Smart-Soft: Traffic Inspector Next Generation

Main article: Firewall

Universal Security Gateway (UTM) and intrusion detection (prevention) system Traffic Inspector Next Generation is a next-generation software and hardware universal security gateway for organizing controlled Internet access to corporate computer networks and their protection against external threats. Belongs to the Unified Threat Management class.

Models in the lineup

Models in the line (data for 2020):

• S100: for small home and office networks. x86-64 small form factor (152.4 x 152.4 mm) computers are used as a hardware platform.
• S500: for medium-sized businesses and medium-sized government agencies.
• M1000: for large businesses and public sector institutions.
• L1000 +: top model for large commercial, state, educational organizations, healthcare, culture, sports and tourism institutions.
• The hardware platform of the S500, M1000 and L1000 + models is 1U rack servers.

Traffic Inspector Next Generation Modules

(data relevant for 2020)

• Traffic Inspector Next Generation Anti-Virus powered by Kaspersky - anti-virus traffic protection for Traffic Inspector Next Generation. The module was developed using Kaspersky Lab technology. Treats infected files, blocks malware, and prohibits potentially dangerous content. The module scans HTTP and FTP traffic passing through the proxy server, as well as mail traffic transmitted through the SMTP gateway. Infected objects treat, incurable and malware removes and blocks. Using heuristic analysis mechanisms, detects and prevents the receipt of files that may harm users.
• NetPolice for Traffic Inspector Next Generation is a content filtering module based on web resource categories for Traffic Inspector Next Generation. The NetPolice module is useful in schools, prohibits access to Internet resources incompatible with the tasks of education and education of students (the LED system introduced by the CAIR in 2006-2008 as part of the priority national project "Education" in more than 60,000 Russian schools). NetPolice's base includes 100 + categories. NetPolice is also used in offices to ban the misuse of the Internet by employees.

2024: Traffic Inspector Next Generation 1.12.0

The company Smart-Soft on February 6, 2024 announced the release of an updated version of the Traffic Inspector Next Generation universal security gateway. Changes in version 1.12.0 affected the web interface of a number of pages, proxy server, IPsec, GeoIP, DNS server, cryptographic library. The operating system has also been updated to the current version of FreeBSD 13.2

List of changes in Traffic Inspector Next Generation 1.12.0:

• Web interface:
  • The monitoring page has been updated.
  • Updated LAGG interface settings page.
  • The OpenVPN settings page has been updated.
  • Updated IPSec settings page.
  • Updated virtual IP the address interface (ative-passive high availability cluster).
  • The web proxy log has added a view of the rule block on the basis of which access was allowed or denied.

• GeoIP: A new protocol has been added for the source.
• Squid Proxy:
  • Added to access log information to debug rules.
  • Improved multithreaded stability.

• IPSec: Added local_port and remote_port settings in connection settings.
• Unbound: Updated user interface.
• OpenSSL has been upgraded to version 1.1.1w.
• Updated deleted lists for aliases.
• You have switched to FreeBSD 13.2-RELEASE-p3.
• Translated to the current version of OPNsense 23.7.5. Traffic Inspector Next Generation administrators can take full advantage of the updated platform.

Smart-Soft recommends that system administrators of customers who have Traffic Inspector Next Generation installed upgrade the product to version 1.12.0.

2022

UTM Traffic Inspector Next Generation 1.11.0

Smart-Soft, the Russian IT-company, developer of complex network tools, safety announces the release of the next version of the universal security gateway () UTM Traffic Inspector Next Generation. Changes in version 1.11.0 affected working with roots certificates SSL in a single security center and. proxy server The vendor also resumed the ability to use the built-in gateway antivirus ClamAV, creating a mirror for the base, and signatures updated the additional content NetPolice filtering module.

Complete list of changes in Traffic Inspector Next Generation 1.11.0:

1. Center IT infrastructures Management System, CMS added:

• the possibility of using an external certification authority to CA establish trust relations between the master node and subordinates;
• Synchronize individual rules and configurations for user and group Access Control Lists (ACLs) in the proxy server.

2. Initial installation: the National Certification Center of the Ministry of Digital Science of Russia has been added. Now Traffic Inspector Next Generation is compatible with Russian TLS certificates, its users are guaranteed unhindered access to Russian sites in any browser and from any operating systems.

3. Proxy Server - Improved operation with trusted root certificates. The previous version of the proxy did not open sites signed by intermediate certification authorities unless the site developers added the entire certificate chain to the site certificate. This version of the proxy opens such sites.

4. Transparent proxying of http and https traffic: added support for the WCCP2 protocol, designed to redirect traffic in real time.

5. Streaming antivirus: In March 2022, the ClamAV developer closed access to the update server for Russian users. Since then, Smart-Soft has not recommended the use of ClamAV due to outdated databases. To provide Traffic Inspector Next Generation users with the ability to use free streaming antivirus, in version 1.11.0 Smart-Soft deployed a regularly updated mirror of the ClamAV anti-virus signature database.

6. NetPolice content filtering module, added:

• Displays an error message for the NetPolice category that blocks the page.
• Definition of NetPolice categories for nested domains
• NetPolice category caching.

7. Borrowed code: Traffic Inspector Next Generation switched to OPNsense version 22.7.6. This version has modified the CRL code (lists of SSL certificates revoked by the issuance center ) - now it is isolated in the sandbox to avoid problems during loading. Smart-Soft conducted a deep code check of the OPNsense version and guarantees the absence of sabotage bookmarks in it.

Smart-Soft recommends that Traffic Inspector Next Generation administrators, excluding the FSTEC version, update the product to version 1.11.0.

In 2022, Smart-Soft headed for technological improvement in development and the full implementation of SDL (Security Development Lifecycle), which will make the product more stable and resource-conscious. According to the feedback of partners and customers, we can confidently say that this problem has been solved - the stability of Traffic Inspector Next Generation is comparable to the solutions of such industry giants as Check Point. Another major product update is planned by the end of 2022, including the addition of horizontal balancing, GeoIP, a plugin for IP and MAC authentication (in transparent proxy mode) and other improvements, and in 2023 the company will redesign the Traffic Inspector Next Generation interface to make it more convenient and visual for users. noted the executive director of Smart-Soft , Sergey Chernomashentsev.

Obtaining a certificate of compliance with the requirements of the Technical Regulations of the Republic of Belarus TR 2013/027/BY

Smart-Soft, a Russian developer of integrated network security systems, and Axoft report that Traffic Inspector Next Generation, a Smart-Soft solution to protect corporate computer networks, has been certified by the Operational and Analytical Center under the President of the Republic of Belarus. Axoft will provide its partners and their customers with expert and technical assistance in testing, purchasing and operating the solution. Smart-Soft announced this on October 20, 2022.

