Integrasi Infrastruktur Cloud Native
TKMT Risk Management Module Next Generation Firewall is designed to integrate with modern cloud-native infrastructure and security architectures. It can provide security controls for workloads and applications deployed across private data centers, public cloud environments, virtualized infrastructure, and hybrid networks.
TKMT Risk Management Module Next Generation Firewall enables organizations to apply security policies, network segmentation, traffic inspection, and threat prevention controls to support virtualized workloads. Centralized management capabilities help administrators maintain security policy across distributed firewall deployments.
Key Features
Section titled “Key Features”- Virtualization Support: can be deployed on hypervisors such as Proxmox VE, VMware vSphere, KVM/OpenStack, Hyper-V, Red Virtualization.
- Network Integration (L2 Bridge Mode): offers Virtual Wire mode to integrate into existing network segments without major structural changes.
- Centralized Management: TKMT Risk Management Module Next Generation Firewall Center Console manages up to 10,000 security and filtering devices from a single interface.
- SIEM & Observability: consolidates and forwards logs and events to SIEM systems via syslog, SNMP, NetFlow, ICAP, and Zabbix.
- Enterprise Directory Sync: syncs with enterprise user directories.
- Support High-Availability Clustering: minimize downtime, maintain service availability, and ensure seamless failover between redundant systems in the event of a failure.
- Virtual Context Engine (VCE): VCE technology enables creating multiple isolated virtual NGFW instances on a single device with resource separation (RAM and processor cores) and network policy management for different segments.
Network Architecture Support
Section titled “Network Architecture Support”Supports integration with modern network architectures: routing, VPN, centralized management, monitoring, and automation-oriented interfaces. Key capabilities include:
- Network security enforcement from Layer 3 through Layer 7.
- Support for virtual firewall deployments.
- Support for physical/software-appliance deployments.
- Integration with distributed network architectures.
- Dynamic routing capabilities including OSPF and BGP.
- IPsec and GRE over IPsec capabilities for overlay network architectures.
- SD-WAN functionality with SLA-based traffic routing and automatic channel switching.
- Network segmentation and isolation through security zones and firewall policies.
- Centralized policy management through Control Center.
For distributed and hybrid infrastructures, TKMT Risk Management Module Next Generation Firewall can combine firewalling, routing, VPN, segmentation, SD-WAN, and centralized security-policy management within a single platform.