Cornerstone Networking & Security is an authorized Astaro Reseller.
We provide design, implementation, and deployment serv...
 Astaro Overview
     Astaro Products
            -   Astaro Security Gateway
            -   Astaro Web Gateway
       ...
IT-Security Challenges of Today


                                              Costs   Time to manage

                  ...
Integration is Key
                                               Clustering
                                             ...
The Astaro All-In-One Approach

                            Flexible Deployment




                                      ...
Astaro Company Profile



 Founded 2000
 170 employees
 Headquarters in:
         -   Karlsruhe (Germany)
         -   ...
Our Business


                Astaro is a leading supplier of All-In-One Internet Security
                           App...
Successful Customers




© Astaro 2009          Astaro Overview – Page 9
Awards


Technology Innovation of    2008 Editor’s Best Award
the Year Award 2008         „competitive advantages,
„superi...
Certifications


          ICSA Labs Firewall Certification
          security industry's central authority for research,
...
Astaro All-In-One-Appliances

                            Astaro Security Gateway




   Mail Security            Network ...
Unified Management made easy




                     10-Minute-Setup



© Astaro 2009                          Astaro Ove...
Deployment Models



                        Hardware    Software          Virtual
                        Appliance   App...
Astaro Management & VPN Products


Astaro Command Center
Provides Centralized management and real-time
monitoring for mult...
The Astaro Difference

 Only Astaro appliances are            Nobody's more flexible
  available in three different type...
Business Benefits with Astaro

 Comprehensive Protection
         -   Integrated appliances for email, web and network se...
Astaro Products
Astaro Security Gateway
                 Unified Threat Management Appliances




         All you need for comprehensive ...
Astaro Security Gateway
Layered Security
                                Astaro Security Gateway


                       ...
Astaro Security Gateway
Deployment scenarios




© Astaro 2009             Astaro Overview – Page 21
Astaro Security Gateway
Products
Hardware Appliances
                   ASG 110/120   ASG 220    ASG 320    ASG 425      A...
Astaro Security Gateway
Key Differentiators




                 IPsec, SSL, PPTP and L2TP VPN support on all appliances
...
Astaro Security Gateway
Key Differentiators




                   7th Generation AJAX-featured GUI in 6 local languages
...
Astaro Security Gateway
                 Unified Threat Management Appliances




         All you need for comprehensive ...
Astaro Command Center




          Centralized Management for Astaro All-In-One Gateways


© Astaro 2009                 ...
Astaro Managed Security
Centralized Management for all Astaro Gateways


                                   Astaro Command...
Astaro Command Center
Feature Overview




© Astaro 2009           Astaro Overview – Page 28
Astaro Command Center
Multi Client Deployment



                                                       Customer 1
       ...
Astaro Command Center
Easy to use




 WebAdmin
 ACC System Management




                         Gateway Manager
      ...
Astaro Command Center
Products

Hardware Appliances

                        ACC 1000   ACC 2000   ACC 3000        ACC 400...
Astaro Command Center
Benefits



 Save administrative time and money when managing multiple
  globally distributed secur...
Astaro Report Manager
                Centralized Logging & Reporting




© Astaro 2009                                   ...
Astaro Report Manager
Feature Overview




© Astaro 2009           Astaro Overview – Page 35
Astaro Report Manager
Deployment




Stand alone                              Distributed
 Single Astaro Report Manager  ...
Astaro Report Manager
Easy to use




 Dashboard for quick overview about network activity
 800+ pre-defined reports bas...
Astaro Report Manager
Products



Software Application
Runs on Intel-compatible PCs and servers

Requires Windows Platform...
Astaro Report Manager
Benefits



 Protect information assets
 Reduce the time to respond to threats
 Save administrati...
Astaro Gateway Products
    Software Features
Astaro Security Applications
                 Enterprise-class security technology
                   for Astaro All-In-On...
Astaro Network Security




© Astaro 2009             Astaro Overview – Page 42
Astaro Network Security
Firewall

 Stateful Packet Inspection
 All Packets are inspected twice:
         -   When enteri...
Astaro Network Security
Application Proxies

 Security proxies to simplify management
         -   HTTP/S, FTP, FTP-over-...
Astaro Network Security
Virtual Private Network (VPN) Gateway


 Site-to-Site VPN for secure communication between two of...
Astaro Network Security
Intrusion Prevention


