Features

Network & Routing

IPv4 and IPv6, LACP, VLAN and VXLAN, multi-WAN with load balancing and failover, policy-based routing, NAT, DHCPv4/v6, DynDNS, caching DNS.

Protection

Stateful inspection firewall, IDS/IPS with deep packet inspection and SSL fingerprinting, GeoIP, DROP/EDROP, DNS blocklists plus curated AIMdefense blocklists (including Abuse, Attack, Compromised, Malicious, Malware, Phishing, Proxies), OS fingerprinting.

Web, Mail & Access

Web, mail and reverse proxy including WAF, captive portal with zones, CI templates and login via LDAP, RADIUS or voucher. Adaptive web filtering via the NGFW-Package.

VPN & Site-to-Site Connectivity

IPsec (IKEv1/v2), OpenVPN, WireGuard and Stunnel. Traffic shaper and QoS for prioritized traffic.

Availability

HA failover with CARP and HA replication: two clustered systems, switchover without interruption.

Operation & Administration

Intuitive web interface with minimal training effort, 2FA, 16 system languages, REST API, real-time reporting and monitoring, online documentation.