Astaro User Bulletin Board
Go Back   Astaro User Bulletin Board > Astaro Gateway Products > Support for "Essential Firewall" Edition - free for business use

Welcome to the Astaro User Bulletin Board.
If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 12-06-2009, 01:39 PM
Junior Member
 
Join Date: Nov 2009
Posts: 5
Default disabled features in Astaro Essential Firewall

As the provided Version Comparison Chart is really incomplete I've created a list of (hopefully) all features which are disabled in the Essential Firewall:

- automatic firmeware updates
- automatic configuration backups
- user portal (would not make sense)
- High Availability (HA)
- external authentication servers (LDAP, AD, Radius, ...)
- Time Events
- Network Link Aggregation
- Network Uplink Balancing
- Network Multipath Rules
- Network Policy Routing
- Network Dynamic Routing (OSPF)
- Network Quality of Service (QoS) Traffic Selectors
- Network Quality of Service (QoS) Bandwidth Pools
- Network Multicast Routing (PIM-SM)
- DNS: Request Routing
- Network Intrusion Prevention (IPS)
- Network Server Load Balancing
- Network Generic Proxy
- Network SOCKS Proxy
- Network IDENT Reverse Proxy
- Web Security (including all HTTP/HTTPS and FTP proxy services)
- Mail Security (including all SMTP and POP3 proxy services)
- Mail encryption
- VoIP Security
- IM/P2P support
- Site-to-site VPN
- Remote Access SSL VPN
- Remote Access IPSec
- Remote Access Cisco VPN Client
- Logging: Remote Syslog Server
- Logging: Remote Log File Archives
- Reporting: Exceptions (useless without web or mail security)
- Reporting: Anonymizing (useless without web or mail security)
- Reporting: Network Security -> Packet Filter
- Reporting: Executive Reports archiving and automated creation

If you find anything else, feel free to extend the list ;-)

Last edited by AngeloC; 02-12-2010 at 08:49 AM.
Reply With Quote
  #2 (permalink)  
Old 12-06-2009, 05:48 PM
BAlfson's Avatar
Moderator
 
Join Date: Mar 2007
Location: Oklahoma City
Posts: 5,323
Default

No site-to-site VPN? Can someone confirm that? I have a client who only wants basic firewall with a S-2-S IPsec connection, and I thought this might be the solution.

Thanks - Bob
__________________
ACE V7 - Astaro Preferred Partner since V3
Addicted to my iPhone!
Reply With Quote
  #3 (permalink)  
Old 12-07-2009, 03:48 PM
Junior Member
 
Join Date: Dec 2006
Location: Germany, Oldenburg
Posts: 23
Default

Quote:
Originally Posted by BAlfson View Post
No site-to-site VPN? Can someone confirm that? I have a client who only wants basic firewall with a S-2-S IPsec connection, and I thought this might be the solution.

Thanks - Bob
Yes, i confirm that.
__________________
4x ASG320 HA, 3x ASG220, 16x ASG110/120,
6x Software 10-50 User
Home User License 100
Reply With Quote
  #4 (permalink)  
Old 12-30-2009, 10:21 AM
Junior Member
 
Join Date: Sep 2008
Location: Sandefjord, Norway
Posts: 14
Default

You do have Site-to-site VPN with essential license!
I have one up and running
Reply With Quote
  #5 (permalink)  
Old 12-30-2009, 05:53 PM
Junior Member
 
Join Date: Nov 2009
Posts: 16
Default

Hi Andresaso,
Are you sure that you have applied the Essential license? If it is installed without the license applied then you may still be in a 30 day trial period which would allow site to site VPN to function, but that functionality will probably stop working once the 30 days are up, or the Essential license is applied.
What version are you running?
Regards,
Chris
Reply With Quote
  #6 (permalink)  
Old 01-04-2010, 10:35 AM
Junior Member
 
Join Date: Sep 2008
Location: Sandefjord, Norway
Posts: 14
Default

I'm sure that I have the essential license applied, but just on one side.
Its run on 7.402.
Reply With Quote
  #7 (permalink)  
Old 01-04-2010, 04:21 PM
Junior Member
 
Join Date: Nov 2009
Posts: 16
Default

I guess that someone with more knowledge on the specific versions might need to give some feedback on this. I thought that the Essential Edition was only introduced with version 7.500, so I am not sure how a 7.402 firewall responds with the Essential Firewall license. It could be that your 7.402 box will take the license and provide some services that aren't intended for use on the Essential Edition.
I do know that with 7.500 or newer, site-to-site VPN is disabled when the Essential Firewall license is used.
I hope that this helps,
Chris
Reply With Quote
  #8 (permalink)  
Old 01-04-2010, 04:41 PM
Jayson's Avatar
Senior Member
 
Join Date: Dec 2007
Posts: 139
Default

Yes, S2S would be a great feature, has anyone found out if this can be done or not? When I get home from work today Ill download and try and setup a couple to see what can be done.
__________________
HP Prolient DL360 Dual 1 ghz 4 gig ram 2 x giga nics 50 ip home lic.
Reply With Quote
  #9 (permalink)  
Old 01-05-2010, 12:31 PM
Junior Member
 
Join Date: Sep 2008
Location: Sandefjord, Norway
Posts: 14
Default

After upgrading to 7.502 IPSEC is disabled!
Reply With Quote
  #10 (permalink)  
Old 01-05-2010, 02:57 PM
r2k r2k is offline
Member
 
Join Date: Apr 2009
Posts: 75
Default

How can I update the firmware of an essential firewall? automatic update is disabled.

Is it possible by manual Up2Date package upload?

Marco
Reply With Quote
Reply

Tags
features

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT. The time now is 01:34 AM.

 

Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2010, Jelsoft Enterprises Ltd.


These pages are specifically maintained for the discussion of firewall issues within the Open Source community, and might already reflect new alpha/beta releases under development. Please refer to our product specifications for the functionality of the actual release. Discussions of new/enhanced functionality does not constitute a commitment of Astaro, to integrate this functionality into future releases. issues within the Open Source community, and might already reflect new alpha/beta releases under development. Please refer to our product specifications for the functionality of the actual release. Discussions of new/enhanced functionality does not constitute a commitment of Astaro, to integrate this functionality into future releases.