Next Generation Firewall

Connecting and Protecting your business

Why Next Generation Firewalls?

Hackers, viruses, ransomware, data theft, industrial espionage and even government sponsored attacks. The list of cyber threats that could put your business at risk goes on and on. Add to this all the new types of technologies such as the Cloud, BYOD, WiFi and other that is supposed to make your company more productive. But you quickly start to realize the complexity of securing it all, that with that productivity the threat surface expands. The challenge isn't just to make the network secure but also to make it efficient and productive at the same time.

What you need is a Next Generation Firewall (NGFW), i.e. a security product designed for your challenges with the cloud, a mobile work force, BYOD and skilled cyber criminals and that puts you in control at all times.

What You Get


Ready to Serve and Protect

Clavister's Next Generation Firewalls combine enterprise class firewalling with application recognition and advanced threat protection features that puts you back in control of your network.

Not only will you be able to see and control how applications are being used in your network, you'll also be able to optimize your IT for productivity whilst ensuring that advanced threats, ransomware and DDoS attacks are managed proactively.

Download Solution Brief

Centralized Security Management

For enterprise customers and hosting providers, the challenge of managing security in large installations requires an easy-to-use, centralized and scalable security management solution.

Clavister InControl is our premium centralized management system, built to handle thousands of Clavister products in large networks.

Key Features

  • Reduces management costs & simplifies configuration
  • Simplifies device provisioning
  • Helps maintain regulatory compliance
  • Integrate with business and IT systems using APIs and SDKs.
Read More

Solution Highlights: Optimize for Productivity

To maximize value-for-money using Clavister's Next Generation Firewalls, we include a wide range of optimization features. This helps you reduce inefficiencies, ensure best possible utilization of Internet capacity and provide great connectivity between offices and employees working from home or while traveling. 


In light of Edward Snowden's revelations, the Shadow Brokers hacking group and other similar events, we now know major firewall and security vendors have been compromised. 

At Clavister, we pledge to a strict no backdoors policy: Clavister’s technology is, and will always be, free from any kind of backdoors.

Don't want to take our word for it? No problem, we can even invite you to our headquarters to audit our source code, development environment and processes and see for yourself our independence.


The Clavister Next Generation Firewalls are highly versatile and offers great features to keep your network safe and protected against cyberthreats. Additionally, they also come with attractive value-adding features to help run your network smoother.




Dynamic Routing

Transparent Mode

WAN Load Balancing









DDoS Protection

GeoIP Policies


Application Control

User Identity Awareness

Server Load Balancing

Bandwidth Control

Policy Scheduling


Local Management






Success Stories

Clavister ensures high availability and network security for the Civil Police, Federal District, Brazil

In Brazil, the Civil Police is the investigative State Police Force. Each of the 26 states of Brazil has its own Civil Police Department, as does the Federal District. Its role is to carry out detective work, forensics and criminal investigation and it acts as a state bureau of investigation.

Clavister Supplies Virtual Security Gateways for World’s Largest Privately Owned Energy Company

"Clavister was the sole Security Gateway provider flexible enough to deal with our diverse IT environment. Furthermore, they met our extremely high reliability standards. By implementing virtual security gateways we achieved our goals of server consolidation, ability to configure remotely, and most importantly, reduced capital investment." Uwe Fischer, CIO, E.ON C&R

Clavister makes new merged stock exchange systems secure

Clavister products protect the data of four organisations – Börsen AG, Fairtrade Wertpapierhandelsbank AG, Fondsbörse Deutschland Beteiligungsmakler AG and Aramea Asset Management AG. Börsen AG provides the comprehensive solution for the other three companies and the four employ a total of 75 people.

Beijing-Shanghai Express Railway improves its network security with Clavister Security Gateways

Clavister safeguards our network security and contributes to the development of our information systems. Clavister’s innovative solutions further guarantee stable and secure operations of our station management system.

What are You Waiting For?

Download free trial or contact us for more information.

Compare models

Here you can compare the different Next Generation Firewall platforms and choose the model that best fits your specific needs.

Hardware Appliances

W-Series (1U, 19" Rack-mounted)

Firewalling 4 Gbps 6 Gbps 6 Gbps 10 Gbps 10 Gbps 20 Gbps 25 Gbps 55 Gbps
VPN 1 Gbps 1.5 Gbps 1.5 Gbps 2 Gbps 2 Gbps 4 Gbps 5 Gbps 8 Gbps
Concurrent Connections 500k  750k  750k  1M  1M  2.5M  5M  8M 
VPN Tunnels (IPsec)  500 1,000 1,000 2,000 2,000 4,000 5,000 10,000
Ethernet Interfaces 6 x 1GbE (RJ45)  6 x 1GbE (RJ45)  9 x 1GbE (RJ45)  1 x 1GbE (RJ45) 
Expansion Slot No 1 2 4
Compatible Modules - 8 x 1GbE (RJ45 and SFP), 2 or 4 x 10GbE (SFP+)
Virtual Interfaces VLAN (802.1Q) 256 512 1,024 2,048 2,048 4,096 4,096 4,096
Routing Tables (Virtual Routers) 25 50 50 100 100 250 250 500
High Availability (HA)  Active-Passive, Active-Active and Active-Passive-Active
Hardware Specifications
Form-Factor 1U, 19"
Rack-mountable Yes
Power-supply 100-240VAC, 50-60 Hz Redundant & Hot-Swappable
100-240VAC, 50-60 Hz
Recommended Use-Cases
Typical environments Medium sized offices, regional offices Enterprises, Datacenters, xSPs
Estimated number of users* ~100 ~200 n/a n/a


E-Series (Desktop Model)

