Line-rate edge filtering
Blocklists, threat-feed addresses and flood limits enforced at the earliest point, with per-address and per-port counters.
Features
Gateway firewall features: IPS, VPN and monitoring
An overview of what VYREON Neo does as a network security firewall. Which features a licence enables is listed in the licence itself; the 30-day trial includes all of them.
Screenshots show the console with demonstration data.
Firewall policy, intrusion prevention and threat filtering
Rules show what they match, what they do and how often they were hit. Changes are prepared as a draft and applied together.
Intrusion detection and prevention
Inline blocking (IPS) or alerting on a mirror port (IDS), maintained rule sets plus your own rules, and application identification. Rule changes apply without interrupting traffic.
Clear firewall policy
Zones, interfaces, address, port and application sets, NAT and port forwarding, with a draft that you review and apply, and an automatic roll-back if the console becomes unreachable.
GeoIP and threat feeds
Country blocking and traffic by country; downloaded threat-intelligence blocklists enforced at the edge. The last good data stays enforced if a download fails.
DDoS protection
Flood protection with automatic mitigation, and optional upstream signalling to your provider over BGP.
No TLS decryption
VYREON never decrypts your traffic. Encrypted content stays encrypted.
VPN connectivity and high availability
Remote access and site-to-site links, with VPN users, their status and their transfer volumes on one page.
WireGuard and OpenVPN
Remote-access clients and site-to-site links, configured entirely from the console, with one-time configuration downloads for your users.
VPN users
Shared VPN user accounts for both VPN types, with optional TOTP, that take effect without a network restart.
High availability
Active/standby pairs with automatic failover, connection-state sync and configuration sync.
Network configuration
Interfaces, VLANs, bridges, routes and WAN health checks managed from the console.
Network traffic monitoring and reports
Compliance reports for auditors, generated on demand or on a schedule, next to live monitoring and traffic accounting.
Live monitoring
Connections, interface traffic, security events and flood summaries, with notifications by e-mail, webhook, Telegram and browser push.
Accounting and reports
Per-address traffic accounting and top talkers, rule hit history and unused-rule reports, scheduled PDF/CSV compliance reports.
Troubleshooting
Packet tracer, packet capture to pcap files and learning mode that observes traffic between zones and suggests rules.
Monitoring exports
Prometheus metrics and SNMP for your existing monitoring.
Firewall management console and access control
Local accounts with Admin, Operator and Viewer roles and optional two-factor sign-in, with every change in the audit log.
Least privilege by design
Every part of VYREON runs with only the access it needs, and every change is validated before it is applied.
Integrity and tamper detection
VYREON-owned configuration is checked continuously; drift is detected, reported and restored, and accepted exceptions are always named.
Certificates
A self-signed certificate on first start, Let's Encrypt with automatic renewal, or your own certificate, swapped without restarting.
Installable web app
The console works on desktop and mobile browsers and can be installed as a progressive web app with push notifications.
Backups and signed updates
Configuration backups to local storage, SFTP or FTP/FTPS, and software updates that are verified against VYREON's signing keys before they are installed.
Roles and audit log
Admin, Operator and Viewer roles enforced on the gateway, optional TOTP, API tokens for automation, and an audit log of every change.
Guides for planning and operation
Deploying VYREON as your gateway firewall
Step-by-step deployment of VYREON as an on-premises Linux gateway firewall: installation options, first sign-in, the guided setup and safe first changes.
IDS vs IPS: detection or prevention?
The difference between an intrusion detection system (IDS) and an intrusion prevention system (IPS), and how to choose and roll out each mode in VYREON.
Site-to-site VPN with WireGuard or OpenVPN
How to connect a branch office to your network with a site-to-site VPN in VYREON, using WireGuard or OpenVPN, firewall rules and high availability.
High availability: an active/standby firewall pair
How a VYREON high availability firewall pair works: active/standby failover, virtual addresses, the sync link, configuration sync and planning a pair.
Licensed feature keys
Licences list features by key. These are the features VYREON Neo knows:
| Feature | What it covers |
|---|---|
| Intrusion detection and prevention | Inspection for known attacks, rule sets and application identification. |
| Edge filtering | Line-rate drop lists and counters for 10 Gbps+ filtering. |
| DDoS protection | Flood protection with automatic mitigation. |
| GeoIP | Country database, country blocking and traffic by country. |
| Threat-intelligence feeds | Downloaded blocklists enforced at the edge. |
| High availability | Active/standby pair with failover and configuration sync. |
| BGP signalling | Upstream DDoS signalling to your provider. |
| Compliance reports | Scheduled PDF/CSV reports of configuration and exposure. |
| Traffic accounting | Per-address accounting, top talkers and flow export. |
| Learning mode | Observe traffic between zones and suggest rules. |
| Packet capture | Capture traffic to pcap files for troubleshooting. |
| Monitoring exports | Prometheus metrics and SNMP. |
| Abuse reports | Look up abuse contacts and send X-ARF reports. |
| VPN | WireGuard and OpenVPN tunnels for remote-access clients and site-to-site links, with VPN users. |
| API tokens | Personal API tokens for automation. |
Packet filtering, the active policy, integrity enforcement, HA failover and console sign-in are never licence-gated.
Evaluate VYREON in your network
Start with the 30-day trial, or tell us about your environment and request an evaluation or a commercial licence.