 Identifies and blocks application- and protocol- related probes
  and att...
Astaro Mail Security




© Astaro 2009          Astaro Overview – Page 47
Astaro Mail Security
Email Antivirus

 Dual virus scanners with multiple detection methods
       -   Virus signatures, h...
Astaro Mail Security
Antispam

 Identifies and disposes unsolicited SMTP and POP3 emails
 Highest detection rate through...
Astaro Mail Security
Antiphishing

 “Phishing” –
         -   Criminals imitate emails from banks, credit card companies,...
Astaro Mail Security
Email Encryption

 En-/Decryption and Digital Signatures for SMTP Emails
         -   supports OpenP...
Astaro Web Security




© Astaro 2009         Astaro Overview – Page 52
Astaro Web Security
Spyware Protection

 Blocks (unintentional) downloads of spyware, adware, and
  other malicious softw...
Astaro Web Security
Web Antivirus/Malware

 Block viruses, worms, trojans, and other “malware” before they
  reach deskto...
Astaro Web Security
URL Filtering

  Controls employees web usage
          -     Increases productivity
          -     ...
Astaro Web Security
IM & P2P Control


 Manage the use of Instant Messaging Clients and Skype
         -   AOL IM, ICQ, M...
Astaro Networking Features
                     Enterprise-class Networking Technology
                         for Astaro...
Astaro Active-Passive HA (Standby)




                                 deactivated
                                 Maste...
Astaro Active-Active HA (Cluster)

                                        High Availability
                             ...
Astaro Auto-Configuration HA

 All units are set to “automatic
  configuration“ mode, as per default
 By connecting two ...
WAN Link Balancing
Example Scenario 1

 Dual lines, a Cable and a DSL.
 Goals:
               All traffic from and to Mai...
WAN Link Balancing
Example Scenario 2

 Four Lines, 2 Cable and 2 DSL
 Goal:
        Balance all user activity automatical...
Server Load Balancing

     Dynamic load balancing of incoming traffic to group of similar servers
     Dead Peer Detect...
Astaro
    All-in-One Internet Security
         For additional information:
   Cornerstone Networking & Security Web Site...
Cornerstone Networking & Security- Astaro Product Line
Upcoming SlideShare
Loading in …5
×

Cornerstone Networking & Security- Astaro Product Line

1,849
-1

Published on

Overview of Astaro products sold by Cornerstone Networking & Security, LLC.

Published in: Technology
1 Comment
0 Likes
Statistics
Notes
  • Fall Promotions from Astaro include:
    (Valid until December 29th 2009)

    * Renew for 3 years get 1 free - Customers due for renewal Q4 and Q1 who renew for three years will receive a fourth free.


    * High Availability/ Cluster - 50% off subscription and maintenance on new high availability unit. (does not apply to 110/120)


    * Competitive upgrade -Customers who replace a competing product with an Astaro Security Gateway can choose from one of the following discount options:
    o 20% off appliances,subscriptions, and maintenance
    o Astaro Security Gateway 525 appliance (rev.2) at no charge when purchasing a three year subscription and maintenance at the same price level as the Astaro Security Gateway 320.
       Reply 
    Are you sure you want to  Yes  No
    Your message goes here
  • Be the first to like this

No Downloads
Views
Total Views
1,849
On Slideshare
0
From Embeds
0
Number of Embeds
1
Actions
Shares
0
Downloads
0
Comments
1
Likes
0
Embeds 0
No embeds