The certificate issued on the basis of the test report dated 21.09.2022 No. PI 059/2002 of the Security Lab LLC testing laboratory confirms that the batch of products software "Traffic Inspector Next Generation Universal Security Gateway version 1.10" meets the requirements of TR 2013/027/BY. Information on certification is available on the website of the certification body.

Obtaining a certificate of compliance provides our partners and customers from Belarus with the opportunity to use Traffic Inspector Next Generation to protect their networks. The high quality and efficiency of Smart-Soft solutions have been tested by the company's good work in the information security market since 2003, "said Sergey Chernomashentsev, Executive Director of Smart-Soft.

The Traffic Inspector Next Generation certification allows our Belarusian partners to offer their customers a solution to protect corporate networks from external cyber threats in the shortest possible time. An undoubted plus for users is the product of a Russian manufacturer, has a Russian-language interface, documentation and support, "said Alex Rzheutsky, director of business development in Eastern Europe at Axoft.

Adding Multifactor Authentication Module

The Russian IT-The company Smart-Soft"" on June 6, 2022 announced the expansion of the functionality of the Traffic Inspector Next Generation Universal Security Gateway (UTM) by adding a multifactor authentication Multifactor module.

Integration of Traffic Inspector Next Generation with the Multifactor module (developed by the Russian company Multifactor) opens up the possibility for Traffic Inspector Next Generation administrators to additionally protect user accounts from password matching and phishing.

A distinctive feature of the solution is that Multifactor for Traffic Inspector Next Generation works not only for VPN, but also for a proxy server. Traffic Inspector Next Generation administrators can use two options for multi-factor authentication of proxy or VPN users: RADIUS and LDAP adapters developed by Multifactor.

Expanding the functionality of information security solutions is a task that the Smart-Soft team pays special attention to. We carefully analyze the needs of the market and add only truly demanded functions to the product that ensure a high level of solution efficiency. Multifactor authentication is the same case. The most common ways to penetrate corporate networks are using company employee accounts stolen by phishing and obtained by password matching. To prevent such situations, we recommend supplementing Traffic Inspector Next Generation with a Multifactor module, "said Sergey Chernomashentsev, Executive Director of Smart-Soft.

Free Traffic Inspector Next Generation Build

On March 3, 2022, the Russian IT the company Smart-Soft"" announced the creation of a free assembly of the Traffic Inspector Next Generation Universal Security Gateway (UTM) with an extended operating period to protect Russian corporate networks during the period of sanctions tension. One of the directions of sanctions measures to influence Russia was the restriction of technology imports. A number of foreign technology companies, including information security vendors, have already announced the suspension of their activities in Russia, and among domestic developers there are more and more reports of an increase in prices for IT products. Under such conditions, administrators of Russian corporate networks who use foreign solutions to protect them risk not being able to use them further, and freezing IT budgets will not allow them to quickly switch to Russian counterparts. In connection with the current situation, Smart-Soft offers companies and organizations from Russia a free version of Traffic Inspector Next Generation for a period of 3 months, with the possibility of prolonging its use up to 6 months.

The free Traffic Inspector Next Generation build is provided as software to install it on the customer's equipment.^[1][2]].

Minimum system requirements for deploying Traffic Inspector Next Generation on virtualization systems:

• Virtualization system ROSA Virtualization : (possible and, VMware Hyper-V if there are no problems with them);
• Virtual processor: 4 cores +, at least 1.7 GHz;
• RAM: minimum 12 GB;
• Virtual HDD size: at least 15 GB;
• Virtual network adapters: minimum 2x1 Gb/s.

A mandatory requirement for hardware platforms is support. operating system FreeBSD

Smart-Soft does not provide technical support to companies using the free Traffic Inspector Next Generation build. To configure the solution, users of the free build can use the technical documentation and video tutorials posted on the Smart-Soft website. In case of critical questions, users of the free assembly can contact Smart-Soft technical support - the vendor informs about the possibility of individual consideration of such situations.

The free period during which Traffic Inspector Next Generation can be used to solve the company's problems is 120 days, starting from 02.03.2022. The use of the free Traffic Inspector Next Generation assembly during this period does not impose obligations on the customer to acquire Traffic Inspector Next Generation. At the end of this time, the software image of the system will stop working. For companies and organizations that have used the free Traffic Inspector Next Generation build to protect their corporate network and are ready to confirm the purchase of Traffic Inspector Next Generation by the end of 2022, "Smart-Soft" on request can extend the free use of Traffic Inspector Next Generation for another three months. Thus, the cumulative period of use of the free Traffic Inspector Next Generation assembly will be at least 6 months (up to 02.10.2022).

Traffic Inspector Next Generation Light

On February 15, 2022, the Russian IT the company Smart-Soft"" announced the creation of a lightweight software modification of the Traffic Inspector Next Generation Light universal security gateway focused on user access control in. This Internet modification disabled the detection and prevention invasions IPS (IDS/) and application control (nDPI, protocols application layer recognition through signature analysis) functions.

Capabilities of the Traffic Inspector Next Generation Light version to control user access to the Internet:

• Decoding and checking HTTPS traffic.
• Access control using pf firewall rules.
• Web Proxy Blacklists/Whitelists assigned to local/domain groups and users.
• Filtering using downloadable URL lists for web proxies.
• Filter by MIME object types.
• Content filtering by URL categories using NetPolice (optional module).
• Spam filtering.
• Authentication using the local user base, Active Directory directory, RADIUS server.
• HTTP Basic authentication, HTTP NTLM, Kerberos,, LDAP RADIUS.
• Mixed authentication (login/password + binding to IP/MAC address).
• Two-factor authentication on the local database in the Captive Portal, on the web proxy server and VPNservers-.
• Identification of users via SMS in places of public access to the Internet in accordance with the legislation of the Russian Federation.
• Captive Portal with support for various authentication modes.
• Support for HTTP HTTP/1.1 and proxying.
• Proxying SSL connections (HTTP CONNECT method).
• Support for FTP over HTTP.
• Transparent proxy.
• Interception and decryption of HTTPS connections.
• Caching web content.
• Filtering through access control lists.

Traffic Inspector Next Generation Light is developed by Smart-Soft specifically for customers who need:

• flexibly manage users' Internet access;
• receive detailed reports on the actions of employees when working on the Internet;
• Organize employee authorization using the local Traffic Inspector Next Generation database (for small networks without domains)
• provide end-to-end proxy authorization for employees through Active Directory.

