Kerio WinRoute Firewall Plays Traffic Cop

The Kerio WinRoute Firewall performs stateful packet inspection and protocol inspection on all outgoing and incoming traffic. Security is rules-based and governs the configuration of packet filters, network address translation (NAT), port mapping and access control. A rules wizard simplifies the creation of network traffic rules, so setting up the firewall and connecting to the Internet takes just minutes. A built-in SSL-based VPN server works in both client-to-server and server-to-server modes so that branch offices and remote workers can securely connect to a corporate LAN and share network resources.

The firewall provides a virus-scan option for inbound and outbound e-mail, Web traffic and FTP transfers. An optional McAfee Antivirus add-on offers virus protection in Windows, Linux and Mac OS X. The integrated McAfee Antivirus is regularly updated with the latest virus definitions for optimum protection. The Kerio WinRoute Firewall with the McAfee Antivirus add-on costs $499 for 10 users. The firewall also supports other major antivirus software using plug-ins.

An optional integrated ISS Orange Web Filter can block access to 58 categories of Web content. This option is useful for educational institutions that want to prevent students from accessing questionable Web sites. The ISS Orange Web Filter is a Web content database containing more than 4 billion pages and 20 million URLs. If a requested Web page isn't listed in the database, the URL is submitted to ISS to be classified within 24 hours. When a user attempts to visit a Web site, the firewall automatically searches the ISS database. If a page is found in the database, user access to the page is denied. The software can also issue a warning that the page has been logged for administrative review. A peer-to-peer (P2P) Eliminator can block access to peer-to-peer networks such as Kazaa.

Users are required to log in to the Kerio WinRoute Firewall before connecting to the Internet. This allows access policies to be custom-tailored for specific users, no matter their IP address. The firewall also lets administrators set traffic limits, including a quota for upload, download or both, or even limit the amount of traffic on a per-day or per-month basis.

Kerio includes a clearly written in-depth manual that's almost 300 pages in length. It's easy to find information without having to browse a disc or go online. In addition, all of the firewall settings and user management and security policies are accessed and modified from the Kerio Administration Console. The console can be installed on any computer with Internet access, regardless of location. Communication between the firewall and the administration console is encrypted for extra security.

Kerio has had a channel presence since 2001, but a new Business Partner Program was just unveiled Oct. 11. The program consists of three levels: resellers without certification, Certified Reseller Partners and Preferred Reseller Partners. Partners at each level must pass the Kerio Certified Security Administrators (KCSA) exam. Preferred status can be achieved by demonstrating qualified expertise in Kerio technology and by meeting specific sales goals. All partners receive one-on-one technical training and pre- and post-sales support. Margins range from 15 percent to 25 percent.

CHANNEL PROGRAM SNAPSHOTS
>Kerio WinRoute Firewall

COMPANY: Kerio Technologies, Inc.
Santa Clara, Calif.
(408) 496-4500
www.kerio.com
DISTRIBUTORS: deerfield.com, Fujitsu Siemens, Ingram Micro, PC Connection, PC Mall
AUTHORIZATION REQUIREMENTS: Must pass KCSA certification to receive either Certified or Preferred Reseller status
TECH RATING:

CHANNEL RATING:

Note: Recommended status is earned with a score of eight stars out of 10