Among the new features
Zone Based Firewall for easy rule creation in complex networks - with a large number of network interfaces, segments, IPSec and client VPN connections. Also added is the ability to integrate with Astra ALD Pro, which provides user authorization based on the domestic OS and increases the level of security in the network.
To protect against DoS attacks associated with published web resources, the NGFW 16.0 firewall offers a reverse proxy server function (now with WAF and anti-DoS). This helps prevent malicious traffic from penetrating and maintain the operability of resources. An important innovation is the addition of a web access log to traffic reports. This simplifies monitoring and analysis of user web activity, allowing you to identify potential threats and security breaches. Another significant feature is improved VPN authorization settings for users, including two-factor authentication (2FA). This provides an increased level of security for remote access to the network.
Another important feature is the ability to create routes for IPSec connections (including BGP), which allows you to establish secure connections between remote network segments. Authorization of users from trusted Active Directory domains allows you to work in networks with multiple domains united by trust.
Fixes and changes
One of the notable changes is the renaming of the product to Ideco NGFW. The new name reflects its functionality and unique capabilities in the field of network security.
"Ideco NGFW 16.0 has sufficient performance and capabilities to work in the ecosystem of domestic IT solutions and services, for networks of companies of any complexity. Step by step, we strive to help customers solve the problems of transitioning from foreign solutions, while maintaining the level of security and reliability of network services," said Dmitry Khomutov, director of Ideco.