Stonegate CESG Approved EAL4 Certified Firewall / VPN

Stonesoft Overview

Stonegate High Availability Firewall Multi-Link VPN

StoneGate CESG Approved EAL4 Certified Firewalls are used to protect network perimeters and internal network segments and to provide business continuity.

StoneGate Firewall/VPN provides latest technology for perimeter defense. StoneGate's Multi-Layer Inspection allows the firewall to act as a packet filter, perform stateful inspection or application-level firewall, using whichever method that makes the most sense on a rule-by-rule basis. StoneGate Firewall provides also a flexible yet secure way to establish VPN connectivity office to office and office to mobile user.

Enquire about this product

X VirusnX SpywarenX SpamnX Web/IMn5 IPS/Patch Mgmtn5 Data/System Mgmtn

Key Features

High-Availability for Firewall. Set up a clustered environment out of the box without third-party solutions. Drop-in Firewall Clustering Technology allows you to "Drop" a cluster into the network environment without having to reconfigure existing switches or routers.
High-Availability for Business Servers. Server load sharing and health monitoring intelligence for server pools ensures availability and performance of business services.
High-Availability for Internet Connections. Stonesoft's unique patented Multi-Link Technology offers multiple parallel Internet connections and VPN connections across multiple ISP lines. Multi-Link VPN adds transparent failover to VPN tunnels, offering an advantage over other firewall/VPN combinations.

Security Engine Clustering and Load Balancing

StoneGate Firewalls and IPS sensors have built-in clustering and load balancing that removes the need for third-party clustering solutions.

Clustering ensures high availability of the security engines, thus allowing uninterrupted operations during system maintenance and updates.

Scale up the VPN performance of a firewall solution and the throughput of an IPS solution
Eliminate the risk of downtime
Cluster up to 16 nodes to function as a single security engine

StoneGate's built-in load balancing capabilities allow security engines to dynamically balance connections between cluster nodes, transparently transfering connections to available nodes in case a node becomes overloaded or fails. The way the load balancing is designed allows using engine nodes with different hardware in the cluster.

The clustering and load-balancing technologies in StoneGate security engine have evolved from Stonesoft's StoneBeat products.

Server Load Balancing

When you have servers hosting services (Web, file, print, etc.) that need to be available at any given time, it is essential to monitor the health and availability of those servers and be able to direct traffic accordingly.

StoneGate Firewall includes built-in server load balancing for the servers your firewall is protecting.

StoneGate can monitor the servers and automatically perform corrective actions on a problematic server and move traffic over to healthy servers. This also means that maintenance functions can be done during business hours, making administration easier.
Now you can extend the end-to-end availability from Internet connectivity and firewall availability all the way to service availability.

Stonegate Server Load Balancing Datasheet

Companies have avoided multi-homing (connecting to multiple ISPs, generally for redundancy) because of the challenges of implementing Border Gateway Protocol (BGP), but the Stonegate Firewalls take away the problem

StoneGate Multi-Link

StoneGate Multi-Link™ is the ideal solution for companies around the globe requiring always-on Internet connectivity.

Stonesoft Multi-link

StoneGate Multi-Link™ allows companies to work with any type of Internet connections including affordable Internet or enterprise-based connections to ensure resilient connectivity clusters.

Multi-link Business Continuity

StoneGate Multi-Link´s smart load-sharing functionality ensures high availability, the fastest connection possible and significant savings thanks to reduced monthly costs and maintenance without downtime. StoneGate Multi-Link™ can easily and cost-efficiently add bandwidth as needed.

Stonesoft Support

Castleforce can provide different grades of Stonesoft support depending on your requirement. Please take a look at the following datasheet to see a breakdown on the service level agreements offered.

StoneGate Support offering from Castleforce

Stonesoft Consultancy

All Stonesoft products need to be installed by Stonesoft certified engineers in order to use the support agreements correctly. We can assist with Stonesoft Stonegate designs, installations, policy creations, reviews and testing.

All consultancy work requires a scope of work to be created so we can sign off on the work completed. Our engineers can attend your site to deliver professional service work or provide remote assistance if required and we can tailor our consultancy services to meet your requirements.

Simply contact us for more information and we will be happy to discuss more details in full.

Stonegate get EAL4+ certification from CESG

StoneGate Firewall/VPN has received the Common Criteria Evaluation Assurance Level EAL 4+ certification. The EAL 4+ is the highest commercially feasible certification level.

CESG - CCRA - Common Criteria - IT Sec MRA Certified

The Common Criteria certification is an independent security standard that is globally ratified in 26 countries. More and more organizations with high security demands rely on the certification when making investment decisions. Common Criteria certified products have undergone and passed extensive and rigorous independent third-party testing, giving customers assurance that the product meets the security requirements defined in the Security Target evaluation document.

The StoneGate Firewall/VPN version 4.2.2, Build 5708.cc3.1 was tested and validated by British Telecom commercial evaluation facility under supervision of Communications-Electronics Security Group (CESG) Certification Body in UK.

StoneGate Firewall/VPN Version 4.2.2 Build 5708.cc3.1 running on the StoneGate appliance models FW-310, FW-1020, FW-1030, FW-1050, FW-1200, FW-5000 and FW-5100

Stonegate CESG Certification Report No. CRP249 MR1 March2010