Recent content by Segis Ferrairó

The functionality of FWCloud is complemented by numerous plugins. Among them we have the plugin for HAProxy, which is widely used in installations where high availability and load balancing are required. We have recorded a new video showing how you can install and maintain HAProxy configuration...

We continue to show the new features included in the new version of FWCloud. One of FWCloud's new features is the ability to control system services from the web console. We can access this functionality, called Systemctl, from the contextual menu of the services. To illustrate its operation...

We are proud to announce that we will soon release a new FWCloud update with new features. As a preview of these, we have published a short video showing how to configure and manage a DHCP server without leaving FWCloud. This makes it easier to manage the configuration and review the...

In SNAT you want to manipulate the packets to modify the source address, the port, or both. When you change the source address of the packet, you indicate in the "Translated Source" field what address the packets will have.

The binary package was not uploaded for those distributions/versions. Now it is ready for you to install it

We have simplified the installation process of FWCloud-agent Until now it was necessary to download the corresponding package using utilities like "wget" and then install it. We have created a repository to facilitate the distribution of the software. Now enough just run: sudo apt...

Hook scripts allow to execute code when a policy rule is loaded. To improve the readability of the security policy we have modified the way hook scripts are added. We have created a new type of special rule for them that provides more simplicity while facilitating and accelerating the overall...

Fail2ban penalizes or blocks remote connections that attempt brute force access. Fail2Ban acts by adding rules to the security policy of the system. In FWCloud-UI a new option has been added in the firewall configuration that allows the re-installation of the policy without interfering with the...

CrowdSec is one of the most used open source applications to prevent intrusion attacks. FWCloud-UI now takes this application into account to prevent it from interfering with the installation of a new security policy. In this new video we show how to activate the CrowdSec compatibility option.

FWCloud continues to advance in functionality and security. Soon we will publish the new version of FWCloud. We have already announced in previous posts some of the new features that will be available in the new release. As part of the update process we have reviewed the online documentation...

More features the new version will include: VPN History. Another new functionality that allows us to have an agent installed in the firewalls managed by FWCloud is to be able to consult the history of all the VPN connections configured in a firewall. This information is obtained by...

The new version comes with new features, one of them is FWCloud-Agent. This FWCloud agent provides faster communications between FWCloud and managed firewalls while providing greater security. It also opens the door to the incorporation of new advanced functionalities that we will show, such as...

The new version of FWCloud incorporates important new functionalities. Among them, we have added the ability to fully create and manage the routing policy of our system through the FWCloud-UI interface. In addition, we have created a new video that describes, using examples, how to use...

FWCloud-UI is prepared to compile and install the security policies defined in it for various packet filtering frameworks. That was taken into account from its design. In the new release we will allow compiling for IPTables and also for NFTables. We have recorded a new video where you can see...

FWCloud-UI allows you to expand the possibilities when creating a security policy. You can add scripts to complement it, for instance loading modules, doing any accounting, or executing external commands. These scripts are applied at the rule level and therefore can be run both before and after...