Cyberoam Shows Security Mastery with CR1000iNG-XP

Cyberoam CR1000iNG-XP delivers high performance network security to mid and large sized businesses and gets it absolutely right on multiple fronts.

Cyberoam, enjoys a reputation for delivering firewalls that are a unique combination of price and high performance.

The CR1000iNG-XP is the latest appliance to join the ranks of Cyberoam appliances that are making their impact felt in the world of enterprise security with their next-generation security features.

Offering a massive firewall throughput of 120Gbps, it makes a great pick for growing mid and large sized businesses.

CR1000iNG-XP
The CR1000iNG-XP offers businesses, an EAL4+ certifiedStatefulPacket Inspection firewall, coupled with a truckload of next-generation features like anti-malware, ready-to-use IPS templates, industry leading web and application filtering, on-appliance IPsec and SSL VPN and anti-spam.

Add to that, Cyberoam’s patented layer 8 technology, which offers an extra layer of identity-based security and you have a network security solution that is difficult to beat.

Users can choose the levels of support they want with the device. The Total Value Subscription (TVS) offers 8x5 cover while the Comprehensive Value Subscription (CVS) offers 24/7 cover. With the CVS, you also get the added benefit of Cyberoam’s on-appliance Web Application Firewall (WAF) that safeguards websites and business-critical web applications from attacks like cross-site scripting (XSS), OWASP top ten web application vulnerabilities and more!

Hassle Free Deployment
Ease of deployment is one of the hallmarks of this appliance. This appliance can be deployed in the network in two modes, Route (gateway) and Bridge.

The former ensures the appliance provides the entire spectrum of security functions including firewalling.

If necessary, deploying the appliance in the bridge mode will ensure this appliance sits behind an existing firewall.

The CR1000iNG-XP deployment wizard offers a choice of two base security policies including a general policy and strict policy. While the former activates anti-malware scanning and web filtering for common undesirable categories, the latter ensures only authenticated users are allowed access.

Identity Based Security
Cyberoam’s identity and policy based network security enables application of firewall rules and security policies to users and groups. For e.g. its web application filtering feature can be tailored to specific users and groups.

The appliance offers a wide array of security features, which include web filtering, internet access and bandwidth usage policies that can be defined as per specific users and groups.

If you want to restrict the amount of uploads and downloads and set limits on data transfer, you can do so for daily, weekly, monthly and even yearly usage.

One useful benefit is that you can assign different category based actions. For e.g. the appliance’s web filtering rules support both HTTP and HTTPS and you can actually block HTTP access to websites that belong to a certain category but allow secure HTTPS connections for the same websites.

You can even drill down on the policies meaning you can apply a global policy for anti-spam, and then make subtle changes to this policy as per requirement. 

You also have the option of dropping, rejecting or quarantining suspect messages in the1 TB hard disk on the appliance. 

Another useful security feature is the spam digest service that keeps users updated with the latest spam advisory.

Comprehensive Reporting
The user-friendly nature of this appliance is taken a notch higher with full on-appliance reporting courtesy the embedded iView syslog server.

All logs are stored on the internal hard disk and accessible from the web console of the appliance.

The reporting is in-depth in its scale and scope and includes graphs of allowed and disallowed traffic and information that gives insight into firewall details, web content filtering, virus and spam activity and more.

Another reporting feature that offers tremendous value to an organization, especially those that have to adhere to regulatory compliance –on-appliance reporting to meet global regulatory compliance for PCI, HIPAA and SOX.

The Verdict
This network security appliance is a great buy for mid and large sized businesses that are looking for a solution that offers a wide range of features and at a price that is well within their budgets.

It brings unmatched mix of Security, Productivity and Connectivity capabilities and offers desired manageability and ease of deployment. Moreover, its Extensible Security Architecture allows businesses to add new security features to meet the growing needs of businesses.