Mendax Security

1-800-963-6329
What is Network Attached Storage?

You are here: Home > Security > Mendax Security

Sentinel Firewall (Microsoft ISA 2006 Appliance)

Sentinel Security Appliances (Microsoft ISA 2006)

The Mendax Sentinel firewall is designed to protect your business against unauthorized users accessing your information. Based on the Microsoft ISA 2006 application, the Mendax Sentinel makes for a formidable opponent to anyone trying to compromise your company’s infrastructure. The Mendax Sentinel is the next-generation integrated edge security product, delivering new levels of security, simplified management, and performance.

Some of the Mendax Sentinel’s features include remote access and management, virtual private networking (VPN), monitoring and reporting; yet it is simple to install and manage. Additional drivers and components are easily downloadable from our web site. Trained technicians are always ready to answer your general and sometimes not so general questions when setting up your new firewall appliance.

The Mendax Sentinel comes with a 3-year warranty and ships complete with plug and play features, a users manual and recovery discs.

Sentinel 1020R Series Firewall (REDUNDANT HOT SWAP POWER SUPPLIES & HARD DRIVES)
	Sentinel 1020R	Sentinel 1020RM	Sentinel 1020RC	Sentinel 1020RE	Sentinel 1020REN
Mendax Part#	A1020R-30-1	A1020R-30-2	A1020R-30-3	A1020R-30-4	A1020R-30-5
Ms Part#	T22-00274	T22-00266	T22-00268	T22-00272	T22-00270
Ms ISA Ver.	ISA 2006 STD	ISA 2006 STD	ISA 2006 STD	ISA 2006 EE BRANCH	ISA 2006 EE
Gigabit NIC's	2x Intel GB Nics	3x Intel GB Nics	3x Intel GB Nics	6x Intel GB Nics	6x Intel GB Nics
Power	2x 250 Watt	2x 250 Watt	2x 250 Watt	2x 250 Watt	2x 250 Watt
Dim. (in Inches)	(1U) 19x1.75x15.5	(1U) 19x1.75x15.5	(1U) 19x1.75x15.5	(1U) 19x1.75x15.5	(1U) 19x1.75x15.5
Raid
Cache
Install 3rd party plug-ins
Driver CD
USB Recovery
Array				2 array members max	(unlimited)

	$2,716.66 USD $2,759.14 CAD	$3,533.10 USD $3,588.33 CAD	$4,018.43 USD $4,081.25 CAD	$5,189.82 USD $5,271.00 CAD	$7,838.43 USD $7,961.04 CAD



Sentinel 1035 Series Firewall
	Sentinel 1035	Sentinel 1035M	Sentinel 1035C	Sentinel 1035E	Sentinel 1035EN
Mendax Part #	A1035-30-1	A1035-30-3	A1035-30-4	A1035-30-5	A1035-30-6
Ms Part #	T22-00274	T22-00266	T22-00268	T22-00272	T22-00270
Ms ISA Ver.	ISA 2006 STD	ISA 2006 STD	ISA 2006 STD	ISA 2006 EE BRANCH	ISA 2006 EE
Gigabit NIC's	2x Intel GB Nics	3x Intel GB Nics	3x Intel GB Nics	6x Intel GB Nics	6x Intel GB Nics
Power	350 Watt	350 Watt	350 Watt	350 Watt	350 Watt
Dim. (in Inches)	(1U) 19x1.75x20.5	(1U) 19x1.75x20.5	(1U) 19x1.75x20.5	(1U) 19x1.75x20.5	(1U) 19x1.75x20.5
Raid
Cache
Install 3rd party plug-ins
Driver CD
Recovery cd
Array				2 array members max	(unlimited)
	$1,673.75 USD $1,696.29 CAD	$2,308.67 USD $2,339.77 CAD	$2,765.87 USD $2,803.13 CAD	$3,688.05 USD $3,737.73 CAD	$6,426.18 USD $6,512.77 CAD

Resources [ top ]

•	Best Practices for Performance in ISA Server 2006

•	Application Filters Provided with ISA Server 2006

•	Authentication in ISA Server 2006

•	Automatic Detection Concepts in ISA Server 2006

•	Best Practices Firewall Policy for ISA Server 2006

•	Chaining Concepts in ISA Server 2006

•	HTTP 1.1 Support in ISA Server

•	Internal Client Concepts in ISA Server 2006

•	ISA Server Network Protection: Protecting Against Floods and Attacks

•	Link Translation Concepts in ISA Server 2006

•	Network Concepts in ISA Server 2006

•	ISA Server System Policy

•	Monitoring, Logging, and Reporting Features in ISA Server 2006

•	Sentinel product matrix (pdf)

Where to go from here ? [ top ]

	Tell us about your project / your needs
	Call us @ 1-800-963-6329 and ask to speak with a Sentinel Firewall consultant
	Call Me Now
	Chat online

pfSense Firewall

The Mendax pfSense is a free, open source customized distribution of FreeBSD tailored for use as a firewall and router. In addition to being a powerful, flexible firewalling and routing platform, it includes a long list of related features and a package system allowing further expandability without adding bloat and potential security vulnerabilities to the base distribution. pfSense is a popular project with more than 1 million downloads since its inception, and proven in countless installations ranging from small home networks protecting a PC and an Xbox to large corporations, universities and other organizations protecting thousands of network devices.

Common deployements

Perimeter Firewall

The most common deployment of pfSense is as a perimeter firewall, with an Internet connection plugged into the WAN side, and the internal network on the LAN side. It supports multiple Internet connections as well as multiple internal interfaces. pfSense accommodates networks with more complex needs, such as multiple Internet connections, multiple LAN networks, multiple DMZ networks, etc. Unlike many similar solutions, you can deploy systems with dozens of interfaces if needed.

