American and Israeli-made next-generation firewalls reach Russia via middlemen across Asia in violation of U.S. embargo

RU

In 2024, network security devices from the Israeli company Check Point Software Technologies worth over $3 million were imported into Russia, along with approximately $1 million worth of products from its California-based competitor Fortinet. Both firms manufacture their equipment in Taiwan but officially import them into Russia via a wide range of countries — from Sri Lanka to Malaysia — The Insider discovered via an analysis of customs databases.

Among the imported devices were firewalls designed to protect corporate networks from external threats such as viruses, spam, phishing, and malware. However, some of these firewalls — particularly those from Fortinet — also enable URL filtering and deep packet inspection (DPI). Devices with DPI capabilities, whether activated or not, are subject to U.S. export restrictions, barring their import if facilitated by American entities or if the technology is partially owned by a U.S. corporation.

Independent cybersecurity expert Philip Kulin explained to The Insider that these devices primarily serve corporate security functions:

“These devices are essential for ensuring that office employees do not access restricted sites and for limiting the use of messengers and VPNs for information transfer. They also help detect suspicious activity and restrict tools that could be exploited by fraudsters. In the event of an incident, these systems allow for identifying the responsible party. This setup is similar to technical countermeasure systems that enforce access restrictions and monitor internet use.

Although such technologies can be used for general internet censorship, they are more likely intended to strengthen control within enterprises such as Uralvagonzavod. This reduces risks related to industrial espionage and sabotage by hostile nations, enhancing the security of Russia’s military-industrial complex.”

Among the Russian buyers of Check Point equipment are Retecomputers LLC (ООО «Ретекомпьютерс») — a company identified in one of The Insider’s investigations as a key supplier of internet filtering and blocking technologies; Compliga LLC (ООО «Комплига»), also identified by The Insider as a major importer of data center equipment; and Digital Horizon LLC (ООО «Цифровой Горизонт»), a lesser-known firm. The suppliers are primarily obscure companies based in Southeast Asia — including GG Getway Ltd, Pixel Devices, Great Titan Properties, Shining Dragon, N.I.T Group, Switech Development, and Link Create Import and Export Limited.

Check Point denied involvement in any sales to Russia, responding to The Insider:

“Since 2022, Check Point has introduced a set of strict measures that help us follow compliance requirements in the context of US sanctions, and ensure we do not sell to any government entities in Russia in specific. We are vigorously following these guidance. According to our records, Check Point has no contractual relationships with the companies mentioned, and our records show that they are neither a Check Point customer nor an authorized partner. Also, Retecomputer does not appear in our records, meaning we do not engage with them in any sort of way. Check Point was never involved in the DPI project described, either directly or indirectly. Furthermore, we do not supply solutions capable of providing the deep packet inspection on the level described. As a publicly traded company, Check Point does not disclose sales or product numbers related to specific countries.”

The primary importer of Fortinet equipment into Russia is the system integrator F5, while the main exporter is China-based Karon Co., Ltd.

The Insider reached out to Fortinet for comment. The company referred us to a March 7, 2022, press release stating that it had ceased all business operations in Russia and that it condemned Russian cyberattacks.

Yet Israeli and American network firewalls continue to be imported into Russia from Taiwan, despite U.S. trade restrictions. While officially intended for cybersecurity — including protection against viruses and phishing — these devices contain technology that could facilitate internet censorship and content blocking.

Among the buyers is a company previously linked to Roskomnadzor’s internet traffic filtering efforts — as previously reported in another investigation by The Insider.