UPnP

clickmike · #1 (**permalink**) 02-07-2010, 05:49 PM

Hi Everyone,

I am wondering about UPnP. I did a search and could not find anything in this forum, just like I couldn't find anything within the UI on my Astaro.

I am deploying SBS 2008 and with this totally integrated solution it has UPnP capability.

Can I plug in my SBS 2008 into my Astaro using UPnP?

Thanks,
Mike

BAlfson · #2 (**permalink**) 02-07-2010, 10:24 PM

Hey, Mike!

Quote:

Can I plug in my SBS 2008 into my Astaro using UPnP?

No, it's not an option. There was some discussion of adding the capability, but the more-experienced folks were against it: http://feature.astaro.com/forums/173...port?ref=title

You should use the DHCP server built into SBS. According to the Astaro Gateway Feature Requests site, some new options will be added in V8 which we should see later this year.

Cheers - Bob

BAlfson · #3 (**permalink**) 02-08-2010, 12:04 AM

Mike, I'm a little confused by that. All of our Astaro installations are in businesses with 10-to-100 users, although I am trying to change that.

I have yet to install SBS 2008, so I don't understand how not supporting UPnP prevents the Astaro from doing anything with SBS 2008 - what am I missing?

Cheers - Bob
PS I checked the TechNet for info about UPnP support in SBS 2008, and it says:

Quote:

Business-class routers are recommended for most small businesses. These routers can handle heavier traffic required by businesses, but they do not support UPnP. Consumer or home user routers support UPnP, but are not designed to handle the heavier traffic requirements of businesses. If you want to use consumer or home user routers on your business network, it is recommended that you use routers certified for use with Microsoft Vista. See the Windows Logo'd Product List for more information.

Are you saying that SonicWall and others support UPnP? I thought SonicWall only supported Windows Messenger with UPnP.

William · #4 (**permalink**) 02-08-2010, 02:50 AM

Quote:

Originally Posted by clickmike

Hi Everyone,

I have to say that I might not understand this appliance very well. From my perspective I cannot see how this is made for any size business at all, maybe for those who only use linux platforms or some other esoteric OS but not Windows for sure.

I have taken a look at the prices for these appliances and they seem to be priced for the enterprise but are missing some major enterprise type features.

For example, you cannot do any type of configuring to the DHCP, enterprise configuring with scope options and whatnot.

And for this post I am wondering about UPnP. I did a search and could not find anything in this forum, just like I couldn't find anything within the UI on my Astaro.

Sure, it is an amazing product for some of it's features and highly secure but how do I use it even in a small business environment?

I am deploying SBS 2008 and with this totally integrated solution it has UPnP capability. So, what is so bad about your server controlling your router? I do not see this as a security problem and in fact it is a very nice integration to help streamline workflows.

Can I plug in my SBS 2008 into my Astaro using UPnP?

Thanks,
Mike

As an sbs user and having installed it several times the big reason upnp is bad as it allows windows(including sbs) to punch holes in the firewall without notification. This is a horrendously bad idea. UPNP is there for neophyte network admins who don't know what a firewall really is(because Microsoft hides it form them in the overly simplistic wizards). If you need upnp to configure your firewall you need to go learn a few things about security IMO.

William · #5 (**permalink**) 02-08-2010, 02:52 AM

Quote:

Originally Posted by BAlfson

Mike, I'm a little confused by that. All of our Astaro installations are in businesses with 10-to-100 users, although I am trying to change that.

I have yet to install SBS 2008, so I don't understand how not supporting UPnP prevents the Astaro from doing anything with SBS 2008 - what am I missing?

Cheers - Bob
PS I checked the TechNet for info about UPnP support in SBS 2008, and it says:

Are you saying that SonicWall and others support UPnP? I thought SonicWall only supported Windows Messenger with UPnP.

SBS supports upnp jsut as much as xp/vista/7 do since sbs 2008 is based on vista codebase. When you initially configure sbs it tries to hit your gateway and issue upnp commands to automatically open all of the ports it thinks it needs. As you and I know this is a horrendously bad idea.

BrucekConvergent · #6 (**permalink**) 02-08-2010, 03:43 PM

Quote:

Originally Posted by William

As an sbs user and having installed it several times the big reason upnp is bad as it allows windows(including sbs) to punch holes in the firewall without notification. This is a horrendously bad idea. UPNP is there for neophyte network admins who don't know what a firewall really is(because Microsoft hides it form them in the overly simplistic wizards).

William is absolutely correct in this point; UPNP is a big security issue, that's why it's not included on most (if not all) enterprise-level firewall or security solutions. UPNP is too easily compromised and misused.

The Astaro product is an excellent firewall / security solution for small, medium, and large businesses, my customers all love it; it's a great value for the money.

warper · #7 (**permalink**) 02-08-2010, 06:03 PM

Anyone who considers any windows platform to be the ideal solution to configure their firewall doesn't do enough reading. The most unsecure platform I am going to trust to handle the security of my network. I just don't think so. As soon as that happens just wait to see the exploits that will come out and totally wreak havok on all your networks.