Kerio Control

Kerio Control Features

Firewall and Router


  • ICSA Labs certified corporate firewall
  • Deep Packet Inspection (DPI)
  • Stateful Packet Inspection (SPI)
  • Intrusion Detection and Prevention System (IDPS)
  • DHCP server
  • DNS forwarding
  • NAT mapping (inbound/outbound)
  • MAC filtering
  • Zero-configuration networking
  • Service Discovery forwarding
  • Anti-Spoofing
  • Guest network with captive portal
  • 802.1Q VLAN support
  • Traffic rules configuration wizard
  • Time based rules
  • Connection limits (DoS protection)
  • Dynamic DNS
  • Customizable routing table
  • Reverse proxy
  • Simultaneous IPv4 and IPv6 support
  • IPv6 network prefix translation
  • IPv6 router advertisements
  • Multiple IP addresses on a single network interface (multihoming)

VPN


  • VPN client for Windows, Mac & Linux
  • Split tunneling
  • Multiple client-to-site and site-to-site tunnels
  • IPsec client-to-site/site-to-site
  • L2TP/IPsec for mobile devices
  • Persistent connection
  • SSL encryption
  • VPN tunnel failover
  • NAT support
  • Automatic or custom routing
  • User authentication via directory services

Reporting & Monitoring


  • Reporting via Kerio Control Statistics
  • Automated email reports
  • Detailed usage reports (web sites, protocols, bandwidth, etc.)
  • Traffic categorization (multimedia, messaging, large file transfers, etc.)
  • Top visited websites & top users per web category
  • Filter reports by individual user, group, or entire network
  • Reporting of Google search keywords
  • Real-time host activity monitoring
  • Traffic charts of users and interfaces
  • System Health Monitor
  • SNMP monitoring
  • Email alerts for firewall events
  • External logging to syslog

Load Balancing and QoS


  • Internet link-load balancing
  • Policy-based routing
  • Automatic connection failover
  • Reserve bandwidth for high priority traffic
  • Restrict bandwidth for low priority traffic
  • User data transfer quotas
  • Bandwidth rules based on time intervals, traffic and content rules, traffic type, users, service, DSCP, etc.

Administration


  • MyKerio centralized web based management to monitor and manage multiple Kerio Control appliances
  • Remote web-based administration
  • Customizable administration dashboard
  • Zero-touch provisioning
  • Share configuration (definitions) between appliances
  • Configuration export/import
  • Backup configuration to Samepage.io or FTP server
  • Template for user configuration
  • Variable level administrative rights
  • One-click software updates
  • Web-based debugging tools
  • Multi-language support

Content Filtering


  • URL categories with whitelist (Kerio Control Web Filter)
  • Content rules based on time intervals, users, applications, web categories, URL groups, file types, etc.
  • Forbidden words filtering
  • HTTPS filtering
  • Pre-defined and custom URL groups
  • Regular expressions in URL rules
  • Proxy server with cache
  • P2P (peer-to-peer) traffic filtering
  • Antivirus filtering
  • Customizable denial page

User Authentication


  • Active Directory
  • Apple Open Directory
  • Local user database
  • 2-step verification for remote access
  • Proxy authentication for terminal servers
  • Kerberos and NTLM authentication
  • RADIUS server
  • Password guessing protection

Intrusion Prevention System


  • Snort-based packet analyzer
  • Emerging threats rules database
  • IP blacklist database
  • Multiple security levels
  • False positives exception handling

We just don't talk about IT, we get IT done.SM