• Virus Blocking
• Spyware Blocker
• Phish Blocker
• Intrusion Prevention
• Attack Blocker
• Firewall

• Spam Blocker
• Web Filter
• Protocol Control

• Remote Access Portal
• OpenVPN

• Untangle Reports

• Router

Network Security Applications

Anti Virus Blocker

Virus Blocker, based on ClamAV, is an excellent open source & free virus blocker included in Untangle.  Kaspersky is the best-of-breed commercial add-on for organizations requiring the highest levels of network protection.

Two Great Apps to Protect Your Network

Virus Blocker, based on ClamAV, is an excellent open source & free virus blocker included in Untangle.  Kaspersky is the best-of-breed commercial add-on for organizations requiring the highest levels of network protection.

Why Two Virus Blockers?

Two virus blockers provide an extra layer of security for businesses with a history of virus problems.  Virus Blocker and Kaspersky Virus Blocker leverage distinct scanning engines, signature databases and research teams.  This provides a second set of eyes to look at every email message, website, download and file transfer, which can be critical during the early stages of a virus outbreak.  Kaspersky Virus Blocker is proprietary software and is not available under the GNU General Public License.

Spyware Blocker

Spyware Blocker enables administrators to block spyware at the network gateway before it reaches users desktops.  Zero client installations and an intuitive GUI make it easy for administrators to: Protect users from browsing  websites that install malware; Scan network traffic to block spyware before users can install it; Ensure that signatures are always current with automatic updates

Is your IT guy spending too much time going from machine to machine getting rid of spyware only to have it show up again a week later?

The battle with spyware is constant, and its infection is insidious—you may not even know you have it until it’s doing real damage to your network. Weird settings, an abundance of pop-up ads (even when you’re not on the Web), clicking hyperlinks that don’t work and a sluggish system are just a few of the symptoms to look out for.

Stop spyware, adware and malware before it makes it to your network—and find already infected computers with our powerful Spyware Blocker. We use a wide range of cutting-edge technologies, including URL blocking, cookie blocking, ActiveX blocking of bad vendors and subnet logging, to protect you from attacks and infections.

Phish Blocker

Identity thieves are becoming increasingly sophisticated with email and website spoofs that are nearly impossible to discern from the real thing.  Phish Blocker makes it easier for administrators to:  Protect users from email phishing attacks and fraudulent pharming websites; Protect multiple protocols, including HTTP, SMTP, POP & IMAP; Ensure that signatures are always current with automatic updates.

Identity theft can compromise your business, and your accounts, as well as create turmoil in the lives of your employees. None-of-which is good for business.

Maintain the highest level of protection for you and your employees with our Identity Theft Blocker. This application protects your network against “phishing” attacks—emails that direct users to fraudulent websites with the intent to steal personal identity, credit card information and more.

Identity Theft Blocker marks phishing emails and puts them in a user’s quarantine. Transparent, powerful and easy to use, it requires no alteration of your network’s mail configuration.

Attack Blocker

Attack Blocker stops denial of service (DOS) attacks. Pre-configured settings and an intuitive GUI make it easier for administrators to: Provide 24/7 network protection from DOS attacks; Sort good traffic from bad with reputation-based heuristics; Put legitimate users with intensive bandwidth needs on Passlists.

Prevent Denial-of-Service attacks—and keep your network focused on legitimate uses—with our patent-pending Attack Blocker.

“Unfriendly” machines earn bad reputations and are limited, dropped and rejected. Attack Blocker can also quickly identify unauthorized use of network resources and stop those resources from being allocated to unauthorized users.

Intrusion Prevention

Untangle Intrusion Prevention blocks hacking attempts before they reach internal servers and desktops.  Untangle’s pre-configured signature-based IPS makes it easier for administrators to: Provide 24/7 network protection from hackers; Minimize annoying false positives; Ensure that signatures are always current with automatic updates.

Most hackers are looking for computer networks that they can hijack and exploit. They cast wide nets using automated programs that sniff out exposed networks. This makes small businesses, with more limited IT budgets, particularly vulnerable.

Our Intrusion Prevention software intercepts attacks in their tracks. Working transparently on your network, this innovative application uses thousands of signatures to detect, block and log intrusion attempts, using industry-standard rules.

Plus, we simplify the process by setting reasonable defaults for you on thousands of signatures—or you can change defaults and add new rules based on your company’s specific needs.

Firewall

Firewalls draw the line which separates internal and external networks. Untangle’s Firewall filters traffic based on IP address, protocol and ports that allow administrators to: Designate which systems and services (http, ftp, etc.) are publicly available; Create a DMZ and perform NAT (with Router); Run as a transparent bridge to complement existing hardware.

The Firewall is the most basic security element to hide your network from the outside and control all external access points (also known as ports). It lets you block unwanted activity and protect your network.

You can build a list of rules that meets your unique needs—control traffic by protocol, source address or port, destination address or port, and set default actions.

Firewall evaluates traffic traveling across your network by applying your rules until a block/pass verdict is reached or a default action is taken.

Advanced Productivity Applications

Spam Blocker

Spam Blocker enables administrators to block spam at the gateway before it ever reaches the users.  Zero client installations and an intuitive GUI make it easy for administrators to: Leverage the best spam filtering techniques including Bayesian Filters, Razor, realtime block lists (RBLs), OCR for image spam and tarpitting; Provide individual quarantines for each mailbox; and Filter SMTP, POP & IMAP.

