Next Generation Firewall


Connecting and Protecting your business

Why Next Generation Firewalls?

Hackers, viruses, ransomware, data theft, industrial espionage and even government sponsored attacks. The list of cyber threats that could put your business at risk goes on and on. Add to this all the new types of technologies such as the Cloud, BYOD, WiFi and other that is supposed to make your company more productive. But you quickly start to realize the complexity of securing it all, that with that productivity the threat surface expands. The challenge isn't just to make the network secure but also to make it efficient and productive at the same time.

What you need is a Next Generation Firewall (NGFW), i.e. a security product designed for your challenges with the cloud, a mobile work force, BYOD and skilled cyber criminals and that puts you in control at all times.

What You Get

Highlights


Ready to Serve and Protect

Clavister's Next Generation Firewalls combine enterprise class firewalling with application recognition and advanced threat protection features that puts you back in control of your network.

Not only will you be able to see and control how applications are being used in your network, you'll also be able to optimize your IT for productivity whilst ensuring that advanced threats, ransomware and DDoS attacks are managed proactively.

Download Solution Brief

Centralized Security Management

For enterprise customers and hosting providers, the challenge of managing security in large installations requires an easy-to-use, centralized and scalable security management solution.

Clavister InControl is our premium centralized management system, built to handle thousands of Clavister products in large networks.

Key Features

  • Reduces management costs & simplifies configuration
  • Simplifies device provisioning
  • Helps maintain regulatory compliance
  • Integrate with business and IT systems using APIs and SDKs.
Read More

Solution Highlights: Optimize for Productivity

To maximize value-for-money using Clavister's Next Generation Firewalls, we include a wide range of optimization features. This helps you reduce inefficiencies, ensure best possible utilization of Internet capacity and provide great connectivity between offices and employees working from home or while traveling. 

#Nobackdoors

In light of Edward Snowden's revelations, the Shadow Brokers hacking group and other similar events, we now know major firewall and security vendors have been compromised. 

At Clavister, we pledge to a strict no backdoors policy: Clavister’s technology is, and will always be, free from any kind of backdoors.

Don't want to take our word for it? No problem, we can even invite you to our headquarters to audit our source code, development environment and processes and see for yourself our independence.

Features


The Clavister Next Generation Firewalls are highly versatile and offers great features to keep your network safe and protected against cyberthreats. Additionally, they also come with attractive value-adding features to help run your network smoother.

Connect

IPv4/IPv6

Routing

Dynamic Routing

Transparent Mode

WAN Load Balancing

DHCP

VPN

VLAN / sVLAN

Protect

Firewall

Antivirus

Antispam

IDP - IDS/IPS

DDoS Protection

GeoIP Policies

Optimize

Application Control

User Identity Awareness

Server Load Balancing

Bandwidth Control

Policy Scheduling

Manage

Local Management

REST API

Reporting

Forensics

Alarms

Monitoring

Success Stories


Clavister ensures high availability and network security for the Civil Police, Federal District, Brazil

In Brazil, the Civil Police is the investigative State Police Force. Each of the 26 states of Brazil has its own Civil Police Department, as does the Federal District. Its role is to carry out detective work, forensics and criminal investigation and it acts as a state bureau of investigation.

Clavister Supplies Virtual Security Gateways for World’s Largest Privately Owned Energy Company

"Clavister was the sole Security Gateway provider flexible enough to deal with our diverse IT environment. Furthermore, they met our extremely high reliability standards. By implementing virtual security gateways we achieved our goals of server consolidation, ability to configure remotely, and most importantly, reduced capital investment." Uwe Fischer, CIO, E.ON C&R

Clavister makes new merged stock exchange systems secure

Clavister products protect the data of four organisations – Börsen AG, Fairtrade Wertpapierhandelsbank AG, Fondsbörse Deutschland Beteiligungsmakler AG and Aramea Asset Management AG. Börsen AG provides the comprehensive solution for the other three companies and the four employ a total of 75 people.

Beijing-Shanghai Express Railway improves its network security with Clavister Security Gateways

Clavister safeguards our network security and contributes to the development of our information systems. Clavister’s innovative solutions further guarantee stable and secure operations of our station management system.

What are You Waiting For?

Download free trial or contact us for more information.

Compare models

Here you can compare the different Next Generation Firewall platforms and choose the model that best fits your specific needs.

Hardware Appliances

W-Series (1U, 19" Rack-mounted)

 NGFW-W20NGFW-W30NGFW-W40NGFW-W50
     
FeatureStd.Pro.Std.Pro.Std.Pro.Std.Pro.
Firewalling 4 Gbps 6 Gbps 6 Gbps 10 Gbps 10 Gbps 20 Gbps 25 Gbps 55 Gbps
VPN 1 Gbps 1.5 Gbps 1.5 Gbps 2 Gbps 2 Gbps 4 Gbps 5 Gbps 8 Gbps
Concurrent Connections 500k  750k  750k  1M  1M  2.5M  5M  8M 
VPN Tunnels (IPsec)  500 1,000 1,000 2,000 2,000 4,000 5,000 10,000
Ethernet Interfaces 6 x 1GbE (RJ45)  6 x 1GbE (RJ45)  9 x 1GbE (RJ45)  1 x 1GbE (RJ45) 
Expansion Slot No 1 2 4
Compatible Modules - 8 x 1GbE (RJ45 and SFP), 2 or 4 x 10GbE (SFP+)
Virtual Interfaces VLAN (802.1Q) 256 512 1,024 2,048 2,048 4,096 4,096 4,096
Routing Tables (Virtual Routers) 25 50 50 100 100 250 250 500
High Availability (HA)  Active-Passive, Active-Active and Active-Passive-Active
 
