Traffic Inspector Next Generation

Traffic Inspector Next Generation (TING) is a new generation hardware and software network gateway. It provides filtering at different layers of the OSI model and a wide range of network services available from a single web interface.

Benefits

• Included in the Unified Register of Russian Computer and Database Software.

• Supports Russian cryptographic algorithms:

  • GOST R 34.12-2015 in the gateway VPN server.
  • Ability to create secure tunnels with cryptography that meets the requirements of the Russian Federal Security Service (FSB) and Federal Service for Technical and Export Control (FSTEC).

• Flexible network perimeter protection:

  • Deep packet inspection (DPI) with filtering by URL, domains, IP addresses, content types (video, social networks, torrents), and applications (messengers, VoIP, SaaS).
  • Attack prevention.
  • Policy-based access control (user roles, working schedule).

• Native proxy server and load balancing:

  • NGINX-based proxy server with support for caching and traffic optimization, HTTP header overriding, and TCP and UDP stream routing.
  • Load balancing between servers for fault tolerance.

• Monitoring and reporting:

  • Detailed statistics on users, devices, and applications.
  • Ready-made report templates (including 152-FZ requirements).
  • Support of flexible integration with SIEM solutions for security event correlation.

• Virtualization and cloud support:

  • Deployment in Yandex Cloud and other platforms.
  • Ability to run on VMs (KVM, VMware).

• Streamlined management:

  • Unified web interface in Russian.
  • API for integration with external systems.
  • Automatic updates of threat signatures.

• Other features:

  • Large traffic volumes processed by the OS.
  • Highly stable performance.

1. Get an SSH key pair for connection to the VM.

2. Create a security group in the network you are going to deploy your VM in and add the following incoming traffic rule:

   Traffic direction	Port range	Protocol	Destination / Source	CIDR blocks
   Inbound	443	Any	CIDR	0.0.0.0/0

3. Create a VM from a public image:

   1. Under Boot disk image on the Marketplace tab, enter TING in the Product search field and select the Traffic Inspector Next Generation public image.

   2. Under Network settings, create two network interfaces. Do this for the fisrt one:

      • Leave the Public IP address toggle set to Auto. The public address of this interface will be used to access your VM from the external network.

      • In the Security groups field, select the security group you created earlier.

      Leave the second network interface’s settings unchanged.

   3. Under Access:

      • In the Login field, enter the name of the user who will get administrator permissions. We recommend granting the root user role only to experienced users.

      • In the SSH key field, select from the list the SSH key you got earlier.

   4. Under Advanced, grant access to the serial console.

   5. Click Create VM.

   Save the VM public IP address.

4. Wait until the VM status switches to Running.

5. Connect to the VM serial console and wait for the log in prompt.

6. Connect to the web interface:

   1. In your browser, navigate to https://<VM_public_IP_address>.

   2. To log in, use the username specified when creating the VM and the new VM’s ID as the password. You can find the VM ID on the Overview page in the management console.

To configure additional settings, refer to this user manual.

License Key Request:
To obtain a license key, please send a request to info@smart-soft.ru
, including the following information:
• full legal name of the company;
• company tax identification number (INN);
• full name and job title of the person submitting the request;
• contact phone number and email address.

The license key will be sent to the email address specified in the request.

Virtual IT infrastructure security:

• Firewall for your cloud IT infrastructure
• Intrusion detection and prevention system (IDS/IPS)
• General purpose NGINX-based TCP and UDP proxy server:
  • Load balancing
  • Overriding web server headers
  • Processing TCP and UDP traffic

Smart-Soft
Smart-Soft, developer of Traffic Inspector Next Generation, provides support to TING users in Yandex Cloud. You can contact the support desk by email at support@smart-soft.ru or ask general questions about the product in the Telegram chat.

Yandex Cloud
Yandex Cloud does not provide technical support for this product. If you have any issues, please refer to the vendor’s information resources.