Astaro in bidge mode

I am looking at putting Astaro in front of my ASA 5510 so I can monitor traffic and see what sites users are going to. But I have a few question.

1. After it is placed in bridge mode do I have to create any packet rules to allow traffic to pass and if so what kind of rules.
2. What kind of control do I have if it is in bride mode. For example. Can I restrict them from going to certain sites etc or can I make them use there active directory user name and password to log on. Thanks

0 Scott_Klassen over 14 years ago

1)  You would need to create packet filter rules to allow whatever traffic you want, just like any other firewall.

2)  You would have access to all features that you're licensed for in bridged mode.  If you use the HTTP/S Security features and backend auth, then you could filter web accesses and use AD auth.

At www.astaro.com/kb you can download the manual.  Poke through that a bit to learn about the various capabilities of Astaro.

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Jayson over 14 years ago

Well based on what you're asking I would have to say yes to all of that. The ASG is very flexible when it comes to the number of options it gives per feature. With that I would suggest following Scott's post and hit up the manual. It will show you how to easly handle each of the tasks you're asking about.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 BrucekConvergent over 14 years ago in reply to Jayson

If you are using an Essential Edition license (that's what this section of the forum is for), you're not going to get much info, other than packet filter info... if you want information about visited sites, etc. you'll need to enable Web Security, which has a proxy that will log all of that access. That requires a commercial license to enable.

CTO, Convergent Information Security Solutions, LLC

https://www.convergesecurity.com

Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries. Use the advice given at your own risk.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 madbouy over 14 years ago in reply to BrucekConvergent

Thanks for the information. You have helped a lot.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Astaro in bidge mode

Submitted a Tech Support Case lately from the Support Portal?