MTS RED NGFW

The main articles are:

• Firewall
• NGFW (Next Generation Firewall)

2024: MTS RED NGFW Presentation

MTS RED enters the market of high-performance multifunctional firewalls, presenting the prototype MTS RED NGFW on August 29, 2024. The solution shows high traffic filtering speed - up to 50 Gbps in NGFW mode, meeting the needs for network protection of large companies. In the future of the year, this figure is planned to be increased to 100 Gbps.

The solution is a software and hardware complex (PAC), a distinctive feature of which is high-speed processing of network traffic using specialized hardware accelerators. As of August 2024, the solution demonstrates performance up to 100 Gbps in L4 FW mode and up to 50 Gbps in L7 + IPS mode (for EMIX traffic). It is capable of processing more than 15 million network packets per second and supporting over 1 million connections at the same time. The PAC is based on a trusted hardware platform included in. register of Russian industrial products Ministry of Industry and Trade

The prototype of our solution demonstrates the performance and functionality that the largest companies in the market expect. At the same time, the declared indicators are provided by a compact cluster of 2 PAC and a control system, which distinguishes MTS RED NGFW from most competing solutions. Such high-performance NGFWs are especially in demand by organizations with large volumes of traffic - data centers operators, communications cloudy providers financial structures and large industrial holdings. It is here that we see the best prospects for the use of MTS RED NGFW. For them, we will increase the performance, scalability and fault tolerance of our solution with each new version, - emphasized the director of the MTS RED product portfolio. Sergey Petrenko

MTS RED NGFW is based on two Intel Xeon Scalable 3 Gen processors of the Sunny Cove nuclear architecture, with an Intel C621A multifunctional chipset, PCI-Express v. 4.0 bus, two power supplies and hot-swappable drives. In the current release, network traffic filtering is enhanced by intrusion prevention, dynamic routing, VLAN support, URL filtering, and ICAP support. The Site-To-Site VPN mechanism is used to ensure reliable communication between branches of the organization. In addition, keeping up with the development of advanced technologies, the firewall developers implemented support for the new version of the IPv6 network protocol.

In the future, the solution will be equipped with an advanced Active-Active failover cluster, a centralized corporate management system for dozens of device clusters, search for compromise indicators (IoC), GeoIP for blocking traffic from specified geographical points, deep traffic inspection technology (DPI), Threat Intelligence module, streaming antivirus, and will also be able to work in Multi-Tenant mode.

The MTC RED portfolio includes services of the MTS RED SOC cyber attack monitoring and response center, services for protection against DDoS attacks (Anti-DDoS) and attacks on web applications (WAF), communication channel encryption services (GOST VPN), multi-factor authentication (MFA) and improving user cyber literacy (Security Awareness). MTS RED also develops its own network security solutions.