NGFW capabilities in one console
Firewall, IPS, application control, web filtering, VPN and multi-WAN all speak the same policy language.
Features
Detailed capability list
What SignWall and SignClient deliver together. Every component below — from the packet processing pipeline to the IPS engine, from application identification to VPN termination — was written by our own engineers, not layered as an interface over an off-the-shelf distribution.
Stateful Firewall and NAT
A connection-aware rule engine; SNAT/DNAT, port forwarding, virtual IP and hairpin NAT support.
Zone-Based Policy
Define LAN, DMZ, guest, OT and WAN zones; rules are written as transitions between zones, keeping the rule set readable.
IPS / IDS
Signature-based intrusion detection and prevention; block on critical signatures, log-only on low-priority ones.
Application Control
Application awareness to manage P2P, tunnelling, proxy and remote desktop tools per user and group.
Web Filtering
Category-based URL filtering, unrated-site policy, safe-search enforcement and time-bound rules.
Site-to-Site IPSec VPN
IPSec tunnels between branches and the data centre; tunnel health checks and automatic re-establishment.
Client-to-Site IPSec VPN (Remote Access)
A client-to-site IPSec tunnel for remote workers, established through SignClient, with access scoped per user and group. There is NO SSL VPN portal — no pre-authentication web application facing the internet, and therefore no session token to steal.
SignClient Endpoint Agent
One application for Windows, macOS and Linux: VPN client, on-device web filtering, policy enforcement, inventory and telemetry.
Multi-WAN, Load Balancing, Failover
Simultaneous use of multiple links, link quality monitoring and automatic transfer of traffic from a failed link.
User Identity and Directory Integration
User and group awareness through Active Directory / LDAP; rules can be written against identity instead of IP.
Law 5651 Integration via SignLogger
Log flow is forwarded to SignLogger, which handles compliant signing, retention, hotspot and captive portal.
Central Management and Reporting
Central policy distribution across branches; traffic, threat and session reports on one screen.
Product Family
One software, five sizes
There is NO difference in software or features between the models. S, M, L, A and V all run the same SignWall release with the same feature set; only the hardware size and resource capacity change. Choosing a model is choosing capacity, not a licence tier. The licence binds to the appliance serial and is issued for 1, 2 or 3 year terms.
SignWall S / M
Small-to-mid and mid-to-large networks
- The complete feature set — nothing withheld
- Smaller hardware, lower resources
- Suits single-site and branch deployments
- The same management interface and policy language
- Local support, updates included
SignWall L / A
High-traffic and large-scale networks
- The SAME feature set as S/M
- More powerful hardware and more resources
- Higher concurrent session and throughput capacity
- More network interfaces
- Local support, updates included
SignWall V
On VMware, Hyper-V and Proxmox
- The SAME feature set as the appliances
- You size the capacity (vCPU / RAM)
- Installs into your existing virtualization estate
- Serial created at first install, licence binds to it
- Fast to stand up for a POC or disaster recovery
FAQ