See and control application usage, for all users, all devices and any IP address – all the time.
Next Generation Firewall
Connecting and Protecting your business
Why Next Generation Firewalls?
Hackers, viruses, ransomware, data theft, industrial espionage and even government sponsored attacks. The list of cyber threats that could put your business at risk goes on and on. Add to this all the new types of technologies such as the Cloud, BYOD, WiFi and other that is supposed to make your company more productive. But you quickly start to realize the complexity of securing it all, that with that productivity the threat surface expands. The challenge isn't just to make the network secure but also to make it efficient and productive at the same time.
What you need is a Next Generation Firewall (NGFW), i.e. a security product designed for your challenges with the cloud, a mobile work force, BYOD and skilled cyber criminals and that puts you in control at all times.
What You Get
Insight and Control
Productivity
Prioritize business applications and reduce non-business related use of Internet resources.
Threat Protection
Stay ahead of the hackers by using multiple layers of proactive security features.
Highlights
Ready to Serve and Protect
Clavister's Next Generation Firewalls combine enterprise class firewalling with application recognition and advanced threat protection features that puts you back in control of your network.
Not only will you be able to see and control how applications are being used in your network, you'll also be able to optimize your IT for productivity whilst ensuring that advanced threats, ransomware and DDoS attacks are managed proactively.
Download Solution Brief
Centralized Security Management
For enterprise customers and hosting providers, the challenge of managing security in large installations requires an easy-to-use, centralized and scalable security management solution.
Clavister InControl is our premium centralized management system, built to handle thousands of Clavister products in large networks.
Key Features
- Reduces management costs & simplifies configuration
- Simplifies device provisioning
- Helps maintain regulatory compliance
- Integrate with business and IT systems using APIs and SDKs.
Solution Highlights: Optimize for Productivity
To maximize value-for-money using Clavister's Next Generation Firewalls, we include a wide range of optimization features. This helps you reduce inefficiencies, ensure best possible utilization of Internet capacity and provide great connectivity between offices and employees working from home or while traveling.
#Nobackdoors
In light of Edward Snowden's revelations, the Shadow Brokers hacking group and other similar events, we now know major firewall and security vendors have been compromised.
At Clavister, we pledge to a strict no backdoors policy: Clavister’s technology is, and will always be, free from any kind of backdoors.
Don't want to take our word for it? No problem, we can even invite you to our headquarters to audit our source code, development environment and processes and see for yourself our independence.
Features
The Clavister Next Generation Firewalls are highly versatile and offers great features to keep your network safe and protected against cyberthreats. Additionally, they also come with attractive value-adding features to help run your network smoother.
Connect
IPv4/IPv6
Routing
Dynamic Routing
Transparent Mode
WAN Load Balancing
DHCP
VPN
VLAN / sVLAN
Protect
Optimize
Application Control
User Identity Awareness
Server Load Balancing
Bandwidth Control
Policy Scheduling
Manage
Success Stories
What are You Waiting For?
Download free trial or contact us for more information.
Compare models
Here you can compare the different Next Generation Firewall platforms and choose the model that best fits your specific needs.
Hardware Appliances
W-Series (1U, 19" Rack-mounted)
| NGFW-W20 | NGFW-W30 | NGFW-W40 | NGFW-W50 | |||||
|---|---|---|---|---|---|---|---|---|
 |  |  |  | |||||
| Feature | Std. | Pro. | Std. | Pro. | Std. | Pro. | Std. | Pro. |
| Firewalling | 4 Gbps | 6 Gbps | 6 Gbps | 10 Gbps | 10 Gbps | 20 Gbps | 25 Gbps | 55 Gbps |
| VPN | 1 Gbps | 1.5 Gbps | 1.5 Gbps | 2 Gbps | 2 Gbps | 4 Gbps | 5 Gbps | 8 Gbps |
| Concurrent Connections | 500k | 750k | 750k | 1M | 1M | 2.5M | 5M | 8M |
| VPN Tunnels (IPsec) | 500 | 1,000 | 1,000 | 2,000 | 2,000 | 4,000 | 5,000 | 10,000 |
| Ethernet Interfaces | 6 x 1GbE (RJ45) | 6 x 1GbE (RJ45) | 9 x 1GbE (RJ45) | 1 x 1GbE (RJ45) | ||||
| Expansion Slot | No | 1 | 2 | 4 | ||||
| Compatible Modules | - | 8 x 1GbE (RJ45 and SFP), 2 or 4 x 10GbE (SFP+) | ||||||
| Virtual Interfaces VLAN (802.1Q) | 256 | 512 | 1,024 | 2,048 | 2,048 | 4,096 | 4,096 | 4,096 |
| Routing Tables (Virtual Routers) | 25 | 50 | 50 | 100 | 100 | 250 | 250 | 500 |
| High Availability (HA) | Active-Passive, Active-Active and Active-Passive-Active | |||||||
| Hardware Specifications | ||||||||
| Form-Factor | 1U, 19" | |||||||
| Rack-mountable | Yes | |||||||
| Power-supply | 100-240VAC, 50-60 Hz | Redundant & Hot-Swappable 100-240VAC, 50-60 Hz |
||||||
| Recommended Use-Cases | ||||||||
| Typical environments | Medium sized offices, regional offices | Enterprises, Datacenters, xSPs | ||||||
| Estimated number of users* | ~100 | ~200 | n/a | n/a | ||||
E-Series (Desktop Model)
| NGFW-E20 | NGFW-E80 | |||
|---|---|---|---|---|
 |  | |||
| Feature | Std. | Pro. | Std. | Pro. |
| Firewalling | 1 Gbps | 2 Gbps | 2 Gbps | 4 Gbps |
| VPN | 50 Mbps | 100 Mbps | 500 Mbps | 1 Gbps |
| Concurrent Connections | 8k | 16k | 250k | 500k |
| VPN Tunnels (IPsec) | 10 | 25 | 100 | 200 |
| Ethernet Interfaces | 4 x 1GbE (RJ45) switch + 2 x 1GbE (RJ45) | 6 x 1GbE (RJ45) | ||
| Virtual Interfaces VLAN (802.1Q) | 4 | 8 | 64 | 128 |
| Routing Tables (Virtual Routers) | 1 | 1 | 5 | 10 |
| High Availability (HA) | Optional | Active-Passive, Active-Active and Active-Passive-Active | ||
| Hardware Specifications | ||||
| Rack-mountable | Rack-kit included | |||
| Power-supply | 100-240VAC, 50-60 Hz | |||
| Recommended Use-Cases | ||||
| Typical environments | Small offices, branch-offices, CPE | |||
| Estimated number of users* | ~10 | ~25 | ||
  | ||
|---|---|---|
* Estimated numbers does not take into consideration important aspects such as hosted and public services, data-intense applications and similar. For a detailed reommendation please contact a Clavister partner for further discussions.
