Trial ---- evaluation of new features of firewall KWF6.0 (2)

Article title: Preemptive trial ---- evaluation of new functions of firewall KWF6.0 (2 ). Linux is a technology channel of the IT lab in China. Includes basic categories such as desktop applications, Linux system management, kernel research, embedded systems, and open source.
　　 III. email gateway-level scanning
After the integration of the E-mail gateway-level scanning, combined with the past HTTP and FTP gateway-level scanning, KWF has implemented a complete gateway anti-virus system. Unfortunately, KWF supports both foreign anti-virus software and enterprise server versions.
　　 　
　　 IV. P2P Terminator
When P2P software is widely used today, how many network administrators do not have a headache when using P2P to seriously affect bandwidth for intranet users? KWF6.0 has integrated a ban on P2P software. It detects some fixed ports. if these ports are opened with more than five (default number) ports, the user will be blocked.
　　 　
The P2P software port number and the number of ports used can be customized, which facilitates network management. In addition, you can only restrict the user to use certain services, rather than completely prohibit the user from accessing the Internet.
　　 　
　　 5. Alarm Notification
In China, SMS cannot be used, but mail can be sent. this feature is actually a bit of an afterthought taste. However, some of the lazy network administrators still save some trouble for them. if they do not receive an alert email, they can ignore kwf. :)
　　 　
　　 6. partially adjusted the HTTP Policy
Although in the KWF 6.0 help system, it is still possible to set in the HTTP Policy to redirect the user to the authentication page when accessing the web page, unfortunately, it is not set in HTTP Rule.
　　 　
It is now in the AUthentication Options option of Users.
　　 　
The "Cache responses" 302 Redirect "option is added to the Cache option.
　　 　
　　 7. modifications to the log system
KWF's real-time monitoring function is quite powerful. it must have been obtained from another famous Network monitoring product "Kerio Network Monitor" of Kerio. Unfortunately, the KWF report system is too far behind ISA Server 2004, but today with N plug-in log analysis software, this defect of KWF is no longer a defect.
　　 　
　　 　
Finally, in KWF 6.0 Services, the SCCP service is still well established. this service is in conflict with the Lianzhong Game Hall. I believe that in popular areas, people who do not know this story cannot use KWF.
　　
Summary: The new features of KWF 6.0 are more practical. in particular, the built-in VPN Server is the simplest and best VPN server on the market. KWF 6.0 $399 is a typical giant killer for Microsoft's upcoming ISA Server 2004. KERIO was launched before Microsoft released ISA Server 2004, it may also mean hitting the ground. However, limited to the remote location of KERIO, its Chinese agent technology is lacking. in China, it may only be used by enthusiasts of routing technology.
　　
In addition, some friends asked me to rewrite the KWF 6.0 installation guide. after careful analysis, I think KWF 6.0 actually has no core change, and the configuration of the new VPN server is also silly, there is no need to rewrite the installation guide. if necessary, I will consider writing a VPN server installation guide later.