Smart-Soft provides free testing of Traffic Inspector Next Generation Light. To order free testing, you need to send a request to the company.

"A number of customers expressed their desire to purchase a lightweight version of Traffic Inspector Next Generation with a fixed set of necessary functions for use in departments that require high-quality control of Internet user activity. We took these wishes into account and created a modification of Traffic Inspector Next Generation Light, "- notes the general director of Smart-Soft Andrei Davidovich.

Traffic Inspector Next Generation SaaS

January 27, 2022 the Russian IT- the company Smart-Soft announced the entry into the market of the cloudy security gateway, Traffic Inspector Next Generation SaaS which is the company's own development. The solution includes all the features of a traditional security gateway and provides tiered protection against. IT infrastructures cyber threats More here

2021

Traffic Inspector Next Generation 1.9.0

On October 21, 2021, Smart-Soft announced the release of the next version of the Traffic Inspector Next Generation Universal Security Gateway (UTM).

Traffic Inspector Next Generation is designed to organize controlled access to Internet users of corporate computer networks, their protection against unauthorized access and external threats and, provides filtering at different levels of the model (transport OSI , network application) and control through a web interface by - to protected HTTPS connection, as well as to the protocolSSH by using terminal access. The solution is deployed as a gateway at the edge of the corporate network and allows you to control the flows information between and. local network Internet

Starting with version 1.9.0, Traffic Inspector Next Generation, purchased as a virtual machine image, will be available in two variations - Light and Basic. The lightweight version of the Traffic Inspector Next Generation Light software product eliminates the functionality of intrusion detection and prevention (IDS/IPS) and application control (nDPI, recognition of application (seventh) level protocols through signature analysis). Traffic Inspector Next Generation Light is more focused on implementing the functions of controlling user access to the Internet.

Plug-ins have been modified

UserACL plugin, which provides filtering functions using various access lists, selective content filtering using the ICAP protocol, distribution of requests over outgoing channels:

• Added the ability to enter a list of users and groups
• The system will now warn the administrator of the error when trying to delete the lists in use.
• changes have been made to the system in transparent proxying mode - the ability to create a list of allowed sites for the "all prohibited" mode has been added (sites from this list are allowed, everything else is prohibited).

nDPI plugin - intelligent recognition of application (seventh) level protocols through signature analysis:

• added the functionality of automatic update of statistics every 5 minutes. Statistics are collected according to the rules created, the number of matches and locks, provided that the lock is enabled; according to the blocking rules of the firewall, by the number and type of packets; by protocol families; by recognized protocols.

SSO plugin (Single Sign-On authentication with single sign-on technology):

• added the ability to disable Basic authentication (this authentication scheme is used to authenticate users whose computers are not members of a domain). If you disable Basic authentication, users whose computers are not in the domain will not be served by the proxy server.
• tightened the procedure for checking DNS settings before connecting to a domain: now checks are forced on only one server - the first from the list, and not on all servers in the list. If the first server cannot process the request, the Traffic Inspector Next Generation administrator will receive a warning. It also checks not only the processing of requests for addresses of the domain controller and Traffic Inspector Next Generation, but also external domains, in particular "ya.ru."

SquidLog Plugin - Advanced Web Proxy Reports:

• improved functionality of log database compression - old records removed from statistics are now deleted from the database, providing its compression.

A plugin has been added to import users and groups from the Traffic Inspector multifunction firewall. Now Traffic Inspector administrators can automatically import users and groups into Traffic Inspector Next Generation and use the migration conditions from Smart-Soft.

Translated to the current version of OPNsense 21.7.3. Traffic Inspector Next Generation administrators can take full advantage of the updated platform.

Smart-Soft recommends that Traffic Inspector Next Generation administrators, excluding FSTEC, upgrade to Traffic Inspector Next Generation 1.9.0.

ROSA Virtualization Compatibility

The company STC IT ROSA announced on August 18, 2021 that it and Smart-Soft have successfully tested the compatibility of their products - the ROSA Virtualization Management System and the Traffic Inspector Next Generation Universal Security Gateway (UTM). The result of the tests was the signing of a compatibility certificate. Read more here.

Traffic Inspector Next Generation 1.8.0

On March 31, 2021, Smart-Soft announced the release of an updated version of the Universal Security Gateway (UTM) and the Traffic Inspector Next Generation intrusion detection (prevention) system.

According to the company, in the release of Traffic Inspector Next Generation 1.8.0:

• The ability to forcibly limit the bandwidth of the proxy server has been added. Traffic Inspector Next Generation administrators can now limit the speed of Internet connections for individual users, which will help optimize overall network performance.
• Added the ability to switch YouTube to safe family mode. Enabling secure YouTube mode allows you to apply age restrictions to content to and blocks comments from being placed under videos. The function is especially in demand for organizations and institutions in the field. formations
• authentications domain The Single sign-on/SSO mechanism is optimized. When a disallowing rule is triggered for a user or group of users, it switches to backup basic authentication for non-domain users, and the computers user (group) is notified of the need for authentication. Traffic Inspector Next Generation administrators can now disable basic authentication to avoid switching to the user and demonstrating the authentication window to the user. In this mode, the site denied to the user (user group) will simply not be downloaded, and the user (group) will see a message that the proxy does not accept the connection.

The ability to disable standby basic authentication mode - only domain users can use Traffic Inspector Next Generation.

• Added proxy reports regarding statistics accounting. Traffic Inspector Next Generation administrators can now obtain detailed statistics on each user and the domains they visited, as well as the number of visits to each domain by the user.
• Translated to OPNsense version 21.1.3. Traffic Inspector Next Generation administrators can take full advantage of the updated platform. Among the updates is the addition of policy-based IDS/IPS rule management, which optimizes the administrator's work with a number of rules from a thousand or more.
• The mechanism for activating user and group rules in the access control list (ACL) of the proxy server has been optimized - a button for turning it on and off has been added opposite each rule. The Traffic Inspector Next Generation Universal Security Gateway (UTM) and intrusion detection (prevention) system is designed to organize controlled access to the Internet of corporate computer networks and their protection against external threats. Belongs to the Unified Threat Management class. Based on open source OPNsense.Traffic Inspector Next Generation provides filtering at different levels of the OSI model and control via a web interface over a secure HTTPS connection, as well as over SSH using terminal access. The solution is deployed as a gateway at the edge of the corporate network and allows you to control information flows between the local network and the Internet.

Models in the line:

• S100: for small home and office networks. The hardware platform is a - x86 64 small form factor (152.4 x 152.4 mm) computer.
• S500: for medium-sized businesses and medium-sized government agencies.
• M1000: for large businesses and public sector institutions.
• L1000 +: a model for large commercial, government, educational organizations, health, culture, sports and tourism institutions.

