Features — VYRON

Filtering and inspection

Line-rate edge filtering

Blocklists, threat-feed addresses and flood limits enforced at the earliest point, with per-address and per-port counters.

Intrusion detection and prevention

Inline blocking (IPS) or alerting on a mirror port (IDS), maintained rule sets plus your own rules, and application identification. Rule changes apply without interrupting traffic.

Clear firewall policy

Zones, interfaces, address, port and application sets, NAT and port forwarding, with a draft that you review and apply, and an automatic roll-back if the console becomes unreachable.

GeoIP and threat feeds

Country blocking and traffic by country; downloaded threat-intelligence blocklists enforced at the edge. The last good data stays enforced if a download fails.

DDoS protection

Flood protection with automatic mitigation, and optional upstream signalling to your provider over BGP.

No TLS decryption

VYRON never decrypts your traffic. Encrypted content stays encrypted.

Connectivity

WireGuard and OpenVPN

Remote-access clients and site-to-site links, configured entirely from the console, with one-time configuration downloads for your users.

VPN users

Shared VPN user accounts for both VPN types, with optional TOTP, that take effect without a network restart.

High availability

Active/standby pairs with automatic failover, connection-state sync and configuration sync.

Network configuration

Interfaces, VLANs, bridges, routes and WAN health checks managed from the console.

Visibility

Live monitoring

Connections, interface traffic, security events and flood summaries, with notifications by e-mail, webhook, Telegram and browser push.

Accounting and reports

Per-address traffic accounting and top talkers, rule hit history and unused-rule reports, scheduled PDF/CSV compliance reports.

Troubleshooting

Packet tracer, packet capture to pcap files and learning mode that observes traffic between zones and suggests rules.

Monitoring exports

Prometheus metrics and SNMP for your existing monitoring.

Operations and security

Least privilege by design

Every part of VYRON runs with only the access it needs, and every change is validated before it is applied.

Integrity and tamper detection

VYRON-owned configuration is checked continuously; drift is detected, reported and restored, and accepted exceptions are always named.

Certificates

A self-signed certificate on first start, Let's Encrypt with automatic renewal, or your own certificate, swapped without restarting.

Installable web app

The console works on desktop and mobile browsers and can be installed as a progressive web app with push notifications.

Backups and signed updates

Configuration backups to local storage, SFTP or FTP/FTPS, and software updates that are verified against VYRON's signing keys before they are installed.

Roles and audit log

Admin, Operator and Viewer roles enforced on the gateway, optional TOTP, API tokens for automation, and an audit log of every change.

Licensed feature keys

Licences list features by key. These are the features VYRON Neo knows:

Feature	What it covers
Intrusion detection and prevention	Inspection for known attacks, rule sets and application identification.
Edge filtering	Line-rate drop lists and counters for 10 Gbps+ filtering.
DDoS protection	Flood protection with automatic mitigation.
GeoIP	Country database, country blocking and traffic by country.
Threat-intelligence feeds	Downloaded blocklists enforced at the edge.
High availability	Active/standby pair with failover and configuration sync.
BGP signalling	Upstream DDoS signalling to your provider.
Compliance reports	Scheduled PDF/CSV reports of configuration and exposure.
Traffic accounting	Per-address accounting, top talkers and flow export.
Learning mode	Observe traffic between zones and suggest rules.
Packet capture	Capture traffic to pcap files for troubleshooting.
Monitoring exports	Prometheus metrics and SNMP.
Abuse reports	Look up abuse contacts and send X-ARF reports.
VPN	WireGuard and OpenVPN tunnels for remote-access clients and site-to-site links, with VPN users.
API tokens	Personal API tokens for automation.

Packet filtering, the active policy, integrity enforcement, HA failover and console sign-in are never licence-gated.

Everything a gateway firewall needs, in one console