Firewalling 1 Gbps 1 Gbps 2 Gbps 2 Gbps 4 Gbps
VPN 100 Mbps 50 Mbps 100 Mbps 500 Mbps 1 Gbps
Concurrent Connections 16k  8k 16k  250k  500k
VPN Tunnels (IPsec)  10  10 25 100 200
Ethernet Interfaces 4 x 1GbE (RJ45) 4 x 1GbE (RJ45) switch + 2 x 1GbE (RJ45) 6 x 1GbE (RJ45)
Virtual Interfaces VLAN (802.1Q) 16 4 8 64 128
Routing Tables (Virtual Routers) 2 1 1 5 10
High Availability (HA) Optional  Optional  Active-Passive, Active-Active and Active-Passive-Active
Hardware Specifications
Rack-mountable  No Rack-kit included
Power-supply  External PSU, 100-240 VAC, 50-60 Hz 100-240VAC, 50-60 Hz
Recommended Use-Cases
Typical environments   Small offices, branch-offices, CPE
Estimated number of users*  ~10 ~10 ~25
 ICSA Labs LogoICSA Labs Logo

* Estimated numbers does not take into consideration important aspects such as hosted and public services, data-intense applications and similar. For a detailed reommendation please contact a Clavister partner for further discussions. 

Interface Modules

The Clavister interface modules enables you to customize  port configuration of Clavister appliances with interface module slots. This gives you greater flexibility but also ensures a longer lifecycle and better compliance with your current and changing needs without having to replace the entire product.

ModulePortsCompliant ProductsSKU
8 x GbE (RJ45) Clavister W30/W40/W50 APP-CM-NET80
8 x GbE (SFP) Clavister W30/W40/W50 APP-CM-NET81
2 x 10GbE (SFP+) Clavister W30/W40/W50 APP-CM-NET120
4 x 10GbE (SFP+) Clavister W30/W40/W50 APP-CM-NET141


SFP/SFP+ Transceivers

To ensure interoperability and best possible function with your Clavister Next Generation Firewall you should only use Clavister SFP/SFP+ Transceivers.

The following Clavister SFP/SFP+ Transceivers are available:


APP-SFP-1G-TX SFP Gigabit Transceiver, 1000BASE-T, RJ45
APP-SFP-10G-SR SFP+ 10 Gigabit Transceiver, 10GBASE-SR/SW, 300m, 850nm, multi-mode
APP-SFP-1G-LX10 SFP Gigabit Transceiver, 1000BASE-LX, 10 km, 1310nm, single-mode
APP-SFP-1G-LX40 SFP Gigabit Transceiver, 1000BASE-LX, 40 km, 1550nm, single-mode
APP-SFP-1G-LX80 SFP Gigabit Transceiver, 1000BASE-LX, 80 km, 1550nm, single-mode

What are You Waiting For?

Download free trial or contact us for more information.


Clavisters service bundles are designed to help ensure that your Clavister products are kept up to date with the latest security threats and that you get excellent assistance from our attentive support team.

The services are purchased in either 12, 36 or 60 months bundles.


Clavister Product Subscription


Clavister Security Subscription

Technical Support

Access to technical support 24 hours per day, 365 days per year

Software Maintenance

Access to both minor and major software upgrades

Hardware Replacement

Advanced hardware replacement in case of hardware failure. 

Centralized Management

Access to Clavister InControl, our centralized management system.


Access and updates of new virus definitions.


Access to our spam reputation feeds.

Intrusion Detection and Prevention

Access to new threat signatures.

Web Content Filtering

Access to the cloud based URL categorization service.

Application Control

Updates of application recognition decoders

IP Reputation

Access our IP Reputation feed


Read More

What are You Waiting For?

Download free trial or contact us for more information.


Download product datasheets, videos, white papers and more.


Clavister Next Generation Firewalls - Model Comparisson EN I DE
Clavister E10 EN
Clavister E20 EN | DE
Clavister E80 EN | DE
Clavister W20 EN
Clavister W30 EN | DE
Clavister W40 EN
Clavister W50 EN | DE
Clavister Virtual Next Generation Firewalls EN | DE
Clavister InControl - Centralized Management EN 
Clavister InControl - API/SDK EN 

Feature Spotlights

Next Generation Firewalling EN
Application Control EN
User Identity Awareness EN
Server Load Balancing EN
WAN Load Balancing EN
Service VLANs EN


True Next Generation Firewall  
 Cybercrime and Ransomware  
Protect against DDoS attacks  
More videos  

Whitepapers and Thought Leadership Articles

Virtualization and Cloud Security ENDE | CN
Has Prism scattered trust in IT security? EN
DoS and DDoS Protection with Clavister EN | DE | SE
 More though leadership articles on Clavister DeCrypted News   


Web Content Filtering - Category Definitions and Test your own URL EN

What are You Waiting For?

Download free trial or contact us for more information.

Take the Clavister NGFW on a testdrive

Try out the web interface of a Clavister Next Generation Firewall right here and now.

Click here or on the picture below and login using the username: demo and password: demo


Free Trial

Create My Clavister Account

Free 90-day trial

Start your trial today to use Clavister Next Generation Firewall.

Here's what you need to get started: 

1. Access My Clavister

To register for your free trial version you must first access the My Clavister area. Click here to login, or here to register a new account.

2. Generate Trial License

Try out the Clavister Virtual Next Generation Firewall for free during 90 days. It comes with UTM Services, NGFW Services and Clavister InControl, our centralized management system included. Read more about the specifications here. You may generate one trial license for your company. If you want to extend your trial or have additional requirements, don't hesitate to contact Clavister Sales.

3. Need more help?

If you need more help you are always welcome to contact our support team by registering a new support ticket in My Clavister.