InstaGate UTM Firewall with VPN and Reporting

Available in Virtual Based Appliance

& Hardware Based Appliance

InstaGate Firewall^TM

Best Firewall Protection with an Intuitive Graphical Management Interface

eSoft's InstaGate firewall has all of the features and security a business could want in a firewall with an intuitive graphical management interface. We offer the following capabilities:

Learn more about superior firewall protection from eSoft.

Business-Class Firewall

If your small to medium-sized business is in need of a enterprise-class firewall, look no further than eSoft's InstaGate firewall. We offer all the features and security a business could want in a firewall. Add value with bundled features that most vendors sell separately. Our business firewall offers the following features:

Graphical Configuration

The graphical interface allows for your business's firewall policies to be defined with ease. Policies can be created between pre-defined networks (WAN, LAN, DMZ, etc.) or custom networks and VPNs. Policies can accept, reject, redirect and more.

Graphical Reporting

The reporting on the InstaGate is second to none. ThreatMonitor provides bandwidth usage, the amount of bandwidth being used for different protocols (web traffic versus ftp traffic, etc.), inbound and outbound traffic by day, and traffic between interfaces such as LAN to DMZ, DMZ to WAN, etc.

Additionally, full logging support is available so an administrator can log the address of anyone who accesses a particular service or machine.

Stateful Packet Inspection (SPI)

InstaGate's firewall uses Stateful Packet Inspection (SPI), which keeps track of the state of network connections and makes accept/reject decisions based on state, as well as packet information such as source address, protocol, port, etc.

Deep Packet Inspection (DPI)

Together with any ThreatPak, the InstaGate gains Deep Packet Inspection (DPI) capabilities. DPI means that the InstaGate is application aware and scans not just the envelope information, but the data part as well, scanning for dangerous content, viruses, intrusion attempts and more.

Super-fast Throughput

eSoft's firewall is blazingly fast and can sustain connection speeds at nearly 1 Gbps.

Network Address Translation (NAT)

InstaGate provides full NAT services including SNAT and DNAT. The most common form of NAT is a mechanism by which an entire network can share a single public IP address. Requests to the Internet from any computer on the local network appear to come from the same machine, from the perspective of the Internet server. The InstaGate includes a DHCP server for automatically assigning IP addresses to computers that connect to the local network.

In addition to the standard NAT, the InstaGate will map internal IP addresses to different external IP addresses (SNAT policies), will allow incoming traffic to different IP addresses to be mapped back to internal computers, and allows for port redirection so a packet coming to a public IP address and port 80 could be mapped to an internal IP address and port 82, for example.

As with all of the InstaGate's advanced functionality, the details of the implementation are hidden behind an elegant, award-winning, web-based user interface that makes managing complex features easy for even a non-technical person.

Demilitarized Zone (DMZ)

The InstaGate has full support for aDMZ including a dedicated DMZ port, policies specific to the DMZ with stricter policies for traffic coming from the Internet than traffic coming from the local network. The InstaGate also supports DMZ to WAN and LAN to DMZ network address translation.

Domain Name System (DNS)

The InstaGate automatically caches DNS lookups -- the lookups that turn a domain name like example.com into an IP address -- to reduce bandwidth and accelerate access to the Internet.

Bandwidth Management with QoS

InstaGate 404e, 404, 604, and 806 models provide Quality of Service (QoS), allowing IT managers to prioritize traffic and employ bandwidth management according to network, IP, protocol, or port for more control of network resources. Administrators can specify a rate limit in kbps, and a priority of Low, Normal, or High for any service, source address, destination address or any combination of these.

High Availability

eSoft's optional High Availability SoftPak provides automatic failover from your company's InstaGate to an online backup InstaGate, also known as a hot standby. The backup InstaGate monitors the health of the primary InstaGate and activates when it detects a failure, ensuring that your network remains connected to the Internet and protected by the firewall. Once activated, the backup InstaGate continues to monitor the health of the primary InstaGate and reverts to backup status when the primary InstaGate becomes available. High Availability requires the purchase of a second InstaGate.

