TeamF1 : Products : Secure Gateway Solution :

Secure Gateway Solution

Turnkey SMB VPN/Firewall Gateway

TeamF1's Secure Gateway Solution is a comprehensive turnkey software package that combines a rich set of field-proven, standard components with an array of customizable options to provide OEMs/ODMs the ultimate in product flexibility.

A member of TeamF1�s SMBware� family of innovative prepackaged solutions, the Secure Gateway Solution enables OEMs/ODMs to deliver leading-edge VPN/firewall gateway devices to the small-to-medium business (SMB) market in record time at far less risk than traditional development approaches. Devices built around the Secure Gateway Solution offer end-customers ironclad, advanced networking security; easy-to-use device management features; and multiple gateway options.

In order to create specific instances of the Secure Gateway Solution, TeamF1 leverages preexisting software blocks that have proven their merit in thousands of deployments, not only minimizing risk for OEMs but also keeping licensing terms flexible. And only the Secure Gateway Solution can offer such a comprehensive set of features with completely modular packaging that allows for full customization to meet an OEM's specific requirements.

PDF datasheet

ds-1.01

Easy-to-use device management features

	User friendly browser-based remote web-management�provided by interfaces that utilize an easy-to-understand, step-by-step wizard�simplifies configuration of even the most advanced VPN tunnel schemes.
	The simple network management protocol (SNMP) enables administrators to remotely monitor and control network devices and to manage configurations, statistics collection, performance, and security. Monitoring features, for example, alert managers to events such as WAN port failover, WAN traffic limits reached, login failures, and attacks.
	A flexible and powerful command line interface (CLI) is provided to configure and monitor a gateway device and automate common tasks. The CLI has a hierarchical command structure for direct execution of management commands using a serial/USB console or remote access mechanisms such as telnet and SSH and includes easy-to-use features such as line editing and history.
	An internal, extensible management framework can be used with automated techniques such as XML/SOAP.

Gateway options

	Multiple WAN interfaces of different types�Ethernet, dialup, wireless WAN, etc.
	Multiple LAN interfaces of different types�Ethernet, WLAN, integrated Ethernet switch, etc.
	Fully managed features. Device administration features include upgrade capability, traffic monitoring, logging, and settings management.
	Wireless Ethernet networking provided by IEEE 802.11 b/a/g/n Wi-Fi standards. With Wi-Fi, a device connected to a wired LAN can act as an access point to a number of wireless stations. Reference drivers are available for a variety of chipsets.

Unified Threat Management

TeamF1�s Secure Gateway Solution enables OEMs to build fully integrated UTM devices. As a result, end-customers have the tools necessary to carve out security zones and manage security policies in a centralized manner, thereby efficiently controlling network traffic.

	Service blocking controls specific outbound traffic, for example, from LAN to WAN and from DMZ port to WAN.
	Site blocking prevents access to certain sites on the Internet.
	Blocks specific keywords and domain names for content filtering and parental control.
	Blocks web components Proxy, Java, ActiveX, and cookies to prevent malicious software from being installed inadvertently.
	Source MAC filtering secures the network by filtering (dropping) traffic with specified MAC addresses.

Other key features and protocols

	Quality of service (QoS) priority. A QoS setting determines the priority of a service that, in turn, determines the quality of that service for traffic passing through a router. An administrator can change settings as needed.
	PPPoE, dynamic and static, available for ISPs worldwide. For example, Secure Gateway supports PPTP (Austria) and Telestra BigPond (Australia).
	Static and dynamic routing, including RIPv1 and RIPv2. Other, more advanced dynamic routing protocols are available from TeamF1 partner companies for integration into the Secure Gateway Solution.
	Blocks web components Proxy, Java, ActiveX, and cookies to prevent malicious software from being installed inadvertently.
	Performance features. Fast LAN to WAN throughput in software-only implementation, fast VPN tunnel creation, and hardware acceleration support.
	A comprehensive administration interface.

Aggravation-free branding

TeamF1 offers OEMs different ways to customize, or �brand,� the graphical user interfaces (GUIs) of gateway devices. Options include:
	Support for multiple themes that provide an OEM-branded look and feel with no programming or HTML changes.
	Support for multiple GUI skins that provide GUI design customization beyond the use of OEM-branded colors and graphics, while requiring no code changes or retesting.
	Advanced user interface control requiring some programming � using documented APIs supported by the flexible management infrastructure. This enables options such as additional programming elements like dynamic graphics, Flash, and Java that provide the ultimate in branding with a unique look and feel.

Branding Options Utilizing Multiple Skins / Themes

Validated software components

TeamF1�s software component products are all extensively validated on a variety of embedded OSs and CPU platforms that include ARM/XScale, MIPS, PowerPC, and x86 processors. TeamF1 components are also customized for a number of Linux and VxWorks versions.

Examples of deployment scenarios:

The Security Advantage

Secure Gateway Solution is a complete turnkey solution for SMB security gateways that require VPN / firewall / router features with comprehensive management capabilities. The Secure Gateway Solution also includes Krypto-Lite, TeamF1�s FIPS-certified common crypto framework, along with a suite of encryption and integrity components to secure and manage network traffic. Krypto-Lite also allows the seamless integration of TeamF1 security protocols developed to meet additional security and certification requirements.