Freequently Asked Questions

Unlike many firewalls that rely on open-source operating systems like a public version of Linux, Cnergee's NGFW runs on a proprietary embedded Linux and C-based OS built from the ground up by its in-house firmware team. This approach eliminates the supply chain risks and potential backdoors associated with third-party code. By controlling every layer of the operating system, Cnergee can create a hardened, secure platform that is less vulnerable to exploits and enables rapid, controlled security updates.

Cnergee's NGFW takes the best of both worlds. While its core OS is proprietary and built in-house, it still integrates with and leverages proven, best-in-class security frameworks. For example, it utilizes a framework similar to Snort 3 for its Intrusion Prevention/Detection System (IPS/IDS). Snort 3 is a highly effective, open-source engine for network intrusion detection. By using the framework's rule sets and logic while running it on a proprietary OS, Cnergee can provide a robust, high-performance security engine without the risks of a fully open-source environment.

Cnergee's NGFW uses a dual-pronged approach to stay updated on the latest threats. First, its in-house security team constantly monitors the threat landscape and develops signatures and patches for the proprietary OS. Second, it subscribes to threat intelligence feeds and signatures from leading third-party service providers. This ensures that the firewall has a comprehensive, up-to-the-minute database of known malicious IPs, domains, and attack patterns to proactively block threats before they can impact the network.

The Cnergee NGFW provides a full suite of advanced security features. It includes a stateful firewall, Gateway Anti-virus, and SSL Offload for inspecting encrypted traffic. It also offers advanced controls like URL & Content Filtering, Micro-segmentation at the application level, and Domain-based Tunnels. These features work together to provide granular control over network traffic, ensuring that only legitimate and secure applications and users can access the network.

For critical infrastructure and state departments, an open-source OS can pose significant security risks. Open-source code, while community-reviewed, can be a target for malicious actors looking to introduce vulnerabilities. By using a proprietary, in-house-developed OS, Cnergee provides a "black box" solution where the code is not publicly accessible. This reduces the attack surface and provides greater control and security, making it a more reliable and trustworthy solution for defending against cyberattacks on sensitive government networks.