OVERVIEW
MountainBox, MountainCare, MountainCentral, MountainCloud, MountainView, iDiG, Wi-iDiG and iDiGOS are trademarks of 5th Mountain Networks (Pty) Ltd.
Copyright © 2020 5th Mountain Networks (Pty) Ltd.
Turning Best-Effort Networks into Great Networks
MountainBox Firewall and SD-WAN Appliances are ideal for organisations considering a Unified Threat Management (UTM) solution for branches, distributed sites, campuses, franchises or datacenter VPN concentration.

MountainBox offers a comprehensive suite of network services, eliminating the need for multiple appliances. These services include SD-WAN capabilities, application-based firewalling, content filtering, web search filtering, intrusion detection and prevention, malware protection, web caching, failover and more.

Firewall
Stateful, DPI, Layer 7 Firewall with support for IPv4 and IPv6 and live view on blocked or passed traffic.

Hardware Failover
When you cannot afford downtime use our automatic and seamless hardware failover with state synchronisation utilising the address redundancy protocol to get the highest possible availability.

Two Factor Authentication
2FA is supported throughout the system, for both the user interface and services such as VPN if required.

Intuitive User Interface
The most intuitive fully responsive user interface you'll find in any firewall with integrated search option.

Multi-WAN
Multi WAN capable including Load Balancing, Traffic Steering and Failover support.

SD-WAN
For easy setup, configuration and monitoring the ZeroTier plugin can be used to setup your Software Defined WAN within minutes.

Routing Protocols
Pluggable support for OSPF, BGP, RIP, IS-IS, LDP and PIM.

Web Application Filtering
As part of our cooperation with Sunny Valley Networks a free version of Sensei L7/TLS Packet Inspection Engine with native TLS inspection can be installed. For enhanced features a commercial version can be acquired.

Virtual Private Networking
Integrated support for IPsec (including route based), OpenVPN as well as pluggable support for Tinc (full mesh VPN) and WireGuard.

Intrusion Detection & Prevention
Get rid of the Trojans & CNC bots with state of the art inline intrusion prevention utilising Suricata with Snort VRT or Proofpoint's Emerging Threats Open rules integrated. Optional ET PRO (commercial subscription) or ET PRO Telemetry. Snort VRT also requires registration or subscription.

Web Filtering
Fully integrated web proxy with access control and support for external blacklists to filter unwanted traffic.Other options include firewall aliases and DNS blacklisting.

And Much More
Captive Portal, TCP/HTTP Load Balancer, Netflow Monitoring, Rest API, and more..

Available as a Managed Service - Halo