ixolate
ID Free assessment

One device. Three jobs.

Firewall, router, VPN concentrator. Same system. No per-feature fees, no module unlocked later for extra.

Inspect Contents are read, not just the header Route A path is chosen, even when a link dies Encrypt Traffic to another site gets a tunnel Deny Whatever has no reason to pass stops Packet in Packet out, or not at all
Four jobs on one packet, in order, in one device. Not four boxes you have to wire together yourself.

Blast radius, before and after

One compromised device on a flat network means the whole network is compromised. Segmentation makes the damage stop at the VLAN edge.

One broadcast domain VLAN 10 Servers VLAN 20 Office VLAN 30 IoT Server Database Office PC Printer Guest Wi-Fi Camera
A cheap camera that falls has a direct path to the database. Nothing stands in the way. The same camera still falls. The difference is that it has no route out of its own VLAN.
RoutedInspectedDenied

What is inside

Firewall & segmentation

Stateful firewall. 802.1Q VLANs, NAT, GeoIP, address groups. Guest, camera and server networks stay apart without extra boxes.

VPN

IPsec IKEv2, WireGuard, OpenVPN. Between branches, out to remote staff, across to your provider.

Routing & availability

Static, policy-based and dynamic routing over OSPF and BGP. Multi-WAN failover. An HA pair keeps sessions alive.

Threat protection

IDS/IPS engine, DNS filtering, IP reputation. Rule sets refreshed on a schedule, not once at install.

QoS

Shaping and limits per VLAN, per host, and per port. Traffic that already carries a priority marking (DSCP) can be put first — voice and video from IP phones usually do.

Access control

LDAP, Active Directory, RADIUS. TOTP two-factor. An internal certificate authority.

Visibility

Traffic logs, usage reporting, an audit trail for every change made through the interface.

What you run yourself, and what we hold back

A design decision, not a limitation. Safe updates run on your schedule. The ones that can drop traffic get scheduled together.

You run these We run these with you

Security updates and fixes within the running version

Moving to the next major version

Firewall, VPN and policy changes of your own

Changes that touch the production traffic path

Configuration backups whenever you want

Recovery after a hardware failure

Full admin access to your own device

Reworking segmentation or routing design

Every update from the interface lands in the device audit log: who, when, result.

Which hardware fits?

Sizing guidance by user count, network cards and storage.

Hardware Start a free assessment