EnGarde Secure Linux offers many unique advantages as a platform for secure Internet services, the most important of which are highlighted below.
Secure Server-Only System
EnGarde is designed as a secure Internet services platform providing only those services that can be offered securely over a public network, including Web, mail, FTP, DNS, and SSH. EnGarde also does not include a desktop environment.
Broad Support for Server Hardware
EnGarde focuses on hardware critical to dedicated servers, from interface cards to hardware RAID and supports both Intel and AMD processors, including both AMD and Intel 64-bit systems.
Simple & Secure Remote Management using WebTool
All standard system administration tasks such as creating users and groups and configuring network interfaces and all EnGarde services from Web and mail to FTP and DNS are seamlessly and securely maintained through the Guardian Digital WebTool browser-based system administration utility.
SELinux Mandatory Access Control
EnGarde re-architects the Linux security model using SELinux to prevent and contain even "zero-day" attacks. Instead of merely relying on the default Linux kernel Discretionary Access Controls (DAC), EnGarde employs and makes very heavy use of SELinux Mandatory Access Controls (MAC).
Consistent Security Updates through the GDSN
EnGarde users receive updates and security patches through Guardian Digital WebTool directly from the Guardian Digital Secure Network.
Host and network firewalls are easily configured through WebTool.
Commercial-Grade Host and Network Intrusion Detection
EnGarde supports both the AIDE host intrusion detection system, which notifies you when critical system files on your machine are modified, and the Snort network intrusion detection system which allows you to monitor and mitigate network attacks in real-time.
Downloadable LiveCD version
For those who would like to try EnGarde without installing to a hard drive, EnGarde allows its installation CD to run as a complete, bootable EnGarde Secure Linux server.