Network Security

DNS Firewalls

If we think about lines of defense, both in IT and OT environments, most of the actions we take are carried out in the post-execution of attacks. The truth is that we should act more in pre-execution. How can we balance the scales? The idea is to think about what happens before the attack, before the firewall.

The first thing to do is to protect the DNS signaling channel. This first line of defense is therefore the DNS firewall.

More than 98% of malware uses DNS channel (command and control, data exfiltration and infiltration, traffic redirection). On the other hand, it is a channel that is almost never protected in our networks.

Implementing a security barrier, using a DNS firewall, is highly effective and inexpensive. In addition, it eliminates work for existing defenses.

UTM/NGFW Firewalls

A Next Generation Firewall (NGFW) is a network appliance that integrates multiple security functionalities into a single platform. This simplifies policy management, eliminates unnecessary points of failure, latency and bottlenecks, and increases security through fewer management errors.

Not to be confused with the term UTM (Unified Threat Management), although they are actually synonymous for practical purposes. Both are made up of various security services, working together or individually to provide an overall line of security at the perimeter.

From Secure&IT we offer platforms that integrate in a single device:

• Advanced Routing (RIP, OSPF, BGP)
• Network and application firewall
• Powerful antivirus
• AntiSPAM
• Navigation and content control
• VPN Concentrator (IPSec and SSL)
• IPS / IDS
• Quality of service
• Security in wifi networks
• Integration with active directory, LDAP and RADIUS for role-based policy enforcement
• Supports active/active high availability
• Virtual firewalls (VDOM) for independent protection of different environments

All this functionality is possible thanks to a powerful proprietary hardware architecture based on ASICs (Application Specific Integrated Circuit), in which each traffic flow is managed by an independent hardware circuit.

We offer you a wide range of equipment, with which we can work in the smallest network or in large infrastructures, with the same functionalities, services and configuration environment.