and ISDN to keep you connected. |
| • |
Comprehensive traffic shaping to make sure your vital applications get the bandwidth needed.
|
phion M appliances are available in four models to meet the requirements of different types of organizations:
| • |
phion MR - for small remote offices up to 20 users connecting to a central gateway |
| • |
phion M1 - up to 100 users |
| • |
phion M3 - up to 500 users |
| • |
phion M5 - up to 1,000 users
|
|
|
 airlock solutions protect web applications and web services from malicious software and web-based attacks, increase availability and reduce operational cost. airlock enforces user authentication and features single sign on. The powerful monitoring and reporting platform ensures a constant overview of the security status.
airlock is the market’s only web application firewall (WAF) that covers the entire spectrum of security requirements and optimizes the entire web environment. Generic security services and an easy integration into existing infrastructures make airlock a high performance yet cost-effective security tool. Leading global enterprises from all fields and nine of ten Swiss banks rely on airlock for protecting their web environment.
|
