AntiMalware•September 11, 2026•🇷🇺Translated from Russian

Ideco NGFW Novum Earns Highest Customer Rating in Quadrant Technologies Import Substitution Study

Ideco NGFW Novum received the highest customer evaluation in the Matrix of Import Substitution 2026: NGFW study conducted by Quadrant Technologies, scoring 6.9 out of 10 against a market average of 6.3 and outperforming all seven other participants.

The research marks a shift in how Russian next-generation firewalls are assessed, moving beyond formal compliance with import substitution requirements toward real-world performance in production networks. Evaluations incorporated vendor specialized revenue and scores across 18 criteria focused on quality and functionality, with input from specialists who independently implement and operate the solutions.

Ideco achieved scores above seven points in 11 parameters. Customers rated administration convenience highest at 7.9, followed by technical support and partner network at 7.6, Zero Trust segmentation at 7.3, and integration capabilities together with core NGFW functionality at 7.2 each.

Despite these results, the product remains in the Development quadrant rather than Leadership, primarily due to the volume of specialized revenue rather than any deficiency in the solution itself. Analysts view Ideco as one of the strongest candidates for transition into the Leadership group as sales grow and the number of large deployments increases.

The findings align with independent testing performed by the Infosystems Jet laboratory. Ideco NGFW Novum passed 189 of 242 checks according to Methodology 3.0 and was the only participant to withstand an eight-hour stress test.

The Russian NGFW market is exiting the emergency import substitution phase. Customers now prioritize stability under load, update quality, documentation, support, and operational convenience over the mere presence of Russian software. Product cost remains a significant barrier, cited as the reason for rejection by 37.5 percent of surveyed organizations.

Related articles

Habr•Policy & Regulation

OBEP Raids on Russian IT Firms: How to Safeguard Source Code, Servers and Blockchain Assets During Searches

Russian IT companies, Web3 projects and fintech services now face frequent visits from OBEP operatives conducting pre-investigative checks or searches under criminal cases. The article details the legal distinction between operational-search measures and formal searches, emphasizing article 164.1 of the UPK RF that prohibits seizure of physical servers in economic crime investigations. It explains how companies can demand data mirroring instead of hardware removal and how to invoke article 51 of the RF Constitution when pressured for encryption keys. Commercial secret regimes are presented as a tool to raise criminal liability for leaks and to request closed court proceedings. Practical checklists cover document verification, staff instructions, password retention and immediate calls to specialized criminal counsel. The guidance aims to prevent business paralysis while preserving evidence integrity during raids.

Habr•Policy & Regulation

RWB Deploys Enterprise-Wide Database Access Control with Trino and Open Policy Agent

RWB has replaced fragmented manual database access processes with a centralized architecture built on Trino as the single entry point and Open Policy Agent for policy enforcement. The system enforces least-privilege access, mandatory auditing, and automated revocation tied to HR records while eliminating anonymous and password-based logins. Access requests now complete in 3–10 minutes instead of an average of four days, with 92 percent handled automatically. Key components include Keycloak for OIDC authentication, Vault for secrets, Kafka for security event streaming to SOC, and Kubernetes orchestration. Responsibility is split across AI & Data Security, Core DevOps, Access Management, SOC, and Trust & Safety teams. More than 1,250 PostgreSQL clusters and 90 projects are now connected, with real-time dashboards tracking adoption and policy health.

AntiMalware•Policy & Regulation

Russia Moves to Allow Biometric Data Processing for Suspects and Convicts Without Consent

Russian law enforcement agencies may soon gain the legal right to process biometric data of suspects, accused individuals, and convicted persons without requiring their personal consent. A corresponding draft bill has already been submitted to the government and is scheduled for review at the next cabinet meeting, according to TASS. The measure covers fingerprints, facial images, voice recordings, and other physiological or behavioral characteristics used for identification. If approved, prior permission from the individual will no longer be needed when biometrics are used in criminal proceedings. The change applies not only to those already convicted but also to suspects and accused persons whose guilt has not yet been established by a court. For ordinary citizens, enrollment in the Unified Biometric System remains voluntary and is used for remote identity verification when accessing financial and government services.

AntiMalware•Policy & Regulation

FAS Clears Russian Operators on 'Unlimited' Internet Claims Despite Speed Throttling to 128 Kbit/s

The Federal Antimonopoly Service has declined to investigate complaints regarding promises of unlimited internet and unrestricted roaming access made by major Russian mobile operators. The Association of Professional Users of Social Networks and Messengers argued that operators including Vimpelcom, MegaFon, MTS, and T2 Mobile mislead customers by advertising unlimited plans while throttling speeds to 128-512 Kbit/s after data caps are reached. FAS determined that information on official company websites does not qualify as advertising under Russian law. Operators maintain that the term unlimited remains accurate because no total data volume limit exists, only speed reductions detailed in service descriptions. The complainants and legal experts contend that FAS reviewed only technical parameter pages and ignored banners, promotional news, search ads, SMS, and push notifications that may meet legal criteria for advertising. The decision leaves consumers facing slow connections unsuitable for video or file downloads after initial allowances are exhausted.