|
IPCop is a Linux based package which is completely dedicated to acting as a firewall, it has nothing extra which could constitute a security risk, and has been specially “hardened” in some areas so that it is impenetrable to internet hackers.
It provides:
- Full Network Address Translation and Port translation (NAT)
- Intrusion detection software (SNORT)
- Analog/ISDN/ADSL modem support
- Web Based GUI Admin & Config System
- HTTP/FTP/HTTPS Web Proxy
- DHCP Server
- Caching DNS
- VPN Support (FreeSWAN) with Control Area.
- Full logging and traffic graphs (click for example).
If you don’t understand all this, then just be sure that this is an industry standard fully secure firewall, but available at a fraction of the cost.
As with the SMEServer, the software is able to be updated from the IpCop web site, should bugs or security holes be identified, this can be done easily via a management web interface, without leaving your desk.
One of the most useful facilities is the ability to set-up multiple Virtual Private Networks (VPNs), using the secure IpSec protocol. This can allow branch office servers and LANs, to connect securely over the internet. Ideally the branches would also use an IpCop firewall to effect the connection, but any system that supports IpSec will do
|