Firewall & segmentation
Stateful firewall. 802.1Q VLANs, NAT, GeoIP, address groups. Guest, camera and server networks stay apart without extra boxes.
One device. Three network jobs.
Firewall, router, VPN concentrator. Same system. No per-feature fees, no module unlocked later for extra.
Blast radius, before and after
One compromised device on a flat network means the whole network is compromised. Segmentation makes the damage stop at the VLAN edge.
Flat network
A cheap camera that gets popped has a direct path to the database. Nothing stands in the way.
Segmented
The same camera still gets popped. It just has no route into VLAN 10, and that is where it stops.
What is inside
VPN
IPsec IKEv2, WireGuard, OpenVPN. Between branches, out to remote staff, across to your provider.
Routing & availability
Static, policy-based and dynamic routing over OSPF and BGP. Multi-WAN failover. An HA pair keeps sessions alive.
Threat protection
IDS/IPS engine, DNS filtering, IP reputation. Rule sets refreshed on a schedule, not once at install.
QoS
Shaping and limits per VLAN, per host, per application. A video call does not lose to a download.
Access control
LDAP, Active Directory, RADIUS. TOTP two-factor. An internal certificate authority.
Visibility
Traffic logs, usage reporting, an audit trail for every change made through the interface.
What you run yourself, and what we hold back
A design decision, not a limitation. Safe updates run on your schedule. The ones that can drop traffic get scheduled together.
You run these
- Security updates and fixes within the running version
- Firewall, VPN and policy changes of your own
- Configuration backups whenever you want
- Full admin access to your own device
We run these with you
- Moving to the next major version
- Changes that touch the production traffic path
- Recovery after a hardware failure
- Reworking segmentation or routing design
Every update from the interface lands in the device audit log: who, when, result.
Which hardware fits?
Sizing guidance by user count, network cards and storage.