Ideco NGFW Novum

The flagship Ideco NGFW Novum combines firewall functionality, intrusion prevention, application control, antivirus, and content filtering. Application-, user-, and device-level visibility and control, along with integration into the security ecosystem (via ICAP and syslog), automate threat detection and response processes.

Use cases addressed by Ideco NGFW Novum

• Network segmentation
• Attack prevention and traffic filtering
• Secure remote access for employees
• Centralized security control and auditing

The solution is used in corporate networks of any size — from small and large businesses to departmental networks of government organizations.

Product Advantages
An enterprise-grade network security service with Layer 7 traffic filtering and performance up to 200 Gbps.

Key advantages:

• A microservices architecture and VPP technology ensure high fault tolerance and low latency without hardware accelerators.
• Centralized management via Ideco Center, cluster support, scalability, and fast rollback.
• Integration with SIEM, AD, RADIUS; support for ZTNA, 2FA, REST API; and full technical support across all lifecycle stages.

1. Create a virtual machine from a public image.

   In the Image / boot disk selection section, open the Cloud Marketplace tab and select the Ideco NGFW Novum Firewall image.

   Minimum compute requirements:

   • 4 vCPU;
   • 16 GB RAM;
   • 150 GB SSD.

2. Attach an SSH key.

   The following key types are supported:

   • ecdsa-sha2-nistp384 (minimum 384 bits);
   • ssh-rsa (minimum 3072 bits);
   • rsa-sha2-512 (minimum 3072 bits);
   • rsa-sha2-384 (minimum 3072 bits).

   Warning

   Deploy the virtual machine in a network protected by a security group that allows inbound traffic on port 22 (SSH) only from trusted IP address ranges, not from 0.0.0.0/0.

   Otherwise, after you change the password, password-based SSH access will be available from anywhere on the Internet.

   To create a security group, see:
   https://yandex.cloud/en/docs/vpc/operations/security-group-create

3. After the virtual machine has started, connect to it via SSH and run:

   ideco-local-menu
   

4. In the menu, select Change password.

5. After changing the password, you can sign in to the web console.

Documentation

https://docs.ideco.ru

1. Network segmentation — isolates network segments, reduces the attack surface, and simplifies access control, improving overall security and manageability.
2. Attack blocking and traffic filtering — protects corporate networks from external and internal threats, including malicious traffic, phishing, exploits, unauthorized access to applications, and filtering bypass attempts.
3. Secure remote access — ensures controlled and protected connectivity for employees, partners, and contractors accessing internal company resources from external networks.
4. 4. Centralized security control and auditing — simplifies management of distributed NGFW infrastructure through a unified console, standardized policies, and consolidated event logging.

Ideco provides all available support channels and communication methods:

1. Multichannel technical support via email, phone, Telegram, the Help Desk portal, and the in-product chat.
2. Assistance from a technical pre-sales engineer during the testing phase.
3. A dedicated Customer Success Manager after purchasing the solution.
4. An active community of users and vendor representatives.

Technical Support

Technical support:
https://ideco.ru/tekhnicheskaya-podderzhka

Email:
help@ideco.ru

Support portal:
https://help.ideco.ru

Telegram:
@ideco_support_bot

Phone:
+7 (495) 662-87-34