
Networking
EndianOS UTM | EndianOS 4i | ||
Network zone isolation and policy support | Yes | Yes | |
Support for to 32 internal network zones | Yes | Yes | |
Multiple WAN | Yes | Yes | |
Quality of service and bandwidth management | Yes | Yes | |
Advanced TCP window scaling | Yes | Yes | |
Support for untagged VLAN traffic | Yes | Yes | |
Bonding mode configuration (UI) | Yes | Yes | |
NTP (Network Time Protocol) | Yes | Yes | |
DHCP server | Yes | Yes | |
DHCP relay support | Yes | Yes | |
SNMP server | Yes | Yes | |
Dynamic DNS (DDNS) | Yes | Yes | |
NAT (Network Address Translation) | EndianOS UTM | EndianOS 4i | |
Static NAT | Yes | Yes | |
Dynamic NAT | Yes | Yes | |
PAT (Port Address Translation) | Yes | Yes | |
IP Masquerading | Yes | Yes | |
Full Cone NAT | Yes | Yes | |
IPsec NAT traversal | Yes | Yes | |
Routing | EndianOS UTM | EndianOS 4i | |
Static routes | Yes | Yes | |
Source-based routing | Yes | Yes | |
Destination-based routing | Yes | Yes | |
Policy-based routing | Yes | Yes | |
Bridging | EndianOS UTM | EndianOS 4i | |
Unlimited interfaces per bridge | Yes | Yes | |
Transparent bridge mode | Yes | Yes | |
OSI layer 2 firewall functionality | Yes | Yes | |
Spanning tree | Yes | Yes | |
Wireless | EndianOS UTM | EndianOS 4i | |
Multiple SSID supported (Max 4) | - | Yes | |
Bridge SSID to any internal network zone | - | Yes | |
Wireless security (WPA2 Personal / Enterprise) | - | Yes | |
Channel width selection | - | Yes | |
Hidden SSID support | - | Yes |
Network Security
Intrusion Detection & Prevention | EndianOS UTM | EndianOS 4i | |
Deep packet inspection technology to detect or block advanced threats | Yes | Yes | |
IDS Mode offers high performance threat detection | Yes | Yes | |
IPS Mode offers powerful security to block threats in real-time | Yes | Yes | |
Create security policies using threat categories | Yes | Yes | |
Large signature database (over 20k signatures) | Yes | Yes | |
Support for uploading custom signatures | Yes | Yes | |
Application & DNS Security | EndianOS UTM | EndianOS 4i | |
Deep packet application inspection and identification | Yes | Yes | |
Block by application control (incl. Facebook, Twitter, Skype, WhatsApp...) | Yes | Yes | |
DNS proxy filters network traffic for malware | Yes | Yes | |
DNS proxy and routing ensures DNS security | Yes | Yes | |
DNS-based phishing protection | Yes | Yes | |
Firewall | EndianOS UTM | EndianOS 4i | |
Geo-IP firewall filtering (block/allow traffic by country) | Yes | Yes | |
Time-based firewall rules (day of week / time of day) | Yes | Yes | |
Support for VoIP/SIP | Yes | Yes | |
DoS & SYN/ICMP flood protection | Yes | Yes | |
Firewall Objects (IP & FQDN) | Yes | Yes |
Web Security
HTTP/HTTPS Proxy | EndianOS UTM | EndianOS 4i | |
Multiple proxy modes: transparent, non-transparent and transparent bridge | Yes | - | |
HTTPS proxy modes: decryption or URL-based (no decryption) | Yes | - | |
Support for proxy whitelists and blacklists | Yes | - | |
Cache management capabilties | Yes | - | |
Support for upstream proxy server | Yes | - | |
Security Features | EndianOS UTM | EndianOS 4i | |
HTTP, HTTPS, FTP URL and antivirus filtering | Yes | - | |
Easily block inappropriate, time-wasting or malware sites using filtering categories | Yes | - | |
Build complex access policies based on time, mime-type, useragent and more | Yes | - | |
Bitdefender URL filtering engine | Yes | - | |
Bitdefender anti-malware engine | Yes | - | |
SafeSearch enforcement | Yes | - | |
User Management & Authentication | EndianOS UTM | EndianOS 4i | |
Authentication methods include: Local, RADIUS, LDAP, Active Directory | Yes | - | |
Support for NTLM single sign-on | Yes | - | |
Group-based and user-based web access policies and filtering | Yes | - |