The hardware platform of the S500, M1000 and L1000 + models is the 1U/2U form factor rack servers.

2020

Compatibility of Traffic Inspector Next Generation 1.7 with Astra Linux Common Edition release "Eagle" 2.12.29 and Astra Linux Special Edition release "Smolensk" 1.6

On December 14, 2020, Astra Linux GC, a representative of the domestic market for operating systems and virtualization tools, announced that, together with Smart-Soft LLC, they completed work aimed at checking and confirming the compatibility of the security gateway Traffic Inspector Next Generation 1.7 with Astra Linux Common Edition operating systems release "Eagle" 2.12.29 and Astra Linux Special Edition release "Smolensk" 1.6.

In the product release, in version 1.7, the developers implemented integration with the Astra Linux user identification management system, after which a set of works was organized to check the operability of the software stack.

During the tests, Astra Linux experts used workstations running the generic and hardened OS Astra Linux Common Edition release "Eagle" 2.12 and Astra Linux Common Edition release "Smolensk" 1.6, including with the installed cumulative security update "Bulletin No. 20200722SE16." Traffic Inspector Next Generation version 1.7 was installed on these AWS and tested. The checks affected the registration of the security gateway on server FreeIPA both Astra Linux operating systems and filtering the outbound traffic of client machines under management. domestic operating systems ON Traffic Inspector Next Generation was also tested from workstations running in the Astra Linux environment through web browser and SSH remote access. In addition, experts checked how correctly streaming video and audio are transmitted through the proxy server from the security gateway and traffic is broadcast and filtered by protocols, HTTP FTP and HTTPS IMAP.

The results of the studies demonstrated: Traffic Inspector Next Generation is fully compatible with domestic operating systems. In a single FreeIPA domain network running Astra Linux, the gateway works correctly and provides packet filtering, and the identity management system operates normally. 3

The ability to use Traffic Inspector Next Generation together with Astra Linux is available to all users of the latest version of the security gateway, and the functionality of complex solutions is confirmed by official Ready for Astra Linux compatibility certificates.

The Smart-Soft company, being a domestic developer of funds, pays information protection great attention to the development of cooperation with the Russian IT companies. And our partnership with Astra Linux GC is a logical continuation of the course towards the creation of Russian software products that complement each other's functionality. I am sure that the project implemented with Astra Linux is just the first step towards the development of a fruitful and strategically important partnership between our companies, - said the executive director of Smart-Soft. Vitaly Orlov

Astra Linux GC is constantly expanding the range of Astra Linux-compatible solutions that allow you to create fully functional information systems based on domestic software. I am confident that the use of Traffic Inspector Next Generation will allow our users to more effectively organize secure remote access to protected information, - comments Yaroslav Bogomolov, Director of the Astra Linux GC Implementation and Support Department.

Traffic Inspector Next Generation 1.7.0

On October 28, 2020, Smart-Soft, the developer of the Traffic Inspector Next Generation Universal Security Gateway (UTM), announced the release of the next version of the product.

The following changes are implemented in the Traffic Inspector Next Generation 1.7.0 release:

• Web Proxy:
  • integration with FreeIPA (Free Identity, Policy and Audit) - a system for centralized management of user identification, setting access and audit policies for Linux and Unix networks;
  • it is possible to generate an exception list for accessing sites that have their own (self-signed) SSL certificates. The site list is set manually by the administrator when you configure the Universal Security Gateway.

• Certificates: The root certificate is now automatically generated when Traffic Inspector Next Generation is installed.
• VPN (Virtual Private Network):
  • updated os-gostvpn plugin for GOST VPN;
  • added support for Cyrillic domains for IPSec.

• Next-Generation Firewall (NGFW) - Adds validation for valid names for firewall aliases.
• L7 filtering (NDPI, Deep Package Inspection System):
  • added sorting by rule priority;
  • The static library has been moved from the ports to the library, which allows it to be updated more quickly.

• NetPolice context filtering plugin:
  • updated the list of categories from CAIR (Internet Resource Analysis Center, NetPolice content filter developer).
  • Switched to OPNsense version 20.7.2, Traffic Inspector Next Generation users can use all the features of the updated platform.

• The following Traffic Inspector Next Generation elements are optimized:
  • Automatic BIOS update when Traffic Inspector Next Generation is installed on the APU2 hybrid processor;
  • Loading URL list Roskomnadzor
  • Start, stop, and restart NetFlow
  • generating a certificate for the web server;
  • viewing proxy logs;
  • Copying firewall rules to the Central Management System (CMS)
  • processing of an unknown category in the NetPolice plugin (content filtering module by URL categories);
  • priority numbers in the UserACL plugin (advanced filtering functionality on the web proxy);

• *SMS-Portal;
  • web interface;
  • The anti-phishing and KSN functions in the Kaspersky anti-virus traffic scanning plugin are disabled by default.

• Updated online documentation:
  • updated documentation for the UserACL plugin (web proxy filtering);
  • added documentation for the dnscrypt-proxy plugin (flexible DNS proxy server with support for encrypted DNS protocols DNSCrypt v2, DNS-over-HTTPS and Anonymous DNSCrypt);
  • Added description of FreeIPA (Integrated Authentication System);
  • Updated SSO authentication configuration documentation.

2019

Traffic Inspector Next Generation Translation to OPNsense 19.7.3

On September 16, 2019, Smart-Soft announced the release of an updated version of the Universal Security Gateway (UTM) and the Traffic Inspector Next Generation intrusion detection (prevention) system.

According to the company, in the release of Traffic Inspector Next Generation:

• We have translated to the current version of OPNsense 19.7.3, which allows users to take full advantage of the updated platform.

Updated the following:

• • Rule logging. NAT When the function is enabled, the logs firewall keep information the NAT rules triggered.
  • WPAD/PAC and web proxy parent proxy support. The refinement provides the ability to automatically configure a proxy server in client browsers.
  • Support DNSSEC in - DNSserver Dnsmasq provides protection against spoofing - IP addresses by cryptographic authenticating the data source and verifying data integrity.
  • OpenVPN client export API provides the ability to automate the process of issuing client certificates for OpenVPN.
  • Plugins added: API backup export - automatic operation with backups; Hardware widget - providing information about the hardware platform; Nginx is a web server and mail proxy server.
  • Added the display of automatic firewall rules in the web interface to provide a complete list of the rules used.
  • Added statistics collection and display for all firewall rules.
  • Provides support for synchronization of user groups in LDAP.
  • There is support for requests for generating certificates (CSR, Certificate Signing Request) - there is no longer a need to fully generate SSL certificates on the device, it is enough to sign an already pre-formed request for a certificate.