No notes for slide
  • There are 3 deployment options for all of Astaro’s appliancesSoftware applianceSince the operating system and all featured applications are bundled within a single ISO image, Astaro software appliances are much easier and faster to install than software applications that require a separate, pre-installed operating system.By supporting a broad range of Intel-compatible server systems, software appliances allow for maximum deployment flexibility on your hardware of choice.The Astaro software appliances are available on CD with a printed manual or can be downloaded directly from Astaro servers and independently burned onto a CD. There is no need for client based software installation. Specific licensing packages are available, varying by the number of users/IP addresses.Hardware applianceAstaro hardware appliances are based on high quality Intel-compatible server systems with each model offering an identical feature set. Small businesses do not have to surrender important security features due to scaled-down hardware performance. All models offer an integrated hard disk drive in order to locally store quarantined emails and log data, avoiding the need for additional servers.Astaro hardware appliances can be easily deployed at the perimeter of your network to protect all email, web and network user traffic. Since all hardware appliances feature a pre-installed operating system and software, the initial setup will be fast and without complication. There is no further need for client based software installation.With a complete range of models available, Astaro hardware appliances effectively protect networks from 10 to more than 2000 users.Virtual applianceAstaro virtual appliances allow for easy deployment in virtualized environments. Optimized hardware allocation and reduced hardware expenditure is available since physical computers are able to run multiple virtual servers/appliances in parallel by using the underlying virtualization infrastructure. As a result, it is ideally suited for both managed security services as well as companies of all sizes consolidating physical servers onto fewer virtual systems.The Astaro virtual appliances can be downloaded from Astaro servers and burned independently onto a CD. It can then be installed on any Vmware system running either a VMware server or VMware ESX server. Specific licensing packages are available, varying by the number of users/IP addresses.Astaro is one of the few security vendors offering a virtual appliance and we have been partners with VMware for over 5 years.
  • Cornerstone Networking & Security- Astaro Product Line

