LANCOM LCOS FX 10.5 logo

LCOS FX 10.5

Custom-fit security for all networks

LCOS FX 10.5 offers a powerful package for companies and educational institutions: Highlights such as e-mail protection when using externally hosted IMAP servers, the temporal suspension of content filter rules, and fine-granular application-based routing underscore the reputation of LANCOM R&S®Unified Firewalls as the optimal complete solution for state-of-the-art security and unified threat management.

LCOS FX 10.5 is now available via the update function of the LANCOM R&S®Unified Firewall or in the LANcommunity portal.

Highlights

LCOS FX 10.5 feature IMAP proxy image: security icons in mail program on smartphone

IMAP proxy – For comprehensive e-mail security

The IMAP protocol is especially interesting for users who do not operate their own e-mail server, but instead handle their e-mail traffic via an external service provider. E-mails are processed on the provider's server, so that the respective message is available in the same version on all end devices. Now, the LANCOM R&S®Unified Firewalls also have an IMAP proxy for the first time, which can be used to scan the entire mail traffic of the IMAP server for trojans, viruses, and other threats. Spam mails are detected and sorted out. Even zero-day protection is possible thanks to the use of sandboxing and machine learning of the firewalls.

LCOS FX 10.5 content filter override image: laptop showing loose blockade for website

Content Filter Override – Permission temporarily granted

Especially in school networks a content filter is essential. Pupils should be protected from content that is harmful to young people or illegal, and even visiting otherwise unproblematic websites and content can quickly become a major factor of distrac­tion in class. But although it makes sense to block YouTube, for example, during school hours, it can also make sense to use this service selectively. For this purpose, the teacher can now send a code to his pupils, which temporarily overrides the filter rule. As soon as the lesson is over, the filter rule is applied again and denies access to the website or application.
Please find detailed instructions in our Instructions Content Filter Override.

LCOS FX 10.5 application based routing image: touchpad with app icons and according connection

Application Based Routing – Distribute bandwidths and routes purposefully

Recognized protocols and applications can be specifically routed using the PACE2 DPI Engine. In a multi-WAN scenario, for example, the usable connection can be specifi­cally selected for certain outgoing connections and, for example, streaming services can be routed via the slower line, while VPN, as the carrier of business-critical data traffic between the branch office and the headquarters, can be routed via the faster line. Trusted cloud applications can be excluded from the proxy or certain applica­tions can be routed directly to the provider at the branch office instead of via IPSec tunnels, despite the fact that the rest of the Internet traffic is sent to the headquar­ters via a secure connection.

Features

Desktop search

The desktop tags filter is extended to the desktop filter. It can now be used to search for both desktop objects and desktop connections. Objects and connections that do not match are hidden. This function can be used to search for a variety of parameters such as the name of the relevant desktop object, IP addresses, networks and areas, VPN SSL connection names, or proxy flags.

Creating rules from the protocol

New rules can be created directly from alarm or system log entries about denied access. If, for example, the firewall with the current rules blocks certain network traffic that is actually desired, a new rule can be created with a few clicks based on the corresponding protocol entry to allow traffic in the future.

Recovery points

Upgrading to the next firmware version is now no longer a cause for concern. A recovery point is automatically created before the process starts. If anything does not work to your complete satisfaction after that, simply reset your firewall to the working initial state.

VPN-SSL bridging

With this function, two or more networks at different locations can now be securely and reliably connected on layer-2. The two networks that are separated from each other, thus, act as one network and communication of non-IP based protocols can take place in between.

Multiple administrators logged in

Now it is possible for multiple administrators to be logged in to the web client of the LANCOM R&S®Unified Firewall at the same time. Only the ad­ministrator who logged in first is allowed to write to the web client and can thus make changes to the configuration. All other administrators are granted read-only rights. As soon as the first administrator logs out, the write permission is transferred to the next administrator logged in. A signi­ficant simplification, especially in larger administration teams.

Further information

Software Lifecycle Management

With LANCOM Systems you have a manu­facturer at your side who offers unparalleled investment protection. The lifecycle policies from LANCOM also provide full transparency and reliable planning with regard to the firmware updates and product support for your LANCOM infrastructure. Read more: Software Lifecycle Management

Firmware version overview

Keep track of our current OS versions with our firmware version overview. It provides a comparison of the different versions and recommended usage: Click here for the firmware version overview

LANCOM release process

Our aim is the optimal preparation of our in-house operating systems LCOS, LCOS SX, LCOS LX, and LCOS FX and other software, not only for its use in practice, but also to adapt it to the wishes of our customers. This is why we enter into active dialog with our customers even during the development phase as part of our release procedure. Find out more about the LANCOM release process here

LCOS FX download

The latest version of LCOS FX 10.5 is ready for download directly from your LANCOM R&S®Unified Firewalls' web interface. You can find further information here.