• Added authentication of users to proxies by their IP/MAC addresses.
• It is possible to save backups of the config.xml configuration file in the Yandex.Disc. service.
• When installing the plugin, the section related to the plugin automatically appears in the Traffic Inspector Next Generation menu. The revision eliminates the need to manually update the menu interface by the administrator when installing each plugin.
• Added the ability to select a skin. The basic delivery of Traffic Inspector Next Generation has two themes preinstalled. To use three additional themes, you need to install the appropriate plugins.

The detected errors were also fixed.

When migrating to an updated version, the developer recommends paying attention to the following points:

• Gateway health schedules may need manual reset due to Apinger migration to Dpinger. Apinger is no longer available.
• GeoIP intrusion detection rules are automatically deactivated and must be manually migrated to the GeoIP firewall alias.
• The quagga plugin has been replaced with an FRR plugin. The quagga binary package is retained for September 2019.
• It is recommended that you review the FRR documentation for the necessary system reconfiguration.
• Loading the Bhyve UEFI may fail as a guest. For September 2019, this problem is being studied.
• The SNMP plugin was replaced by the Net-SNMP plugin.
• Web proxy login privilege is no longer available. Instead, access may be restricted by the group selector.
• OpenVPN no longer supports listening to gateway groups. Instead, use localhost in conjunction with port forwarding.

Traffic Inspector Next Generation 1.4.1

On July 19, 2019, Smart-Soft announced the release of the next version of the software and hardware universal security gateway (UTM) and the Traffic Inspector Next Generation intrusion detection (prevention) system. Version 1.4.1 is based on OPNsense version 18.7.10.

Improvements to the Smart-Soft command in the presented Traffic Inspector Next Generation release:

1. Added the os-gostvpn plugin, built on integration with the cryptographic information protection tool (CIPF) "MagpPro Cryptopacket." Using the plugin allows you to organize VPN communication channels encrypted according to GOST. Cryptographic encryption is carried out in accordance with GOST R 34.10-2012, P 34.11-2012, 28147-89.
2. os-ndpi plugin - Layer 7-filtering based on n:DPI

• Added the function of selecting an interface for monitoring;
• The protocol recognition library has been updated to the latest, current version.

1. Plug-ins os-cms-master, os-cms-node of Traffic Inspector Next Generation network gateway distributed infrastructure centralized management system:

• Now you need to use a separate license for each plugin;
• Added the ability to save filter settings in web proxy reports.

The detected errors were also fixed.

In general, the Traffic Inspector Next Generation Universal Security Gateway (UTM) and intrusion detection (prevention) system is designed to organize controlled access to the Internet of corporate computer networks and protect them from external threats. Belongs to the Unified Threat Management class. Based on open source OPNsense project.

Traffic Inspector Next Generation provides filtering at different levels of the OSI model and web-based management over a secure HTTPS connection, as well as over SSH using terminal access. The solution is deployed as a gateway at the edge of the corporate network and allows you to control information flows between the local network and the Internet.

Models in the line:

• S100: for small home and office networks. x86-64 small form factor (152.4 x 152.4 mm) computers are used as a hardware platform.
• S500: for medium-sized businesses and medium-sized government agencies.
• M1000: for large businesses and public sector institutions.
• L1000 +: top model for large commercial, state, educational organizations, healthcare, culture, sports and tourism institutions.

Hardware platform of the S500, M1000 and L1000 + models: 1U rack servers DEPO form factors.

Traffic Inspector Next Generation 1.4.0

On February 27, 2019, Smart-Soft announced the release of the next version of the software and hardware universal security gateway (UTM) and the Traffic Inspector Next Generation intrusion detection (prevention) system.

Improvements to the Smart-Soft command in the presented Traffic Inspector Next Generation release:

1. os-ids-rules plugin - rule editor for intrusion detection system:
2. * Now you can add your own rules.
3. os-proxy-useracl plugin - working with user and group lists:
4. * Added the possibility of multiple selection in the group/user field for rules;
5. * Added routing of users to different WAN interfaces, thus it became possible to automatically direct different users through different communication channels.
6. os-proxy-sso plugin - user authentication on a web proxy via the Kerberos protocol:
7. * There is support for multiple domains at the same time.
8. os-ndpi plugin - Layer 7-filtering based on nDPI:
9. * The protocol recognition library has been updated to the current version.
10. Plugin os-squid-log-pg - collecting data on user requests from the log file of the web proxy to the database to generate reporting on Internet access:
11. * PostgreSQL backend for storing proxy logs.
12. os-security-scanner plugin -: scanner safety
13. * Added the ability to select scan plugins.
14. Captive-portal - a web portal that a user gets to after connecting to the company's network:
15. * Added the ability to create a blacklist of MAC addresses to block access to the network of users included in this list.
16. Web Proxy:
17. * The ICAP bypass option has been added, which allows you to handle traffic without an ICAP service if the proxy detects that the ICAP service is not responding.
18. Plugins of the Traffic Inspector Next Generation centralized multi-device management system are activated.
19. Documentation for configuring the SMTP gateway has been prepared.

Also, in the presented version, the installer, console menu were translated into Russian and the detected errors were corrected.

Traffic Inspector Next Generation version 1.4.0 is based on OPNsense version 18.7.7. The developer draws attention to the following points in connection with migration:

• SSH access is bound to the "wheel" group automatically added to the "admins" group of which root is a member. "Root" is the only user assigned a default shell (opnsense-shell that calls the root console menu).
• Assigning SSH access to a selected user group that is not in the admins group is available from the System menu. However, only SCP will work, which is associated with requests from clients to be more careful about shell access rights. If it is necessary to provide the user with interactive access via SSH, it is recommended to change the shell "nologin" to a pre-installed shell in accordance with its settings.
• encryption algorithms The Web was strengthened. GUI HTTPS It is recommended to use updated versions for access. browsers
• Redundant authentication methods in the GUI/system are removed due to the possibility of selecting several authentication servers at the same time. Therefore, you must assign the current backup authentication method as the primary method or use several methods.
• Although WAN interfaces require a gateway for normal operation, it is not necessary to assign a gateway in a single-WAN scenario to avoid affecting WAN response service. In this regard, the selection "none" was changed to "auto-detect." This is the recommended setting if you are not using multi-WAN.
• To prepare for APIs to work with firewall aliases, item definitions were removed because they supported legacy urltable_ports and url_ports types.
• In OpenVPN, the tunnel network computation/31 is modified to use the first and last address as the network address. The broadcast address does not exist. If tinctures are affected, you must adjust the clients or export their configuration again. It will contain the necessary changes. Additionally ,/32 tunnel networks are not allowed in the version presented.

