UserGate's expertise in developing its own technologies: the UG OS operating system and hardware platforms with hardware acceleration, has enabled the company's engineers to achieve unprecedented performance for Russian solutions and bring them to the level of leading global manufacturers: 200 Gbps for firewall functions and 30 Gbps when application control and intrusion prevention functions are enabled. The results have been confirmed during load testing. At the same time, UserGate already surpasses its closest competitor by almost 2 times in terms of the cost of protecting 1 Mbps.
The solution is implemented as a hardware and software complex (HSC) based on UserGate E1010, E3010, F8010, FG platforms, as well as a device from the new line — G9300. UserGate DCFW on the FG platform is ready for official deliveries from November 25, 2024.
E1010
Features of UserGate DCFW
One of the key innovations of UserGate DCFW is its own vector firewall technology. It allows processing up to 131,000 firewall rules without a linear drop in performance. Today, this is an absolute record among Russian NGFWs. This number of rules is only used by the largest customers.
Another important difference of UserGate DCFW is the use of the first hardware accelerator in Russia based on FPGA for NGFW. The accelerator circuitry was developed by UserGate specialists. It processes FW L3/L4/L7 and IPS functions, which provides a qualitative leap in performance without increasing the cost of the solution. FPGA also allows processing Elephant Flows — continuous and extremely large streams, for example, data from a large fleet of video cameras. Ordinary NGFWs without FPGA often cannot cope with them, as Elephant Flows overload the device's central processor.
F8010-2
Another notable feature of UserGate DCFW is the creation of virtual systems. It allows logically dividing the UserGate HSC into separate, independent virtual NGFWs. The number of virtual systems is not architecturally limited. This feature will also be of interest to data center operators, as it allows building flexible schemes with the participation of multiple virtual devices.
UserGate DCFW initially supports advanced fault tolerance – Active-Passive cluster with 2 nodes and Active-Active cluster with 2, 3 or 4 nodes. Centralized management is carried out using a separate UserGate Management Center solution, which supports management of the entire UserGate SUMMA product ecosystem (NGFW, DCFW, SIEM, Log Analyzer, Client). Management of more than 10,000 devices is available.
The new E1010, E3010, F8010 platforms significantly outperform their predecessors in performance (on average from 40 to 150% depending on the model).
E3010
Commercial deliveries will begin on November 25, 2024 and will allow potential customers to meet the need for a high-performance NGFW to comply with Presidential Decree No. 250. Work is underway to include the E1010 and E3010 platforms in the Register of the Ministry of Industry and Trade. This process has already been completed for the F8010 and FG platforms.
The gem of the new line is the high-performance model — G9300. Its feature is the combination of the FG platform and the E1010, E3010, F8010 platforms. The separation of data plane and control plane together with the use of FPGA in FG provides a significant leap in performance.
New UserGate G9300 model
In the second quarter of 2025, G9100 (E1010+FG) and G9800 (F8010+FG) models will also become available to customers. The latter, due to its high technical characteristics, should provide significantly higher performance indicators. It is possible to purchase additional E1010/3010, F8010 or FG devices to combine them into a G9100/9300/9800 device, as well as combine several G-series devices into a fault-tolerant cluster.
"The release of UserGate DCFW is an extremely significant event for the Russian cybersecurity market. The main factor that fundamentally changes the situation is the UserGate FG platform, which we have been creating for 5 years. The approaches implemented in it for the first time in Russia provide hardware acceleration of security functions. And they also allow implementing even more productive versions of UserGate DCFW. They will consist of several devices (blades) that perform control plane and data plane functions. Thus, UserGate is the first of the Russian NGFW manufacturers to come close to creating truly powerful solutions, the performance of which in FW L7 + IPS mode can reach 1 Tbps in the next few years," commented UserGate NGFW Development Manager Kirill Pryamov.
"UserGate is a company of visionaries. Many years ago, we realized that it was necessary to invest in the development of NGFW, when no one really knew about it yet. We categorically did not want to follow the beaten path, because we understood that it was ineffective and would eventually lead us to a dead end. We consciously abandoned the use of Open Source templates in our solutions and began to independently develop the hardware. This combination of our own software and hardware technologies, on the one hand, allows us to fully control our solutions, which is impossible when using ready-made third-party code. On the other hand, it gives us the necessary freedom and flexibility in development, the ability to implement the ideas and approaches that we consider necessary, and at the same time use a much wider range of component suppliers, which is important in the current geopolitical situation. The solution presented today with its outstanding performance characteristics is a logical result of our many years of work, an important milestone not only in the development of UserGate, but also in the Russian technology industry as a whole," said Ivan Chernov, Head of Technical Marketing at UserGate.
Performance confirmed by market experts
UserGate conducted load testing with the involvement of market experts with extensive experience in testing, implementing and operating solutions for ensuring network security of Russian and foreign production, including global leaders in this market.
"I was pleasantly surprised by the test results. Especially considering that it took place in real time. This is really a qualitative step forward, and not just promises. We saw a very tangible future, which has already largely arrived, and a product that can already be used in the very near future," commented Alexander Dzhaganyan, Head of Network Security at Infosystems Jet. "We will be very interested in conducting load tests of the new UserGate solution in our laboratory and sharing the results with all market participants."
"It's no secret that there are manufacturers in the market who offer two classes of solutions: a functional firewall and a high-performance firewall. In my opinion, UserGate is now closest to combining these solutions and offering the market a single functional, high-performance and reliable product," said Nikolai Zateryukin, Head of Network Security Group at Linza. "According to the results of the testing, the new UserGate solution fully meets the stated characteristics. We are certainly very interested in studying it in more detail, running it through our tests, and studying all the parameters. But what I saw satisfied me more than."
UserGate DCFW on the FG platform is ready for official deliveries from November 25, 2025. The remaining platforms will become available in the second quarter of 2025.
Illustrations provided by the UserGate press service