Astaro Security Gateway F.A.Q Page
Where can I download Astaro Software and manage my licenses?
All Astaro software and the license management area can be found in MyAstaro.
Which hardware platforms can be used with the Astaro Security Gateway software solution?
Users are able to use any Intel-compatible server or PC that meets the following minimum recommendations: Intel Pentium III 900 MHz, 512MB RAM, 10 GB hard disk drive and above.
Are printers counted as a user with Astaro Security Gateway software licenses?
Yes. Every device which has an IP address and is protected by the Astaro Security Gateway is counted as a “user”.
Which services/modules get load-balanced in a HA/Cluster?
The following modules/applications are load balanced:
- Network Security: IPSec VPNs, Intrusion Protection
- Web Security: Anti-virus for HTTP and FTP , URL Filtering
- Mail Security: Anti-virus for SMTP and POP3, Anti-spam for SMTP and POP3
Is it possible to mix Astaro Security Gateway appliance types in clusters?
Although technically feasible, we do not recommend using different appliance types within a cluster. This is because the lowest performing unit will limit the overall throughput of the whole cluster.
Is it possible to apply an Astaro Security Gateway hardware license on Astaro Security Gateway software and vice versa?
No. Astaro’s hardware and software products use different licensing models and are not interchangeable.
Will the Astaro Security Gateway continue to function when the maintenance has expired?
Yes. As long as your subscriptions have not expired, the security applications will continue to function. However, they will not receive any pattern or firmware updates and will be therefore vulnerable to new threats within days.
Why does Active-Active High Availability need subscription licensing as opposed to Active-Passive High Availability?
With Active-Active High Availability, you are able to concurrently use your subscription services on all appliances in contrast to Active-Passive High Availability. You therefore require an active license for each subscription and unit.
Is it possible to upgrade from a small hardware appliance to a larger appliance?
Currently there is no standard upgrade path for hardware appliances. However, you are able to easily increase the performance of your hardware appliance by adding another similar unit and running both as a cluster. You are able to cluster up to a maximum of 10 units. Contact your Astaro Partner for all current upgrade options available to you.
Is there a home use license available and how do I get one?
Home use licenses are available via MyAstaro and include all subscriptions at no cost. Home user licenses are limited to ten protected IP addresses.
How do I acquire the Email Encryption functionality?
The Email Encryption functionality is included for free as part of the Mail Security Module subscription.
Which virus scan engines are available in Astaro Security Gateway?
Astaro Security Gateway uses open source as well as commercial virus scan engines. Although the virus scan engines work concurrently, they are completely independent from each other and therefore offer protection rates not found in any other UTM solution.
Which operating systems/network systems does Astaro work with?
Astaro Security Gateway interoperates with all network, server and client systems that might be connected via standard Ethernet interfaces. Astaro itself runs on its own hardened Linux OS, and does not require the pre-installation of another operating system first.
Is the performance of hardware appliances sufficient for complete protection?
Astaro’s hardware appliances are based on sophisticated Intel-compatible network systems, providing complete protection for the number of users recommended.
Can the Astaro Security Gateway 110 be upgraded to an Astaro Security Gateway 120 appliance?
Yes. Just contact your Astaro partner to arrange an upgrade key which converts your ASG 110 into a 120.
Are system updates automatically downloaded and imported?
Yes. In contrast to many other solutions, Astaro Security Gateway is able to automatically download and import not only pattern but also firmware updates.
Is it more worthwhile to invest in hardware appliances rather than software?
When it comes to installation simplicity, repair services, and optimal hardware design, hardware appliances offer many advantages in contrast to software. However software appliances might be a better alternative if you would like to use a preferred hardware option.
How do I find the right sized ASG model for my company?
Your certified Astaro partner will be able to provide you with detailed sizing guidelines for any network size.
Does the ASG offer a router function or do I need an additional router?
Astaro Security Gateway offers comprehensive router functionality including dynamic routing protocols such as OSPF, hence avoiding the need for you to maintain an additional solution just for routing in most cases.
What do I need a Proxy for?
A Proxy is essentially an application that is able to completely decode and re-encode each packet sent from a sender to a receiver. They are able to not only scan the complete packet, but also replace or change any header information (like IP addresses) or any part of the content, hence allowing the extraction of malicious components only.
Can administrator roles have different user rights?
Astaro Security Gateway currently offers two administrator roles with different rights: the standard administrator with unlimited rights and the auditor with read-only rights for certain components and reports. Looks for more roles to be available soon!
What does the 90 day warranty include?
Starting with the activation of the license key, the customer receives 90 days of software warranty. During this period, customers can use Astaro software services and web-based technical installation support free of charge.
Why is maintenance so important and why shouldn’t products be sold without them?
Astaro maintenance services not only offer valuable technical support, but also instant hardware replacement services. Pattern and software updates are also included, which are a pre-requisite for protecting your network against the latest types of threats.
With Email Encryption, can users employ S/MIME and OpenPGP simultaneously?
No. If you configure both S/MIME and OpenPGP for an individual user, emails sent by this user will be signed and encrypted using S/MIME by default.
Can users change OEM or appliance licenses into software licenses or use with other machines?
Please contact your certified Astaro Partner or reseller for more information on licenses exchanges.
