Copying a 2.5GB test file over the Kerio VPN link to a desktop on the LAN returned good sustained transfer rates of around 16.5MB/sec with appliance CPU utilisation never going above 21 percent. Kerio's proprietary VPN server is a cinch to set up and client connections are equally pain free We tested the Windows version, which just required the eternal address or FQDN of the NG500 and user credentials. Kerio provides Control VPN clients for Windows, OS X and Linux. The proprietary VPN server is remarkably easy to configure though, which makes up for this surprising absence.Īll we needed to do was enable the Kerio VPN Server service, choose the default certificate and activate the predefined firewall rule to allow inbound VPN access from the Internet. Unlike most of the competition however, Kerio doesn't support SSL VPNs. VPN support extends to the IPsec, PPTP and L2TP varieties. Its signature database can be updated automatically as often as every hour. It's enabled for all traffic with a single click, uses three threat severity levels to decide whether to allow, log or block dubious incoming traffic. Kerio's intrusion prevention shouldn't be sniffed at as this is handled by the well-respected Snort. Kerio's Web Filter service offers 150 URL categories to choose from and performed very well Kerio's Web Filter service offers 150 URL categories to block or allow and supports multiple rules so we could apply a wide range of browsing controls. Rules are placed in a list in order of priority and colour coded so we could easily see which were blocking or allowing traffic.Īlong with HTTP and FTP traffic, the Sophos anti-virus scanner can be applied to SMTP and POP3 too, so some email protection is provided. Security detailįor custom firewall rules, we chose from a fine selection of predefined services, added sources and destinations and decided whether to block or allow the traffic. These can provide dedicated DHCP services and have their own security and firewall policies applied. If you wish, you can break selected ports out of the switch group and designate them as standalone. For load balancing, you can assign weightings to prioritise the link with the highest bandwidth. Both modes only use the first two ports for these duties. The NG500 supports failover and load-balanced Internet links and a handy wizard takes the strain. Kerio's tidy dashboard provides plenty of information about network activity
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |