Firewall and Router

• ICSA Labs certified corporate firewall
• Deep Packet Inspection (DPI)
• Stateful Packet Inspection (SPI)
• Intrusion Detection and Prevention System (IDPS)
• Application awareness
• DHCP server
• DNS forwarding
• NAT mapping (inbound/outbound)
• MAC filtering
• GeoIP filtering
• Zero-configuration networking
• Service Discovery forwarding
• Anti-Spoofing
• Guest network with captive portal
• 802.1Q VLAN support
• Traffic rules configuration wizard
• Time based rules
• Connection limits (DoS protection)
• Dynamic DNS
• Customizable routing table
• Reverse proxy
• Simultaneous IPv4 and IPv6 support
• IPv6 network prefix translation
• IPv6 router advertisements
• Multiple IP addresses on a single network interface (multihoming)

VPN

• VPN client for Windows, Mac & Linux
• Split tunneling
• Multiple client-to-site and site-to-site tunnels
• IPsec client-to-site/site-to-site
• L2TP/IPsec for mobile devices
• Persistent connection
• SSL encryption
• VPN tunnel failover
• NAT support
• Automatic or custom routing

User authentication via directory services

Reporting & Monitoring

• Reporting via Kerio Control Statistics
• Automated email reports
• Android, Apple Watch and iOS app (notifications and monitoring)
• Detailed usage reports (web sites, protocols, bandwidth, etc.)
• Traffic categorization (multimedia, messaging, large file transfers, etc.)
• Top visited websites & top users per web category
• Filter reports by individual user, group, or entire network
• Reporting of Google search keywords
• Real-time host activity monitoring
• Traffic charts of users and interfaces
• System Health Monitor
• SNMP monitoring
• Email alerts for firewall events
• External logging to syslog

Load Balancing and QoS

• Internet link-load balancing
• Policy-based routing
• Automatic connection failover
• Reserve bandwidth for high priority traffic
• Restrict bandwidth for low priority traffic
• User data transfer quotas

Bandwidth rules based on time intervals, traffic and content rules, traffic type, users, service, DSCP, etc

Administration

• MyKerio centralized web based management to monitor and manage multiple Kerio Control deployments
• Remote web-based administration
• Customizable administration dashboard
• Zero-touch or self-provisioning
• Share configuration (definitions) between appliances
• Configuration export/import
• Backup configuration to MyKerio or FTP server
• Template for user configuration
• Variable level administrative rights
• Automatic software updates
• Web-based debugging tools
• Multi-language support

Content Filtering

• URL categories with whitelist (Kerio Control Web Filter)
• Content rules based on time intervals, users, applications, web categories, URL groups, file types, etc.
• Forbidden words filtering
• SafeSearch for search engines
• HTTPS filtering
• Pre-defined and custom URL groups
• Regular expressions in URL rules
• Proxy server with cache
• P2P (peer-to-peer) traffic filtering
• Antivirus filtering
• Customizable denial page

User Authentication

• Active Directory
• Apple Open Directory
• Local user database
• 2-step verification for remote access
• Proxy authentication for terminal servers
• Kerberos and NTLM authentication
• RADIUS server
• Password guessing protection

Intrusion Prevention System

• Snort-based packet analyzer
• Emerging threats rules database
• IP blacklist database
• Multiple security levels
• False positives exception handling

Application Awareness

• Database of common applications (Skype, Facebook, BitTorrent, etc.)
• Categories of applications
• Real-time and detailed reporting of application activity
• Content rules per applications by user, host or time interval (permit or deny)
• Bandwidth rules per application (restrict or reserve)