2018

Traffic Inspector Next Generation 1.3.3

On November 7, 2018, Smart-Soft announced the release of the software and hardware version of the Universal Security Gateway (UTM) and the Traffic Inspector Next Generation intrusion detection (prevention) system.

According to the company, Traffic Inspector Next Generation version 1.3.3 is based on OPNsense version 18.1.13.

Improvements to the Smart-Soft team for November 2018 in the Traffic Inspector Next Generation release:

• Os-proxy-useracl plugin that allows you to work with user and group lists:
  • added auto-updated remote blacklists, including Roskomnadzor lists (IP, URL), ad blocking list ;
  • predefined MIME type lists have been added.

• Os-c-icap-clamav plugin that supports HTTP, HTTP traffic checking:
  • added category lock YouTube.

• Os-sms-portal plugin that implements the functionality SMSidentifications-:
  • Added support for SMPP to send messages.

• antivirus Kaspersky Os-kaspersky plugin:
  • added options scannings Phishing and. Kaspersky Security Network (KSN)

Also for November 2018, the detected errors were fixed.

Os-proxy-useracl plugin redesigned in version 1.3.2

On October 16, 2018, Smart-Soft announced the release of the next version of the software and hardware universal security gateway (UTM) and the Traffic Inspector Next Generation intrusion detection system.

Traffic Inspector Next Generation version 1.3.2 is based on OPNsense version 18.1.13.

Improvements to the Smart-Soft command in the presented Traffic Inspector Next Generation release:

1. The os-proxy-useracl plugin has been completely redesigned, allowing you to work with user and group lists:

• Filters have been added by MIME type (by content type to be controlled)
• added filtering by User Agent type (by the type of browser from which access must be adjusted);
• added the ability to assign rules to the source IP addresses (IP addresses of network adapters of connected devices) with the ability to specify single IP addresses and IP networks;
• added the ability to assign rules to destination IP addresses (IP addresses of resources to be managed) with the ability to specify single IP addresses and IP networks;
• added a list of schedules to configure (restrict) access to resources during the specified period of time, by day of the week;
• added the ability to make exceptions for SSL-Bump operations (a special mode of the Squid software package used to intercept and decrypt the contents of encrypted HTTPS sessions) so that HTTPS decryption is not carried out on trusted sites and does not affect their security algorithms;
• Added blacklists/whitelists for ICAP (prohibiting/allowing ICAP handling control rules used to modify HTTP requests and HTTP responses, control traffic)
• added the ability to select the regexp/dstdomain option when compiling domain lists (regular expression constructor/destination domain name).

2. The os-squid-log plugin used to access web proxy reports in the web interface has been improved:

• added a mode for displaying information on missed and blocked traffic at the same time.

3. Information about the hardware platform and BIOS version has been added to the dashboard.

4. Updated and reorganized Traffic Inspector Next Generation documentation on the site.

The translation into Russian was also finalized and the detected errors were corrected.

author '= Vaidas Damoševičius, Technical Director of Smart-Soft The roadmap of our product includes not only its full compliance with current information security needs and challenges, but also its maximum usability. Our task is to offer the market an easy-to-configure and work solution that is optimal and sufficient for a one-time "closure" of all network vulnerabilities.

Traffic Inspector Next Generation 1.3.1

On July 24, 2018, Smart-Soft announced the release of the next version of the software and hardware universal security gateway (UTM) and the Traffic Inspector Next Generation intrusion detection (prevention) system.

Traffic Inspector Next Generation version 1.3.1 is based on OPNsense version 18.1.9.

Improvements to the Smart-Soft command in the Traffic Inspector Next Generation 1.3.1 release:

• System: writing a log to a remote log server using the TCP protocol;
• APU devices: reset button to default settings, LED control;
• Administration: ACL to control access to plugins;
• Plugin: os-kaspersky the ability to edit proxy response templates;
• Proxies: customized response patterns for different reasons for blocking;
• Translates tunables settings assignments.

The translation into Russian was also finalized and the detected errors were corrected.

Traffic Inspector Next Generation 1.3.0

On April 20, 2018, Smart-Soft announced the release of the next version of the software and hardware universal security gateway (UTM) and the Traffic Inspector Next Generation intrusion detection (prevention) system.

Traffic Inspector Next Generation version 1.3.0 is based on OPNsense version 18.1.5, which includes the transition to FreeBSD 11.1, PHP 7.1 and fixes related to Meltdown and Specter vulnerabilities.

Improvements to the Smart-Soft com mand in the Traffic Inspector Next Generation 1.3.0 release

• Anti-virus traffic scanning Kaspersky : an os-kaspersky antivirus plugin has been added; added os-c-icap-clamav plugin - an improved alternative to os-c-icap + os-clamav plugin bundle.
• Web Proxy Server: Moved to Squid 4.
• Updates: on installations, starting from version 1.3.0, the ZFS file system was migrated.
• User Interface: The license management page has been modified and translated into the MVC design template.
• Layer 7 filtering: the os-ndpi plugin has improved Telegram detection and blocking.
• Security scanner: the os-security-scanner plugin implements control over the operation of the service and has improved the user interface.

The translation into Russian was also finalized and the detected errors were corrected.

Traffic Inspector Next Generation 1.2.5 на базе ASRock Rack

In early March 2018, D-Link announced the release of a version of Smart-Soft's comprehensive UTM solution with advanced functionality - Traffic Inspector Next Generation 1.2.5 based on ASRock Rack server platforms.

The Traffic Inspector Next Generation software and hardware suite based on ASRock Rack server platforms is designed to organize and manage Internet access, control traffic and protect local networks from various types of threats in government agencies and commercial organizations with up to 1000 users.

To comply with the requirements of the legislation of the Russian Federation in the field of providing public access to the Internet, the Traffic Inspector Next Generation UTM solution implements the SMS Portal functionality, which runs on all supported versions of desktop and mobile operating systems.

Traffic Inspector Next Generation 1.2.5 supports:

• a special template of the SMS identification page with a choice of group or age category;
• Extended list of supported SMS gateways
• the ability to view statistics by SMS users in proxy reports;
• the ability to apply Squid and NetPolice access rules to SMS users.

