ixolate
ID Free assessment

Neutralize the Chaos.

Control at the edge of your network.

One device inspects, routes and encrypts everything that passes.

Start a free assessment See the product →
INTERNET Untrusted Web, mail App access Branch tunnel Scans, exploits IXOLATE SG Single control point INSPECT IDS/IPS, DNS, reputation ROUTE Multi-WAN, OSPF/BGP TUNNEL IPsec, WireGuard YOUR NETWORK Segmented, not flat SERVERS VLAN 10 SERVERS Office & tunnel only OFFICE VLAN 20 OFFICE Egress inspected IOT & GUEST VLAN 30 IOT & GUEST No path to servers BRANCH BRANCH No public IP
RoutedEncryptedInspectedDenied

What changes in the first week

You can verify every one of them yourself.

The trail is visible, line by line
  1. 09:14:22 WAN block TCP In 203.0.113.45:52014 → 198.51.100.10:22 Default deny / state violation rule
  2. 09:14:25 OFFICE pass TCP Out 10.20.0.50:49820 → 140.82.121.4:443 Office may reach the internet
  3. 09:14:26 IOT block UDP In 10.30.0.14:5353 → 224.0.0.251:5353 No mDNS across VLANs
  4. 09:14:31 IOT block ICMP In 10.30.0.14 → 10.10.0.1 IoT has no path to servers
  5. 09:16:11 BRANCH pass TCP In 10.40.3.22:51884 → 10.10.0.20:445 Branch-03 to head office files
  6. 09:22:47 WAN rdr TCP In 203.0.113.9:41120 → 198.51.100.10:8443 rdr rule
  7. 09:23:02 WAN block UDP In 192.0.2.77:53113 → 198.51.100.10:123 Default deny / state violation rule
  8. 09:31:19 WAN block TCP In 203.0.113.45:52101 → 198.51.100.10:22 Default deny / state violation rule
  9. 09:40:55 SERVERS pass TCP Out 10.10.0.20:44310 → 151.101.2.132:443 Servers may fetch updates
The record as it actually reads. Logged actions are only pass, block and rdr — a reject rule is logged as block.
Routed

A link drops, sessions stay up

The standby device takes over with the session table already copied, so connections do not drop.

Encrypted

Branches connect without public IPs

Encrypted tunnels between sites. A small office needs no public address of its own.

Inspected

Attempts are seen, not just passed through

Packet contents are read, not just the header. What matches an attack pattern is recorded, and on hardware that supports it, stopped.

Denied

Internal apps leave the internet

Public-facing ports close. RDP and admin panels included.

Denied

One device falls, the other VLANs hold

Cameras, IoT and guest networks are kept apart and have no path to servers.

Every change leaves a trail

Time, actor, result. Recorded on the device, ready at audit.

The responsibility line

Networks rarely fail because of the box you bought. They fail because nobody knows who moves.

You hold We hold

Business policy: who may reach what

Software, configuration, hardening

Hardware (except our appliance)

Security updates and major versions

WAN links and the ISP relationship

Incident investigation, within your tier hours

Final call on risky changes

Documentation that matches reality

What you can contract today

Coming soon Appliance, Managed NOC and Security Operations are being built.

Four steps, no surprises

  1. 01

    Assessment

    Free. The output is a written read, not a quote.

  2. 02

    Design & quote

    Numbers appear here, once the scope is real.

  3. 03

    Deployment

    A rollback plan before any button is pressed.

  4. 04

    Kept running

    Major version moves get scheduled, never sprung on you.

Why there is no price list

A clinic with twenty users and an ISP with three hundred CPEs can run the same device. The cost of it stopping is nowhere near the same. The assessment is free; the number follows.

If it turns out you do not need us yet, that is a valid answer too.

Send the topology as it is. A sketch on paper is enough.

Start a free assessment