Security Solution

OMX GSA - Guardian Security Appliance

• OMX Guardian Security Appliance (GSA) combines powerful firewall, application filter, VPN server, with Real Time Monitoring and Historical Reporting. It supports Multi WAN and High Availability and Server Load Balancing. Different models of OMX Guardian Security Appliances are available for SMB, Corporate, branch offices and Enterprises.

Firewall Features

• Filtering by Client’s Operating System, source and destination IP, IP protocol, source and destination port for TCP and UDP traffic
• Limit simultaneous connections on a per-rule basis
• Option to log or not log traffic matching each rule.
• Highly flexible policy routing possible by selecting gateway on a per-rule basis (for load balancing, failover, multiple WAN, etc.)
• Aliases allow grouping and naming of IPs, networks and ports.
• Transparent layer 2 firewalling capable - can bridge interfaces and filter traffic between them.
• Packet Normalization so there are no ambiguities in interpretation by the ultimate destination of the packet. This in turn protects operating systems from some forms of attack, and drops TCP packets
• OMX GSA is a State-full Firewall with its state table maintains information on open network connections.

Network Address Translation (NAT)

• Port forwards including ranges and the use of multiple public IPs 1:1
• NAT for individual IPs or entire subnets.
• Outbound NAT
• NAT Reflection

High Availability

• Server load balancing is used to distribute load between multiple servers.

Multi-Wan

• The OMX Guardian supports PPTP,IPsec and OpenVPN.

Historical Information Graph

• SVG graphs show real time throughput for each interface.
• Real time display of queue usage using AJAX updated gauges for traffic shapers users
• Front page includes AJAX gauges for display of real time CPU, memory, swap and disk usage, and state table size.

Server Load Balancing

• The combination of CARP (components failover) and OMXSync, configuration synchronization provide high availability functionality. Two or more firewalls can be configured as a failover group.

Virtual Private Network

• Multi-WAN functionality enables the use of multiple Internet connections, with load balancing and/or failover, for improved Internet availability and bandwidth usage distribution.

Real Time Information

• OMX Guardian maintain historical information and displays RRD graphs on the following CPU utilization, Total throughput, Firewall states, Individual throughput for all interfaces, Packets per second rates for all interfaces, WAN interface gateway(s) ping response times, Traffic shaper queues on systems with traffic shaping enabled.

Captive Portal

• Captive Portal allows you to force authentication, or redirection to a click through Web page for network access. This is commonly used on hot spot networks, and as an additional layer of security on wireless or Internet access.
• Features include:
• Maximum concurrent connections
• User IDLE timeout
• User Hard timeout (Present number of minutes)
• Set Logon pop up window
• URL Redirection - after authentication.

Snort IDS/IPS and Application Filter

• OMX GSA incorporates latest Snort's open source network-based intrusion detection system (NIDS) and Intrusion prevention System (IPS) which has the ability to perform real-time traffic analysis and packet logging on IP networks. Snort performs protocol analysis, content searching and matching. Moreover, Network and security admins can create, share and implement custom application detection rules within Snort systems. OpenAppID can be used to alert, block, perform contextual analysis and report what’s truly happening with application usage on the network (with over 2800 applications supported).