Traffic Inspector Next Generation version 1.2.5 ensures that owners of public Internet access points fully comply with the requirements of the legislation of the Russian Federation:

• Federal Law of 27.07.2006 No149-FZ "On Information, Information Technologies and Information Protection";
• Resolutions of the Government of the Russian Federation of July 31, 2014 No758 "On Amendments to Certain Acts of the Government of the Russian Federation in Connection with the Adoption of the Federal Law" On Amendments to the Federal Law "On Information, Information Technologies and Information Protection" and certain legislative acts of the Russian Federation on the issues of streamlining the exchange of information using information and telecommunication networks ";
• other legislative acts regulating the sphere of data transfer services and providing access to the Internet using collective access points.

Traffic Inspector Next Generation is available for order on the Smart-Soft website.

The following ASRock Rack server platforms are available for delivery from the D-Link production and logistics complex in Ryazan:

• Single-tube 1U2FH-4L with 4 front hard drive bays,
• Dual-tube 2U4FH-8L with 8 front hard drive bays,
• Dual-engine Blade system 2U4N-F with 4 server nodes.

Traffic Inspector Next Generation 1.2.5

The company "Smart-Soft" announced in February 2018 the release of the next version of the next generation software and hardware network gateway for organizing controlled access to the Internet to corporate computer networks and their protection against external threats Traffic Inspector Next Generation, as well as updating the software security gateway that Traffic Inspector ensures the owners of public access points Internet in full compliance with the legislation of the Russian Federation.

Among the modifications of the Smart-Soft team in the Traffic Inspector Next Generation 1.2.5 release:

• os-proxy-useracl plugin for web filtering using proxies based on user and group lists: binding rules to an authentication server, the ability to work with sms-portal groups;
• os-sms-portal plugin implementing SMS identification functionality: full compliance with the requirements of the legislation of the Russian Federation, a special template of the SMS identification page with a choice of a group or age category, support for SMS gateways, viewing statistics on SMS users in proxy reports, the ability to apply Squid and NetPolice access rules to SMS users;
• os-netpolice plugin for content filtering according to NetPolice lists: binding rules to, to the server authentications the ability to work with sms-portal groups;
• os-security-scanner plugin, which controls the launch and configuration of the integration framework for GoLismero security scanners and updating vulnerability databases: the OpenVAS scanner is integrated, which frees you from the need to use an external OpenVAS scanner;
• os-ndpi plugin for Layer 7 filtering: protocol recognition library has been updated to version 2.2;
• Web Proxy Localize Web Proxy Response Templates.

Traffic Inspector Next Generation 1.2.5 is based on OPNsense 17.7.12. For OPNsense version 17.7.12, the Smart-Soft command provided the web-proxy-useracl 1.0 plugin. The entire list of changes in OPNsense 17.7.12 is presented on the project website.

In turn, you can read about the innovations in the Traffic Inspector 3.0.2.917 release here.

Traffic Inspector Next Generation 1.2.4

On January 09, 2018, Smart-Soft announced the release of a version of the Traffic Inspector Next Generation 1.2.4 firewall based on OPNsense 17.7.11.

In the updated version, we switched to PHP 7.1. The entire list of changes in OPNsense 17.7.11 is presented on the project website.

Improvements to the Smart-Soft command in the Traffic Inspector Next Generation 1.2.4 release:

• os-proxy-ntlm plugin: NTLM web proxy authentication for those who do not have the ability to use Kerberos authentication;
• full support for Cyrillic domains in all subsystems;
• Added SNMP configuration in the web proxy.

2017

Traffic Inspector Next Generation 1.0.2 received a certificate from the FSTEC of Russia

On December 14, 2017, Smart-Soft announced that it had received the FSTEC certificate for the Traffic Inspector Next Generation UTM solution version 1.0.2. The basis of certification was the requirements of the FSTEC of the Russian Federation for firewalls.

The FSTEC Certificate of Conformity No. 3834 dated December 4, 2017 certifies that the Traffic Inspector Next Generation software and hardware complex is a firewall of type A and B and meets the requirements of the documents:

• "Requirements for firewalls (FSTEC of Russia, 2016)
• "Protection profile of type A firewalls of the fourth protection class. IT.ME.A4.PZ "(FSTEC of Russia, 2016)
• "Protection profile of type B firewalls of the fourth protection class. IT.ME.B4.PZ "(FSTEC of Russia, 2016)

The availability of the FSTEC certificate opens up the possibility of using Traffic Inspector Next Generation 1.0.2 in government agencies, health and education institutions, as well as commercial companies that legally define the need to use certified products.

Traffic Inspector Next Generation 1.0.2 can be used in state information systems of the 1st security class, in automated control systems of production and technological processes of the 1st security class, in personal data information systems if it is necessary to ensure the 1st level of personal data security, in public information systems of the 2nd class.

Traffic Inspector Next Generation 1.0.2 is a firewall used on the physical boundary (perimeter) of the network.

The wide functionality of the device allows:

• Block any external connections;
• Organize any rules of access and Internet for network users;
• Organize secure DMZ zones;
• Identify and block hacking and unauthorized control of computers on the internal network (certification of the intrusion detection and prevention system is scheduled for early 2018);
• Organize encrypted VPN channels between branches, partner organizations, remote employees and the central office;
• Organize VPN communication channels encrypted according to GOST (integration with CIPF "MagPro Cryptopacket");
• Further protect remote connections through the use two-factor authentications of users.

Traffic Inspector Next Generation 1.2.3

The updated version of the Traffic Inspector Next Generation firewall is based on OPNsense version 17.7.7.

• Added the ability to selectively enable filtering of sites by category for users and groups in the os-netpolice plugin, as well as the ability to apply a filter for sites that did not fall into any of the NetPolice categories;
• Added os-proxy-ntlm plugin for NTLM authentication on a web proxy.

Traffic Inspector Next Generation Upgrade to Version 1.2.0

On September 15, 2017, Smart-Soft introduced Traffic Inspector Next Generation version 1.2.0.

The updated version of the Traffic Inspector Next Generation firewall is based on OPNsense 17.7, an open source firewall distribution. Over the years of its development, OPNsense has seriously changed: the functionality is distributed among individual modules, a simple firmware update process has been implemented, and support for several languages ​ ​ has appeared. The OPNsense 17.7 release has more than 300 changes from version 17.1, mainly optimization and modernization of various platform components.

In addition to the OPNsense update, the Traffic Inspector Next Generation development team has finalized a number of modules:

• Added chronological web proxy report type;
• The User ACL module has a configuration of the order in which the rules are applied;
• Added interactive console administration tools trafshow and htop;
• The translation into Russian has been finalized.

DEPO Traffic Inspector Next Generation Release

On July 6, 2017, DEPO Computers and Smart-Soft announced the launch of DEPO Traffic Inspector Next Generation technology in June 2017.

