AR-GEActiveR&D Product
Cloud Firewall Management Platform
Our Cloud Firewall Management Platform lets you centrally configure and monitor our in-house developed L7 (application layer) firewall from the cloud. Web, SNI, and DPI-based filtering along with user-level blocking, rate limiting, and content control are all managed from a single panel.
15+Features
12+Tech Details
7/24Support
MartaDeveloper
Developed by Marta Teknoloji
Mersin Technopark — R&D
Features & Capabilities
L7 application layer DPI with HTTP/HTTPS and DNS analysis
SNI (Server Name Indication)-based filtering and blocking
User and group-based blocking rules (AD/LDAP integration)
Rate limiting and QoS policies
Centralized cloud configuration and instant rule distribution
Real-time traffic flow and blocking dashboard
Rule versioning and one-click rollback
Syslog and CEF format SIEM integration
Geo-IP based rule definition
Time-based policy activation
Rule hit counter and traffic statistics
Independent rule set distribution per branch and region
Technical Details & Architecture
1
L7 Deep Packet Inspection (DPI): application layer HTTP/HTTPS header analysis (Host, User-Agent, Referer, Content-Type) based on nDPI library; DNS request and response analysis; TLS SNI field inspection; JA3/JA3S fingerprint-based application classification for encrypted traffic2
SNI-based filtering: Server Name Indication (SNI) field parsed during TLS Client Hello; target domain matched against blocklist or category rules; TLS connection terminated with RST or allowed based on rule; SSL inspection optionally added with Squid/mitmproxy architecture using certificate3
User and group-based rule engine: user identity and traffic matching via Active Directory/LDAP NTLM or Kerberos authentication; IP-based rules for guest users; consistent policy application for users on multiple devices; instant rule update on user group membership change4
Rate limiting and QoS: per-IP, per-user or per-application/domain inbound and outbound bandwidth limit (Token Bucket algorithm); PPS (packets/second) limit; automatic blocking, throttling or DSCP marking (QoS marking) on breach; peak and off-peak hour profiles5
Cloud management panel: rule creation, priority ordering, activation/deactivation from web interface; instant push distribution of rule sets to branch, region or device group; real-time monitoring of rule deployment status (deployed/pending/failed); change approval workflow (four-eyes principle)6
Rule versioning: every configuration change stored as time-stamped immutable commit (Git-like); audit log of who, when, what was changed; one-click rollback to previous stable version; version difference (diff) visualisation7
Real-time traffic monitor: live stream view of allowed and blocked connections; source IP, user, target domain/IP, protocol, rule name and action; per-rule hit counter (minute/hour/day); trend chart; traffic heatmap (hourly intensity)8
SIEM integration: structured JSON or CEF format for every allow/deny event via syslog (RFC 5424) over UDP/TCP/TLS; ready-made source type and dashboards for Splunk, IBM QRadar, Elastic SIEM and Wazuh; SNMP trap for critical rule violation notificationInterested in this product?
Schedule a live demo or request a technical brief from our team.
firewall yönetimL7 filtrelemeDPI güvenlikbulut güvenlik duvarıSNI filtrelemeuygulama katmanı güvenlik
Other Products
Active
LogHane
Cloud-based log retention for Law 5651: FortiGate logs are sealed hourly in the cloud without a server, timestamped and kept in a delete-proof archive.
View
Active
Kimliq SSO
Enterprise Single Sign-On (SSO) identity authentication software.
View
Active
DNS / Web Filtering
DNS filtering software that blocks harmful content and inappropriate websites at the network layer.
View
Active
Lucia Network Analysis
Domestic network analysis software for real-time monitoring and analysis of corporate network traffic.
View