    1. 1. Cornerstone Networking & Security is an authorized Astaro Reseller. We provide design, implementation, and deployment services. Please contact us for more information or a quote on the products in this presentation. Thanks, The Cornerstone Team http://www.cornerstonens.com
    2. 2.  Astaro Overview  Astaro Products - Astaro Security Gateway - Astaro Web Gateway - Astaro Mail Gateway - Astaro Command Center - Astaro Report Manager  Astaro Gateway Software Applications - Network Security - Web Security - Mail Security - Networking Functions © Astaro 2009 Astaro Overview – Page 3
    3. 3. IT-Security Challenges of Today Costs Time to manage Router Firewall IPS SSL VPN Gateway E-Mail/Spam Filter GW Antivirus-Filter Web-Filter WAN Link Balancer Load Balancer Total: © Astaro 2009 © Astaro 2009 Astaro Overview – Page 4
    4. 4. Integration is Key Clustering SSL VPN IM/P2P control Email Encryption Astaro Single Sign On Dual AV Market Central Mgmnt.. Central Mgmnt. VoIP VoIP Antiphishing Antiphishing Antispyware Antispyware Antispam Antispam Antispam URL Filter URL Filter URL Filter URL Filter IDS/IPS IDS/IPS IDS/IPS Anti Virus Anti Virus Anti Virus Anti Virus VPN VPN VPN VPN Firewall Firewall Firewall Firewall 2000 2003 2005 2008 FW/VPN UTM UTM+ XTM © Astaro 2009 Astaro Overview – Page 5
    5. 5. The Astaro All-In-One Approach Flexible Deployment Browser-based Integration of Unified Management of Complete Email, Web All Applications & Network protection All-In-One Appliance Automatic Networking-Features Firmware & Pattern for High Avaliability Updates Centralized and Load Balancing Management & Reporting © Astaro 2009 Astaro Overview – Page 6
    6. 6. Astaro Company Profile  Founded 2000  170 employees  Headquarters in: - Karlsruhe (Germany) - Boston (USA)  Worldwide Offices  > 2500 partners & resellers worldwide  24/7 Service  Astaro protects more than 100.000 networks for 47.000 customers in over 60 countries © Astaro 2009 Astaro Overview – Page 7
    7. 7. Our Business Astaro is a leading supplier of All-In-One Internet Security Appliances for small to medium sized companies and organizations requiring integrated products for Email, Web and Network Security that are cost efficient and easy-to-use. In contrast to suppliers of single- or other multi-function products for internet security Only Astaro offers easy-to-use All-In-One security gateways with complete enterprise-class functionality specifically designed for SMEs © Astaro 2009 Astaro Overview – Page 8
    8. 8. Successful Customers © Astaro 2009 Astaro Overview – Page 9
    9. 9. Awards Technology Innovation of 2008 Editor’s Best Award the Year Award 2008 „competitive advantages, „superior performance” value to the customer“ (Frost & Sullivan) (Windows IT Pro) Top 100 Innovator 2008 3x Best of the Year Award „exceeding creative and 2x Editor‘s Choice innovative research and „To call Astaro„s Appliance development” just a UTM would be a major (Compamedia) understatement.“ (SC Magazine) PC Praxis Testsieger „technically outstanding“ (PC Praxis) 2x Product of the Year „Among the array of contenders, one product managed to stand out.” CRN Magazine © Astaro 2009 Astaro Overview – Page 10
    10. 10. Certifications ICSA Labs Firewall Certification security industry's central authority for research, intelligence, and certification testing of products (ICSA Labs) Common Criteria First UTM appliance to receive the Common Criteria certification from the German Federal Office for Information Security (Bundesamt für Sicherheit in der Informationstechnik) TOLLY Up-to-Spec Certified independent test lab (Tolly Enterprises, LLC) © Astaro 2009 Astaro Overview – Page 11
    11. 11. Astaro All-In-One-Appliances Astaro Security Gateway Mail Security Network Security Web Security Anti Spam & Phishing Firewall URL Filter Dual Virus Protection VPN Antivirus & Antispyware Email Encryption Intrusion Prevention IM & P2P Control Astaro Mail Gateway Astaro Web Gateway © Astaro 2009 Astaro Overview – Page 12
    12. 12. Unified Management made easy 10-Minute-Setup © Astaro 2009 Astaro Overview – Page 13
    13. 13. Deployment Models Hardware Software Virtual Appliance Appliance Appliance Application Operating System Hardware First UTM Appliance that passed VMware validation program © Astaro 2009 Astaro Overview – Page 14
    14. 14. Astaro Management & VPN Products Astaro Command Center Provides Centralized management and real-time monitoring for multiple Astaro appliances Astaro Report Manager Collects, correlates and analyzes security data and provides a huge portfolio of graphical reports Astaro Secure Client Advanced IPsec VPN client with personal firewall and integrated dialer © Astaro 2009 Astaro Overview – Page 15
    15. 15. The Astaro Difference  Only Astaro appliances are  Nobody's more flexible available in three different types 1..10 One-Click Clustering  Nobody's faster  Proven technology Over 47,000 customers are already protecting more than 100,000 networks with an Astaro appliance 10-Minute-Setup © Astaro 2009 Astaro Overview – Page 16
