Secure Infrastructure

cGate

Microsegmentation and lifecycle protection for virtual machines

Client Satisfaction

0%

Universal cloud security platform

cGate forms a single protection contour for KVM and VMware environments. This unifies security policies and reporting across a heterogeneous environment.

Protection of every virtualization component

Control of the administrator workstation, the management server and the hypervisor host provides holistic protection of applications against attacks from the virtual infrastructure.

Transparency and audit

Correlation of cGate events with virtualization events reveals unauthorized activity and lets you detect an incident before it leads to destructive consequences.

Fast compliance

Built-in security setting templates provide the protection level required by regulators with minimal effort from maintenance staff.

Security

Encryption

Protection

Capabilities

What cGate does

Virtual network microsegmentation

Can be laid over the existing network topology
Managed through the API

Virtual machine lifecycle control

Integrity control of golden templates
Trusted boot
Protection from environment administrator access to storage and consoles
Secure deletion

Fault tolerance and scaling

VMware vCenter SRM support
vCenter Server Appliance High Availability (vCSA HA) support
vCenter Linked Mode support
VMware Auto Deploy support

Security setting templates

For regulator requirements on state information systems
For GOST 57580.1-2017 and PCI DSS requirements for financial organizations
In line with the VMware hardening guide and CIS Benchmarks recommendations

Overview

Protection of state information systems

Protection of critical information infrastructure facilities

Protection of information systems in credit and non-credit financial organizations

Information security in healthcare organizations

System requirements

cGate 5.1

cGate system requirements
Authorization server	Astra Linux Special Edition "Smolensk" 1.8.1.16 – 6.6.28-1.astra2+ci96 ALT SP release 10 – 6.1.29-alt.x86_64 Oracle Linux Server 9.4 – 5.14.0-427.13.1.el9_4.x86_64 RED OS 7.3c (7.3.5) – 6.1.110-1.el7.3.x86_64 The authorization server component requires 10 GB of free disk space; at least 100 GB is recommended for stable operation.
cGate client	Windows 10, versions 1809, 2109 x64 Windows 11 (21H2) Windows Server 2016, version 1607 x64 + Update KB4103720 Windows Server 2019, versions 1809, 2109 x64 Windows Server 2022 (21H2) The client component requires 1 GB of disk space.
Web console	Microsoft Edge 136 or higher Google Chrome 137 or higher Firefox 138 or higher Safari 18.5 or higher Opera 119 or higher
KVM agent	OpenNebula 5.10.5 / 6.2.0 Astra Linux SE 1.7.4 – 1.7.7 based virtualization SpaceVM 6.5.5 / 6.5.6 ECP Veil 5.1.9 zVirt 4.2
Hardware	The configuration of the computer hosting cGate components matches the requirements of the operating system installed on it The authorization server needs at least one Ethernet interface, or two if it also routes traffic DHCP is not recommended for interfaces connected to the protected perimeter and the administration network