UserGate FG series Firewalls

Main article: Firewall

2024: Inclusion in the register of Russian industrial products

Firewall The next generation () Next-Generation Firewall UserGate FG is included in. register of Russian industrial products Ministry of Industry and Trade Russia The developer announced this on July 29, 2024.

The solution is an innovative software and hardware complex developed and manufactured in Russia and designed to ensure the security of high-load systems and critical infrastructures.

𝓲

Фото: UserGate

Inclusion in the registry allows you to use the solution in large commercial structures, banks, facilities [[critical infrastructure of Russia'CII (critical information infrastructure]]) and in government agencies, whose activities are regulated by the requirements of the law. NGFW Class High Performance Solutions for Protection a digital infrastructure in which traffic processing speed has critical value:, DPCs large enterprises, - providers Internet services, etc.

The firewall secures the network by blocking malicious attacks, exploiting vulnerabilities, illegitimate use of applications, and other threats. It can also provide network access control, security policy management, and network activity monitoring. UserGate FG is suitable for protecting the core layer of the network, merging all zones security and ensuring the safe passage of traffic between segments.

The hardware platform has a built-in FPGA hardware accelerator (Field-Programmable Gate Array), which allows you to maintain operation in L3/L4 mode at a record 160 gbps. The FPGA board takes over some of the functions of the central processor (CPU), allowing you to achieve such high traffic processing rates. In addition, UserGate FG can used as a balancer capable of distributing traffic between a large number of hardware platforms.

FG General Purpose Computing Platform Device complies with specifications RNTsD.465235.001 specifications and provides is a technical facility used in communication networks, on the basis of which software and hardware complex is implemented:

• with monitoring and filtering functions in accordance with the specified rules of information flows passing through it;
• with intrusion detection and prevention features;
• used to ensure the protection of information (not by cryptographic methods) of limited access.

The device interface complies with the standards: IEEE 802.3, IEEE 802.3u, IEEE 802.3ab

2023: UserGate FG announcement

On May 22, 2023, UserGate announced the start of the next stage of putting into commercial operation the UserGate FG hardware and software complex, which is the NGFW of optimal performance. As a result of successful laboratory tests of the prototype, several dozen ready-made platforms went into test operation for UserGate customers who wished to take part in their piloting.

UserGate FG

The task of UserGate FG is to ensure the need to protect high-load systems: data centers, telecom operator infrastructure, etc. The traffic processing speed of the platform reaches 160 GB/s. Some analysts believe that 40 GB/s is the maximum that the central processor of the hardware platforms used in Russia can squeeze out. Both customers and product suppliers were forced to put up with the restriction. We managed to bypass the hardware limitation and speed up NGFW by more than 4 times at once. commented Ivan Chernov, UserGate Development Manager

The development of the UserGate FG hardware platform was carried out by the team of the company's design bureau in Novosibirsk. Its architecture includes its own FPGA card, or programmable logic integrated circuit (FPGA). As a rule, it acts as a coprocessor that solves point problems of the device. The FPGA board optimized the firewall function - processing network packets on the third and fourth layers of the OSI model.

Firewall acceleration is not the only advantage of UserGate FG. In the coming versions, the developer plans to increase the performance of other processes. Among them are the tasks of intrusion detection and application detection systems. Moreover, as early as May 2023, UserGate FG can be used as a traffic balancer.

Also, as the developer notes, changes in the updated versions will affect the FPGA board itself. It will become even more productive. After completing pilot projects on the side of the customers participating in the testing, UserGate will officially announce the start of widespread commercial operation of the platform.