Perimeter Router

The second most common deployment of pfSense is as a LAN or WAN router. This is a separate role from the perimeter firewall in midsized to large networks, and can be integrated into the perimeter firewall in smaller environments. pfSense can also be deployed strictly as a wireless access point. Wireless capabilities can also be added to any of the other types of deployments.

VPN Appliance

Many deploy pfSense as a special purpose appliance. Some users drop in pfSense as a VPN (Virtual Private Network) appliance behind an existing firewall, to add VPN capabilities without creating any disruption in the existing firewall infrastructure. Most pfSense VPN deployments also act as a perimeter firewall, but this is a better fit in some circumstances.

Sniffer Appliance

One user was looking for a sniffer appliance to deploy to a number of branch office locations. Commercial sniffer appliances are available with numerous bells and whistles, but at a very significant cost especially when multiplied by a number of branch locations. pfSense offers a web interface for tcpdump that allows the downloading of the resulting pcap file when the capture is finished. This enables this company to capture packets on a branch network, download the resulting capture file, and open it in Wireshark for analysis.

Screenshots

pfSense Firewall



		PART NUMBER	PRICE USD


	pfSense PFS1035-30-SPW-1 We are proud to present the pfSense Firewall based on a 1U RackMount with a Pentium 4 3.2GHZ, 1GB ECC DDR2 667MHz, 160 GB or storage, Up to 2TB SATA, 2 x Gigabit Ethernet...	PFS1035-30-SPW-1	$675.25

	pfSense PFS1035-30-SPW-2 We are proud to present the pfSense Firewall based on a 1U RackMount with a Pentium 4 3.2GHZ, 2GB ECC DDR2 667MHz, 320 GB or storage, Up to 2TB SATA, 2 x Gigabit Ethernet...	PFS1035-30-SPW-2	$881.90

	pfSense PFS1035-30-SPW-3 We are proud to present the pfSense Firewall based on a 1U RackMount with a Pentium 4 3.2GHZ, 4GB ECC DDR2 667MHz, 320 GB or storage, Up to 2TB SATA, 2 x Gigabit Ethernet...	PFS1035-30-SPW-3	$1,474.78

	pfSense (Configure yourself) Configure your own pfSense firewall server...

Note : Mendax will donate 25 $ from any server sold with PFSense installed to the PFSense project.

pfSense features

Firewall

Filtering by source and destination IP, IP protocol, source and destination port for TCP and UDP traffic
Able to limit simultaneous connections on a per-rule basis.
PfSense utilizes p0f, an advanced passive OS/network fingerprinting utility to allow you to filter by the Operating System initiating the connection. Want to allow FreeBSD and Linux machines to the Internet, but block Windows machines? pfSense can do so (amongst many other possibilities) by passively detecting the Operating System in use.

State Table

Adjustable state table size - there are multiple production pfSense installations using several hundred thousand states.
The default state table size is 10,000, but it can be increased on the fly to your desired size. Do not set it arbitrarily high.
On a per-rule basis:
- Limit simultaneous client connections
- Limit states per host
- Limit new connections per second
- Define state timeout
- Define state type

Redundancy

CARP from OpenBSD allows for hardware failover. Two or more firewalls can be configured as a failover group. If one interface fails on the primary or the primary goes offline entirely, the secondary becomes active. pfSense also includes configuration synchronization capabilities, so you make your configuration changes on the primary and they automatically synchronize to the secondary firewall.
pfsync ensures the firewall's state table is replicated to all failover configured firewalls. This means your existing connections will be maintained in the case of failure, which is important to prevent network disruptions.

Network Address Translation (NAT)

Port forwards including ranges and the use of multiple public IPs
1:1 NAT for individual IPs or entire subnets.
Outbound NAT
- Default settings NAT all outbound traffic to the WAN IP. In multiple WAN scenarios, the default settings NAT outbound traffic to the IP of the WAN interface being used.
- Advanced Outbound NAT allows this default behavior to be disabled, and enables the creation of very flexible NAT (or no NAT) rules.
NAT Reflection - in some configurations, NAT reflection is possible so services can be accessed by public IP from internal networks.

NAT Limitations

PPTP and GRE Limitation - The state tracking code in pf for the GRE protocol can only track a single session per public IP per external server. This means if you use PPTP VPN connections, only one internal machine can connect simultaneously to a PPTP server on the Internet.
A thousand machines can connect simultaneously to a thousand different PPTP servers, but only one simultaneously to a single server. The only available work around is to use multiple public IPs on your firewall, one per client, or to use multiple public IPs on the external PPTP server. This is not a problem with other types of VPN connections. A solution for this is currently under development.

Real Time Information

Maximum concurrent connections - Limit the number of connections to the portal itself per client IP. This feature prevents a denial of service from client PCs sending network traffic repeatedly without authenticating or clicking through the splash page.
Idle timeout - Disconnect clients who are idle for more than the defined number of minutes.
Hard timeout - Force a disconnect of all clients after the defined number of minutes.
Logon pop up window - Option to pop up a window with a log off button.
MAC filtering - by default, pfSense filters using MAC addresses.
Authentication options - There are three authentication options available.

Where to buy from there

Tell us about your project / your needs

Call us @ 1-800-963-6329 and ask to speak with a pfSense program consultant.

Call Me Now

Chat online

[Company] [Contact Us] [Support] [Warranty] [Discount] [Price Drop]

[Credit Application] [Sitemap] [Privacy Policy] [Terms of use] [Security]