March 21, 2013
- Ease of Use:
- Value for Money:
- Overall Rating:
- Strengths: Inexpensive, good documentation
- Weaknesses: Very basic user interface; careful documentation review is a must; per user licensing fee for content filter; and relies on open source components
- Verdict: The product’s low up-front cost makes it a good choice for knowledgeable administrators in small, budget-conscious environments
Administrators of smaller environments on a fixed budget could do very well by the aXsGuard Gatekeeper by Vasco. While a little more complicated to use than some of the more expensive products, a little attention to detail and the device performs well.
As usual, our setup process began by setting a workstation IP address to match the product's default network. We logged in to the web interface and were immediately presented with a user-creation wizard, which we used to create an administrator account. Upon completion of that wizard, we were automatically logged in with our new credentials. A menu was displayed with a series of separate wizards, which guided us through configuring the device host name and location data, SMTP relay and administrator email accounts, time server and interface settings. Once complete, a device reboot finished the initial configuration.
While aXsGuard Gatekeeper offers all of the features we expect out of a basic UTM, configuration of those features is not always completely straightforward. Administrators will want to keep the documentation close by. Once configured, the device performed very well. The firewall appears to use your standard IP tables. However, rules are automatically put in place allowing Vasco full access to the device. While ostensibly for support purposes, security-minded administrators will want to disable those rules straight away.
The product uses Snort as the intrusion prevention system, which is great, but administrators are expected to acquire their own registration code for signature updates. The content filter works well, but it is the only component of the device licenced on a per-user basis, so keep that in mind when comparing prices.
Anti-virus protection is provided with ClamAV, another open source component. VPN services are provided via picture transfer protocol (PTP), IPsec and OpenVPN protocols, and support is also included for Vasco's aXsGuard product, as well as a basic SSL web portal. AD/LDAP integration is included. However, single sign-on features require an agent to be installed on each client workstation. One thing we really did like was the device's multi-factor authentication features, with support for Vasco's Digipass tokens and eID smartcards included.
Documentation was actually very good and all easily accessible from the product's interface, under the documentation menu item. Well-constructed and easily navigable PDFs are available for general device setup, as well as more focused documents covering each of the product's features.
Vasco offers a number of different support options. The standard package provides eight-hours-a-day/five-days-a-week phone and email support, which is upgradeable to a 24/7 support package. A VIP package is also available, which is completely customisable according to the customer's needs. Additionally, per incident and emergency support services are offered, as well as a customer help area hosted on Vasco's website, which offers a knowledgebase and product tutorials.
Vasco's aXsGuard Gatekeeper is priced at c£510 for the hardware unit, and includes the first year of support. The content filter is an optional extra and is licenced at approximately c£16 per user per year.
SC Webcasts UK
Information Security Manager
Infosec People - Hammersmith, West London
Security Architect, Cardiff - to £70k Basic
Infosec People - Cardiff, Wales
Interim CISO (Chief Information Security Officer) - Cyber Security Director
CYBER EXECS - London (Central), London (Greater)
Junior Penetration Tester, Hertfordshire, to £35k + benefits
Infosec People - England, Hertfordshire
Cyber Security Architect
CYBER EXECS - London (Greater)
Sign up to our newsletters
SC Magazine UK Articles
- Tesco Bank allegedly ignored warnings of hack from Visa
- Investigatory Powers and Digital Economy Bills could threaten economy
- Updated: A million German routers knocked offline by failed Mirai botnet attack
- Gooligan ad fraud malware infects 1.3M Android users, installs over 2M unwanted apps
- Microsoft update left Azure Linux virtual machines open to hacking
- SC Awards Europe 2016 winners announcements!
- ISIS radicalises 'lone wolves' through strong social media presence
- Updated: How will Brexit affect the cyber-security industry in UK and Europe?
- 9.2 million medical records for sale on darkweb
- Microsoft Office 365 hit with massive Cerber ransomware attack, report