Switching between devices has become more seamless. In addition, support for the BFD (Bidirectional Forwarding Detection) protocol has been added for the dynamic routing protocols BGP (Border Gateway Protocol) and OSPF (Open Shortest Path First). The update allows you to speed up traffic redirection in case of problems on communication channels.
The Lab's own antivirus engine has added the ability to check archives of any extension. ICAP client support will allow you to send files for verification not only to Kaspersky Anti Targeted Attack, but also to third-party sandboxes, as well as integrate with external DLP systems.
New hardware platforms have been added - KX-1000 and KX-100-KB1. KX-1000 provides performance up to 100 Gb/s in L4 FW + Application Control mode. KX-100-KB1 is an alternative model of KX-100 with an increased number of copper Gigabit interfaces, as well as with the possibility of rack installation.
In addition, Kaspersky NGFW 1.1 features GeoIP-based policies, which allow you to control traffic from specific countries. A role-based access model (RBAC) has been added to the Open Single Management Platform management console, which allows you to assign different roles with specific functions to users. It is also possible to migrate policies from Fortinet.
Kaspersky NGFW is designed for medium and large companies (1000 or more devices), including those falling under regulatory policy in the field of information security. The product is included in the register of Russian software and software and hardware complexes of the Ministry of Digital Development of Russia, and is currently undergoing FSTEC certification in Russia.