What is NG Firewall?

The Untangle NG Firewall is a next-generation platform for deploying network based applications. The Untangle NG Firewall platform unites these applications around a common GUI, database, and reporting. The Untangle NG Firewall’s applications inspect network traffic simultaneously, greatly reducing the resource requirements of each individual application, while delivering higher network performance versus competing firewall solutions.

What does Untangle NG Firewall do?

The Untangle NG Firewall manages every aspect of network control from content filtering to web caching, remote access to policy enforcement, all in one simple, easy to use, drag & drop interface.

Is NG Firewall hardware or software?

In short, the Untangle NG Firewall is both. The Untangle NG Firewall is software that can be installed as a virtual machine, installed on standard Intel-compatible hardware, or you can purchase a Nexgen Appliances NG series firewall appliance with Untangle pre-installed.

Where does the Untangle NG Firewall fit in my network?

The Untangle NG Firewall can be your network gateway/router, or act as a bridge between your network and the internet.

Explore the features of the Untangle NG Firewall

Protection and Security Features

Untangle’s NG Firewall goes beyond traditional firewalls to give you more protection at the gateway without the need for additional hardware to maintain – saving you time and money. You get a full complement of apps, included in every package, to address common threats.

ng_app_firewall

Firewall – The firewall is the most basic security element to hide your network from the outside and control all external access points. It lets you block unwanted activity from entering or leaving the network, protecting you from threats inside and outside your network. You can build a list of rules that meets your unique needs – control traffic by protocol, port, IP and more, as well as set a default action for when no rules match. The firewall is the first line of defense, and the first element of the Untangle NG Firewall protection suite.

ng_app_intrusion_protection

Intrusion Protection – Hackers look for computer networks that they can hijack and exploit. They cast wide nets using automated programs called bots that sniff out exposed networks. Intrusion Prevention helps stop hackers, and their bots dead in their tracks. Working transparently on your network, this innovative app uses thousands of signatures to detect, block and log intrusion attempts using industry-standard rules.

ng_app_phish_blockerPhish Blocker – The Phish Blocker protects your network against phishing attacks – emails that direct users to fraudulent websites with the intent to steal personal identity, credit card information and more. The Phish Blocker marks phishing emails and puts them in a user’s quarantine. Transparent, powerful and easy to use, the Phish Blocker requires no alteration of your network’s mail configuration.

ng_app_virus_blocker_liteVirus Blocker Lite – Viruses can disrupt business, destroy data, and drain limited IT resources. Viruses can even extort money from your business. Protect your entire network from virus threats with Untangle’s basic antivirus app. Whether it’s viruses, worms, Trojans or malware, Virus Blocker Lite keeps emails, webmail, downloads and file transfers safe with the latest advances in antivirus technology and works within a variety of different protocols.

ng_app_virus_blockerVirus Blocker – The Virus Blocker dramatically improves on Virus Blocker Lite by leveraging the award-winning antivirus engine from Bit Defender. The Virus Blocker transparently scans HTTP, FTP, SMTP, POP and IMAP traffic for viruses and uses on-the-fly decompression for scanning archive files. Signatures are updated hourly for maximum efficacy.

Filtering and Control Features

Untangle’s NG Firewall handles your content filtering needs without requiring additional appliances – saving you time and money. Enjoy powerful, granular control from our next-generation platform at a price that just makes sense.

ng_app_web_filter_liteWeb Filter Lite – The Web Filter Lite module transparently scans HTTP traffic to block, log or block and log specific activity. Web sites can be blocked or logged based on category, URL, MIME type or file type. Web Filter Lite Does not filter HTTPS, perform dynamic categorization or Safe Search enforcement. Limited to ~1 million websites in 15 categories.

ng_app_web_filterWeb Filter – The Web Filter Block inappropriate web content in real-time. Dynamic URL categorization makes it easy to manage access to 450 million classified websites in over 140 categories and almost 200 languages. The Web Filter addresses new and unknown sites as users browse to them with Zvelo’s dynamic filtering and Distributed Intelligence Architecture (DIA), including rapidly changing sites like proxies, phishing, IM, and P2P. Leverage Zvelo’s Threat Protection Team for best-in-class online security; great for spyware, phishing and virus distribution sites. Block encrypted sites (HTTPS) by category; perfect for proxies and other sites that use HTTPS to obfuscate themselves.

ng_app_https_inspectorHTTPS Inspector – The HTTPS Inspector module allows organizations to safely and securely de-crypt HTTPS so that applications like Web Filter,Application Control and Virus Blocker can scan the traffic and apply their rules to it. This enables organizations to ensure that the same level of control over normal and HTTPS network traffic. Included with any subscription to Web Filter at no additional cost.

