Update Christman campaign copy

[ipfire.org.git] / src / templates / static / features.html

{% extends "../base.html" %}

{% block title %}{{ _("Features") }}{% end block %}

{% block container %}
	<section>
		<div class="container">
			<div class="row">
				<div class="col col-lg-6">
					<h1 class="display-2">{{ _("Features") }}</h1>

					<p>
						{{ _("IPFire is a powerful and professional Open Source firewall solution") }}
						<br>
						{{ _("Learn what it can do") }}
					</p>
				</div>
			</div>
		</div>
	</section>

	<section class="inverse">
		<div class="container">
			<div class="row">
				<div class="col-12 col-md-3 d-flex align-items-center justify-content-center justify-content-md-start">
					<span class="fas fa-shield-alt icon-large text-primary my-5"></span>
				</div>

				<div class="col-12 col-md-9">
					<h1>{{ _("Security") }}</h1>

					<p>
						The primary objective of IPFire is security.
						Its easy to configure firewall engine and Intrusion Detection System
						prevent any attackers from breaking into your network.
						In the default configuration, the network is split into various zones
						with different security policies such as a LAN and DMZ to manage
						risks inside the network and have custom configuration for the specific
						needs of each segment of the network.
					</p>

					<p>
						But even the firewall needs to protect itself.
						IPFire is built from scratch and not based on any other distribution.
						This allows the developers to harden IPFire better than any other
						server operating system and build all components specifically for use
						as a firewall.
					</p>

					<p>
						Frequent updates keep IPFire strong against security vulnerabilities
						and new attack vectors.
					</p>
				</div>
			</div>
		</div>
	</section>

	<section>
		<div class="container">
			<div class="row flex-md-row-reverse">
				<div class="col-12 col-md-3 d-flex align-items-center justify-content-center justify-content-md-end">
					<span class="fas fa-fire icon-large my-5"></span>
				</div>

				<div class="col-12 col-md-9">
					<h1>{{ _("Firewall") }}</h1>

					<p>
						IPFire employs a Stateful Packet Inspection (SPI) firewall,
						which is built on top of Netfilter, the Linux packet filtering framework.
						It filters packets fast and achieves throughputs of up to multiple
						tens of Gigabit per second.
					</p>

					<p>
						Its intuitive web user interface allows to create groups of hosts and
						networks which can be used to keep large set of rules short and tidy -
						something very important in complex environments with strict access control.
						Logging and graphical reports give great insight.
					</p>

					<p>
						Various settings are available to mitigate and block Denial-of-Service
						attacks by filtering them directly at the firewall and not allowing them
						to take down your servers.
					</p>

					<p class="mb-5">
						<a class="btn btn-secondary" href="https://wiki.ipfire.org/configuration/firewall">
							Firewall Documentation
						</a>
					</p>

					<h4>Intrusion Detection/Prevention System</h4>

					<p>
						IPFire's Intrusion Detection System (IDS) analyzes network traffic and tries to
						detect exploits, leaking data and any other suspicious activity.
						Upon detection, alerts are raised and the attacker is immediately blocked.
					</p>

					<p>
						<a class="btn btn-secondary" href="https://wiki.ipfire.org/configuration/services/ids">
							Documentation
						</a>
					</p>
				</div>
			</div>
		</div>
	</section>

	<section class="inverse">
		<div class="container">
			<div class="row">
				<div class="col-12 col-md-3 d-flex align-items-center justify-content-center justify-content-md-start">
					<span class="fas fa-network-wired icon-large my-5"></span>
				</div>

				<div class="col-12 col-md-9">
					<h1>{{ _("Connecting the World") }}</h1>

					<p>
						Virtual Private Networks (VPNs) connect remote locations like data centers,
						branch offices or outsourced infrastructure via an encrypted link.
						IPFire allows staff to work remotely as if they would be sitting in the office
						and allowing them to access all resources that they need - fast and securely.
					</p>

					<p>
						IPFire supports industry standards like IPsec and OpenVPN and interoperates with
						equipment from various vendors like Cisco & Juniper.
						VPNs are quickly and easily set up with IPFire and employ latest cryptography.
					</p>

