genugate is a high-resistance firewall appliance designed for protecting networks at the boundary between the internet and internal networks. It implements a two-stage architecture combining two distinct firewall systems on separate hardware: an Application Level Gateway (ALG) on the external side and a Packet Filter (PFL) on the internal side. The Application Level Gateway performs complete deep content inspection of all traffic, not just sampling, allowing dangerous content to be identified and blocked. The packet filter operates with an individually configurable ruleset. genugate holds certifications and approvals for use in classified environments: - Certified under Common Criteria (CC) EAL4+ with AVA_VAN.5 (Advanced Methodical Vulnerability Analysis) - Classified by BSI as "highly resistant" — the only firewall in the world to hold this designation - Approved for VS-NfD (Classified - For Official Use Only), NATO RESTRICTED, and RESTREINT UE/EU RESTRICTED networks Additional capabilities include: - Integrated Web Application Firewall (WAF) for protection against web application attacks - GEO-IP Filtering for country-based network access control - Offline mode with manual patch and update capability and offline license activation - REST API support for automation of administrative tasks - A high-security update mechanism designed to be resistant to quantum computer-based attacks