A measure of the quality of the gateProtect operator concept are the ergonomic principles governing human-machine interaction, as formulated in ISO 9241, part 110.

Some benefits of the eGUI®
- Visual feedback immediately supplied for each setting
- Self-explanatory functions
- Central overview of all active services
- Immediate overview of the whole network configuration
- Layer and zoom function for networks up to 10,000 users

.

Extended User Authentication (xUA):
Future-proof with high security

Most modern firewall systems support proxy-based user authentication. This means that only those services which work with proxies such as HTTP or FTP can be issued to specific users.

The gateProtect firewall has rule-based Extended User Authentication which allows any number of services to be assigned to one user or a group of users. These services can be provided with all the known additional options such as proxies or web filters.

If a user logs on to the firewall from a computer, all the assigned services for the computer in question are enabled.

gateProtect offers you two ways of logging onto the firewall:

• Web browser/UA Client: logon is via an HTTPS connection.
• Single sign-on: Kerberos automatically passes the log on to the domain to the firewall.

The extended user-authentication of gateProtect captivates through

• The release as many as desired services for a person
• Configuration of the services for groups
• Configuration of the services for active directory groups
• Approval of services also in the intranet
• Guaranteed future, because of future services are also configurable.
• Single sign-on by Kerberos during registration at the windows domain
• Browser-Login for operating system independence

gateProtect extended VPN
Fast and secure connection to company network

gateProtect offers the most commonly used forms of current site-to-site and Road Warrior VPN connections via IPSec and SSL. Wizards and the eGUI® technology help with the management and set up of these connections. In addition, the firewall generates external configuration files when the VPN connections are created. These files can be used for setting up single click connections and also for site-to-site connections when importing on the firewall at a remote site.

Furthermore, gateProtect offers an IPSec and SSL site-to-site solution with X.509 certificates which can work in bridge mode as an option. For a normal bridge, two or more network cards are linked to form a logical network. gateProtect not only allows this for network cards but also for VPN-over-SSL connections. This makes it possible to treat remote computers as if they were in the local network.