UserGate Proxy & Firewall

The main articles are:

• Firewall
• Antiviruses

UserGate Proxy & Firewall is a comprehensive UTM (Unified Threat Management) solution for sharing the Internet from a local network, accounting traffic, and protecting the corporate network from external threats. UserGate is an effective alternative to expensive software and hardware and is designed for use in small and medium-sized businesses.

2016: UserGate UTM. Composition and functionality

According to 2016 information, UserGate UTM is based on an innovative platform created by Entensys developers for telecom operators and capable of working in projects with tens of thousands of users over a channel width of up to 10 Gb/s. With the release of this latest development, Entensys becomes the only Russian company producing gateway Internet security solutions of this level.

UserGate UTM combines a firewall, intrusion detection system, malware and virus protection, content filtering system, spam filtering and other functions in a single solution that is convenient for installation and administration.

The product also implements various functions that are more in demand by large organizations, including access control based on user identification (AD, Kerberos, LDAP, Radius, Captive Portal, etc.), load balancing, bandwidth management, prevention of modern threats, SSL analysis, application recognition and others. The new solution supports the so-called BYOD (Bring Your Own Device) concept, allowing special policies to be applied to users' personal devices such as smartphones and tablets. Also, with the help of the product, it is possible to organize Internet access for guest users. UserGate UTM is focused on protecting networks of medium and large enterprises, including those industrial facilities where uninterrupted operation and high performance are most required.

This development of Entensys allows you to build on the basis of a distributed cluster system effective high-speed scalable nodes that provide protection against Internet threats, as well as control traffic, including with the analysis of protocols and applications.

UserGate UTM comes as a virtual image that supports VMware, Hyper-V, Virtual Box and others virtual platforms, or as a firmware appliance. The UserGate UTM Appliance C, D, E, and F models are tailored to different user segments, from a small business desktop upgrade to a high-performance server solution for businesses with tens of thousands of users.

According to the developer, before the official release of UserGate, UTM was tested in networks of about three hundred organizations and was purchased for full use by thirty Russian companies with a number of users from 25 to 12 thousand, including large banks, energy and production companies, state structures, universities. In addition, content filtering services have been operating on the basis of UserGate UTM for a long time in the networks of such telecom operators as Megafon and Rostelecom.

2015: UserGate UTM Lineup

For 2015, UserGate UTM combines a firewall, router, gateway antivirus, intrusion detection and prevention system (IDPS), VPN server, content filtering system, monitoring and statistics module and many other functions. The product allows you to manage the company's network, optimize the traffic it uses and effectively prevent Internet threats. UserGate UTM is a gateway solution that allows you to secure your corporate network from external Internet threats, manage traffic and bandwidth, monitor Internet access policies and Internet application usage, and ensure email security. The product implements the ability to "deep traffic analysis" (DCI - Deep Content Inspection), which makes it possible to effectively combat advanced Internet threats, including "zero-day threats," and also protects users from tracking and negative advertising. UserGate UTM is one of the fastest and most reliable Internet gateways.

2014

UserGate Proxy & Firewall certified by FSTEC

In May 2014, Entensys announced the end of certification and the start of serial production and delivery to customers of a new version of its UserGate Proxy & Firewall product. The basis of certification was the requirements of the FSTEC of the Russian Federation for firewalls (ME) and for intrusion detection systems (IDS).

The received certificate of the FSTEC of Russia No. 3164 dated 20.05.2014 certifies that the intrusion prevention system with the function of the UserGate Proxy & Firewall 6.0 VPN GOST firewall is a software means of protecting against unauthorized access to information that does not contain information constituting a state secret, and meets the requirements of the documents "Requirements for intrusion detection systems" (Class 4 Protection) and "Network Level Intrusion Detection System Security Profile (IT.SOV.S4.PZ)," as well as the guidance document "Computer Tools. Firewalls. Protection against unauthorized access to information. Indicators of protection against unauthorized access "(according to class 3 of protection).

