The whole firewall
Fast-path filtering, intrusion prevention with maintained rule sets, VPN, high availability, monitoring and reports, managed from one web console.
Download · VYREON Neo
One installer image with everything: a hardened operating system, the firewall, intrusion prevention and the web console. Write it to a USB stick or attach it to a virtual machine, boot, and the gateway is ready a few minutes later.
The installer image is being prepared. Create a free account now and you can download it as soon as it is published.
Fast-path filtering, intrusion prevention with maintained rule sets, VPN, high availability, monitoring and reports, managed from one web console.
A minimal, locked-down operating system with no default passwords and nothing enforced until you apply a policy. Remote shell access is key-only.
Every installation starts with a 30-day trial that includes every feature. Request a licence any time; it is verified on the gateway, also without internet access.
VYREON runs on dedicated hardware or in a virtual machine. Pick the line that matches how you will use it; SSD storage in every case.
Intrusion prevention off, up to about 1–2 Gbps
With intrusion prevention, up to about 1 Gbps
With intrusion prevention
Intrusion prevention uses one processing thread per core, plus about two cores for the system. More cores and a higher clock mean more inspected throughput. Any 64-bit x86 (amd64) processor works; virtual machines should pass the host CPU type through.
With intrusion prevention on, below 16 GB the full rule sets cannot be loaded: each group of processing threads needs about 2–3 GB. Without intrusion prevention, 8 GB is plenty.
The system takes about 4 GB. Security events are capped at 2 GiB by default (Settings → Retention), the audit log keeps 365 days, system and audit logs need about 1–2 GB, and backups, captures and updates a few GB more. That makes 32 GB the practical minimum and 64–128 GB comfortable. Use an SSD: logging writes constantly. The installer refuses disks under 16 GB and accepts 16–32 GB for evaluation only.
At least two (internet and internal network); a separate management port is recommended, and high availability needs an extra link between the two gateways. For 10 Gbps use multi-queue server NICs such as Intel X710/E810 or NVIDIA (Mellanox) ConnectX. In a VM, use paravirtual NICs or pass physical ports through.
Physical gateway: write the ISO to a USB stick of 2 GB or more with a USB image writer (for example balenaEtcher or Rufus in DD mode), or on Linux with sudo dd if=vyreon-neo-amd64.iso of=/dev/sdX bs=4M conv=fsync status=progress (replace /dev/sdX with the stick; everything on it is erased). Virtual machine: attach the ISO as a virtual CD/DVD drive and add an empty disk.
Start the machine from the USB stick or the virtual drive. UEFI (Secure Boot capable) and legacy BIOS both work. The installer runs on the screen or on a serial console; it opens no network services.
It lists the disks with their size and model. You choose the target and type its name to confirm that it may be erased. Then set the administrator password, and optionally the host name and the management address (DHCP or static). The installer writes the system, grows it to the whole disk and restarts.
After the restart the screen shows the console address and a one-time setup token. Open https://<address>:8443/ in your browser, enter the token, create the first administrator and follow the guided setup. Nothing is enforced until you apply a policy.
Compare the SHA-256 checksum of the file you downloaded with the one published here before you install it.
The checksum is published together with the image.
sha256sum vyreon-neo-amd64.isoshasum -a 256 vyreon-neo-amd64.isoGet-FileHash .\vyreon-neo-amd64.iso -Algorithm SHA256, or certutil -hashfile vyreon-neo-amd64.iso SHA256The values must match exactly (upper or lower case does not matter). If they do not, download the file again.
The download is free; it needs a free VYREON account with a confirmed e-mail address. The download button asks you to sign in or create an account and then starts the download.
Every installation runs a 30-day trial with every feature. From the download page you can request a trial or commercial licence right away; it is a small signed file you install in the console, and licensing never switches protection off.
VYREON is also available as a package for Debian and Ubuntu servers. Customers with a licence find it in the portal under Downloads.