ng_app_application_control_liteApplication Control Lite – Application Control Lite lets administrators take control of disruptive apps using signature-based layer 7 filtering. Application Control Lite runs simple regular expression signatures against the datastream to detect application types. Application Control classifies the attributes and metadata of packets to determine their type and operates on them once classified. False positives are very rare.

ng_app_application_controlApplication Control - The Application Control module Protects organizations by controlling unwanted or un-trusted apps that could hinder productivity, reduce security, or present compliance violations. By analyzing network traffic, Application Control accurately identifies hundreds of apps including social networking, peer-to-peer, instant messaging, video streaming, file sharing, enterprise applications and many more.

ng_app_spam_blocker_liteSpam Blocker Lite – The Spam Blocker Lite module Scans any email that is transported via SMTP, POP, or IMAP. Each protocol has a set of controls to customize how Spam Blocker Lite scans, manages, and notifies users of spam.Spam Blocker Lite is based on the award winning Spam Assassin project.

ng_app_spam_blockerSpam Blocker – With global spam rates reaching ~87% due to massive bot nets capable of spewing millions of messages per hour, email and security providers are faced with bloated bandwidth and deteriorating customer satisfaction. Commtouch’s Recurrent Pattern Detection (RPD) technology protects against spam outbreaks in real-time as messages are mass distributed over the Internet.

ng_app_ad_blockerAd Blocker – The Ad Blocker module Eliminate annoying advertisements and decrease page load times. Based on the open source project Ad-block Plus, Ad Blocker lets you to easily block ads at the gateway without installing browser plugins. Ad Blocker helps prevent malware and scam links through banner ads and reduces traffic on the network.

Performance Features

NG Firewall’s advanced bandwidth management features set it apart from other next-generation firewall and unified threat management solutions. Optimize your bandwidth usage to reduce overages and keep expenses down.

ng_app_web_cacheWeb Cache – The Web Cache stores copies of online files passing through it; subsequent requests for the same files may be satisfied from the Web Cache if certain conditions are met, rather than being re-downloaded each time. Web Cache can help save both time and bandwidth.

ng_app_bandwidth_controlBandwidth Control – Get the power to monitor and control bandwidth usage on your network. Many organizations struggle with bandwidth problems due to users watching online videos or clients using BitTorrent while more important applications struggle to compete for bandwidth. Prioritize business-specific network traffic while slowing or stopping inappropriate usage.

ng_app_wan_balancerWAN Balancer – Wan Balancer allows you to split traffic across multiple WAN connections. Internet traffic is spread based on user-specified rules, ensuring less contention and higher performance. Save money with WAN Balancer by eliminating an expensive T1 connection in favor of multiple redundant cable and DSL connections.

ng_app_wan_failoverWAN Failover – WAN Failover allows organizations to prevent network downtime caused failed internet connections. WAN Failover detects if the primary Internet connection goes down and switches traffic to a backup connection automatically. When used with WAN Balancer, WAN Failover detects downtime and reroutes traffic to the remaining Internet connections.

VPN and Connection Features

Untangle NG Firewall includes support for secure VPN connections from remote users and sites as well as customized controlled access options with Captive Portal.

ng_app_ipsec_vpnIPsec VPN – NG Firewall’s IPsec support allows you to connect one NG Firewall to another, or connect an NG Firewall to third-party firewall products. It’s easier than ever before to enable secure site-to-site connections between trusted networks. Tested platforms include: Cisco, Sonicwall, and Sophos.

ng_app_openvpnOpenVPN – OpenVPN is an SSL-based virtual private network supporting a range of platforms. OpenVPN requires a client on each host, meaning a small application must be installed on each computer requires access. OpenVPN makes the most sense for persistent site-to-site connections and remote access to non-web (e.g. client/server) applications.

ng_app_captive_portalCaptive Portal – The Captive Portal allows administrators to require network users to log in or accept a network usage policy before accessing the internet. The Captive Portal can authenticate users against our NG Firewall’s built-in Local Directory, Active Directory, or RADIUS. The Captive Portal can be used to set up policies by username (or group name if using Active Directory) rather than IP address. While the Captive Portal is running, captured machines will be forced to authenticate (or just press OK) on the Captive Portal page before they are able to access the internet.