According to Entensys, the software package can be used as part of the NPP up to the 1G security class and personal data information systems (ISDS) and state information systems (GIS) up to and including the 1st security class (level). In compliance with the requirements for Class 4 of intrusion detection systems protection during software system certification, the absence of undeclared capabilities in Level 4 of control was checked.

ME and SOV do not exhaust the certified functionality of the solution. The software package corresponds to the security assignment and the estimated level of trust OUD3 (enhanced) in accordance with the guidance document "Information Technology Security. Information Technology Security Assessment Criteria. " In the security task, such important functionality as two-way cryptographic authentication of users and an administrator based on CryptoProCSP CIPI, a proxy server for implementing secure access to external networks, including the Internet, a module for monitoring (filtering) the activity of applications running on computers on a local network, is declared and verified by the FSTEC testing laboratory.

Kaspersky Labs, AVIRA and Panda Security, as well as URL filtering functions using the unique Entensys URL Filtering technology.

The scope of the program is departmental and corporate computer networks and systems that process both open and restricted access information that does not contain state secrets.

UserGate Proxy & Firewall 6.4

Version 6.4 adds the Intrusion Detection and Prevention System (IDPS) module, previously available only in the FSTEC-certified version.

UserGate Proxy & Firewall 6.4 has been specially adapted to run on Windows Server 2012, but can work successfully on previous versions of Windows for servers and workstations. Also, the performance and stability of the server has been improved, minor changes have been made to the management console, the operation of web statistics has been improved, and the problem of user authorization on terminal servers has been fixed.

2013

UserGate Proxy & Firewall 6.2

UserGate Proxy & Firewall 6.2 version performs antivirus scanning already by three antivirus cores. To the antiviruses from Kaspersky Lab Panda Security and added the SAVAPI module from the company. Avira

The antivirus module is based on the SAVAPI kernel developed by AVIRA. SAVAPI and its underlying search technology are characterized by multi-platform and processor-independent programming. Thanks to the use of resource-saving programming technology, Avira products consume little main memory. Avira has over 100 million customers and 500 employees and is the world's leading developer of security solutions for professional and private use.

The product has also made many small improvements, as well as increased performance under heavy load.

The AVIRA antivirus module will be embedded for other Entensys products. This will primarily contribute to the further growth of the company's products in the markets of Germany and other countries of the European Union.

UserGate Proxy & Firewall 6.1

When working on UserGate Proxy & Firewall 6.1, attention was paid to the increase in database performance in conditions of increased load. The use of new algorithms for processing large amounts of information has significantly increased the speed of this process. The updated distribution allows you to work with the VPN client as a service. Thus, creating and maintaining secure connections (VPN tunnels) is now possible without the requirement of administrator rights.

The si.exe application has undergone qualitative changes. The program provides more detailed and informative reports for interaction with technical support than before.

The new version of the UTM solution more conveniently implements the presentation of product settings in the administrator console. The developers also took into account the wishes of users collected by the technical department. In particular, significant attention is paid to the fault tolerance and performance of the product.

UserGate Proxy & Firewall 6.1 is localized in Russian, English, German, French (new) and Spanish (new) languages.

2012: UserGate Proxy & Firewall 6.0

• In UserGate Proxy & Firewall 6.0, the developers implemented their own VPN server with the ability to create a server-to-server tunnel and route between subnets. Previously, the product only supported VPN connections.
• Thanks to the use of the ODBC driver, the solution works with mysql databases. The built-in database is Firebird, which has significant performance and performance indicators.
• The updated billing system meets the requirements of most users. Now the administrator can set the tariff of any format: in time, in traffic, using the subscription fee, etc.
• UserGate Proxy & Firewall 6.0 completely redesigned the statistics module, in particular, reduced delays when the module and proxy work together.
• Introduced a new NAT driver with higher performance. In order to speed up work, the HTTP proxy has undergone significant changes.

2011: UserGate Proxy & Firewall 5.4

The main attention of the developers was aimed at improving the work and improving the level of fault tolerance of the product. Also, one of the features of UserGate Proxy & Firewall 5.4 is support for Cyrillic domains when working with filtering electronic resources. In addition, adjustments have been made to the product activation system.

