Average Ratings 2 Ratings
Average Ratings 0 Ratings
Description
CacheGuard-OS is an open-source Linux-based UTM gateway appliance OS that has been in active development since 2002. It is designed to run on commodity x86 hardware and act as the default route between an internal network and the internet, replacing the ISP-provided router as the traffic checkpoint.
The stack integrates: Squid (web cache and proxy), ClamAV (web antivirus), ModSecurity (WAF), StrongSwan (IPsec/IKEv2 VPN), IPRoute2 (QoS and WAN load balancing), NetFilter (stateful firewall), SSL inspection, and URL filtering. All components are configured through a web-based admin interface rather than directly, making the platform accessible to operators without deep Linux expertise while remaining auditable by those who want to inspect the underlying configuration.
The OS has been open-source since its first release — source ships on every installed appliance. It was recently published publicly on GitHub to make the codebase easier to browse and audit.
Target deployments are small to medium networks — SMBs, schools, and branch offices — where a commercial UTM appliance is overkill on budget but the threat surface is the same. Runs on bare metal or common hypervisors (VMware, VirtualBox, KVM, Hyper-V). No vendor lock-in, no subscription, no licence cost.
GitHub: cacheguard/CacheGuard-OS
Description
Secure Web Gateway (SWG) solutions offer robust defense against threats originating from the internet, acting as a critical layer of security for enterprises. By employing web filtering techniques, SWGs help enforce organizational policies regarding internet access while also blocking undesirable software, particularly malware, that may arise from user-initiated online activities. As businesses enhance their Wide Area Network (WAN) infrastructure, the significance of SWGs has grown, especially with the swift transition of applications to the cloud and the expanding attack surfaces at remote sites and branch locations. The risk associated with web-based traffic is particularly elevated, necessitating organizations to adopt a comprehensive strategy to mitigate both external and internal threats effectively. An effective SWG solution should encompass features such as URL filtering, application control, in-depth HTTPS/SSL inspection, data loss prevention, and remote browser isolation functionalities. Fortinet's SWG stands out by offering versatile deployment options, which include explicit, transparent, and inline modes, catering to various operational needs. As cyber threats continue to evolve, the need for such multifaceted security solutions becomes increasingly critical for safeguarding sensitive information and maintaining operational integrity.
API Access
Has API
API Access
Has API
Integrations
Amazon Web Services (AWS)
Coralogix
Microsoft 365
Microsoft Azure
Microsoft Hyper-V
Netreo
Proxmox VE
SMSEagle
VMware Cloud
VMware ESXi
Integrations
Amazon Web Services (AWS)
Coralogix
Microsoft 365
Microsoft Azure
Microsoft Hyper-V
Netreo
Proxmox VE
SMSEagle
VMware Cloud
VMware ESXi
Pricing Details
$0
Free Trial
Free Version
Pricing Details
No price information available.
Free Trial
Free Version
Deployment
Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook
Deployment
Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook
Customer Support
Business Hours
Live Rep (24/7)
Online Support
Customer Support
Business Hours
Live Rep (24/7)
Online Support
Types of Training
Training Docs
Webinars
Live Training (Online)
In Person
Types of Training
Training Docs
Webinars
Live Training (Online)
In Person
Vendor Details
Company Name
CacheGuard Technologies
Founded
2025
Country
France
Website
www.cacheguard.com
Vendor Details
Company Name
Fortinet
Founded
2000
Country
United States
Website
www.fortinet.com/products/secure-web-gateway
Product Features
Network Security
Access Control
Analytics / Reporting
Compliance Reporting
Firewalls
Internet Usage Monitoring
Intrusion Detection System
Threat Response
VPN
Vulnerability Scanning
Web Application Firewalls (WAF)
Access Control / Permissions
Alerts / Notifications
Automate and Orchestrate Security
Automated Attack Detection
DDoS Protection
Dashboard
IP Reputation Checking
Managed Rules
OWASP Protection
Reporting / Analytics
Secure App Delivery
Server Cloaking
Virtual Patching
Zero-Day Attack Prevention