Positive Technologies PT NGFW

PT NGFW is a next-generation firewall developed by Positive Technologies, designed for high-throughput network environments. It is certified by FSTEC (Russia's Federal Service for Technical and Export Control) under current requirements. Security functions: - Application and sub-application control: identifies over 4,500 applications and sub-applications, including Russia-specific solutions such as 1C, Gosuslugi, Yandex, VK, and Bitrix - User control and activity tracking within applications - Intrusion Prevention System (IPS) - TLS inspection - URL filtering IT functions: - Traffic routing - Virtual contexts - Hierarchical group and rule management - Flexible search system - High-availability failover clustering - NAT - Logging and journaling Performance: - Processes traffic at over 400 Gbit/s in application and user recognition mode - Uses a modified TCP/IP protocol stack with packet processing in user space to avoid resource-intensive memory copying - No specialized hardware accelerators required; runs on standard x86 architecture Hardware platforms: - Range of appliance models (1005 through 3050) covering throughput from 1 Gbit/s up to 400 Gbit/s at L4+AppControl - IPS+AV+URL filtering throughput ranges from 100 Mbit/s to 86 Gbit/s depending on model - Modular interface support on higher-end models - Redundant power supply with hot-swap on higher-end models Cloud/virtual deployment: - Supports ESXi and KVM hypervisors for cloud environments Centralized management: - Management appliances (MNGT) supporting up to 10,000 devices Use cases include perimeter protection, corporate network segmentation, data center interconnect protection, and cloud service protection.