LCOS FX 10.5
Custom-fit security for all networks
LCOS FX 10.5 offers a powerful package for companies and educational institutions: Highlights such as e-mail protection when using externally hosted IMAP servers, the temporal suspension of content filter rules, and fine-granular application-based routing underscore the reputation of LANCOM R&S®Unified Firewalls as the optimal complete solution for state-of-the-art security and unified threat management.
LCOS FX 10.5 is now available via the update function of the LANCOM R&S®Unified Firewall or in the myLANCOM Firewall License Portal.
Highlights
IMAP proxy – For comprehensive e-mail security
The IMAP protocol is especially interesting for users who do not operate their own e-mail server, but instead handle their e-mail traffic via an external service provider. E-mails are processed on the provider's server, so that the respective message is available in the same version on all end devices. Now, the LANCOM R&S®Unified Firewalls also have an IMAP proxy for the first time, which can be used to scan the entire mail traffic of the IMAP server for trojans, viruses, and other threats. Spam mails are detected and sorted out. Even zero-day protection is possible thanks to the use of sandboxing and machine learning of the firewalls.
Content Filter Override – Permission temporarily granted
Especially in school networks a content filter is essential. Pupils should be protected from content that is harmful to young people or illegal, and even visiting otherwise unproblematic websites and content can quickly become a major factor of distraction in class. But although it makes sense to block YouTube, for example, during school hours, it can also make sense to use this service selectively. For this purpose, the teacher can now send a code to his pupils, which temporarily overrides the filter rule. As soon as the lesson is over, the filter rule is applied again and denies access to the website or application.
Please find detailed instructions in our Instructions Content Filter Override.
Application Based Routing – Distribute bandwidths and routes purposefully
Recognized protocols and applications can be specifically routed using the PACE2 DPI Engine. In a multi-WAN scenario, for example, the usable connection can be specifically selected for certain outgoing connections and, for example, streaming services can be routed via the slower line, while VPN, as the carrier of business-critical data traffic between the branch office and the headquarters, can be routed via the faster line. Trusted cloud applications can be excluded from the proxy or certain applications can be routed directly to the provider at the branch office instead of via IPSec tunnels, despite the fact that the rest of the Internet traffic is sent to the headquarters via a secure connection.
Features
Desktop search
The desktop tags filter is extended to the desktop filter. It can now be used to search for both desktop objects and desktop connections. Objects and connections that do not match are hidden. This function can be used to search for a variety of parameters such as the name of the relevant desktop object, IP addresses, networks and areas, VPN SSL connection names, or proxy flags.
Creating rules from the protocol
New rules can be created directly from alarm or system log entries about denied access. If, for example, the firewall with the current rules blocks certain network traffic that is actually desired, a new rule can be created with a few clicks based on the corresponding protocol entry to allow traffic in the future.
Recovery points
Upgrading to the next firmware version is now no longer a cause for concern. A recovery point is automatically created before the process starts. If anything does not work to your complete satisfaction after that, simply reset your firewall to the working initial state.
VPN-SSL bridging
With this function, two or more networks at different locations can now be securely and reliably connected on layer-2. The two networks that are separated from each other, thus, act as one network and communication of non-IP based protocols can take place in between.
Multiple administrators logged in
Now it is possible for multiple administrators to be logged in to the web client of the LANCOM R&S®Unified Firewall at the same time. Only the administrator who logged in first is allowed to write to the web client and can thus make changes to the configuration. All other administrators are granted read-only rights. As soon as the first administrator logs out, the write permission is transferred to the next administrator logged in. A significant simplification, especially in larger administration teams.
Further information
Software Lifecycle Management
With LANCOM Systems you have a manufacturer at your side who offers unparalleled investment protection. The lifecycle policies from LANCOM also provide full transparency and reliable planning with regard to the firmware updates and product support for your LANCOM infrastructure. Read more: Software Lifecycle Management
Firmware version overview
Keep track of our current OS versions with our firmware version overview. It provides a comparison of the different versions and recommended usage: Click here for the firmware version overview
LANCOM release process
Our aim is the optimal preparation of our in-house operating systems LCOS, LCOS SX, LCOS LX, and LCOS FX and other software, not only for its use in practice, but also to adapt it to the wishes of our customers. This is why we enter into active dialog with our customers even during the development phase as part of our release procedure. Find out more about the LANCOM release process here