Core Protection
Stateful packet filtering, NAT, VPN, and IPv4/IPv6 dual stack form the baseline defense for every protected network.
Overview
Nebero Next-Generation Firewall (NGFW) delivers essential perimeter and edge protection with stateful inspection of inbound and outbound traffic, flexible address translation, encrypted connectivity, and full IPv4/IPv6 dual-stack networking-without requiring separate appliances for each function.
Capabilities in this category
Packet filtering (stateful inspection of inbound/outbound traffic)
Track connection state and enforce allow/deny rules on all traffic flows.
The firewall maintains session state for every connection, permitting only legitimate return traffic and blocking unsolicited inbound packets. Policies can be applied by source, destination, port, and protocol for granular control across inbound and outbound paths.
Network Address Translation (NAT/PAT)
Translate private addresses to public IPs with port-level mapping.
Support one-to-one NAT and port address translation (PAT) so internal hosts reach the internet securely while hiding internal topology. Dynamic and static mappings accommodate servers, remote sites, and multi-homed deployments.
VPN support (site-to-site and remote access, IPSec/SSL)
Encrypted tunnels for branch offices and remote users via IPsec and SSL VPN.
Deploy site-to-site IPsec tunnels between offices and data centers, and provide remote access through IPsec or SSL VPN clients. Centralized policy ensures consistent authentication, routing, and split-tunnel controls across all VPN endpoints.
IPv4 & IPv6 dual stack
Run IPv4 and IPv6 side by side with consistent firewall and routing policy.
Enforce firewall rules, NAT, and routing across IPv4 and IPv6 on the same appliance so dual-stack networks stay protected without a separate IPv6 gateway. Policies apply consistently to both stacks as you migrate or coexist with modern addressing.