    16. 16. Business Benefits with Astaro  Comprehensive Protection - Integrated appliances for email, web and network security - New layers of protection are added as quickly as new threats arrive - All applications compete with best point solutions available  Easy to manage - Single browser-based GUI for simple management of all applications - Real-time automatic update of firmware and attack patterns keep system always up-to-date - scales seamlessly from small offices to large headquarter installations  Cost efficient - Flexible deployment options - Minimal administration and operating costs © Astaro 2009 Astaro Overview – Page 17
    17. 17. Astaro Products
    18. 18. Astaro Security Gateway Unified Threat Management Appliances All you need for comprehensive Email, Web and Network security © Astaro 2009 Astaro Overview – Page 19
    19. 19. Astaro Security Gateway Layered Security Astaro Security Gateway Firewall and VPN Intrusion Prevention Content Filtering– Virus/Spam/URL/ Spyware/Phishing © Astaro 2009 Astaro Overview – Page 20
    20. 20. Astaro Security Gateway Deployment scenarios © Astaro 2009 Astaro Overview – Page 21
    21. 21. Astaro Security Gateway Products Hardware Appliances ASG 110/120 ASG 220 ASG 320 ASG 425 ASG 525 ASG 625 Small Medium Medium Large Large Large Environment networks networks networks networks networks networks 10/100 Mbps Network Ports 4 8 4 - - - Gigabit Network Ports - - 4 6 & 2 SFP 10 & 4 SFP 10 & 8 SFP Max. recommended FW Users 10/50 150 350 1000 2500 4000 Max. recommended UTM Users 10/25 70 200 600 1300 2000 Software Appliance* Runs on Intel-compatible PCs and servers Virtual Appliance* Runs in any VMware environment *Pricing based #IPs/Users © Astaro 2009 Astaro Overview – Page 22
    22. 22. Astaro Security Gateway Key Differentiators  IPsec, SSL, PPTP and L2TP VPN support on all appliances Net  One-Click Full IP SSL VPN with unlimited free clients  Deep Inspection Packet Filtering with >7,500 rules  Dual independent Antivirus Engines scan all SMTP & POP3-Mails Mail  Extensive set of enterprise-class spam detection capabilities  Clientless Email Encryption (TLS, S/MIME, OpenPGP)  Dual independent Antivirus Engines scan all HTTP/S and FTP data Web  Granular URL Access Control Policies supporting SSO  User-based IM/P2P control, including skype blocking © Astaro 2009 Astaro Overview – Page 23
    23. 23. Astaro Security Gateway Key Differentiators  7th Generation AJAX-featured GUI in 6 local languages  Automatic pattern and system software updates  Localized UserPortal in 15 languages GUI  One-Click-Clustering with integrated load balancing  Automatic Configuration Backup via email  Easy integration with Active Directory and Exchange © Astaro 2009 Astaro Overview – Page 24
    24. 24. Astaro Security Gateway Unified Threat Management Appliances All you need for comprehensive Email, Web and Network security © Astaro 2009 Astaro Overview – Page 25
    25. 25. Astaro Command Center Centralized Management for Astaro All-In-One Gateways © Astaro 2009 Astaro Overview – Page 26
    26. 26. Astaro Managed Security Centralized Management for all Astaro Gateways Astaro Command Center Astaro Security Gateway Astaro Mail Gateway Astaro Web Gateway © Astaro 2009 Astaro Overview – Page 27
    27. 27. Astaro Command Center Feature Overview © Astaro 2009 Astaro Overview – Page 28
    28. 28. Astaro Command Center Multi Client Deployment Customer 1 Browser- based Customer 1 Access Global distributed Astaro Gateways Customer 2 (Admin) Customer 2 Admin Up2Date Read only Customer 2 (Audit User) © Astaro 2009 Astaro Overview – Page 29
    29. 29. Astaro Command Center Easy to use WebAdmin ACC System Management Gateway Manager Device Management for individual customers © Astaro 2009 Astaro Overview – Page 30
    30. 30. Astaro Command Center Products Hardware Appliances ACC 1000 ACC 2000 ACC 3000 ACC 4000 Max. managed Gateways 20 50 100 200 Administrators 1 2 3 4 Clients 4 10 20 40 Software Appliance* Runs on Intel-compatible PCs and servers *Free of charge Virtual Appliance* (Unlike competitors who Runs in any VMware environment charge for management software) © Astaro 2009 Astaro Overview – Page 32
    31. 31. Astaro Command Center Benefits  Save administrative time and money when managing multiple globally distributed security devices  Easily define and deploy company wide security policies  Keep an overview about the overall security status of your network  Track critical device parameters in real-time  Simple Site-to-Site VPN Configuration © Astaro 2009 Astaro Overview – Page 33
    32. 32. Astaro Report Manager Centralized Logging & Reporting © Astaro 2009 Astaro Overview – Page 34
    33. 33. Astaro Report Manager Feature Overview © Astaro 2009 Astaro Overview – Page 35
    34. 34. Astaro Report Manager Deployment Stand alone Distributed  Single Astaro Report Manager  One centralized Astaro Report Manager  Integrated or separate Syslog server  Multiple regional Astaro Report Manager and/or Syslog server © Astaro 2009 Astaro Overview – Page 36
    35. 35. Astaro Report Manager Easy to use  Dashboard for quick overview about network activity  800+ pre-defined reports based on attacks, rules, protocol and web usage, spam, spyware, antivirus, compliance…  Alert Manager Warns whenever a specified event type or attack activity is detected © Astaro 2009 Astaro Overview – Page 37
