MandrakeSecurity Multi Network Firewall provides the following features:    Easy and powerful configuration tools Configuration and management is performed through a secure Web Interface Monitoring tools display detailed information about network & system activity Detailed reports on intrusion detection, DHCP and Proxy usage Supported Internet connections include modem, DSL, ISDN, Cable, T1,... Specialized feature to allow Internet access only during specified hours Dial-on-demand provides a hassle-free way to share a dial-up connection    Strong Firewall Netfilter/IPtables is the firewalling subsystem which offers stateful inspection and secure kernel 2.4 "Snort" and "Prelude" Intrusion Detection Systems issue alerts during network attacks and take action against hostile intruders DMZ (de-militarized zone) wizard for easily configuring several DMZs VPN (Virtual Private Network), based on the FreeS/wan project, provides the ability to secure all data transfer Shorewall is a powerful "hardening" firewall system for configuring access rules such as source IP address, destination IP address and IP protocol type NAT (Network Access Translation) permits many hosts to share a single Internet IP address at the same time Firewall updates available    Complete proxy server solution Full-featured and easily configured Proxy (transparent, manual & manual with user authentication through LDAP & Samba protocol) URL/Content filtering offers a powerful solution for advertising banner and specific Internet site filtering Web surfing time restriction Create filtering rules to control information flow through a company network Cache only DNS DHCP server    Required configuration for X (graphical) users Pentium Processor or compatible (300MHz minimum) CD-ROM drive 300 MB disk space minimum (500 MB recommended) At least 64 MB of RAM (128 MB recommended) Compatible video card and Ethernet network card listed at: http://www.linux-mandrake.com/en/hardware.php3 Internet connection (modem, cable, ISDN, ADSL,...)

   Features chart

MNF FEATURES		MANAGEMENT
Firewall Throughput	Hardware-dependent	Management Method	Secured Web Browser
Concurrent Connections	Hardware-dependent	Remote Management	SSH
Packet Filtering Method	Stateful Packet	SNMP Management	Yes
DoS, DDos Protection	Yes	Command Line	Yes
Transparent Mode	Yes	Firmware Update Method	Yes with web-based MandrakeUpdate
Network Address Translation	Yes	Diagnostic Tools	Ping, Trace, NSLookup
Port Address Translation	Yes	Logging and Alerting	Syslog, Email
Translation Predefined Services	Yes	HIGH AVAILABILITY
Customizable Services	Yes	Dual Power Supplies	Support UPS
Number of Nodes	Unlimited	IPSEC VPN
Network Access Rules	Yes	VPN Encryption	Included
SECURITY SERVICES		Encryption Methods	3DES, DES, ARCFour
Vulnerability Scanning	Yes	Authentication	MD5, SHA-1
Web Content Filtering	Yes	Key Management	IKE, Manual
Custom Web Blocking	Yes	VPN Interoperability	IPSec
Malicious Code Filtering	Java, ActiveX, Proxy, Cookies, Digital Certs	VPN Tunnels	Hardware-dependent
NETWORKING SUPPORT		DES (56-Bit) Speed	Hardware-dependent
VPN Client Pass	Yes	3DES (168-Bit) Speed	Hardware-dependent
PPPoE/L2TP Support	Yes	Perfect Forward Secrecy	Yes
DHCP Client Support	Yes	Prevent Replay Attacks	Yes
DHCP Server Support	Yes	User Authentication	Hardware-dependent
Total Static Routes	Hardware-dependent	PKI/Digital Certificates	Yes
		VPN Clients Included	Linux (unlimited number)

Download the product sheet in PDF.

Last modified  05/17/2003