The primary function of any perimeter firewall is to control outgoing and incoming network traffic based on the corporate security policy.

Kerio WinRoute Firewall offers detailed rule definition to perform stateful inspection of all Internet traffic and enforce the security policy. A network rules wizard assists in the rapid setup of the firewall.

Design
Kerio WinRoute Firewall is a robust network firewall operating at the TDI/NDIS layers of the OS. Its deep inspection technology applied on both incoming and outgoing communication helps provide the highest security possible to the entire local area network, and as well as the computer it is running on.

Traffic policy
Kerio WinRoute Firewall security is based on traffic rules which allow configuration of packet filters, NAT (network address translation), port mapping and access control easily from one comprehensible table.

The built-in configuration wizard radically simplifies the process of creating a set of necessary traffic rules. Setting-up the firewall and connecting the network to the Internet takes minutes.

Intrusion prevention system
A prerequisite of ICSA Labs security testing of corporate firewall products, Kerio WinRoute Firewall recognizes the most prevalent intrusion and hacker attacks. All security breaches are logged in the security log.

Anti-spoofing
Anti-spoofing is a component of Kerio WinRoute Firewall's packet filtering, providing further protection to the LAN against attacks where the intruder falsifies source IP addresses.

Firewall logging
A critical function of any security product is the ability to record events at all times in sufficient detail.

Kerio WinRoute Firewall offers a variety of different logs that encompass error reporting, debugging, user definition, status, web browsing, port probes and so on.

Logging can be set for any rule defined in the unified traffic rules table so the administrator has complete control over what communication passes through the firewall.

  

Protocol inspection
Protocol inspection helps certain applications with proprietary protocols (not originally designed with firewall negotiation in mind) to be used securely in local area networks. Many protocols can be scanned, filtered or modified, thus increasing firewall restrictiveness and reporting capabilities.