Network Protection

Firewall.  VPN.  Intrusion Prevention

To defend networks, organisations often use point products such as IPS systems, VPN routers, and firewalls.  This requires not only maintaining multiple products, but also continuously assuring that these products are integrated to fully protect your network.

The Astaro Security Gateway eliminates these issues, providing a single, easy-to-manage, unified network protection solution:

• Control network access. Use the latest stateful deep inspection firewall techniques to control which users can access what information at what time.  
• Stop intruders. Apply state-of-the art Intrusion Prevention technologies for in-depth filtering against more than 6,000 attacks and zero day attacks.  
• Secure remote access. Use SSL, IPSec or PPTP protocols to create secure Virtual Private Networks, connecting branch offices and granting remote access to workers.  
• Optimise performance. Leverage our patent-pending Content Inspection Framework to scan traffic with little or no latency and reserve bandwidth for time-sensitive applications such as VoIP.  

Easy Configuration

Astaro Security Gateways seamlessly integrate all Astaro solutions with an award-winning browser-based user interface.

	Simple Policy Definition: Apply packet filter, IPS, and encryption settings to elements such as IP addresses, networks, users, or user groups.
	Real-time Dashboards: View your network security status live from anywhere in the world with our continuously updating dashboards.

Astaro’s unified approach deploys more than three times faster than “best-of-breed” point product combinations, according to a Tolly Group study.

Flexible Deployment Options

The Astaro Security Gateway is compatible with any type of network and adjusts well to your small, mid-size or large organisation.

It is available as a hardware, software or virtual appliance.  Each version provides the same security functionality, so you can freely choose your preferred deployment option:

	Hardware appliances: Performance-optimised networking equipment that enables you to “plug and go”.
	Software appliance: Turns any PC into a security appliance within minutes, offering maximum deployment flexibility.
	Virtual appliance: Ready-to-go virtual machine for VMware environments, helping you consolidating your IT infrastructure.

Technical Specifications

• No user interface, policy, schedule, tunnel, or connection limits!  
• Stateful deep inspection packet filter firewall
• DoS, DDoS, Portscan, Worm, Botnet, and Flood protection
• Security proxies for HTTP, FTP, SMTP, POP3, DNS, SOCKS, SIP
• VPN & Remote Access with SSL, IPSec, L2TP over IPSec, and PPTP
• Support for an integrated as well as external Certificate Authorities
• 6,000+ IPS rules, anomaly detection, real-time signature updates
• In- and outbound traffic shaping (Guarantee, Maximum, Priority)
• Server load balancing
• Ethernet, DSL, Cable, 802.1q VLAN, PPP interface support
• Routing modes: Static, Policy, OSPF, NAT, PAT, Bridging
• Stateful VoIP support: H.323, SIP
• Multiple Internet uplink support
• 802.3ad Link Aggregation

Next Page - Web Filtering