Multiple Public IP Addresses

Multiple public IP addresses are fully supported allowing a company with a block of public IP addresses to use them all while protecting all of their public machines from Internet threats.

Internet Failover/ Dual WAN

The InstaGate optionally comes with the Internet Failover SoftPak, which is insurance that your organization will not be crippled by an interruption in your Internet service. Internet Failover monitors your network for Internet connectivity and automatically switches over to a second provider when an outage is detected. Once regular service is restored, the Instagate automatically switches back to the primary connection. During normal operations when both Internet connections are functioning, traffic is balanced across both WAN interfaces.

VoIP Support

For the increasing number of organizations deploying VoIP solutions, the InstaGate appliances support SIP and H.323 protocols and detect VoIP attacks for more advanced security.

PPPoE Support

Point-to-Point Protocol over Ethernet (PPPoE) is frequently used by ISPs who provide ADSL connections as a way to get a business to authenticate with the ISP before getting access to the Internet.

Routing

The InstaGate supports statically defined routes for more sophisticated network configurations involving multiple networks and gateway devices.

Contact an eSoft Sales Rep to get the best firewall for your business's security needs, or schedule a product demo to see it for yourself.

InstaGate Firewall^TM

Enterprise-class Business Network Security for Small and Medium Businesses

Use eSoft's InstaGate Firewall/VPN for secure business networking. We offer:

• IPSec
• NAT Traversal and Forwarding
• Point-to-Point Tunneling Protocol (PPTP) & Secure Sockets Layer (SSL)

Learn more about our network security applications for VPN security.

Easy to Manage VPN

eSoft InstaGate VPN Management for Virtual Private Network Security

Whether your organization has one or several locations, remote workers or large numbers of traveling employees, the InstaGate makes it easier and faster to deploy large-scale VPNs and manage them from a central location. InstaGate's Internet Protocol Security (IPSec) , Point to Point Tunneling Protocol (PPTP) and Secure Sockets Layer (SSL) support enables exceptionally secure and reliable connections providing site-to-site VPN tunnels as well as allowing remote users to connect to a network using the VPN client bundled with any version of Microsoft Windows, Linux or Mac OS X. Additionally, the Virtual Private Network Manager enables central management of an entire distributed network of InstaGate appliances from a single workstation, reducing demands on IT support staff.

VPN Manager

VPN Manager is eSoft's global VPN management solution that makes it simple to centrally manage a distributed network of InstaGate security appliances and mobile users from one location. With just a single operation, large scale VPNs can be created for an entire organization, securely connecting corporate headquarters, branch offices, remote users and partner extranets. VPN Manager speeds up and simplifies VPN deployment, reduces IT resource requirements and ultimately lowers the overall cost of building and managing a VPN.

Companies are using virtual private networks to reduce data communication costs, whether sharing resources over a geographically distributed network or enabling mobile workers to connect while on the road. Managing a VPN, however, can be a challenging task that is complicated, time-consuming, and prone to error. Our VPN solution drastically reduces the complexity of VPN management and enables virtual private network tunnels to be rapidly built and managed from one location.

The VPN Manager integrates seamlessly with the InstaGate product family, meaning no additional hardware expenditures are required. Administered through an intuitive user interface, VPN Manager uses industry-standard security technology (IPsec and PKI) to ensure reliability and iron-clad security. And because the eSoft VPN Manager supports dynamic network environments, network gateways with dynamic IP addresses can easily connect to a VPN. Policies are stored on the management server and distributed to devices and users over the Internet.

Internet Protocol Security - IPSec

The InstaGate uses industry-standard IPSec protocols to connect VPNs. It is fully inter-operable with other IPSec VPNs and has relatively small overhead keeping it speedy and secure for your business.

