Three problems with buying a firewall
License stacks instead of predictability
On top of the box come subscriptions, feature licenses and support contracts. The follow-up costs are hard to plan.
Security from third-party clouds
Many vendors run management and telemetry through clouds outside Europe. Your own security infrastructure depends on foreign jurisdiction (US CLOUD Act).
The software is tied to the box
When the network grows, you need a new appliance. Licensing and training then start all over again.
Pure open source would be a way out. But it lacks a warranty, an SLA and a point of contact. No one accepts that risk in production environments.
One software, two paths
AIMdefense separates the firewall from the box. The software has been proven since 2002 and is developed in Germany. It needs no vendor cloud and is outside the reach of the US CLOUD Act. Operation and data storage remain in-house.
On AIMSTRONG hardware
Six size classes XS to XXL, from the FW-50 class to the FW-3000 class. Assembled in Germany, with hardware warranty and Advanced Replacement Service.
Go to AIMSTRONGAs a virtual appliance
On your own virtualization, license tiers from 2 cores/8 GB to 64 cores/128 GB. Software and interface are the same as on the hardware. Here too, you keep full data sovereignty.
Deployment optionsWhat the firewall does
Protection
Stateful firewall, IDS/IPS with deep packet inspection, GeoIP, web, mail and reverse proxy including WAF.
Connectivity
VPN with IPsec, OpenVPN and WireGuard, multi-WAN with load balancing and failover, traffic shaping.
Availability
HA failover with CARP: two clustered systems take over without interruption.
Operation
Captive portal, 2FA, 16 system languages, REST API and real-time reporting.
NGFW-Package: Layer 7 security as an add-on
Deep Packet Inspection
Application detection with thousands of signatures, even in encrypted traffic.
Application Control
Policies by category, such as social media, streaming or remote access tools.
Advanced TLS inspection
More than 90 percent of internet traffic is encrypted. TLS inspection makes it inspectable.
Adaptive web filtering
More than 60 web categories, finely graded by user and policy.
Central management via the AIM platform
Each AIMdefense instance is registered with the AIM platform directly from the firewall interface and approved there. In the platform you see your firewalls alongside the rest of your infrastructure. AIM manages AIMdefense, OPNsense, pfSense and DynFi firewalls.
Go to the AIM platformOne subscription, clearly defined support levels
You take out one software subscription for 1, 3 or 5 years instead of stacking licenses. You then choose one of four support packages with fixed ticket quotas and response times.
Basic
3 tickets per year
Response on the next business day (NBD)
Regular
5 tickets per year
8-hour response time
Advanced
10 tickets per year
4-hour response time
Elite
Unlimited tickets
2-hour response time, 24/7
Additionally with the AIMSTRONG hardware path: hardware warranty and Advanced Replacement Service for up to 5 years.
Coming from the ICM Firewall?
AIMdefense is the successor. The migration is documented and we guide you through it.
Part of the AIM ecosystem
AIMdefense is the “Protect” phase. The software runs on AIMSTRONG hardware and is managed via the AIM platform. The AIMsoc Security Operations Center monitors ongoing operations.
Resources and documentation
The product matrix and further documents are available in the central library on s2f.site. Guides for installation and migration can be found in the documentation.
Central downloadsDocumentationProven in the field
The projects come from a medical practice, a system house and a hospital group. They share the need for clear boundaries within the network and traceable operations.
“One less thing to worry about.”
Owner of the practice
Switchover in around 3 hours
“In the past, our administrators had to open and maintain every firewall individually.”
Partner manager of the system house
around 10 minutes of downtime per migration
“A KRITIS infrastructure of this size is under permanent scrutiny. Without the ability to react in real time, that cannot be achieved.”
Managing IT director
more than 20 hospitals
See AIMdefense live?
We will show you the firewall in a demo. Partners get access to the Secure 2 Fiber GmbH partner program.
since 2002
in production use
DE
Software development in Germany, Assembled in Germany (hardware path)
weekly
security updates, core updates twice a year
16
system languages