Skip to content

Integration and Operation

NetProtector is installed as a bridge between router and firewall, protects your network from the very first second and integrates with your existing security tools.

Installed as a Bridge Between Router and Firewall

The NetProtector appliance is connected directly into the existing link between router and firewall:

  • Conventional: Router → Firewall → Corporate network
  • With NetProtector: Router → NetProtector → Firewall → Corporate network

NetProtector operates as a bridge in the data stream and removes unwanted traffic before it reaches the firewall.

Installed as a bridge
Traditional setup
Internet
Router
Firewall
Company network
With NetProtector
Internet
Router
NetProtector
Firewall
Company network
Works as a bridge directly in the traffic flow between router and firewall.
Filters unwanted traffic before it reaches the firewall – including its VPN gateways.
Installed in minutes, protecting from the moment it goes live.

Installation takes just a few minutes: unplug the cable between router and firewall, connect NetProtector in between, switch it on. Protection is active from the moment it is commissioned. To see how this works in practice, watch the animation on the product page.

Why in Front of the Firewall?

Firewalls and their VPN gateways are among the most frequent targets of attack – they are reachable from the internet, and vulnerabilities in them are often exploited within a few days. Because NetProtector filters all incoming traffic, the firewall, VPN gateway and the applications behind them never even see attacks from already identified sources. This significantly raises your level of security – including during the period until a security update has been applied.

Response and Integration with Your Systems

NetProtector integrates with existing security tools and – if desired – can respond automatically to detected threats.

Automated response
Optional playbooks for detected threats
ContainBlock suspicious connections, isolate affected systems.
Preserve evidenceCollect logs and packet captures for analysis.
RemediateBlock C2 servers, quarantine malware.
RecoverSupport the return to safe normal operations.
Integrations
Fits into your existing security stack
SIEMAlerts via syslog, CEF or STIX/TAXII
SOARREST API and webhooks for playbooks
EDR / XDRContext for endpoint protection
Firewall systemsAdjust rules in real time
TicketingIncidents become tickets automatically
Dashboard & reportsReal-time situation and management reports

Dashboard and Reports

The dashboard gives security analysts and executives alike a clear overview:

  • Real-time overview of the current threat situation
  • Prioritized alerts with context
  • Reports at the right level of detail for technical staff and management
  • Clear recommendations for action instead of lengthy log files

Operation and Updates

The detection models are continuously developed and regularly updated; new models undergo controlled testing before rollout. All events are logged, which also supports audits, for example under ISO 27001.

Would you like to know how NetProtector fits into your environment? Talk to us.