NAT Traversal and Forwarding

For those networks that already have VPN appliances, the InstaGate supports VPN Forwarding and IPSec NAT Traversal.

Point-to-Point Tunneling Protocol (PPTP)

PPTP is a VPN protocol that ships with all major operating systems and allows a remote user to connect to the InstaGate and the corporate network. Setup on the client side is simple: a server, username and password are all that are required. On the InstaGate, setup is even simpler.

Secure Sockets Layer VPN (SSL)

SSL VPN is a client based virtual private network protocol.  eSoft SSL VPN provides an easy to use solution for the remote worker or travelling employee.  It allows employees to strongly authenticate to the eSoft InstaGate.  Once authenticated, they are given secure access to the business network through an encrypted tunnel between their PC and the eSoft InstaGate.  This protects all communications between the internal company network and the user in addition to ensuring that the traffic is protected against malware and unauthorized web access.

Contact an eSoft Sales Rep to get the best VPN security software for your business, or schedule a product demo to see it for yourself.

InstaGate Firewall^TM

Instagate Firewall Technical Specifications

 

InstaGate 404e

InstaGate 404

InstaGate 604

InstaGate 806

Interfaces/Storage

Ethernet Ports

4 Fast Ethernet

4 Fast Ethernet

4 Gigabit Ethernet

6 Gigabit Ethernet

Serial Mgmt Ports

1 (DB-9 RS-232)

(DB-9 RS-232)

RJ-45

RJ-45

RJ-45 Mgmt Ports

None

None

1 Front

1 Front

USB

1 Rear

1 Rear

1 Front

1 Front

Hard Drive

160 GB SATA

160 GB SATA

320 GB SATA

Dual 500 GB SATA w/RAID-1

Security Services

Intrusion Prevention

ThreatPak

ThreatPak

ThreatPak

ThreatPak

Gateway Anti-Virus

ThreatPak

ThreatPak

ThreatPak

ThreatPak

Gateway Anti-Spyware

ThreatPak

ThreatPak

ThreatPak

ThreatPak

Web/URL Filtering

ThreatPak

ThreatPak

ThreatPak

ThreatPak

Anti-Spam

ThreatPak

ThreatPak

ThreatPak

ThreatPak

Email Content Filtering

ThreatPak

ThreatPak

ThreatPak

ThreatPak

Email/Webmail Server

ThreatPak

ThreatPak

ThreatPak

ThreatPak

Firewall

Users Supported

25

unl

unl

unl

Throughput

100 Mbps

100 Mbps

300 Mbps

750 Mbps

Connections

8,000

16,000

32,000

100,000

Connection Rate

8,000/sec

8,000/sec

16,000/sec

32,000/sec

Policies

1,000

2,000

4,000

16,000

VPN

Throughput

80 Mbps

80 Mbps

160 Mbps

400 Mbps

Tunnels

50

200

400

1,200

Encryption Modes

3DES, AES (128,192,256-bit)

3DES, AES (128,192,256-bit)

3DES, AES (128,192,256-bit)

3DES, AES (128,192,256-bit)

Authentication

MD5, SHA-1

MD5, SHA-1

MD5, SHA-1

MD5, SHA-1

Key Management

IKE and Manual Key

IKE and Manual Key

IKE and Manual Key

IKE and Manual Key

ESP Tunnel Mode

Yes

Yes

Yes

Yes

Aggressive Mode

Yes

Yes

Yes

Yes

PPTP

Yes

Yes

Yes

Yes

MS-CHAP v2

Yes

Yes

Yes

Yes

VPN Forwarding

Yes

Yes

Yes

Yes

IPSec NAT Traversal

Yes

Yes

Yes

Yes

Central VPN Management

Yes (with VPN Manager SoftPak)

Yes (with VPN Manager SoftPak)

Yes (with VPN Manager SoftPak)

Yes (with VPN Manager SoftPak)

