Astaro Security Linux
May 01, 2003
$1,495 (100 IPs or nodes)
- Ease of Use:
- Value for Money:
- Overall Rating:
An astonishingly rich set of security features.
For the price - nothing.
A firewall, content filter and VPN all in one, Astaro Security Linux is an absolute gem.
We looked at version 3.0 of this product in the virtual private network Group Test last year, and it is good to see it being evaluated as a firewall this time around. Astaro might not be a familiar name to most people, but it deserves to be if it continues to produce products such as this.
The application runs on a standalone, hardened version of Linux, making it suitable for most platforms. It is a stateful inspection firewall, but its true strength comes from the sheer number of security features that come as standard - far more than you would expect for a product that is so inexpensive. Indeed, the home version - which is a slightly cut-down application - is actually free.
It offers a wide range of application proxies, such as HTTP, HTTPS, SMTP and POP3, as well as network address translation (NAT), but these are to be expected. What is not to be expected are features such as load-balancing, which is usually the province of much more expensive applications.
Although suited more for the SME market - and does not therefore provide the heavy duty load-balancing provided by StoneGate, for example - it is perfectly sufficient for a medium-sized network.
It works by spreading traffic across multiple web servers in a 'round robin' approach. There is also a degree of traffic shaping, whereby you can prioritize traffic depending on the protocol, service or network sending or receiving. The hierarchical token bucket facility - part of later Linux distributions - allows a degree of QoS management as well.
The application is also a fully-featured VPN, providing a number of authentication protocols such as RADIUS and LDAP, as well as 128-bit encryption. It also provides content filtering. You can filter out ActiveX components, spam, and, optionally, take advantage of Astaro's daily-updated white/black list facility for URLs. There is also the option of the Kaspersky virus scanner.
Installation is easy, and management can be performed remotely through an encrypted WebAdmin console. And if you need it, the user's guide is extremely simple to understand, from the basics right up to the more complex configurations that the product supports. There is also some superb graphical reporting available for both hardware and network performance.
Once again, words almost fail us where this product is concerned. With more features than you can shake a stick at, at a price point that is almost ridiculously low - this is a real winner.
SC Webcasts UK
Information Security Manager
Infosec People - Hammersmith, West London
Junior Penetration Tester, Hertfordshire, to £35k + benefits
Infosec People - England, Hertfordshire
Cyber Security Architect
CYBER EXECS - London (Greater)
SOC Analyst, Aldershot, £47-56k + package
Infosec People - Hampshire, England, Aldershot
Senior Security Engineer
Loveworklife Recruitment - United Kingdom
Sign up to our newsletters
SC Magazine UK Articles
- Tesco Bank allegedly ignored warnings of hack from Visa
- Investigatory Powers and Digital Economy Bills could threaten economy
- Updated: A million German routers knocked offline by failed Mirai botnet attack
- Microsoft update left Azure Linux virtual machines open to hacking
- Gooligan ad fraud malware infects 1.3M Android users, installs over 2M unwanted apps
- SC Awards Europe 2016 winners announcements!
- ISIS radicalises 'lone wolves' through strong social media presence
- Updated: How will Brexit affect the cyber-security industry in UK and Europe?
- ICYMI: CEO Sacked; MS Zero-day; Passwords dropped; Ransomware wild, charging hack
- 9.2 million medical records for sale on darkweb
- ICYMI: Tesco warned; IP Bill threatens economy; German routers offline; Azure trojan; Gooligan fraud
- Data centres are on the move - where will they end up?
- 90% of ITDMs believe IAM is crucial to digital transformation success
- Research: Hacked companies could see customer exodus if breached
- Misconfigured drive exposes locations of explosives used by oil industry