2010

UserGate Proxy & Firewall 5.3

UserGate Proxy & Firewall 5.3 introduced support for Windows Integrated Authentication and synchronization with Active Directory. In addition, changes have been made to the traffic management system, for example, the option to add an exception when filtering sites by category has appeared. One of the key changes in UserGate Proxy & Firewall 5.3 was the introduction of the latest version of the Kaspersky Anti-Virus kernel. It includes a regularly updated database of virus signatures, heuristics for detecting threats of the same type, support for more than 4,000 archiver formats and packers, as well as an advanced heuristic module. Thanks to the changed activation system, the user can order an increase in the number of sessions during the test period, as well as test antivirus modules. Another change concerns the Entensys URL Filtering module, which has become licensed separately. All registered users of version 5.x have the opportunity to get an update to the new version for free. For users who want to familiarize themselves with the program, a fully functional 30-day version of the program is available.

Certification of UserGate Proxy & Firewall 5.2.F FSTEC of Russia. Law "On Personal Data"

In April 2010, UserGate Proxy & Firewall 5.2.F was certified by the FSTEC of Russia for compliance with the following requirements:

• "Information Technology Security. Criteria for assessing the security of information technologies "- according to the OUD2;
• "Means of computing. Firewalls. Protection against unauthorized access to information "- according to class 4 of security;
• "Protection against unauthorized access to information. Part 1. Information security software. Classification according to the level of control of the absence of undeclared capabilities "- according to the 4th level of control.

The product is intended for organization, complete control and protection of visits by employees of the Internet and fully meets the requirements of the 152-FZ Law "On Personal Data" for software used at the enterprise.

With UserGate Proxy & Firewall 5.2.F, you can set which sites employees are allowed to visit at the workplace, which Internet applications can be used (ICQ, Skype, peer-to-peer clients and any others). The firewall and built-in antivirus modules from Kaspersky Lab and Panda ensure complete security of the enterprise's corporate network.

Build UserGate Proxy & Firewall 5.2.F

The new build fixes bugs and includes product functionality updates made to the latest versions of UserGate Proxy & Firewall, for example:

• Support for Windows Integrated Authentication and synchronization with Active Directory have appeared;
• made changes to the traffic management system, for example, the option to add an exception when filtering sites by categories appeared;
• The latest version of Kaspersky Anti-Virus kernel has been implemented. It includes a regularly updated database of virus signatures, heuristics for detecting threats of the same type, support for more than 4,000 formats of archivers and packers, as well as an improved heuristic module;
• thanks to the changed activation system, the user can order an increase in the number of sessions during the test period, as well as test the antivirus module;
• support for Cyrillic domains is implemented when working with filtering electronic resources.

Comprehensive protection

UserGate provides comprehensive local network protection thanks to the presence of two built-in anti-virus modules from leading anti-virus developers - Kaspersky Lab and Panda Security. Antivirus modules scan all types of network traffic, including mail, HTTP and FTP traffic. In addition to antivirus scanning, UserGate has a built-in firewall that provides reliable network protection against external attacks.

Internet Access Control

Using UserGate, you can control the Internet access of individual employees of the company, as well as their groups, united by a common characteristic. The built-in BrightCloud traffic filtering module allows you to block access to unwanted resources both individually and by site category. This significantly reduces the company's costs of inappropriate traffic, increasing employee productivity and reducing the risk of malware entering the local network.

UserGate also allows you to control applications installed on client machines by allowing or preventing a particular application from logging on to the Internet.

Statistics and Billing

UserGate provides detailed statistics in the form of various reports available both directly from the program and remotely through a web browser. The built-in billing system automatically calculates the cost of traffic for each user, based on the price, time and/or volume of traffic.

Network Administration

UserGate includes a DHCP server for dynamically assigning IP addresses on the local network and a resource publishing function that allows access from outside to company resources within the local network. In addition, UserGate supports multiple ISPs, automatically switching users to the backup channel in the event of a failure of the main Internet connection.