This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

AWG - Install possible with only one NIC ?

Hi all,

I have a hosted VMWare Server running in a remote Datacenter. I have six useable public IP address and one phys. NIC. Can I still install and use Astaro Web Gateway ?
Until now I'm using Squid with this setup but I would like to replace it with AWG.

thanks and kind rgds
Roland

This thread was automatically locked due to age.

Parents

0 RFCat_vk_01 over 16 years ago

Hi,
I believe it can be done using the VM version because you can setup up virtual NICs in the VMconsole.
I am not sure that it would be that secure though.
How would the internet traffic get to the external interface on the ASG?

I think you would be better off spending some cash for an extra NIC or buying another low power computer with a couple of ports.

Ian M
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 16 years ago in reply to RFCat_vk_01

There's another thread here about what you've asked. Apparently, it is possible, but I don't know enough about VM to understand how it can be accomplished.

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 gafrol over 16 years ago in reply to BAlfson

Thanks for your reply. I have searched the board but could not find a similar topic. It would be great if this is working with only one NIC installed.

rgds
Roland
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 16 years ago in reply to gafrol

https://community.sophos.com/products/unified-threat-management/astaroorg/f/53/t/32395

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 gafrol over 16 years ago in reply to BAlfson

Thanks for pointing me to the thread but after going through it I don't think that's what I need to do. I have a squid proxy with just one interface and one public ip. Now I would like to replace the squid proxy with the Astaro Web Gateway with the same physical setup.

Any ideas how to achieve this ?

kind rgds
Roland
Cancel
Vote Up 0 Vote Down

Cancel
0 wudukes over 16 years ago in reply to gafrol

Hey

The astaro allows you to setup multiple IPs for a single interface.
Cancel
Vote Up 0 Vote Down

Cancel
0 wudukes over 16 years ago in reply to gafrol

I know about networking but not about the particular web gateway itself. Would it be used as a proxy server for your servers/workstations using the web. Can you tell me a litlte more about the functionality.

Anthony
Cancel
Vote Up 0 Vote Down

Cancel
0 wudukes over 16 years ago in reply to gafrol

I WIKI'd Squid Proxy. It is tough to use the gateway as a gateway if you do not have incoming and outgoing network interfaces. You can setup multiple virtual switches for use with the same network interface on your server. Those switches would then allow invidual VM networks. I need more info on exactly the function
Cancel
Vote Up 0 Vote Down

Cancel
0 gafrol over 16 years ago in reply to wudukes

Thanks for your input. The Squid serves proxy request from internet connected PC's. There is no internal network only external (internet).

PC-----> Proxy Server -------> Webserver

I hope this helps to understand.

rgds
Roland
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 gafrol over 16 years ago in reply to wudukes

Thanks for your input. The Squid serves proxy request from internet connected PC's. There is no internal network only external (internet).

PC-----> Proxy Server -------> Webserver

I hope this helps to understand.

rgds
Roland
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 BAlfson over 16 years ago in reply to gafrol

Roland, Astaro used squid in earlier versions, so I would expect Astaro to be more flexible today rather than less.

I don't understand why you would want a proxy server open to use by the entire Internet. What are you trying to accomplish?

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 gafrol over 16 years ago in reply to BAlfson

It's not open to everyone. Users need to authenticate . Think of it as an external AV/URL Filter/ Content Filter Service.
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 16 years ago in reply to gafrol

OK, then I think wudukes solution is the one you need. You likely need to bridge the two VLAN interfaces.

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel