I'm sure eclipse79 knows this, but for others who might not, ...
The Astaro sits, typically, at the perimeter of a network and does not manage traffic internal to the networks attached to it. If your servers are in a DMZ, for example, you can cause the IPS to check traffic between the "Internal (Network)" and the "DMZ (Network)" and AV will be applied to inbound protocols as cited above by Christianlouis.
We recommend that our clients use a layered approach to security; Astaro at the perimeter, AV on all PCs and, for organizations large enough, application-specific protection for SQL Servers, Exchange Servers, etc.
The PC-level AV seems like where eclipse79's exposure should be addressed.
The PC-level AV seems like where eclipse79's exposure should be addressed.
Cheers - Bob
Hello Bob,
you are right, but there is a particular situation in which the av scanning feature I desribed is required to be on Astaro: most of my VPN users use company laptop, but some users use their own computer. In this case their antivirus could not be up2date, or not enough secure, or disabled and so on...
It's anyway true that we have antivirus on fileserver, but a secondary av system that check this type of traffic would be very usefull.
I have posted a request on feature.astaro.com. [:)]
The PC-level AV seems like where eclipse79's exposure should be addressed.
Cheers - Bob
Hello Bob,
you are right, but there is a particular situation in which the av scanning feature I desribed is required to be on Astaro: most of my VPN users use company laptop, but some users use their own computer. In this case their antivirus could not be up2date, or not enough secure, or disabled and so on...
It's anyway true that we have antivirus on fileserver, but a secondary av system that check this type of traffic would be very usefull.
I have posted a request on feature.astaro.com. [:)]