    36. 36. Astaro Report Manager Products Software Application Runs on Intel-compatible PCs and servers Requires Windows Platform: - Windows 2000/XP/2003 - MS IE 6.0 or compatible with JAVA runtime - MS IIS or integrated Apache © Astaro 2009 Astaro Overview – Page 38
    37. 37. Astaro Report Manager Benefits  Protect information assets  Reduce the time to respond to threats  Save administrative time and money  Improve planning and management  Meet compliance requirements © Astaro 2009 Astaro Overview – Page 39
    38. 38. Astaro Gateway Products Software Features
    39. 39. Astaro Security Applications Enterprise-class security technology for Astaro All-In-One Appliances © Astaro 2009 Astaro Overview – Page 41
    40. 40. Astaro Network Security © Astaro 2009 Astaro Overview – Page 42
    41. 41. Astaro Network Security Firewall  Stateful Packet Inspection  All Packets are inspected twice: - When entering the gateway - When leaving the gateway  Flexible rules management - Can include hosts, networks, groups or vpn users - Automatic rule generation for application proxies and internal services - Time-based activation - Policy-based routing - Interface based rules  Network Address Translation - SNAT/DNAT - masquerading © Astaro 2009 Astaro Overview – Page 43
    42. 42. Astaro Network Security Application Proxies  Security proxies to simplify management - HTTP/S, FTP, FTP-over-HTTP, POP3, SMTP, DNS, Socks, Ident , NTP, generic  Application-Level Deep Packet Filtering - Scans packet payloads to enforce protocol-specific rules  Transparent mode eases administration © Astaro 2009 Astaro Overview – Page 44
    43. 43. Astaro Network Security Virtual Private Network (VPN) Gateway  Site-to-Site VPN for secure communication between two offices - Supports IPsec and SSL protocols - Star, hub-and-spoke and fully meshed configurations  Remote access for home and mobile users (road warriors) - Supports IPsec, SSL, L2TP, and PPTP VPNs • Astaro Secure Client (IPSec) with integrated desktop firewall • Astaro SSL Client : free download without user limitation - Also supports Cisco IPSec and Apple iPhone client  Supports all major encryption and many authentication methods - IPSec offers high interoperability with other devices - XAUTH allows for integration of One-Time-Passwort systems  Internal certificate authority - Full Public Key Infrastructure (PKI) support © Astaro 2009 Astaro Overview – Page 45
    44. 44. Astaro Network Security Intrusion Prevention  Identifies and blocks application- and protocol- related probes and attacks through deep packet inspection  Database of over 8,000 patterns and rules - Probing, port scans, interrogations, host sweeps - Attacks on application vulnerabilities - Protocol exploitations  Intrusion detection and prevention - Notify administrator, or block traffic immediately  Powerful management interface - One click to enable or disable complete rule sets e.g. for email- or webservers  DoS (Denial of Service Attack) and portscan protection © Astaro 2009 Astaro Overview – Page 46
    45. 45. Astaro Mail Security © Astaro 2009 Astaro Overview – Page 47
    46. 46. Astaro Mail Security Email Antivirus  Dual virus scanners with multiple detection methods - Virus signatures, heuristic analysis  Blocks viruses, worms, trojans, and other “malware” before they reach email servers or desktops  Scans SMTP and POP3 traffic  Database of more than 800,000 virus signatures - Frequent automatic updates  Flexible management - Can specify file formats and text strings to block - Emails and attachments can be dropped, rejected with message to sender, passed with a warning, or quarantined  MIME-Type filter  Extension Blocking © Astaro 2009 Astaro Overview – Page 48
    47. 47. Astaro Mail Security Antispam  Identifies and disposes unsolicited SMTP and POP3 emails  Highest detection rate through combination of multiple methods to identify spam - Reputation service with spam outbreak detection (format and language agnostic) using patented Recurrent-Pattern DetectionTM technology - Realtime Blackhole Lists (RBLs)* - Dialup network blocking* - Greylisting* - BATV (Bounce Address Tag Verification)* - SPF (Sender Policy Framework) record checking* - Expression filter - Recipient verification* - Reverse-DNS & HELO syntax checks…*  Flexible management - Emails and attachments can be rejected with message to sender, passed with a warning or quarantined *Can reject emails even before body is transferred © Astaro 2009 Astaro Overview – Page 49
    48. 48. Astaro Mail Security Antiphishing  “Phishing” – - Criminals imitate emails from banks, credit card companies, eBay and other sources to obtain confidential user information  Astaro identifies and blocks phishing emails through several techniques: - Virus scanner identifies phishing signatures - URL filtering database captures phishing servers in the “suspicious” category - Content downloaded from web sites will be blocked if it matches patterns of phishing content © Astaro 2009 Astaro Overview – Page 50