Management Features

Untangle NG Firewall gives you total control per group and per user. Get visibility into traffic and utilization with detailed reporting.

ng_app_policy_managerPolicy Manager - Use Policy Manager to create policy rules by user or group that send traffic to different racks, which can contain multiple, independently configured applications. Many organizations need to provide unique privileges to different sets of users like schools (teachers vs. students), libraries (librarians vs. public Internet terminals) or businesses with different departmental requirements (engineering vs. sales). Policy Manager even makes it possible to block access to common productivity-killing website like Facebook during working hours, but keep it available during lunch and after hours.

ng_app_spam_directory_connectorDirectory Connector – The Directory Connector enables the NG Firewall to communicate with directory servers, such as Untangle’s built-in Local Directory, Microsoft’s Active Directory, or servers that support RADIUS. The Directory Connector maps usernames to IP addresses so that policies can be created by usernames (or groups with Active Directory) and Reports can be viewed by username.

ng_app_reportsReports – Visibility is the first step in controlling your network. Identify misuse, enforce your network usage policy, and track users internet access. Reports provide this visibility and is also a great tool for troubleshooting. You’ll get daily, weekly and monthly reports that can be shared as HTML or PDF.

Branding and Support Features

Untangle provides world-class support services as well as complete re-branding of the Untangle NG Firewall as optional extras to your NG Firewall solution.

ng_app_branding_managerBranding Manager – The Branding Manager allows you to re-brand user-facing components by adding your company’s logo, name, URL and contact email. This information will replace the “Untangle” branding in all user-facing interactions, such as block pages, quarantine digest emails, quarantine digests, etc. Branding Manager is a great choice for both in-house deployments or for third party deployments by MSP’s, VAR’s and system integrator’s.

ng_app_live_supportLive Support – Get support from Untangle’s U.S.-based technical support team via phone or email. Untangle’s Technical Services Engineers have plenty of hands-on skills with small-to-medium business networks and are capable of resolving most support issues during the first call. In those rare incidents where additional expertise is needed, Untangle’s software engineers can be called in to assist. You also get access to Untangles Configuration Backup application, which saves a nightly backup of your Untangle server’s configuration for easy restoration in the event of a disaster. Note: Configuration Backup does not backup reporting data or any non-Untangle servers or workstations.

Different Versions of Untangle NG Firewall

freepackageNG Firewall Free bundles together all of Untangle’s free apps plus the underlying Untangle NG Firewall platform. It works as a basic unified threat management system for small organizations with limited needs for robust web filtering, virus blocking, spam blocking and network performance management.

All apps included in NG Firewall Free are open source under the GPL v2 and are offered free of charge. Apps are pre-configured for the needs of small business and work together seamlessly. A common GUI with integrated logging and reporting keeps management simple.

NG Firewall Free includes all of Untangle’s free applications:
  • Web Filter Lite
  •  Application Control Lite
  •  Virus Blocker Lite
  •  Phish Blocker
  • Intrusion Prevention
  •  Firewall
  •  OpenVPN
  •  Reports
  •  Spam Blocker Lite
  •  Captive Portal
  •  Ad Blocker

Get Free

completepackageNG Firewall Complete includes every application Untangle offers today, and is guaranteed to include all new applications Untangle releases in the future. It is a subscription to the full Untangle NG Firewall application library.

If you are considering purchasing two or more individual applications, you’ll save money by choosing NG Firewall Complete instead.

NG Firewall Complete includes all the applications of NG Firewall Free plus all the premium applications Untangle has to offer.

NG Firewall Complete includes all of Untangle’s premium NG Firewall applications:
  • Web Filter Premium
  • HTTPS Inspector
  • Live Support
  • Policy Manager
  • Branding Manager
  • WAN Failover
  • WAN Balancer
  • IPsec VPN
  • Application Control Premium
  • Web Cache
  • Bandwidth Control
  • Virus Blocker Premium
  • Spam Blocker Premium
  • Directory Connector

Get Pricing

completepackageNG Firewall Education Complete features the same content as NG Firewall Complete, but at a reduced price. It contains the complete Untangle NG Firewall application suite, including every application Untangle offers today, and is guaranteed to include each new application we release in the future. It’s a subscription to the full Untangle NG Firewall library.

Education Complete is available to qualifying institutions: schools & educational institutions, non-profit organizations and government entities.

NG Firewall Education Complete includes all the applications of NG Firewall Free plus all the premium applications Untangle has to offer.

NG Firewall Complete includes all of Untangle’s premium NG Firewall applications:
  • Web Filter Premium
  • HTTPS Inspector
  • Live Support
  • Policy Manager
  • Branding Manager
  • WAN Failover
  • WAN Balancer
  • IPsec VPN
  • Application Control Premium
  • Web Cache
  • Bandwidth Control
  • Virus Blocker Premium
  • Spam Blocker Premium
  • Directory Connector

Get Pricing