The product is designed to support information security when connecting the enterprise IT infrastructure to the Internet.

The product is based on Russian technologies and provides IT specialists with a set of tools for protecting the local network from external attacks, organizing secure communication channels (VPN), filtering and traffic management.

DEPO Traffic Inspector Next Generation Properties

• Protect the corporate network from hacking, data theft, financial theft, virus attacks and hacker intrusions.
• Organization of efficient use of the Internet by employees of the company:
  • control and restriction of user access to sites, applications,
  • content filtering. For educational institutions, content filtering can be configured according to the lists of categories recommended by the Ministry of Education and Science of the Russian Federation.

• Taking measures to comply with legislation governing access and use Internet (FZ-152, FZ-149, FZ-139, FZ-188, FZ-436).
• Centralized control and control of Internet access of a geographically distributed branch network.

The product has a simple web-based administration system. The dedicated web-based DEPO Traffic Inspector Next Generation Center Management System console allows you to centrally manage multiple DEPO Traffic Inspector Next Generation installed across departmental and remote branch offices. An administrator can define network access rules for users and applications, adjust content filtering levels, create virtual private networks, change settings, and generate detailed reports on any deployed solution instance from a single console.

The hardware platform for this technological solution is the servers of the Storm DEPOT line.

Two editions are offered:

• DEPO Traffic Inspector Next Generation M1000
• DEPO Traffic Inspector Next Generation L1000+.

The first option is to protect the infrastructure of up to 1,000 users. The second is for infrastructure with a number of users from 1 thousand to 10 thousand.

On July 5, 2017, the examination of DEPO Traffic Inspector Next Generation by the certification body was completed. The certificate of the FSTEC of Russia in class 4, type A is issued in accordance with the requirements for firewalls, which entered into force on December 1, 2016.

The modern DEPO Traffic Inspector Next Generation solution integrates the best Russian technologies and is fully ready for implementation into the IT infrastructure of any complexity. The joint work of DEPO Computers engineers and Smart-Soft specialists made it possible to create a complete multifunctional solution, thanks to which you can quickly deploy an effective system for protecting corporate-level information from modern cyber threats. We are confident in the success of DEPO Traffic Inspector Next Generation in the Russian market, since this solution exactly meets the needs of Russian customers in a convenient and reliable information protection tool. Dmitry Cherkasov, Deputy General Director of DEPO Computers

In my opinion, we have created a precedent for the successful cooperation of two Russian manufacturers in the development of information security systems. The solution takes into account the requirements of the legislation of the Russian Federation and modern trends in the development of network protection solutions. That is why the joint software and hardware complex DEPO Traffic Inspector Next Generation is a competitive high-tech solution for public sector organizations, education, healthcare, commercial companies. Now our customers can solve the assigned information security tasks in a single product. Tatyana Medova, Executive Director of Smart-Soft Group of Companies

Traffic Inspector Next Generation на ASRock Rack

D-Link and Smart-Soft announced in early 2017 cooperation in the field of information security solutions. As part of the first stage of cooperation, the companies presented the Traffic Inspector Next Generation UTM solution, hardware implemented on servers supplied by D-Link Trade, based on ASRock Rack platforms.

The hardware of the complex is servers based on ASRock Rack platforms, assembled and configured at D-Link's own production base in Ryazan. The complex passed full-scale testing, including in real operation conditions and demonstrated high performance and reliability.

2016

Релиз Traffic Inspector Next Generation

On October 14, 2016, Smart-Soft announced the release of an upgraded version of the Traffic Inspector Next Generation UTM solution. The version simplifies network administration, improves the reliability of information protection.

Traffic Inspector Next Generation - firewall, IDS/IPS, VPN server, web proxy. The solution has a built-in firewall that filters traffic, monitors the state of network connections, protects the network from hacker attacks and various types of intrusions. Web filtering using categories is implemented through a built-in proxy server and one of the free or paid blacklists.

The platform for Traffic Inspector Next Generation is OPNsense under a free BSD license. The Traffic Inspector Next Generation network security system is presented in three versions focused on the needs of businesses of various sizes - from SOHO to Enterprise. The company's solution is used to ensure network security in a wide variety of sectors of the economy and business, as well as in the public sector.

In the "dimensional grid" Traffic Inspector Next Generation - by analogy with clothing - versions from S (up to 100 users) to L (from 10,000 users). It is built on the SPO. It has clustering. With ICAP support, Traffic Inspector Next Generation can be integrated with third-party antivirus, DLP systems. We did our best to integrate our solution into the infrastructure of almost any client, and that, in turn, did not require much investment in modernization.

This version has a universal, simple solution: end-to-end authentication on a proxy server. Instead of registering users directly in the firewall, they are now verified on LAN servers or Windows NT. Adding ICAP support to the proxy allows you to connect those antiviruses that the client uses to check traffic, which in turn increases network security. It also makes it possible to block spam, give access to private resources, take into account traffic and much more.

The Traffic Inspector Next Generation library uses the signatures available to determine whether traffic belongs to the application. This is necessary for organizations wishing to monitor the activities of employees in the workplace.

The version adds support for geolocation in IPS, which helps to regulate connections based on the geographical location of the source IP address or destination. In particular, add a rule that blocks connection to a subscriber in India, or allow only domestic Russian connections.

We developed Traffic Inspector Next Generation, based on the experience gained over 13 years in creating a domestic network security solution and innovative technological trends. In the new versions of the solution, we will strive to facilitate the work of the end user of our products, as well as improve the reliability of network protection. We do not stand still, but constantly develop and try to make our solutions more convenient and safe for use. In the future, we will also take this approach. Andrey Davidovich, CEO of Smart-Soft

Traffic Inspector Next Generation (TING) View

On May 16, 2016, Smart-Soft introduced a UTM solution - Traffic Inspector Next Generation (TING).

According to the developers, TING fully complies with the concept of unified treat management. In the process of creating a product, attention is paid to the functionality of protection against network threats. TING has a built-in firewall that filters traffic by monitoring network connection states (TCP, UDP) and protects the network from hacker attacks and various types of intrusions.

Intrusion Detection and Prevention (IPS/IDS) monitors access to the local network and automatically protects it from intrusions. To protect the connection of personal computers and other devices to a corporate network through a common network (VPN) and comply with the policies of functionality, security and management of a private network, TING proposes to use proven OpenVPN or IPSec protocols.

For traffic management and access control Internet , in addition to the standard filtering functionality - HTTP traffic, TING implements the ability to decrypt and filter HTTPS traffic, support for the ICAP protocol, the ability to download "blacklists" and categories from external resources, filtering by content type.

Notes