    49. 49. Astaro Mail Security Email Encryption  En-/Decryption and Digital Signatures for SMTP Emails - supports OpenPGP and S/MIME  Completely transparent - No additional Software on Client required  Easy Setup - Only three configuration steps to start  Central Management of all keys and certificates - No key or certificate distribution required  Allows Content/Virus scanning even for encrypted SMTP emails © Astaro 2009 Astaro Overview – Page 51
    50. 50. Astaro Web Security © Astaro 2009 Astaro Overview – Page 52
    51. 51. Astaro Web Security Spyware Protection  Blocks (unintentional) downloads of spyware, adware, and other malicious software  Prevents infected systems from sending information back to the spyware server  Checks against a database of known spyware URLs  Gateway spyware blocking complements desktop anti- spyware tools © Astaro 2009 Astaro Overview – Page 53
    52. 52. Astaro Web Security Web Antivirus/Malware  Block viruses, worms, trojans, and other “malware” before they reach desktops  Scans HTTP, HTTPS and FTP traffic - Web & ftp downloads - Web-based email (MSN Hotmail, Yahoo! Mail)  Dual virus scanners with multiple detection methods - Virus signatures, heuristic analysis  Database of more than 800,000 virus signatures - Frequent automatic updates  Flexible management - Can specify file formats (endings) and content (MIME) types to block © Astaro 2009 Astaro Overview – Page 54
    53. 53. Astaro Web Security URL Filtering  Controls employees web usage - Increases productivity - Allows enforcement of company wide web surfing policy to comply with internal or legal regulations  Administrators can allow or block web use based on 96 pre- defined categories of web sites - Nudity, gambling, criminal activities, shopping, drugs, job search, sports, entertainment, etc. - Additional categories can be created for individual customization  Filter might also consider global reputation  Whitelists and blacklists to tailor access for groups of users  Many user authentication options - IP Address, user- and group-based , Active Directory SSO, eDirectory SSO, LDAP, RADIUS/TACACS+ - Time based access © Astaro 2009 Astaro Overview – Page 55
    54. 54. Astaro Web Security IM & P2P Control  Manage the use of Instant Messaging Clients and Skype - AOL IM, ICQ, MSN Messenger, Yahoo! Messenger, IRC, Google Talk/Jabber, Tencent QQ, Skype  Manage the use of Peer-to-Peer applications - Applejuice, Ares, Bittorrent, Direct Connect, Edonkey, Gnutella, IMesh, MUTE, Manolito, Pando, Share, WinMX, Winny  Flexible control - Depending on application the administrator can decide to either allow or block it completely, block file transfers only or just log its usage - Specific users/IP addresses can be excluded from general rules - Specific hosts and networks can be excluded from IM/P2P control  Bandwidth control - Define max. allowed bandwidth per application © Astaro 2009 Astaro Overview – Page 56
    55. 55. Astaro Networking Features Enterprise-class Networking Technology for Astaro All-In-One Appliances Key capabilities for eXtensible Threat Management (XTM) © Astaro 2009 Astaro Overview – Page 57
    56. 56. Astaro Active-Passive HA (Standby) deactivated Master State & config synchronization Tunnel Internet Internal New Master Slave Synchronization of: - IPSec tunnels - FW connections - spooled & quarantined mails - logfiles - config settings Stateful Failover < 2sec © Astaro 2009 Astaro Overview – Page 58
    57. 57. Astaro Active-Active HA (Cluster) High Availability (Active/Active) Master (loadbalancing) Slave 1 Gigabit/sec VPN, IPS, AV, AS Cluster Nodes LAN Scalability Internet Full mesh Full mesh © Astaro 2009 Astaro Overview – Page 59
    58. 58. Astaro Auto-Configuration HA  All units are set to “automatic configuration“ mode, as per default  By connecting two units via their HA Master ports, they will auto-configure for active-passive HA mode HA port (eth3)  To setup active-active cluster mode, just change HA-mode at master to “cluster“ Slave - All units connected to the master HA-port will autojoin the cluster, as per default - No extra configuration on slave/cluster node required © Astaro 2009 Astaro Overview – Page 60
    59. 59. WAN Link Balancing Example Scenario 1 Dual lines, a Cable and a DSL. Goals:  All traffic from and to Mail/Webserver use the Cable.  User surfing and other traffic out the DSL © Astaro 2009 Astaro Overview – Page 61
    60. 60. WAN Link Balancing Example Scenario 2 Four Lines, 2 Cable and 2 DSL Goal: Balance all user activity automatically across multiple lines with failover, in order to save money using residential connections versus buying a more expensive, business-class circuit. © Astaro 2009 Astaro Overview – Page 62
    61. 61. Server Load Balancing  Dynamic load balancing of incoming traffic to group of similar servers  Dead Peer Detection via customizable health-checks © Astaro 2009 Astaro Overview – Page 63
    62. 62. Astaro All-in-One Internet Security For additional information: Cornerstone Networking & Security Web Site www.cornerstonens.com Astaro Software & Virtual Appliances Free Download www.astaro.com/download Astaro Feature Request Portal http://feature.astaro.com

    ×