Spam is the bane of small businesses’ existence. It can not only bring viruses onto your network, but it can take over your computers and send spam to other computers. And it impacts you in other ways. According to a recent study, the cost of spam messages to U.S. companies—in terms of productivity and the equipment, software and manpower to combat it—was upwards of $10 billion in 2004.

So the key is to stop spam before it stops you.

Our powerful Spam Blocker protects you with top-notch spam scanning and blocking at the edge of your network—before it can do damage or slow you down. Using the latest technologies, Spam Blocker transparently scans for spam, marks messages and intercepts emails. It requires no alteration of your network’s mail configuration and is constantly updated to guard against any refinements in trickery or techniques that senders create to get around other solutions.

Web Content Control

Untangle Web Filtering enables administrators to enforce network usage policies and monitor user behavior. Zero client installation and category block lists make it easier for administrators to: Protect the network from malware on the web; Block time-wasting sites like MySpace; Conserve bandwidth by blocking video downloads.

According to an industry study, at least 90 percent of large enterprises and 50 percent of small companies in the United States now monitor and filter their employees’ Internet access.

The primary reasons companies use Internet filtering and monitoring are to block inappropriate content (44%), control productivity (32%) and preserve network bandwidth (23%).

Now you can easily monitor, set and enforce your own web usage policy with our Web Content Control application—without the hassles of outsourcing it. Whether you want to use our blocklists or set your own policies for hosts, domains and files types, you can block access to inappropriate sites. You can also view a big picture of the kind of Web browsing behavior occurring on your network.

Protocol Control

Protocol Control lets administrators take back control of their networks from disruptive port-hopping applications like peer-to-peer applications or online games.  Signature based layer 7 filtering makes it easy for administrators to: Conserve bandwidth by blocking applications like peer-to-peer that open multiple TCP ports; Improve productivity by blocking IM & online games that evade firewall rules; Write custom signatures for any protocol.

Protocol control covers a broad set of applications, such as Instant Messaging, Peer to Peer activity, online games and streaming media, that can clog your network, reduce productivity, and infect computers with spyware, malware, and viruses.

These applications are extremely aggressive and will sneak out on ports used for other vital network traffic such as web and email, making it nearly impossible to control them with firewall rules.

Protocol Control takes a different approach to log and/or block these applications using their signatures. This allows you to lock down the unwanted activity.

Remote Access to Network

Open VPN

OpenVPN lets administrators provide secure remote access to the internal network.  Untangle’s intuitive GUI makes it easier to: Configure basic settings through a setup wizard; Generate custom certs for each client; Easily distribute client software via email.

OpenVPN is one of two solutions Untangle offers to enable secure, remote access to your network. OpenVPN requires a client on each host, meaning a small application must be installed on each computer that is going to require access. 

OpenVPN makes the most sense for persistent site-to-site connections and remote access to non-web (e.g. client/server) applications.

OpenVPN is an SSL-based virtual private network. Supporting a range of platforms, including Windows 2000/XP and higher, Linux, OpenBSD, FreeBSD, NetBSD, Mac OS X, and Solaris, OpenVPN can tackle all of your VPN needs. Powerful security and control features and intuitive set-up make this an ideal solution for your business.

Remote Access Portal

Remote Access Portal provides secure access to internal servers and desktops through web browsers without needing VPN client installations. Remote Access Portal makes it easy for administrators to: Let users work remotely from any location with an Internet connection and browser; Access end-users computers and provide remote IT support; Authenticate through Microsoft Active Directory.

Remote Access Portal (RAP) is one of two solutions Untangle offers to enable secure, remote access to your network. Because RAP works from a regular browser, we call it our “anytime, anywhere” access product.

It can be set-up to provide access to desktops, Web-based applications, email and file sharing from home, hotels, kiosks, customer sites, etc. It is also great for partner and customer access requirements.

RAP belongs to a technology category called “SSL VPN” or “application-level VPN.” Clientless (browser-based) SSL VPNs have grown in popularity because of their ease of use and granular access controls. They also provide very reliable connections because RAP looks like an application to the network rather than a network element. By using application-level protocols, it traverses Network Address Translation (NAT), firewalls, and proxy servers making it easier to connect from anywhere.

Network Systems Monitoring

Untangle Report

Untangle Reports provide administrators the visibility and data necessary to investigate security incidents and enforce acceptable network usage policies. Monitor behavior at the user, client and incident level; Understand traffic flows and network usage patterns; Share reports in PDF or HTML formats.

Visibility is the first step in controlling your network, identifying misuse, and enforcing your network usage policy. Untangle Reports provide this visibility and is also a great tool for troubleshooting.

You’ll get daily, weekly and monthly reports about the activity in your network and each Untangle software application. How many viruses and spam were blocked? Which phish were caught? What Websites were visited?

Untangle Reports can be delivered via email or viewed on the Web.

Networking Hardware and Utilities

Router

Routers connect internal and external systems to form the foundation of networking.  Untangle’s Router has two modes that enable administrators to: Provide the basics like NAT, DMZs, DHCP & DNS; Get fancy with multiple NAT spaces, routing tables and configurable MTU; Run as a transparent bridge to complement existing hardware.

With routing, you can turn your Untangle Server from a transparent bridge into a router, providing router-related services such as Internet connection sharing.

Untangle Router allows all hosts to share internet access via Network Address Translation (NAT), and also provides DHCP and DNS services and advanced routing capabilities.

The administrator can configure NAT, as well as related redirect rules, and DMZ host settings. The administrator can also add static DHCP and DNS entries, as well as custom routes to support more complicated networks.

Unlike other Untangle applications that install in the Untangle virtual rack, the routing functions are accessed in the network config area that can be found under the left hand Config tab.