Compare · Firewall
DENIS and your firewall or UTM
A firewall controls what crosses your perimeter. DENIS shows what happens inside it, including traffic between your own devices, and can ask your firewall to act.
What a firewall is good at
Allowing and denying traffic that passes through it, and inspecting it in line.
What DENIS adds
Visibility inside the perimeter. DENIS watches a copy of the traffic and does not sit in line, so it sees devices and conversations that never cross the firewall, such as a printer talking to a file server.
Your firewall does the blocking
When an administrator chooses, DENIS can have your own firewall block a device or one connection, or quarantine a device, after a preview, with a time limit and a release. It writes into a group or list that your own rule uses, or adds one deny rule, never an allow rule. Setup guides for the supported firewalls are in the documentation.
For the technical team
Firewall connectors include FortiGate, Palo Alto, MikroTik and UniFi, tested on real hardware for the actions listed on the supported infrastructure page, and several experimental ones. Every action goes through one path with a kill switch and an hourly limit.