Networking

DHCP

Client, Server

Client, Server

Client, Server

Client, Server

Authentication

User, RADIUS

User, RADIUS

User, RADIUS

User, RADIUS

NAT Modes

1:Many, 1:1PAT

1:Many, 1:1PAT

1:Many, 1:1PAT

1:Many, 1:1PAT

WAN/WAN Failover

ThreatPak

ThreatPak

ThreatPak

ThreatPak

High Availability

ThreatPak

ThreatPak

ThreatPak

ThreatPak

Transparent HTTP

Yes

Yes

Yes

Yes

Proxy Server/Cache DNS Forwarding

Yes

Yes

Yes

Yes

PPPoE Client

Yes

Yes

Yes

Yes

Management and Usability

Management

Local CLI, Web GUI (HTTPS, IE 5.0+,
NS 4.7+)

Local CLI, Web GUI (HTTPS, IE 5.0+,
NS 4.7+)

Local CLI, Web GUI (HTTPS, IE 5.0+,
NS 4.7+)

Local CLI, Web GUI (HTTPS, IE 5.0+,
NS 4.7+)

Logging

Local Log, Syslog

Local Log, Syslog

Local Log, Syslog

Local Log, Syslog

Reporting

ThreatMonitor

ThreatMonitor

ThreatMonitor

ThreatMonitor

Setup Wizards

Yes

Yes

Yes

Yes

System

LCD Display/Keypad

No

No

Yes

Yes

Dimensions

9" x 6.5" x 2"
22 x 16.51 x 5.08cm

9" x 6.5" x 2"
22 x 16.51 x 5.08cm

17.5" x 18" x 1.75"
44.45 x 45.72 x 4.44cm

17.5" x 18" x 3.5"
44.45 x 45.72 x 8.89cm

Weight

3.5 lbs. / 1.59kg

3.5 lbs. / 1.59kg

16.5 lbs. / 7.5kg

19 lbs. / 8.63kg

Power

100-240V~1.5A
47-63Hz

100-240V~1.5A
47-63Hz

100-240V~6.0A
60-50Hz

100-240V~6.0A
60-50Hz

TUV, CE

Yes

Yes

Yes

Yes

FCC

Class A,B

Class A,B

Class A

Class A

eSoft's InstaGate was designed and built from the ground up to be easy to setup, easy to manage, and to provide best-of-class security and reporting. eSoft protects thousands of networks for small and medium-sized businesses and has loyal customers around the world including Pepsi, Lone Star Bank and Good Times Restaurants.

Easy to Install Firewall

The setup wizard is the easiest in the industry, complete with a full suite of tests to confirm that network settings are correct, and online help to assist non-technical administrators. The InstaGate is also the only appliance in its class to have an interactive LCD display for changing common network settings with ease (note: LCD not available on the 404 model). Get up and running with superior protection in just minutes.

Esoft's InstaGate is Easy to Use

Detailed reports with optional automatic email to administrators.

• Automatic notification of quarantined spam — with the option to delete or release directly in the email
• Industry-leading ThreatMonitor gives full view of a network at a glance
• Automatic updates from eSoft's world-wide Threat Prevention Team include anti-virus signatures, new anti-spam rules, phishing detection, URL classifications, and more
• Easy-to-navigate settings menus and wizards

Feature Rich & Flexible Unified Threat Management

The InstaGate firewall is the most flexible UTM product on the market. The modular and scalable architecture of the InstaGate enables you to add considerable functionality to the base product, which includes a fast, enterprise-class deep packet firewall and IPSec and PPTP VPN with a global VPN Manager.

Check out the InstaGate's Firewall capabilities and remote access solutions, or contact an eSoft Sales Rep to purchase your complete Unified Threat Management solution today!

Please Note: The InstaGate Firewall offers complete Firewall and VPN capabilities. If you currently have a Firewall, and need deep packet protection, see the eSoft ThreatWall.