Firegate 1000Firegate 1000

Wiresoft Firegate 1000 UTM Security Platform

Enterprise SPAMWALL Solution

SPAMWALL is a Firegate feature that blocks spam from entering the protected network by requiring unknown email senders to verify their identity before the message is forwarded to the protected recipient. This challenge/response system is proactive, allowing only senders present on the recipient's acceptlist to pass through. All others are automatically sent an auto-reply "challenge" message to which they must respond. Once they reply, Firegate releases the sent message and adds their name to the acceptlist. The challenge is easy for people to understand, but nearly impossible for automated systems (spambots) to complete. Each address that Firegate protects offers an individually configurable acceptlist, blocklist and hold queue.

Intelligent Design

In the event that the sender also employs a challenge/response spam block, an infinite challenge loop is possible if neither address is present in the other's acceptlist. SPAMWALL automatically detects such events and terminates the auto-challenge response to exit the loop.

If the sender does not reply within 5 days, SPAMWALL assumes that the original sender is not a valid person but an automated spambot and quietly removes the message from the hold queue.

Individual users have the ability to view their own hold queue messages, sorted by sender, date sent or received date. Users can accept or reject messages from their hold queue.

Individual users can pre-populate their own acceptlist by exporting their email address book to a text file and then pasting the contents into their acceptlist. SPAMWALL automatically extracts only the email addresses from other text information and inserts them into the acceptlist.

Firegate offers comprehensive network protection by stopping spam, viruses, worms, trojans, and hackers before they enter your network.	Intuitive virtual private network capabilities offer seamless road warrior as well as site-to-site tunneling connectivity.
Advanced challenge/response mail processing provides each network user with individually customizable anti-spam preference settings.	Infinitely expandable hardware/software platform ensures that Firegate can adapt to all future security threats and network needs.
Embedded anti-virus engine is optimized to provide transparent data-stream scanning as information enters the network, before it reaches client workstations.	Revolutionary ANA (Automated Network Administrator) system monitors and assures that each Firegate has the lastest virus signatures on file. If a Firegate goes off-line, ANA notifies the customer.
Configurable firewall provides granular control over all packets entering or leaving the network.	Flat-cost pricing that does not require client access licenses encourages business growth. All client machines on the network are automatically protected.
No limit on users for VPN or any other Firegate function.	Content filtering to protect companies from unauthorized Web surfing.

Firewall

Firegate's Firewall Interface

Firegate's firewall interface is designed around the safety through simplicity philosophy. Security interfaces that are easy to comprehend play a significant role in decreasing operator errors. After all, minimizing the mistakes that an operator can make when configuring network security enables Firegate to provide the protection for which it was bought.

Out of the box, Firegate offers immediate protection for the private network. The standard Firegate firewall philosophy is simple enough. Computers on the private network are allowed to access the Internet; but computers on the Internet are not allowed to access the private network. Firegate's default automatically configured firewall rules are perfect for the needs of most company networks.

For the more unique network environments, Firegate offers simple and easy firewall configuration interfaces that minimize opportunities for administrator error and reduce deployment time. Firegate's advanced firewall logging capabilities enable administrators to track individual packets that hit the firewall or connections that pass through the firewall.

Part of the firewall services, Firegate's Network Address Translation (NAT) routing feature supports pass-through for advanced protocols such as PPTP, IPsec, FTP, TFTP and IRC, among others.

Knowledgeable network engineers can further use the TCP and UDP port forwarding options to redirect specific services from the public interface on the Firegate to servers on the private network.

Anti-Virus

Anti-Virus Protection

The Firegate anti-virus process has never been breached.

This includes viruses linked to email or attachments coming into the network or viruses linked to any Web sites that could be introduced when surfing the Internet. Firegate also provides protection for messages initiated inside the network, should a virus be introduced into the network via a thumb drive or some other portable drive or medium.

Simply put, Firegate blocks viruses both ways, incoming and outgoing.

Anti-Spam

Anti-Spam Protection

Firegate offers protection against unsolicited commercial emails (UCE) by stopping messages that arrive via POP3 and/or SMTP data streams. Spamwall uses a mixture of various uniquely integrated mechanisms to filter out spam from the mail stream. The primary filter is a challenge/response mechanism that can alter its behavior depending on the results of other content analysis filters.

Firegate's Spamwall filter permits spam protection to be individually enabled or disabled for individual email addresses and POP3 accounts. Individual configuration settings, notification messages, and filter preferences can be managed for each protected account via the primary Web administration interface or via each user's Spamwall account interface.

Messages identified as spam are placed into the spam queue, where they sit for up to 7 days before being silently erased. When a message is placed into the spam queue, the respective sender is always notified and given a chance to respond in order to ensure that no false positives occur. When messages expire from the spam queue, they are assumed to be unwanted junk and are passed through the Bayesian learning engine as examples of spam.

Likewise, messages from senders who are found on the protected recipient's acceptlist are automatically passed through the Bayesian learning engine as examples of non-spam.

Spamwall provides acceptlists and blocklists for both the individual user account and the global account. Email addresses as well as domain names may be manually entered into the accept/block lists in order to pre-populate them with known bad and good addresses. For example, each user's address book may be exported to a text comma separated value (CSV) file, copied to the clipboard, and pasted into the user's acceptlist input field. Spamwall intelligently extracts the email addresses from all of the given text, and adds new addresses to the acceptlist. Duplicate addresses are ignored.

VPN Services

VPN Services

Firegate provides two kinds of VPN services, PPTP and IPsec.

Firegate's VPN implementation employs 3DES encryption with a 2-hour rotating key on each IPsec tunnel to provide security against brute force decryption attacks. Wiresoft uses 3DES for security which also provides compatibility with other systems and components, where used by the customer. Firegateâs VPN service is interoperable with industry standard routers and firewalls including Cisco firewall/routers and SonicWALL Pro firewall/VPN appliances.

Firegate Content Filtering

Firegate Content Filtering

The proliferation of Internet access by workers has significantly raised the liability of companies. Firegate offers the peace of mind that only Internet Web sites approved by the company are being accessed.

Firegate uses an on-board in-line filtering system and is located as described in the ANA white paper as being placed between your organization's network and the Internet. No user in the company knows itâs there. Because the system sees every packet, it can examine each one to decide if it needs filtering. Filtering can be done through various types of options. Firegate offers blocklist by URL, blocklist by key word, acceptlist by URL, and a changeable security scale. In-line filters handle 100% of the network traffic because every packet goes through the filtering system. In addition, each packet, no matter to what port it is directed, can be examined for HTTP, IM, and P2P packets. Because Firegate requires no reconfiguration of any user system and no network configuration, all that's required is for the administrator to configure it for use.

The Firegate process is fast and provides a total solution. The Firegate uses "zero latency" filtering. When a request for a new Web site comes in, it is passed through and sent to the Firegate, which then makes the "block-no block" decision, while the Firegate is processing the request. If the decision is made to block, the system redirects the user to a screen explaining the situation. If the decision is made to not block, the system will let traffic from the Web server reach the user.