{"id":1874,"date":"2024-12-12T09:27:30","date_gmt":"2024-12-12T09:27:30","guid":{"rendered":"https:\/\/inprotech.es\/?p=1874"},"modified":"2025-02-17T09:17:57","modified_gmt":"2025-02-17T09:17:57","slug":"guardian-firewall-integration","status":"publish","type":"post","link":"https:\/\/inprotech.es\/en\/guardian-firewall-integration\/","title":{"rendered":"Guardian Firewall Integration"},"content":{"rendered":"

InprOTech Guardian provides a powerful suite of tools for learning everything important about network traffic at your facilities. Our system can recognize unexpected changes in these patterns and alert your administrators and users to many forms of potential problems, from mistakes during upgrades, to failing sensors and actuators, all the way through to security incidents and cyber-attacks.\u00a0<\/span><\/p>\n

Speed of detection and response can be critical whatever the causes of potential problems. To enable the fastest possible responses, we have created a direct connection to several commercially available security systems.<\/span><\/p>\n

From the first moment Guardian detects malicious behavior, it can alert your operators with guidance on what security system changes to make, or for the fastest automatic response, Guardian can directly configure your networks using vendor APIs to isolate the misbehaving devices.<\/span><\/p>\n

 <\/p>\n

Safety first<\/b><\/h2>\n

Your company and facility administrators will already have configured a secure foundation, using firewalls, router and potentially other systems. InprOTech Guardian will never attempt to configure these systems without your permission. We are architected and designed to offer you the choice of either a simple notification, guidance for firewall rules and policies, or automated API interactions with firewalls as you deem most appropriate for your facility.<\/span><\/p>\n

 <\/p>\n

Integrated response<\/b><\/h2>\n

InprOTech has great monitoring, alerting and threat detection systems. We have specialized and invested heavily in creating intelligent sensing and reaction systems, but we also respect the efforts and investments of other experienced technology firms.<\/span><\/p>\n

To take action most appropriately, we leverage the technology of specialist firewall manufacturers.<\/span><\/p>\n

We are developing baseline integrations with firewalls from Stormshield.<\/span><\/p>\n

Future integrations are planned for Cisco, Palo Alto Networks, Sophos, pfSense, Fortinet and others.<\/span><\/p>\n

\"\"<\/p>\n

How it works<\/b><\/h2>\n

We have implemented a set of configurable response policies to integrate reputation checking with device and network blocking policies.<\/span><\/p>\n

The administrator can enable or disable the <\/span>reputation<\/b> checking <\/b>for IPs in Guardian from the front end. This process can refer to our integrated machine learning, 3<\/span>rd<\/span> party reputation checking services and explicit lists of IPs to allow or deny access.<\/span><\/p>\n

Simple CSV or JSON files can provide <\/span>IPs<\/b> or <\/span>IP ranges<\/b> to allow or deny.<\/span><\/p>\n

These checks feed into the <\/span>blocking policy<\/b> from the following:<\/span><\/p>\n