The Router and Firewall module in the ABILIS all-in-one platform
With the purpose in mind to realise a device able to fix ordinary networking problems by itself and capable to help users effectively, Antek has based the ABILIS on three columns:
- Internet access based on multiple paths, combined together
- independence from network service providers
- automatic avoidance of data-traffic jams and attacks
Why choose abilis?
Because:
- you suffer service discontinuities.
- managing the VPN requires too much efforts from you, who have a thousand other things to care.
- you seek the freedom to change Internet service providers while keeping your public IP addresses unchanged.
- you want a backup whose effectiveness is guaranteed.
- you want all your networking services to be under control by your staff. In case of troubles, you want objective diagnostics.
Multi-path: Reliability and Performance!
One line only: RISK ! Multiple lines: NO RISK !
Multi-path does not only mean bandwidth. Several lines grouped together create high reliability!
This is what we recommend:
- place a virtual (or real) ABILIS router in an Internet ’stronghold’
- use it as your main Internet (and VPN) gateway
- link your sites with it using multiple lines, freely chosen among the low-cost ones, with the purpose of achieving the best route diversity.
Your ABILIS router will use these lines concurrently and its public IP address will become that of the stronghold. These addresses are not changed if lines in the branches are changed.
Backup lines are kept in regular service, they are normal members of the group! Thus, they cannot be found faulty when they are actually needed!
Place a VPN router of your own next to the servers in-Cloud of yours
The main user of cloud services is often the same company publishing them, hence the connection to them is strategic.
By installing a virtual ABILIS router in the same environment (AWS, AZURE, …) where their cloud-servers are deployed, publishers establish a strong multi-line connection from their headquarters till to their servers.
Monitoring and Control
Our concept is that the router itself solves problems -even if to local abuse- whilst avoiding to raise unnecessary alerts.
An embedded Automatic Congestion Avoidance System is able to recognise excessive traffic between ‘machines’ and to postpone it with respect to interactive sessions (man to machine).
This permits to avoid Internet problems arising from one’s own IT systems, which often start upgrades or data-synchronisations without obtaining prior permission.
The administrator can read the origins and destinations of data-traffic sent/received by each LAN host and controls a Blacklist and a Whitelist. But the blacklist is also fed automatically…
Multi-Level Security
ABILIS applies defense measures across multiple levels of the network stack. Some of them are unconventional, others are common and well appreciated, like preventing Denial-of-Service attacks and banning hosts trying to “guess the password”.
The ABILIS VPN is intrinsecally very safe.
Additionally, every two hours the Blacklist is updated with the IP addresses that public organisations fighting cyber-crime advise to keep clear from. In the event that ‘domestic’ hosts are trying to contact those addresses, they are blocked and the system administrator is informed.
About hacks carried by the e-mail, the ABILIS embedded SMTP RELAY filters out incoming spam and malicious emails.