Re: Astaro Security Gateway

["Consolvo, Corbett D" <cc72 () TXSTATE EDU>]

Chris (and other lurkers):
  I will post more technical info as we roll it out.  Just as a refresher we are putting the Astaro 320 in as a layer 2 
firewall/IPS to protect a particular sensitive subnet.  I provided the below cost estimates to someone directly 
yesterday:

I did a comparison between an Astaro 320 and a Cisco ASA 5520.  Money-wise the Astaro came out to under 8k (includes 
IPS by default).  The ASA with IPS module came out to ~11.5K.  Both include 3 years of basic maintenance and have 
relatively the same performance numbers.  While we have a separate VPN appliance and will not be looking at Astaro for 
that it does contain unlimited SSL usage as opposed to the traditional IPSEC from Cisco.  Cisco supports SSL as an 
add-on cost for now.  (I am a big fan of client SSL VPNs, we are running the Juniper 4000 now which is excellent.)

Thanks,
Corbett
Texas State University

-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Chris 
Gauthier
Sent: Tuesday, April 22, 2008 10:20 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Astaro Security Gateway

Corbett,

If you could provide that feedback to the list, that would be great.
Some of us "lurking" out there find this topic interesting.

Thanks,

Chris


Consolvo, Corbett D wrote:
> Bernie,
>   We are in the process of purchasing an Astaro 320 for one of our internal areas.  We installed a demo and were 
> pleased with the functionality for the price.  While it wasn't top of the line, it did what we needed (both bridging 
> and routing firewall, IPS) for a small $$$ footprint.  We did do a cost comparison with Cisco (we currently run ASAs 
> at the perimeter) that, er, went favorably for Astaro. We will be working with it a lot in the next few weeks, I 
> would be happy to provide you feedback directly.
>
> Thanks,
> Corbett Consolvo
> Senior Information Security Analyst
> Texas State University
> Cc72 () txstate edu
>
>
> -----Original Message-----
> From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Bernie 
> Timberman
> Sent: Monday, April 21, 2008 1:11 PM
> To: SECURITY () LISTSERV EDUCAUSE EDU
> Subject: [SECURITY] Astaro Security Gateway
>
> We are currently looking at the Astaro system to replace our Cisco PIX. We like the fact that it does traffic shaping 
> and authentication to eDirectory. Any comments, suggestions, on Astaro and related products would be most helpful.
>
>
>
>
>
> _______________________________________________________________
> Bernie Timberman
> Senior Network and Systems Administrator
> DePauw University
> 602 South College Ave.
> Greencastle, IN  46135        e-mail:  btimberman () depauw edu
> Phone:  765.658.4292         FAX:   765.658.4310

--
Chris Gauthier, CCNA, Network+, A+
Network Administration Team
Portland Community College
Portland, Oregon

"For once you have tasted flight you will walk the earth with your eyes turned skywards, for there you have been and 
there you will long to return."
--Leonardo da Vinci