EXCLUSIVE: Opteq i.Q. OP1400

Opteq's ExtendedMPLS function adds another dimension to rules as the packet marking option allows packets to be dynamically tagged with a ToS value. MPLS provides three QoS classes that are used to prioritise traffic but if a class becomes saturated the MPLS service will indiscriminately drop packets. ExtendedMPLS can be used to dynamically reassign classes to ensure that business critical traffic remains unaffected.

Next up is the Web i.Q. module which includes sub-modules for web caching, URL content filtering and ICAP server redirection. The appliance functions either as an explicit or transparent proxy cache and supports proxy and AD authentication and for the latter you can use LDAP to import users and groups. When a user attempts to access the Internet the appliance checks to see if they are authenticated and if not, will enforce authentication before permitting access. Naturally, clustering is supported and the advanced cache parameters make this solution highly flexible.

For Content Filter i.Q. the appliance uses a local URL database managed and maintained by Opteq. Only eleven categories are available but each one can be modified with custom URLs, domains, IP addresses and URL expressions. Groups based on time periods, users and destinations allow multiple web access policies to be in effect at different times of the day and week and it can also integrate with AD via the web cache module. In practice this module worked reasonably well although more categories would make it more versatile.

Two firewall options are available with the advanced firewall acting as a gateway. This implements basic NAT/SPI protection and you can create custom rules to manage inbound and outbound traffic. The packet filter firewall acts as a bridge where it can identify traffic using Layer 7 inspection and apply rules that determine how it is handled. The Mail i.Q module is an SMTP gateway which provides both anti-virus and anti-spam measures along with vulnerability checks for blocking phishing attacks. The well-respected open source ClamAV is Opteq's choice for virus scanning but this can be augmented with other third party products that run on Unix such as Kaspersky. Anti-spam features are also handled by Opteq and include a large list of RBLs along with Bayesian analysis.

In its quest to deliver a single network management solution Opteq has largely succeeded and the fact that its appliances are managed from one interface and can run any or all of the various modules makes it extremely versatile. Some features such as URL content filtering aren't as good as many specialist products but Opteq's real strengths lie in its network monitoring, bandwidth management and caching features and the OP1400 is also priced very competitively as well.