Supported Internet connections
Support for DSL, cable modems, ISDN, satellite, dial-up or wireless Internet allows users to deploy WinRoute Firewall in networks of all sizes and in all locations. All users can share one a single Internet connection.

Connection fail-over
When WinRoute Firewall detects that the primary Internet connection is down, it automatically enables a backup connection. The backup connection can use any network or modem adapter.

Bandwidth Limiter
The Bandwidth Limiter in Kerio WinRoute Firewall acts as a simple Quality of Service (QoS) device, providing optimal data throughput for interactive or critical business applications such as VoIP.

Using the Bandwidth Limiter, administrators can throttle users who download large files to ensure that other users are not affected. Alternatively, Kerio WinRoute Firewall's Bandwidth Limiter can slow down the Internet for those users who exceed their configured daily or monthly quotas.

NAT and Proxy server
Internet sharing is made possible by two different technologies, network address translation (NAT) router and proxy server.

The NAT Router gives transparent Internet access to all computers in local network and works great with almost any protocol. Using NAT, there's no need to modify settings on each computer.

The Proxy Server stands in for a client computer at the remote host. Due to its complexity only a handful of protocols are supported by proxy technology. In exchange, the proxy server provides advanced features such as authentication and user based access control.

DNS forwarder
The built-in DNS forwarder accelerates DNS queries generated everytime a user wants to access a website. It forwards DNS queries to a chosen DNS server on the Internet and stores the recent results for a specified time. Subsequent repeated queries are therefore answered immediately.

DHCP server
The DHCP server in WinRoute Firewall assigns IP configuration parameters to each computer in the local area network, thus rapidly simplifying network administration.

HTTP proxy cache server
The built-in transparent HTTP proxy server caches content for web browsing at blazing speeds. WinRoute Firewall can store web pages in the local cache file for a limited time to conserve bandwidth. Exclusions can be set for certain websites so they are not cached at all.

Dial on Demand
For networks with dial-up, VPN, ISDN, PPPoE or any other connection type using Windows' Remote Access Service (RAS), WinRoute Firewall can connect to the Internet every time a user places an Internet request.

WinRoute Firewall can dial-up Internet automatically every time there is outgoing network activity (demand dial), or on a special request from the WinRoute Firewall Administration Console or the Web Interface (manual dial). It can also automatically connect at a specified time (scheduled dial).