Administrator's Guide - Kerio Software Archive

Chapter 2
Introduction
2.1 What’s new in 7.0
Kerio Control 7.0 brings the following improvements:
New product name — Kerio Control
Kerio WinRoute Firewall is no longer just a network firewall. New features added in
versions 6.x and 7.0 make the software a complex tool combining features for local
network security, remote network access as well as user Internet access control and
monitoring. The name Kerio Control is derived from the user access control feature.
Intrusion Detection and Prevention System (IPS/IDS)
Kerio Control now integrates one of the most top used intrusion detection and prevention
systems — Snort. This system enhances security provided by the firewall and makes Kerio
Control a UTM solution (Unified Threat Management).
More details can be found in chapter 8.1.
New integrated antivirus engine — Sophos
Kerio Control includes an all-new antivirus engine — Sophos. This scan engine offers
extreme performance and includes a variety of innovative technologies designed to
eliminate the threat of malware.
The antivirus will run as a 30 day trial upon initial installation. When upgrading, the
McAfee engine will automatically be replaced by the new Sophos engine.
More details can be found in chapter 14.
MAC address filtering
This new module in the firewall enables network traffic filtering by physical addresses
(MAC addresses) of network devices. Filtering of physical address helps for example
prevent users from undesirable connections to the network or get around the firewall
traffic policy by changing IP address of their device.
More details can be found in chapter 8.2.
New licensing policy
Licensing policy for Kerio Control has been changed.
licenses for customized number of users.
Refer to chapter 4 for more information.
Now it is possible to purchase
10