MandrivaSecurity Multi Network Firewall provides the following features:

   Easy and powerful configuration tools

• Configuration and management is performed through a secure Web Interface
• Monitoring tools display detailed information about network & system activity
• Detailed reports on intrusion detection, DHCP and Proxy usage
• Supported Internet connections include modem, DSL, ISDN, Cable, T1,...
• Specialized feature to allow Internet access only during specified hours
• Dial-on-demand provides a hassle-free way to share a dial-up connection

   Strong Firewall

• Netfilter/IPtables is the firewalling subsystem which offers stateful inspection and secure kernel 2.4
• "Snort" and "Prelude" Intrusion Detection Systems issue alerts during network attacks and take action against hostile intruders
• DMZ (de-militarized zone) wizard for easily configuring several DMZs
• VPN (Virtual Private Network), based on the FreeS/wan project, provides the ability to secure all data transfer
• Shorewall is a powerful "hardening" firewall system for configuring access rules such as source IP address, destination IP address and IP protocol type
• NAT (Network Access Translation) permits many hosts to share a single Internet IP address at the same time
• Firewall updates available

   Complete proxy server solution

• Full-featured and easily configured Proxy (transparent, manual & manual with user authentication through LDAP & Samba protocol)
• URL/Content filtering offers a powerful solution for advertising banner and specific Internet site filtering
• Web surfing time restriction
• Create filtering rules to control information flow through a company network
• Cache only DNS
• DHCP server

   Required configuration for X (graphical) users

• Pentium Processor or compatible (300MHz minimum)
• CD-ROM drive
• 300 MB disk space minimum (500 MB recommended)
• At least 64 MB of RAM (128 MB recommended)
• Compatible video card and Ethernet network card listed at: http://www.mandrivalinux.com/en/hardware.php3
• Internet connection (modem, cable, ISDN, ADSL,...)

MNF FEATURES

MANAGEMENT

Firewall Throughput

Hardware-dependent

Management Method

Secured Web Browser

Concurrent Connections

Hardware-dependent

Remote Management

SSH

Packet Filtering Method

Stateful Packet

SNMP Management

Yes

DoS, DDos Protection

Yes

Command Line

Yes

Transparent Mode

Yes

Firmware Update Method

Yes with web-based MandrivaUpdate

Network Address Translation

Yes

Diagnostic Tools

Ping, Trace, NSLookup

Port Address Translation

Yes

Logging and Alerting

Syslog, Email

Translation Predefined Services

Yes

HIGH AVAILABILITY

Customizable Services

Yes

Dual Power Supplies

Support UPS

Number of Nodes

Unlimited

IPSEC VPN

Network Access Rules

Yes

VPN Encryption

Included

SECURITY SERVICES

Encryption Methods

3DES, DES, ARCFour

Vulnerability Scanning

Yes

Authentication

MD5, SHA-1

Web Content Filtering

Yes

Key Management

IKE, Manual

Custom Web Blocking

Yes

VPN Interoperability

IPSec

Malicious Code Filtering

Java, ActiveX, Proxy, Cookies, Digital Certs

VPN Tunnels

Hardware-dependent

NETWORKING SUPPORT

DES (56-Bit) Speed

Hardware-dependent

VPN Client Pass

Yes

3DES (168-Bit) Speed

Hardware-dependent

PPPoE/L2TP Support

Yes

Perfect Forward Secrecy

Yes

DHCP Client Support

Yes

Prevent Replay Attacks

Yes

DHCP Server Support

Yes

User Authentication

Hardware-dependent

Total Static Routes

Hardware-dependent

PKI/Digital Certificates

Yes

VPN Clients Included

Linux (unlimited number)