Security

Multi-Action Policy Engine

One match language. Fourteen action verbs. Atomic hot-reload with zero packet loss.

GA14 actions

HOW IT WORKS

Walk through a single flow

1Match dimensions include application, category, Server Name, TLS fingerprint, address, port, user, group, device, geography, and schedule.
2Actions chain — an observation tag can pair with rate-limiting and escalation, for example.
3Rule generations are versioned. The engine serves the current generation until the staged one is validated and promoted.
4Promotion is atomic — no restart, no rebind, no dropped packets.

UNDER THE HOOD

Deterministic evaluation

Rule ordering is deterministic and visible in the management UI. Legacy rule sets can coexist with new ones during migrations without ambiguity.