Mail Security
SMTP/POP3 Proxy | EndianOS UTM | EndianOS 4i | |
Support for transparent and non-transparent proxy | Yes | - | |
Bi-directional SMTP filtering (inbound and outbound) | Yes | - | |
Block files by filetype (extensions) | Yes | - | |
Advanced inbound/outbound mail routing | Yes | - | |
Support for Delivery Status Notification (DSN) | Yes | - | |
Support for smart host delivery (mail relays) | Yes | - | |
Security Features | EndianOS UTM | EndianOS 4i | |
Anti-spam with bayes, pattern and SPF | Yes | - | |
Dual spam detection engines (with auto learning) | Yes | - | |
Anti-virus email filtering and quarantine | Yes | - | |
Support for multiple RBLs (real-time blacklists) | Yes | - | |
Support for greylisting | Yes | - | |
Bitdefender Anti-spam Engine | Yes | - | |
Bitdefender Anti-malware Engine | Yes | - | |
Email Quarantine Management | EndianOS UTM | EndianOS 4i | |
Web-based quarantine monitoring and management | Yes | - | |
SPAM quarantine notification options | Yes | - |
Virtual Private Networking
IPsec | EndianOS UTM | EndianOS 4i | |
VPN Site-to-Site: Pre-Shared Key and X.509 certificate | Yes | Yes | |
VPN Remote Access (Roadwarrior): L2TP, XAuth, or Raw IPsec | Yes | Yes | |
Remote access platform support: iPhone/iPad (iOS), Android, Mac OS X, Windows | Yes | Yes | |
Support for modern encryption algorithms | Yes | Yes | |
Support for modern hashing algorithms | Yes | Yes | |
Support for Diffie Hellman (DH) mode selection | Yes | Yes | |
Support for IKEv1, IKEv2 | Yes | Yes | |
Dead Peer Detection (DPD) | Yes | Yes | |
NAT traversal | Yes | Yes | |
Perfect Forward Secrecy (PFS) | Yes | Yes | |
Compression | Yes | Yes | |
OpenVPN | EndianOS UTM | EndianOS 4i | |
VPN Site-to-Site: Pre-Shared Key, X.509 certificate or both | Yes | Yes | |
VPN Remote Access (Roadwarrior) | Yes | Yes | |
Endian SSL VPN client: Mac OS X, Windows | Yes | Yes | |
Support for mobile SSL VPN: iPhone/iPad (iOS), Android | Yes | Yes | |
Support for multiple SSL VPN server instances | Yes | Yes | |
Support for VPN over HTTP Proxy | Yes | Yes | |
Support for bridged or routed server configuration | Yes | Yes | |
Support for VPN failover | Yes | Yes | |
Push DNS, network routes and domain suffix information to clients | Yes | Yes | |
Control client-to-client communication | Yes | Yes | |
VPN Portal (Reverse Proxy) | EndianOS UTM | EndianOS 4i | |
Provision secure access to internal HTTP/HTTPS resources | Yes | Yes | |
Configurable portal page | Yes | Yes | |
Support for multiple destinations | Yes | Yes | |
Destination-based authentication | Yes | Yes | |
SSL offloading | Yes | Yes | |
User Management & Authentication | EndianOS UTM | EndianOS 4i | |
Authentication methods include: Local, RADIUS, LDAP, Active Directory | Yes | Yes | |
Unified user/group management for OpenVPN, L2TP, XAUTH, VPN Portal | Yes | Yes | |
Integrated support for one-time password (OTP) | Yes | Yes | |
Integrated certificate authority | Yes | Yes | |
External certificate authority support | Yes | Yes | |
User password and certificate management | Yes | Yes | |
Support for Let's Encrypt and ZeroSSL certificates | Yes | Yes | |
Support for ACME protocol (Automated Certificate Management Environment) for automated certificate provisioning and renewal | Yes | Yes |
Redundancy & Backup
High Availability | EndianOS UTM | EndianOS 4i | |
Support for clustering up to 3 devices together in active-passive mode | Yes | Yes | |
Easy web-based UI for quick HA setup (with feedback) | Yes | Yes | |
Node data/configuration synchronization (not for BYOD/Hotspot) | Yes | Yes | |
WAN Failover | EndianOS UTM | EndianOS 4i | |
Create failover policies between available WAN interfaces | Yes | Yes | |
