Services are software modules running on the service layer of the firewall. Each service provides a piece of network functionality. Depending on which service you start, it might require additional services or be limited to one service per virtual server or device. The following services are available on stand-alone and managed firewalls.
Access Control Service
The Access Control service defines security policies for network users (e.g., VPN clients) and provides a range of features, such as registry checks and repairs on a client. Create Access Control objects with policy rulesets specifying the required system and service settings to let the CloudGen Firewall F perform identity and health checks on connecting clients and groups.
For more information, see Access Control Service.
DHCP
The DHCP service automatically assigns IP addresses to clients in the same network. For clients requiring special DHCP options, combine the DHCP server with the DHCP relay service to share a DHCP server across multiple network segments.
For more information, see DHCP.
DNS
The CloudGen Firewall can act as an authoritative DNS server. The DNS service returns definitive answers to DNS queries for domain names and IP addresses. Use split DNS to return different answers depending on the source IP of the DNS query. This allows you to redirect internal clients to an internal IP address of a server.
For more information, see DNS.
Dynamic Routing Protocols (OSPF/RIP/BGP)
Dynamic Routing enables the CloudGen Firewall to learn and select the optimal route to a destination IP address, detects changes to the network topology, and advertises these changes to other neighboring routers. Three Dynamic Routing protocols are supported - OSPF, RIP (V1 and V2), and BGP.
For more information, see Dynamic Routing Protocols (OSPF/RIP/BGP).
Forwarding Firewall
The Forwarding Firewall handles all traffic for which the destination does not match with a listening socket on the firewall - in other words, all traffic passing through the CloudGen Firewall. The firewall service includes all Application Control features such as virus scanning, mail security, or file content filtering.
For more information, see Firewall.
HTTP Proxy
The HTTP proxy service provides content filtering and caching, antivirus and malware protection, and access control. You can configure the HTTP proxy in forward, reverse, and transparent mode.
For more information, see HTTP Proxy.
SIP Proxy
The SIP proxy server allows the CloudGen Firewall to act as a (transparent) proxy for SIP and RTP connections.
For more information, see SIP Proxy.
URL Filter
The Barracuda Web Filter (URL Filter) can be used by the HTTP Proxy service and in combination with application control. URLs are categorized according to content.
For more information, see URL Filter.
Virus Scanner
The Virus Scanner service provides virus protection, archive scanning, malware detection, and HTTP multimedia streaming. The Virus Scanner service can be configured using the integrated Avira AV virus scanning engine. Using the virus scanner service requires a subscription that can be renewed annually.
For more information, see Virus Scanner.
VPN
The VPN service supports site-to-site, client-to-site, and SSL-VPN VPN connections. CloudGen Firewalls support multiple encryption methods and SD-WAN when using the TINA protocol.
For more information, see VPN.
Wi-Fi
For administration of Wi-Fi networks, the Wi-Fi service provides configuration settings for the local access point. The service also supports user authentication in large networks via RADIUS and EAP.
For more information, see Wi-Fi.
CloudGen Access Proxy
CloudGen Access brings Zero Trust/BeyondCorp Security to your endpoint. With CloudGen Access, you can implement secure access to enterprise resources, whether they are on-premises or in the cloud, with a quick and easy configuration process.
For more information on how to activate the CloudGen Proxy service in the firewall, see CloudGen Access Proxy.