PantherFirewall

More Info

Load Balance. Content filter. Deploy with confidence.

General Info

FIREWALL: PANTHER firewall includes most ALL the features in expensive commercial FIREWALLS. And more in many cases. The following is a list of features currently available in the Panther firewall 2.0 release. ALL of these things are possible in the WEB interface. Without touching anything AT the command LINE. FIREWALL: • filtering by source and destination IP. IP protocol. Source and destination port for TCP and UDP • able to limit simultaneous connections on a PER-RULE basis • Panther firewall utilizes P0F. An advanced passive OS/NETWORK fingerprinting utility to allow YOU to filter by the operating system initiating the connection. Want to allow MAC and LINUX machines to the internet. But block windows machines? Panther firewall CAN DO SO (amongst many other possibilities) by passively detecting the operating system in USE. • option to LOG or NOT LOG traffic matching each rule. • highly flexible policy routing possible by selecting gateway on a PER-RULE basis (for load balancing. FAILOVER. Multiple WAN. ETC. ) • aliases allow grouping and naming of IPS. Networks and ports. This helps keep your firewall RULE SET clean and easy to understand. Especially in environments with multiple public IPS and numerous servers. • transparent layer 2 FIREWALLING capable – CAN bridge interfaces and filter traffic between them. Even allowing for an ip-less firewall (though YOU probably want an IP for management purposes). • packet normalization – description from the Panther firewall scrub documentation – “‘scrubbing’ is the normalization of packets SO there are NO ambiguities in interpretation by the ultimate destination of the packet. The scrub directive Also reassembles fragmented packets. Protecting some operating systems from some forms of attack. And drops TCP packets that have invalid flag combinations. ” • enabled in Panther firewall by default • CAN disable if necessary. This option causes problems for some NFS implementations. But is safe and should BE left enabled on most installations. • disable filter – YOU CAN turn OFF the firewall filter entirely if YOU wish to turn Panther firewall into a pure ROUTER. State table the FIREWALL’S state table maintains information on your open network connections. Panther firewall is a stateful firewall. By default ALL rules are STATEFUL. MOST FIREWALLS lack the ability to finely control your state table. Panther firewall has numerous features allowing granular control of your state table. Thanks to the abilities of Panther firewall. • adjustable state table size – there are multiple production Panther firewall installations using several hundred thousand states. The default state table size varies according to the RAM installed in the system. But it CAN BE increased on the FLY to your desired size. Each state takes approximately 1 KB of RAM. SO keep in mind Memory usage when sizing your state table. DO NOT SET it arbitrarily high. On a PER-RULE BASIS: 1. LIMIT simultaneous client CONNECTIONS 2. LIMIT states PER HOST 3. LIMIT NEW connections PER SECOND 4. DEFINE state TIMEOUT 5. DEFINE state TYPE STATE types – Panther firewall offers multiple options for state HANDLING. 1. KEEP state – works with ALL protocols. Default for ALL RULES. 2. MODULATE state – works only with TCP. Panther firewall will generate strong initial sequence numbers (isns) on behalf of the HOST. 3. SYNPROXY state – proxies incoming TCP connections to help protect servers from spoofed TCP SYN floods. This option includes the functionality of keep state and modulate state COMBINED. 4. NONE – DO NOT keep ANY state entries for this traffic. This is very rarely desirable.

Brands

dell, gateway

Location

Office, meeting space, Shipping and Receiving

Neighborhoods

Island View, Bayshore

Other Link

http://www.pantherfirewall.com

Category

Computer Software & Services

Reviews

Details

Phone: (888) 490-3773

Address: 1815 Purdy Ave, Miami Beach, FL 33139

Website: http://www.pantherfirewall.com