CybeTower Bastion
Bastion guards the points where the company faces the outside world. They are four distinct modules, activated separately and managed from the same console: what you decide in one place applies to the whole fleet, not to one device at a time.
CybeTower Bastion Network
The CybeTower firewall, on a dedicated appliance or a virtual machine, with all your sites managed from one console rather than one per device. Filtering happens on the device and continues even if the console cannot be reached: only changes and updates to the lists of malicious addresses are paused.
- Rules, address translation, aliases and schedules
- Virtual private networks for individual users and between sites
- Intrusion detection and prevention
- Web filtering, DNS security, inspection of encrypted traffic
- Flags any computer on your network that communicates with an address known to be malicious, and can block these connections
- Traffic prioritisation, automatic address assignment, reputation lists
- High availability with automatic failover between two devices, and switchover to a backup line if the main one goes down
- Signed updates and management of the whole fleet
- Alerts by email and on Telegram, with a choice of which categories to receive
CybeTower Bastion Network replaces your existing firewall. Configuration import is available for some widely used firewalls, not all of them: from these you can import objects, rules, address translation, private networks and local users, with a preview that shows the result before any change is applied.
CybeTower Bastion Application
Protects websites and applications exposed to the internet, filtering malicious requests before they reach the server.
- Standard rule sets against known web application attacks
- Exceptions for individual applications, without lowering your guard on the others
- Blocking by geographic area and by address
- Lists of addresses that are always allowed or always blocked
- Log of detected attacks
It sits in front of what you already have: the application stays where it is; all that changes is what answers requests first.
CybeTower Bastion Mail
Email security gateway: it filters threats before they reach your inbox.
- Filtering of spam and malicious content
- Protection against email fraud and sender impersonation
- Data loss prevention on outgoing messages
- Quarantine from which users release legitimate messages themselves, with periodic digests
- S/MIME and PGP encryption
- Domain authentication and signing key management
- Synchronisation with the company directory
- Message log exportable as CSV, and audit log
Resellers get separate statistics for each customer, with no mixing of data between organisations.
CybeTower Bastion Link
Connects sites, devices and people without configuring tunnels by hand.
- A device at a remote site announces the network behind it and the administrator approves it
- Mesh network for users, with rules on who can reach what
- Enrolment keys to add a node without configuring each one individually
- Internet access via a node of your choice
The advantage over a traditional private network is that there is no configuration to replicate at every end: nodes announce themselves and the administrator decides what to admit. The traditional private network between sites remains part of CybeTower Bastion Network.
Four modules, one console
They aren't four products you have to get talking to each other. They share the same management, the same audit log and the same device fleet: a rule decided in one place applies wherever it is needed.