Airwall
The missing ingredient that makes critical infrastructure un-hackable. The ONLY way to implement ZTNA and SDP to protect critical infrastructure.
Straightforward network segmentation and secure remote access between any two systems anywhere in the world over a global public network, or within the confines of your on-prem infrastructure.
The network you want over the network you have.
Airwall provides a completely private overlay network on top of shared, public, or even compromised infrastructure, that is both more secure and quickly and easily managed. It can deploy and operate at a fraction of the cost of other more complicated piece meal approaches, like firewalls, VPNs, VLANs and ACLs.
The network you want
A secure foundation
Airwall uses the more modern Host Identity Protocol (HIP) to implement a zero-trust model before connections are even established. This IETF standard natively encrypts, microsegments, and securely connects, reducing your attack surface, eliminating unauthorized access, lateral movement, and malware propagation.
Simple segmentation
Solution components
Step 1 ............................................................
Airwall Conductor
Set invisibility policies
Step 2 ................................................................
Airwall Relay
Connect unrouteable 'things'
Step 3 .....................................................................
Airwall Gateway
Make every ‘thing’ invisible
.....................................................................
Airwall Agent
Make perimeters invisible
.....................................................................
Airwall Server
Make servers invisible
Airwall Conductor
Set and manage policy
- Simple point-and-click segmentation.
- Add or revoke connectivity and access simply and easily.
- Data and control planes are decoupled (no traffic flows through Conductor).
- Eliminates need for complex management of keys/certificates, revocation lists, or shared secrets to control access.
- Much simpler audits of one system.
Deployment options
Cloud
- Amazon Web Services
- Microsoft Azure
- Google Cloud Platform
- Alibaba Cloud
Virtual
- VMware ESXi 6.0 & above
- Microsoft Hyper-V Server 2012 R2 & above
Physical
- Airwall Conductor - 1U Platform
Airwall Relay
Connect any ‘thing’ anywhere
- Route outbound-only connections across all networks and transport options, without modifying the underlying network.
- Connect private and previously unrouteable IP addresses.
- Eliminate the need for public IP addresses.
- Reduce inbound firewall rules.
- Network access for employees, vendors, partners from anywhere in the world.
- Preserve transport layer connections anywhere in the world regardless of devices changing IP addresses.
Deployment options
Cloud
- Amazon Web Services
- Microsoft Azure
- Google Cloud Platform
- Alibaba
Virtual
- VMware ESXi 6.0 & above
- Microsoft Hyper-V Server 2012 R2 & above
Physical
- Airwall 500-1U Platform
Airwall Gateway
Make every ‘thing’ invisible
- Deployed in front of devices or hosts that cannot protect themselves.
- Physical Gateways have built-in Ethernet, Wi-Fi, Cellular, as well as Serial-over IP for connectivity options.
- Virtual and cloud gateways instantly connect, protect, segment, move, failover, and disconnect any private or public cloud-based workloads anywhere in the world.
- Organizations no longer need to deploy and maintain separate networking and security policies for on-premises or cloud-based.
Deployment options
Cloud
- Amazon Web Services
- Microsoft Azure
- Google Cloud Platform
- Alibaba
Virtual
- VMware ESXi 6.0 & above
- Microsoft Hyper-V Server 2012 R2 & above
Airwall Agent
Make devices invisible
- Give managed devices a trusted and verifiable identity with secure access, networking, mobility, and segmentation.
- Trust-based client segmentation, granular access control, encryption everywhere, and auditing is now possible in both static and dynamic IP environments.
- Enable or revoke trust in a one-click operation, ensuring network visibility and access to whitelisted devices.
- Explicitly define resources that a device or group of devices can and cannot access.
Deployment options
Windows
- 7/8/10 (32/64-bit)
MacOS
- 10.14 and above
iOS/iPadOS
- 13.0 and above
Android
- 6.0 and above
Airwall Server
Make servers invisible
- Completely cloak a server itself, so only authenticated and authorized endpoints discover and communicate with it.
- Enable software-defined segmentation, and encryption at the server level, and effectively enforce a perimeter of one.
Deployment options
Linux
- CentOS7 and CentOS8
- Ubuntu 16.04, 18.04 and 20.04
- Fedora 33
Windows
- 2008 R2
- 2012 R2
- 2016