					<div class="row">
						<div class="col-12 col-md-4 mb-3">
							<a class="btn btn-secondary btn-block" href="https://wiki.ipfire.org/configuration/services/ipsec">
								VPN with IPsec
							</a>
						</div>

						<div class="col-12 col-md-4 mb-3">
							<a class="btn btn-secondary btn-block" href="https://wiki.ipfire.org/configuration/services/openvpn">
								VPN with OpenVPN
							</a>
						</div>
					</div>
				</div>
			</div>
		</div>
	</section>

	<section>
		<div class="container">
			<div class="row flex-md-row-reverse">
				<div class="col-12 col-md-3 d-flex align-items-center justify-content-center justify-content-md-end">
					<span class="fas fa-box-open icon-large my-5"></span>
				</div>

				<div class="col-12 col-md-9">
					<h1>{{ _("Add-ons") }}</h1>

					<p>
						From a technical point of view, IPFire is a minimalistic, hardened operating system.
						To provide more functionality, it can be extended by add-ons which are installed with
						IPFire's own package management system called <em>Pakfire</em>.
					</p>

					<p>
						Add-ons can be handy command line tools for administrators or can extend the system
						to provide additional functionality. Those include:

						<ul>
							<li>
								Turning IPFire into a <a href="https://wiki.ipfire.org/addons/wireless">Wireless Access Point</a>
							</li>

							<li>
								Tools for Monitoring and System Health Management
							</li>

							<li>
								Backup, File and Print Services
							</li>

							<li>
								Running a <a href="https://wiki.ipfire.org/addons/tor">Tor</a> node
							</li>

							<li>
								Proxies and Relays for various protocols
							</li>

							<li>
								and many more...
							</li>
						</ul>

						<a class="btn btn-secondary" href="https://wiki.ipfire.org/addons">
							List of all Add-ons
						</a>
					</p>
				</div>
			</div>
		</div>
	</section>

	<section class="inverse">
		<div class="container">
			<div class="row">
				<div class="col-12 col-md-3 d-flex align-items-center justify-content-center justify-content-md-start">
					<span class="fas fa-angle-double-right icon-large my-5"></span>
				</div>

				<div class="col-12 col-md-9">
					<h1>{{ _("Making Your Internet Faster") }}</h1>

					<p>
						The IPFire Quality of Service (QoS) categorizes network traffic and sends it out
						prioritized by how important it is to ensure a good service.
						For example, a Voice-over-IP call will always have priority over a large download
						to ensure that words will never get lost and call quality is always the best it can be.
					</p>

					<p>
						Even on very busy links, IPFire will make sure that websites load fast and that the
						network is quick and responsive by using smart queueing algorithms and getting the
						most out of your bandwidth.
					</p>

					<p>
						<a class="btn btn-secondary" href="https://wiki.ipfire.org/configuration/services/qos">
							Documentation
						</a>
					</p>
				</div>
			</div>
		</div>
	</section>

	<section>
		<div class="container">
			<div class="row flex-md-row-reverse">
				<div class="col-12 col-md-3 d-flex align-items-center justify-content-center justify-content-md-end">
					<span class="fas fa-server icon-large my-5"></span>
				</div>

				<div class="col-12 col-md-9">
					<h1>{{ _("Web proxy") }}</h1>

					<p>
						One of the most commonly used features of IPFire is the full-fledged web proxy.
						It delivers and filters web content and can only allow Internet access for some
						users.
					</p>

					<p>
						Caching content on the firewalls disk makes websites load faster.
						External regularly updated blacklists allow banning browsing on various websites
						when they are for example not suitable for students.
						Optionally, the IPFire web proxy can transparently scan for viruses and block
						them straight away.
					</p>

					<p>
						The web proxy makes IPFire perfect for schools and universities where
						access control and logging is required.
					</p>

					<p>
						<a class="btn btn-secondary" href="https://wiki.ipfire.org/configuration/network/proxy">
							Documentation
						</a>
					</p>
				</div>
			</div>
		</div>
	</section>
{% end block %}