This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

ASG as Firewall-on-a-stick and Single trunk IPS/IDS?

I'm evaulating whether ASG (looking at the 220) would be suitable as a firewall-on-a-stick or single trunk firewall and IPS packet inspection device?
Basically, I have other devices as the first line of defense but I would like an VLAN aware IPS/IDS solution to inspect packets and send them back along the same trunk, so the ASG is not a single point of failure and rather an additional security measure.

Does anyone know if this is possible with an ASG and if so does anyone have this configuration running?

This thread was automatically locked due to age.

Parents

0 Simon Shaw over 18 years ago

You mean run it from a USB stick? No. Maybe if you could get a 16GB USB stick
Cancel
Vote Up 0 Vote Down

Cancel
0 Scott_Klassen over 18 years ago in reply to Simon Shaw

Nope, he means this: http://www.gurulabs.com/goodies/routeronastick.php carbk must have his CCNP. [:)]

This should be doable I think, since Astaro supports multiple networks, multiple NATing rules, routing rules, and is VLAN aware. My config is nowhere this complex though and I don't really have the capability to test.

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel
0 BrucekConvergent over 18 years ago in reply to Scott_Klassen

It works, I have a customer or two doing this.

CTO, Convergent Information Security Solutions, LLC

https://www.convergesecurity.com

Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries. Use the advice given at your own risk.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 BrucekConvergent over 18 years ago in reply to Scott_Klassen

It works, I have a customer or two doing this.

CTO, Convergent Information Security Solutions, LLC

https://www.convergesecurity.com

Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries. Use the advice given at your own risk.
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data