Hardware Specifications
Form-Factor 1U, 19"
Rack-mountable Yes
Power-supply 100-240VAC, 50-60 Hz Redundant & Hot-Swappable
100-240VAC, 50-60 Hz
 
Recommended Use-Cases
Typical environments Medium sized offices, regional offices Enterprises, Datacenters, xSPs
Estimated number of users* ~100 ~200 n/a n/a

 

E-Series (Desktop Model)

 NGFW-E20 NGFW-E80 
 
FeatureStd.Pro.Std.Pro.
Firewalling 1 Gbps 2 Gbps 2 Gbps 4 Gbps
VPN 50 Mbps 100 Mbps 500 Mbps 1 Gbps
Concurrent Connections  8k 16k  250k  500k
VPN Tunnels (IPsec)   10 25 100 200
Ethernet Interfaces 4 x 1GbE (RJ45) switch + 2 x 1GbE (RJ45) 6 x 1GbE (RJ45)
Virtual Interfaces VLAN (802.1Q) 4 8 64 128
Routing Tables (Virtual Routers) 1 1 5 10
High Availability (HA)  Optional  Active-Passive, Active-Active and Active-Passive-Active
 
Hardware Specifications
Rack-mountable Rack-kit included
Power-supply 100-240VAC, 50-60 Hz
 
Recommended Use-Cases
Typical environments Small offices, branch-offices, CPE
Estimated number of users* ~10 ~25
 ICSA Labs LogoICSA Labs Logo

* Estimated numbers does not take into consideration important aspects such as hosted and public services, data-intense applications and similar. For a detailed reommendation please contact a Clavister partner for further discussions. 

Interface Modules

The Clavister interface modules enables you to customize  port configuration of Clavister appliances with interface module slots. This gives you greater flexibility but also ensures a longer lifecycle and better compliance with your current and changing needs without having to replace the entire product.

ModulePortsCompliant ProductsSKU
CM-NET80
CM-NET80
8 x GbE (RJ45) Clavister W30/W50 APP-CM-NET80
CM-NET81
CM-NET81
8 x GbE (SFP) Clavister W30/W50 APP-CM-NET81
CM-NET120
CM-NET120
2 x 10GbE (SFP+) Clavister W30/W50 APP-CM-NET120
CM-NET141
CM-NET141
4 x 10GbE (SFP+) Clavister W30/W50 APP-CM-NET141

 



SFP/SFP+ Transceivers

To ensure interoperability and best possible function with your Clavister Next Generation Firewall you should only use Clavister SFP/SFP+ Transceivers.

The following Clavister SFP/SFP+ Transceivers are available:

 

SKUDescription
APP-SFP-1G-TX SFP Gigabit Transceiver, 1000BASE-T, RJ45
APP-SFP-10G-SR SFP+ 10 Gigabit Transceiver, 10GBASE-SR/SW, 300m, 850nm, multi-mode
APP-SFP-1G-LX10 SFP Gigabit Transceiver, 1000BASE-LX, 10 km, 1310nm, single-mode
APP-SFP-1G-LX40 SFP Gigabit Transceiver, 1000BASE-LX, 40 km, 1550nm, single-mode
APP-SFP-1G-LX80 SFP Gigabit Transceiver, 1000BASE-LX, 80 km, 1550nm, single-mode

What are You Waiting For?

Download free trial or contact us for more information.

Services

Clavisters service bundles are designed to help ensure that your Clavister products are kept up to date with the latest security threats and that you get excellent assistance from our attentive support team.

The services are purchased in either 12, 36 or 60 months bundles.

CPS

Clavister Product Subscription

CSS

Clavister Security Subscription

Technical Support

Access to technical support 24 hours per day, 365 days per year

Software Maintenance

Access to both minor and major software upgrades

Hardware Replacement

Advanced hardware replacement in case of hardware failure. 

Centralized Management

Access to Clavister InControl, our centralized management system.

Antivirus

Access and updates of new virus definitions.

Antispam

Access to our spam reputation feeds.

Intrusion Detection and Prevention

Access to new threat signatures.

Web Content Filtering

Access to the cloud based URL categorization service.

Application Control

Updates of application recognition decoders

IP Reputation

Access our IP Reputation feed

 

Read More

What are You Waiting For?

Download free trial or contact us for more information.

Resources

Download product datasheets, videos, white papers and more.

Datasheets

Clavister Next Generation Firewalls - Model Comparisson EN
Clavister E20 EN | DE
Clavister E80 EN | DE
Clavister W20 EN | DE
Clavister W30 EN | DE
Clavister W40 EN
Clavister W50 EN | DE
Clavister Virtual Next Generation Firewalls EN | DE
Clavister InControl - Centralized Management EN 
Clavister InControl - API/SDK EN 

Feature Spotlights

Next Generation Firewalling EN
Application Control EN
User Identity Awareness EN
Server Load Balancing EN
WAN Load Balancing EN
L2TPv3 EN
Service VLANs EN

Videos

Government  
True Next Generation Firewall  
 Cybercrime and Ransomware  
Protect against DDoS attacks  
More videos  

Whitepapers and Thought Leadership Articles

Virtualization and Cloud Security ENDE | CN
Has Prism scattered trust in IT security? EN
DoS and DDoS Protection with Clavister EN | DE | SE
 More though leadership articles on Clavister DeCrypted News   

Other

Web Content Filtering - Category Definitions and Test your own URL EN

What are You Waiting For?

Download free trial or contact us for more information.

Free Trial

Create My Clavister Account

Free 30-day trial

All Clavister Endpoint Security Client customers proactively protected against EternalBlue, WannaCry ransomware via next-generation machine learning and memory introspection technologies.