Antikor Next-Generation Firewall Centralized Management (CFWM)

Features

Centralized Management

You can connect all Antikor NGFW Firewalls under your management to the Centralized Management System. All communication of the connected Antikor devices is encrypted via an IPsec Tunnel. Each managed Antikor NGFW can be encrypted with a different IPsec profile. The system also allows you to monitor the Alerts (Disk, Processor, RAM, etc.) and Notifications of the managed Antikor NGFWs from a single screen. If necessary, remote management of individual Antikor NGFWs at the edge can be performed.

Profile Support

Thanks to Profile Support, the Centralized Management System manages multiple security policies under the name of “Profile”. Managed Antikor NGFWs can be part of multiple profiles. This way, all managed systems can be included in a global security profile, while customized security profiles can be applied with regional settings. Different rules can be applied to each profile.

Bulk Policy Management

With Bulk Policy Management, the NGFW Centralized Management System applies your corporate security policy to the Antikor Next-Generation Firewalls you manage in bulk. Policies pushed from the center cannot be disabled, modified, or removed by the edge administrators. By monitoring the managed Antikor NGFWs on a map, you can view the accessibility status of your managed endpoints from a single screen.

Bulk Configuration Backup

The system periodically takes bulk configuration backups of all Antikor NGFW Firewalls connected to the center. If needed, this backup can be restored to any specific Antikor NGFW.

Global Configuration Profile Management

A Global Configuration Profile can be created and sent to the NGFWs in the network that share common configurations. Additionally, by enabling the Super Global feature, network definitions can be used collectively. Authorized users and user groups can be added to the created Global Configuration Profile.

Configuration Profile Management

For managing NGFWs, configurations are made by creating Configuration Profiles. After the necessary definitions are made in the profile, they are pushed to the connected NGFWs. These profiles centralize the configurations of the NGFWs. User and group authorizations can be applied to the Configuration Profiles to enforce security tightening. When creating the first Configuration Profile, it can be copied from the main system (central management configuration), and later profiles can be copied from existing ones.

Configuration Management

By entering the Configuration Profile, the necessary configurations can be made and loaded onto the target device. In the Configuration Profile, all configurations related to the NGFW such as NAT, Security Rules, IPS, Web Filtering, etc., can be performed.

Detailed Authorization

User authorization and user group management are carried out in detail through user roles and permissions.

Global Configuration Management

Global Configuration Profiles allow you to manage common configurations for all connected devices. Configurations that are not device-specific can be applied to all endpoints.

Update Server Service

An Update Server service is available on the central server, allowing bulk updates to be pushed to connected NGFWs. The dashboard and device definitions show which NGFWs are not up to date.

Security Policy and Object Management

With the Super Global feature, Security Policies and Objects can be managed from a single location and can be controlled with Super Global management for users accessing devices.

Access Tracking on Map

The map system can be used in both online and offline modes. The map available in the dashboard allows you to track the access status of devices.

Bulk Update Distribution and Management

With the Update Server service, bulk distribution of updates is possible. The update status can be tracked.

Read-Only Mode Support

The read-only feature prevents authorized users from making changes on the device, ensuring that there is no configuration discrepancy between the central system and the endpoints.

Single Screen Independent Endpoint Management

On the endpoint definitions page, endpoints can be managed independently. Configurations made can be sent to the endpoint, and any differences on the endpoint can be imported. Connection status and tests can be performed.

Accessibility Tracking

The accessibility status of endpoints can be tracked via the dashboard and endpoint definitions page. Connection tests can be performed for unreachable endpoints.

Periodic Configuration Backup

Automatic backups are taken periodically. With remote server settings, backups are sent to specified FTP, NFS, or other servers at defined days and times.

Communication Encryption with Managed Antikor NGFWs via IPsec Tunnel

Automatic registration settings allow endpoints to be added automatically. Automatically added endpoints are assigned to relevant cities and configuration profiles. This automatic addition is encrypted and secure via an IPsec tunnel.

Syslog (Raw, Structured) Service

Syslog settings allow reports from the central management to be sent to a remote server. Formats used in SIEM systems, such as JSON, CEF, etc., are supported.

Detailed Audit Logs

The system management reports can provide detailed logs of user activities, and previous actions can be reverted if necessary.

Notification Management

With Notification Management, alerts such as CPU, RAM, disk, Ethernet, gateway status changes, updates, backups, cluster status, and endpoint changes are sent to the user based on the selected notification level. SMS, Email, and Browser notifications are supported.

Description

The Antikor v2 Next-Generation Firewall (NGFW) products are managed through the Centralized Management System (CFWM). This platform, a 100% domestic and national solution, is an advanced structure for centrally managing firewalls. With flexible configuration options, a live dashboard, and advanced profile management, the monitoring and management of firewalls are carried out effectively.

The system provides functions such as Configuration Management, Bulk Update Management, Update Server Service, Security Policy and Object Management, Periodic Configuration Backup, and Advanced Profile Management, enabling the centralized monitoring and management of the security infrastructure.

For details and datasheets, visit: https://www.epati.com.tr/cfwm

Cookie Preferences