Firewall and Router

• ICSA Labs Certified Corporate Firewall
• Deep Packet Inspection
• Protocol Inspection
• Stateful Packet Inspection (SPI)
• DHCP Server
• DNS Forwarding
• NAT Mapping
• MAC Filtering
• Anti-Spoofing
• Guest network with captive portal (new in 8.4)
• 802.1Q VLAN Support
• Traffic Rules Configuration Wizard
• Time Based Rules
• HTTPS inspection (new in 8.4)
• Rule Exemption Capability
• Connection Limits
• Multiple IP Addresses on a Single Network Interface (multi-homing)
• Dynamic DNS
• Customizable Routing Table
• Reverse proxy
• Simultaneous IPv4 and IPv6 Support
• IPv6 Network Prefix Translation (new in 8.4)
• IPv6 Router Advertisements

VPN

• Split tunneling or forced tunneling option
• Multiple/simultaneous site to site tunnels
• Kerio VPN client-to-site/site-to-site
• IPsec client-to-site/site-to-site
• Kerio VPN clients for Windows, Mac & Linux
• Optional persistent connection
• Multiple stored VPN connections
• Strong SSL encryption
• VPN tunnel failover
• NAT support
• User authentication via AD,OD or local directory
• L2TP over IPsec mobile device connections
• Automatic or custom routing

Reporting & Monitoring

• Kerio Control Statistics reporting module
• Detailed usage reports: Web site, protocols, bandwidth
• Filter reports by individual user, group, or entire network
• Automated daily/weekly/monthly email reports
• Top visited websites & top users per web category
• Hourly traffic by user
• Google search keywords
• Kerio Control Web Filter reports
• External logging to syslog
• SNMP monitoring
• System Health Monitor
• Traffic Charts
• Administrative Dashboard
• Traffic categorization (multimedia, messaging, large file transfers…)
• Real-time host activity monitoring

Load Balancing and QoS

• Link-load balancing
• Distribute traffic across multiple connections
• Automatic active/active & active/passive connection failover
• User-based and group-based traffic rules
• User data transfer quotas
• Custom bandwidth quota & speed limits
• Guarantee bandwidth for high priority traffic (Quality of Service)
• Restrict bandwidth for low priority traffic
• Rules by time interval, traffic type, users, service, DSCP
• Distribute traffic across multiple connections
• Monitor bandwidth with real-time charts
• Real-time interface bandwidth usage monitoring
• Apply policies to VPN tunnels

Administration

• Remote web-based administration with Administration Dashboard
• Variable level administrative rights
• One-click software/firmware updates
• Web-based debugging tools
• Configuration export/import
• Backup configuration to Samepage.io or FTP server
• Active Directory, Open Directory, local directory user authentication
• Domain template for default user configuration
• Auto logout after timeout
• Configurable time ranges for groups
• Multi-Language Support

Content Filtering

• Time interval restriction
• P2P (peer to peer traffic) Eliminator
• URL categories (Kerio Control Web Filtering)
• Custom denial page
• Administrative alerts
• Custom URLs
• Support for regular expressions in URL rules
• Forbidden words
• FTP policy
• Proxy Server
• URL White-listing
• Sophos Antivirus
• File Types

User Authentication

• Active Directory/Open Directory integration
• Proxy server authentication (for Terminal services)
• Kerberos/NTLM Authentication
• RADIUS server (new in 8.4)
• Password guessing protection
• NT Domain
• Web Login

Administration

• Snort-based packet analyzer
• Emerging Threats rules database
• IP blacklist database
• Three security levels
• False positives exception handling
• Applied to IPv4 and IPv6 traffic