Astaro Security Gateway 220
October 07, 2005
$2,550 plus maintenance fees
- Ease of Use:
- Value for Money:
- Overall Rating:
- Strengths: Excellent reporting, functionality and ease of use.
- Weaknesses: It would be even better if the options were already included.
- Verdict: One to consider very strongly.
A 1U rackmountable device with a 40GB hard drive and 512MB of memory, it also has eight Ethernet ports on the front and runs a security-hardened version of Linux.
It features a stateful inspection firewall, proxy server, VPN and intrusion protection. There are also options to add Kaspersky antivirus, anti-spam, anti-spyware and content filtering. There is also high availability.
Setting up the device was easy, just plug in and go. This vendor seems to have really put the effort into making the administration interface as easy to use as possible and great to navigate. Once passwords are set, (it allowed us to specify “password” as a password) we dived straight in.
Setting up the firewall was easy, the console allows any number of rules to be devised and they can be as simple or as complicated as you like. There does not appear to be any default rules set up, so this has to be done manually.
The vendor claims firewall throughput as 280Mbps and VPN throughput as 150Mbps, our testing did not seem to tax the device much despite our best efforts. It contains many proxy servers, including HTTP cache proxy and a SOCKS proxy.
It has no artificial restrictions on the number of VPN connections allowed or the number of policies. The VPN allows for configuration and full control over policies, keys, and certificate management. It even supports L2TP over IPsec.
It also allows authentication to a number of different systems such as Radius, SAM (Windows NT), Active Directory, LDAP, or Novell eDirectory (NDS8). This indicates a well-rounded approach to different environments, so much so, we can’t think of a network this could not be deployed in.
Particularly outstanding were the device’s reporting and logging capabilities. It allows sorting, querying, searching and live views of the logs. There are many reports that it can generate, as well as an impressive overview of the most important statistics.
Overall, this is one of the best SME multi-function appliances we have seen for its build quality, ease of use, security and performance.
SC Webcasts UK
Information Security Manager
Infosec People - Hammersmith, West London
Junior Penetration Tester, Hertfordshire, to £35k + benefits
Infosec People - England, Hertfordshire
Cyber Security Architect
CYBER EXECS - London (Greater)
SOC Analyst, Aldershot, £47-56k + package
Infosec People - Hampshire, England, Aldershot
Senior Security Engineer
Loveworklife Recruitment - United Kingdom
Sign up to our newsletters
SC Magazine UK Articles
- Tesco Bank allegedly ignored warnings of hack from Visa
- Investigatory Powers and Digital Economy Bills could threaten economy
- Updated: A million German routers knocked offline by failed Mirai botnet attack
- Microsoft update left Azure Linux virtual machines open to hacking
- Gooligan ad fraud malware infects 1.3M Android users, installs over 2M unwanted apps
- SC Awards Europe 2016 winners announcements!
- ISIS radicalises 'lone wolves' through strong social media presence
- Updated: How will Brexit affect the cyber-security industry in UK and Europe?
- ICYMI: CEO Sacked; MS Zero-day; Passwords dropped; Ransomware wild, charging hack
- 9.2 million medical records for sale on darkweb
- ICYMI: Tesco warned; IP Bill threatens economy; German routers offline; Azure trojan; Gooligan fraud
- Data centres are on the move - where will they end up?
- 90% of ITDMs believe IAM is crucial to digital transformation success
- Research: Hacked companies could see customer exodus if breached
- Misconfigured drive exposes locations of explosives used by oil industry