|
Securing
the Internet
Astaro specializes in affordable
enterprise level security solutions for protection against hackers,
viruses and other risks associated with communicating accross the
Internet. Astaro Security Linux is a fully integrated software
solution that provides superior performance in an all-in-one Firewall.
Including a hardened operating system, stateful packet inspection,
Spam, Surf and Virus Protection, content filtering, application
proxies and IPSec based VPN, provides a powerful all-in-one solution
addressing today's security issues. Astaro Security Linux
is designed to maximize your networks security without compromising
its performance. It enables telecommuters, branch offices, customers
and suppliers to safely share critical business information.
| Affordability allowing
companies of all sizes the ability to implement a powerful and
scalable security solution. |
Manageability and ease-of-use
of all security components through Web-Admin™,
Astaro's intuitive administration tool.
|
Proven Technology and innovative
solutions, based on Open Source Software developed by leading
specialists and accepted worldwide as the most secure platform.
|
| Hassle free installation
with all components on one CD,
achieving simple implementation and integration into existing
network environments |
Unwavering
committment to customer service
|
|
| |
|
|
| How
Astaro Security Linux can benefit your organization
- E-mail virus protection, inbound
and outbound (POP3, SMTP)
- Astaro’s Up2Date service auto-matically
updates the system against the latest security risks
- Improved performance (up to 50%)
via built-in caching support to frequently accessed web
sites
- Hassle-free, secure user access
to the internet, via a robust stateful packet inspection
firewall
- Integrated traffic monitoring and
reporting tools
- IPSec/PPTP VPN access for remote
users, LAN to LAN or Client to LAN
- High Availability utilizing primary
and hot standby concepts for nonstop, 7x24 operations
- High level data encryption with AES
(Rijndael), 3DES, Blowfish or Twofish
- Load Balancing for achieving optimal
traffic distribution and loading of target resources
- Remote system management, monitoring
(via SNMP or Syslog) and alert notification
- PPPoA/PPPoE support for ease of use
and integration with DSL devices and networks
- Easy remote administration via WebAdmin
(SSL secured)
- URL Content Filtering preventing
access to undesired internet sites
- Application level security, using
DNS, HTTP, POP3, SMTP and SOCKS proxies
- Active user community at www.astaro.org
|
Firewall:
- Stateful Packet Inspection
- Firewall Security Proxies for HTTP, HTTPS,
SMTP, POP3, DNS, IDENT, SOCKS
- User Authentication (Local User Database
or remotely via Radius, Windows NT/2000/XP, Microsoft Active Directory,
LDAP, Novell Directory Services)
- User definable Service and Network Groups,
standard services are predefined
- DoS Protection (ICMP flood, TCP SYN flood,
UDP flood, Smurf, Trinoo, IP Spoofing)
- Portscan Detection
Security:
As a firewall, Astaro Security Linux protects
your network; the proxies filter your network traffic, and by using
the VPN functionality, your LAN can safely be extended to subsidiaries,
customers and home-offices. Astaro Security Linux is the tried and
tested technology of the firewall appliance astarof1, which is now
also available as a software solution: Astaro Security Linux is
delivered as a bootable CD-ROM.
IPSec
to VPN:
- Net-to-Net, Host-to-Net, Host-to-Host
- NAT Traversal, Virtual IP
- Authentication via passphrase (PSK),
certificates (X.509v3) or keys (RSA)
- PKI Management of X.509 certificates
- Algorithms via AES (Rijndael), 3DES,
Blowfish, Twofish, Serpent, MD5, SHA1
or SHA2
- Deflate Compression
- Perfect Forward Secrecy (PFS)
- Dynamic firewall settings per IPSec
connection/IPSec user
- Option: Astaro Remote IPSec Client
(for MS Windows PCs)
Proxies, Content-Filter
HTTP with Banner Filter
SMTP with Virus Scanner
Transparent Mode
User Authentification
PPTP VPN
- Host-to-Net
- MPPE 40/128-bit Data Encryption
- MSCHAPv2 Authentication
- Radius authentication for PPTP user
- Dynamic firewall settings per PPTP user
System Management
- Remote Administration via WebAdmin (128-bit
encrypted)
- System and Pattern Updates via Internet
(PGP secured)
- Logging via Syslog, SNMP, ASCII, WELF
(WebTrends format)
- IP Accounting
- Out-of-band Management via External Modem
- SelfMonitor for maximizing Uptime
- Network Diagnostic Tools
- Complete Configuration Backup and Restore
- Predefined Reports
- Hot Standby (via Serial/Ethernet, synchronizes
configuration)
- Optional: Astaro Global Configuration
Manager
Content Filter
- Web Code Filter for dangerous contents
(e.g. ActiveX)
- Web Privacy Filter (e.g. Cookies, Web
Bugs)
- Spam Protection (extensive toolkit)
- User definable string filters for HTTP/
SMTP/POP3
- Transparent encryption of SMTP traffic
(TLS)
- Optional: Virus Protection for SMTP/ POP3
(daily updated virus scanner)
- Optional: Surf Protection for HTTP (daily
updated URL list), Black/White List
Networking
- 10/100 and 1000 (Gigabit) MBit Ethernet
adapters
- DSL connections via PPPoE and PPPoA (PPTP)
- Wireless LAN Ethernet (802.11b) in client
and access point mode
- Multiple IP addresses per adapter with
Virtual IP or VLAN (802.1q)
- Dynamic and Static Network Address Translation
(NAT)
- H323, PPTP and FTP Passthrough
- Load Balancing (Round-Robin, Least Used
Connection)
- DHCP Client and Server
- Randomized TCP Sequencing
- Proxy ARP
Economic Price
Contains Operating System, Firewall, Virus
Scanner and unlimited VPN-Software.
Hardware Recommendation
- minimum Pentium II or compatible CPU
- 128 MB RAM
- 8 GB IDE or SCSI HDD
- Bootable CD-ROM Drive
- PCI Ethernet Networkcards (up to 20 NICs,
up to 4,000 Virtual LANs)
Throughput with a 1266 MHz CPU
- 730 MBit/s Packet Filter
- 115 MBit/s IPSec VPN
- 6,000 E-mails/hour (10KB E-mails) with
Virus Protection
|