Support for unlimited WAN interfaces (based on interface availability) | Yes | Yes | |
Automatic failback support | Yes | Yes | |
Backup & Recovery | EndianOS UTM | EndianOS 4i | |
Easily backup and restore appliance configurations | Yes | Yes | |
Support for storing backups on attached USB stick | Yes | Yes | |
Customizable options to determine backup contents | Yes | Yes | |
Create schedule backups: daily, weekly or monthly | Yes | Yes | |
Send scheduled backups via email | Yes | Yes |
General Management
Event Management | EndianOS UTM | EndianOS 4i | |
Setup event notifications for device and user events | Yes | Yes | |
Support for email and SMS notifications | Yes | Yes | |
Create custom scripts to be triggered by event | Yes | Yes | |
Custom scripts powered by Python scripting engine | Yes | Yes | |
Device Management | EndianOS UTM | EndianOS 4i | |
Easy and secure web-based UI for managing appliance | Yes | Yes | |
Full command-line access via SSH or serial console | Yes | Yes | |
Web console provides serial console over secure web UI | Yes | Yes | |
One-click to enable secure remote appliance support | Yes | Yes | |
Centralized, secure access to any Endian appliance via Endian Network | Yes | Yes | |
Multi-language support: English, Italian, German, Japanese, Spanish, Portuguese, Chinese, Russian, Turkish | Yes | Yes | |
Software Management | EndianOS UTM | EndianOS 4i | |
Easy web UI for managing software updates | Yes | Yes | |
Schedule automatic software update checks and notifications | Yes | Yes | |
Centralized, secure software updates/upgrades via Endian Network | Yes | Yes |
Logging and Reporting
Network Awareness | EndianOS UTM | EndianOS 4i | |
View real-time network activity and bandwidth | Yes | Yes | |
Discover top user activity, applications, bandwidth consumption and more | Yes | Yes | |
Reporting | EndianOS UTM | EndianOS 4i | |
View reports for all major system features | Yes | Yes | |
Detailed system, web, email, attack, virus and user reports | Yes | Yes | |
Real-time log analysis with live log viewer | Yes | Yes | |
Detailed user-based web access report | Yes | Yes | |
Network, system and performance statistics | Yes | Yes | |
Logging | EndianOS UTM | EndianOS 4i | |
Web-based log viewer for system, services and VPN logging | Yes | Yes | |
Rule-based logging settings (firewall rules) | Yes | Yes | |
Support for local or remote syslog logging | Yes | Yes | |
OpenTSA trusted timestamping | Yes | Yes |
Edge Computing*
EndianOS UTM | EndianOS 4i | |
Docker Engine and CLI included | Yes | Yes |
Enables hybrid/remote applications or micro-services | Yes | Yes |
Requires much less hardware and software resources than full-machine virtualization | Yes | Yes |
Reduce network latency and provide offline access to remote applications | Yes | Yes |
Increased application portability and faster software development and delivery | Yes | Yes |
*Not available for use with the Endian 4i Edge V
Cybersecurity Bridge for IT & OT
Meet the Secure Digital Platform
The Endian Secure Digital Platform offers a robust security solution that safeguards business infrastructure, networks, devices, applications, and users from both internal and external threats.
Management Tools
The Endian management tools are a centralized suite for connectivity, security, and lifecycle management that helps establish a zero-trust environment.
Security Gateways
Endian security gateways provide reliable IT & OT solutions with strong connectivity, advanced security and efficient edge computing, all with an intuitive user experience.
Endpoint Connectivity
The Endian endpoint connectivity assists users and machines in quickly and securely connecting to the Secure Digital Platform.