My dept. may be moving to a new building, with our own internet connection + some sort of WAN connection back to the main office.
I like Astaro, but haven't used many of the features such as http proxy/surf protection/content filtering.
Our corp. network guy is a Cisco diehard and is currently using the ASA devices in new offices, so if we want to use Astaro, I'm going to need a strong case, and it needs to be 100% solid (*v7 cough*).
My dept. consists of about 10 web developers, 2 sysadmins, 2 managers, and several customer service reps. We will probably be sharing the office space with 1 other dept. of about 10 people (non power-users).
Requirements:
NAT + firewall
VPN tunnels to web server co-lo, corp office, possibly remote users as well.
"Surf Protection" -- blocking pron sites, etc.
Possibly web content filtering (malware), but I doubt we'd use it for everyone considering we may be doing large downloads and I've heard lots of problems there.
Probably, VOIP traffic will go to the main office. QOS will be required. I don't know about the VOIP security features; I doubt we'd use them.
Possibly will want separate rules for the other dept... e.g. we may want to route them so they don't use the internet connection, or have different surf protection & content filtering settings for them.
Active Directory authentication for surfers.
Probably will want to have several DMZs for wireless, etc.
Possibly would want VLAN support to isolate the 2 depts from each other.
Optional:
Fail-over routing in case WAN or Inet link goes down, need to failover to the other connection and re-start VPN tunnels, and get the VOIP back up.
This would have to get along with (supercede) any static or policy-based routing in place.
I say optional because a dedicated router is not out of the question, but that of course will raise the costs.
I don't know whether the ASAs can do this or not without a separate router.
HTTP caching proxy would be very nice as bandwidth will be limited.
Banner ad filtering would be very nice as bandwidth will be limited.
Not needed:
email features... email will be going over the wan, so we don't need SMTP or POP proxies, email virus protection, etc.
I'm considering a 25 to 50 user license or an appliance such as the Astaro 220.
I know this is quite a lot; I appreciate any feedback.
Thanks!
Barry
This thread was automatically locked due to age.
