With IPFire you have an enterprise-grade security for every network, either home-network, networks of enterprises, school networks or those of administrations. The focus lies especially on security, stability and ease of use. You can subsequently install additional functions with just one click.

Security

The main focus of IPFire lies on security. Especially with such a large topic, there is not only one single way to achieve a maximum level of security. For a network administrator it is also important to understand its needs and to act according to them. For this purpose IPFire offers a base that seperates single network segments according to their security levels and that allows to adjust them according to their own requirements.

Security of modular components is also a top priority. Updates are digitally signed and encrypted and can be automatically installed over Pakfire package management system. AS IPFire is typically directly connected to the internet, it is a target for hackers and other threats. The package management system helps the administrator to make sure that all gaps are filled and bugs are fixed in all used components.

Firewall

IPFire uses a stateful packet inspection firewall (SPI), which is on top of the Linux packet filtering framework netfilter. During the IPFire installation process, the network is configured into different, separate segments. This segmented security scheme means that there is a perfect place for each system in the network. Each segment can be activated as required, depending on the location and purpose and all systems in one segment are treated with the same security policy.

Scope of Delivery:

1x server system
1x 16 GB mSATA SSD with pre-installed IPFire software
1x 12 V power supply
1x network cable (1 m)
1x enclosure

CPU: AMD Embedded G series GX-412TC, 1 GHz quad Jaguar core with 64-bit and AES-NI support, 32K data + 32K instruction cache per core, shared 2 MB L2 cache
DRAM: 4 GB DDR3-1333 DRAM
Storage: Boot from SD card (internal sdhci controller), external USB or mSATA SSD, 1x SATA + power connector, mSATA is shared with miniPCI express
12 V DC, about 6 to 12 W depending on CPU load, jack = 2.5 mm, center positive
Connectivity: 4x Gigabit Ethernet channels (Intel i211AT)
I/O: DB9 serial port, 2x USB 3.0 external + 2x USB 2.0 internal, three front panel LEDs, pushbutton
Expansion: 3x miniPCI express (J13 USB or mSATA, with SIM; J14 USB only, with SIM; J15: full miniPCI express, but no SIM, intended for Wi-Fi). GPIO header, optional I2C bus, COM2 (3.3 V RXD/TXD)
Board size: 6 x 6" (152.4 x 152.4 mm) - same as apu1d, alix2d13 and wrap1e
Firmware: coreboot
Cooling: Conductive cooling from the CPU to the enclosure using a 3 mm alu heat spreader (included)