Interface Modules
The Clavister interface modules enables you to customize port configuration of Clavister appliances with interface module slots. This gives you greater flexibility but also ensures a longer lifecycle and better compliance with your current and changing needs without having to replace the entire product.
| Module | Ports | Compliant Products | SKU |
|---|---|---|---|
CM-NET80 |
8 x GbE (RJ45) | Clavister W30/W50 | APP-CM-NET80 |
CM-NET81  |
8 x GbE (SFP) | Clavister W30/W50 | APP-CM-NET81 |
CM-NET120  |
2 x 10GbE (SFP+) | Clavister W30/W50 | APP-CM-NET120 |
CM-NET141  |
4 x 10GbE (SFP+) | Clavister W30/W50 | APP-CM-NET141 |
SFP/SFP+ Transceivers
To ensure interoperability and best possible function with your Clavister Next Generation Firewall you should only use Clavister SFP/SFP+ Transceivers.
The following Clavister SFP/SFP+ Transceivers are available:
| SKU | Description |
|---|---|
| APP-SFP-1G-TX | SFP Gigabit Transceiver, 1000BASE-T, RJ45 |
| APP-SFP-10G-SR | SFP+ 10 Gigabit Transceiver, 10GBASE-SR/SW, 300m, 850nm, multi-mode |
| APP-SFP-1G-LX10 | SFP Gigabit Transceiver, 1000BASE-LX, 10 km, 1310nm, single-mode |
| APP-SFP-1G-LX40 | SFP Gigabit Transceiver, 1000BASE-LX, 40 km, 1550nm, single-mode |
| APP-SFP-1G-LX80 | SFP Gigabit Transceiver, 1000BASE-LX, 80 km, 1550nm, single-mode |
What are You Waiting For?
Download free trial or contact us for more information.
Services
Clavisters service bundles are designed to help ensure that your Clavister products are kept up to date with the latest security threats and that you get excellent assistance from our attentive support team.
The services are purchased in either 12, 36 or 60 months bundles.
| |
CPSClavister Product Subscription |
CSSClavister Security Subscription |
Technical SupportAccess to technical support 24 hours per day, 365 days per year |
| |
Software MaintenanceAccess to both minor and major software upgrades |
| |
Hardware ReplacementAdvanced hardware replacement in case of hardware failure. |
| |
Centralized ManagementAccess to Clavister InControl, our centralized management system. |
| |
AntivirusAccess and updates of new virus definitions. |
| |
AntispamAccess to our spam reputation feeds. |
| |
Intrusion Detection and PreventionAccess to new threat signatures. |
| |
Web Content FilteringAccess to the cloud based URL categorization service. |
| |
Application ControlUpdates of application recognition decoders |
| |
IP ReputationAccess our IP Reputation feed |
| |
Read More |
||
What are You Waiting For?
Download free trial or contact us for more information.
Resources
Download product datasheets, videos, white papers and more.
Datasheets
| Clavister Next Generation Firewalls - Model Comparisson | EN |
| Clavister E20 | EN | DE |
| Clavister E80 | EN | DE |
| Clavister W20 | EN | DE |
| Clavister W30 | EN | DE |
| Clavister W40 | EN |
| Clavister W50 | EN | DE |
| Clavister Virtual Next Generation Firewalls | EN | DE |
| Clavister InControl - Centralized Management | EN |
| Clavister InControl - API/SDK | EN |
Feature Spotlights
Videos
Whitepapers and Thought Leadership Articles
Other
| Web Content Filtering - Category Definitions and Test your own URL | EN |
What are You Waiting For?
Download free trial or contact us for more information.
Free Trial
Free 30-day trial
Try out the Clavister Virtual Next Generation Firewall for free during 30 days.
Easy to deploy
Works on both vmware vSphere, KVM and Microsoft Hyper-V.
Full featured product
Comes with UTM Services, NGFW Services and Clavister InControl, our centralized management system included.
Create My Clavister Account
Ready
Register your details in the form below.
Set
Register the license key provided by Clavister and get access to download the Virtual Next Generation Firewall software package.
Go
Install the Virtual Next Generation Firewall software on your own choice of hypervisor (VMware vSphere, vmplayer or KVM).