Kerio Control offers more flexibility in terms of hardware requirements, and scalability than traditional security solutions and allows administrators to monitor network activity of users down to the smallest detail.

Firewall and router
Tracking connections (SPI)
Access Restrictions
Anti-spoofing
Inspector Protocols
The configuration wizard traffic policy
DHCP server
Redirecting DNS-server (forwarder)
IDS / IPS (based on Snort)
- Kerio Certified IDS signatures
- Blacklisting IP-addresses
- Three levels of seriousness of incidents

Reporting system
Statistics Analyzer
Reports using the Internet for users, groups, and interfaces
Detailed reports on users
Reports on bandwidth usage
Security Reports
Statistics on the Web category visited pages using the Kerio Web Filter
Syslog support
E-mail notifications
Reports of visited Web resources
Reports on the protocol used
Access to statistics via Web browser

User Authentication
Kerberos / Active Directory
NT Domain
Manual authentication for login and password
Authentication through an opaque proxy server (terminal services)
NTLM Authentication

A virtual private network (VPN)
Support for split-tunneling
VPN clients for Windows / MacOS / Linux
VPN client can run as a service
Authentication by user
Unlimited number of tunnels (servers) server
Bezklientsky SSL-VPN through a Web browser (for Windows)

Traffic policy and NAT
Preset stations
Policies by user
Traffic policy on the time intervals
NAT mapping
Policies for groups
Dynamic DNS
Filtering by MAC-addresses
Support blacklists IDS / IPS
The ability to add exceptions in the traffic policy

Filter by content
Setting the time interval
P2P Eliminator
URL Categorization
Page denial of access with the possibility of customization
Notification to the administrator via e-mail
Ability to add your own URL rules
Filtering by the prohibited words
FTP Policy
Proxy serverr
White List URL
Anti-virus filtering
- Integration with Sophos
- Ability to double anti-virus filtering

Load distribution channels and QoS
Support for multiple channels of communication the Internet
Policy-based routing
Connecting to back channel
Limiting bandwidth

Administration
Administration Console
Web-based administration console
Multiple IP addresses on one network interface
Customizable Routing Table
Adjustable range of administrative privileges
Ability to check updates
Export / import the server settings
Integration with Active Directory
Local user database
Blast pattern configuration of the default user
Fvtomatichesky out users after a timeout
Custom time intervals for the groups

Multilingual support
English
Chinese (Simplified)
Croatian
Czech
German
French
Danish
Hungarian
Italian
Japanese
Polish
Portuguese
RUSSIAN
Spanish
Swedish

Certification
Certificate of ICSA Labs - Corporate Firewall
Windows 7