Ted
asked on
Remote ethernet devices
Anyone familiar with the use of "remote ethernet devices" that can securely connect branch offices over the public cloud? There is a product from Sophos Network Security call Astaro Remote Ethernet Devices that are plug and play boxes that you power up at your remote offices and automatically connect up to your private WAN to all other branches with the same box. Almost like subscribing to MPLS or private VPN service.
My business partners are all wanting to move their business to the public cloud (Amazon, Terremark, etc...) Anyone with experience using these products and/or similar products?
For the Remote Ethernet Devices, I would be most interested in a VM version so that it can be launced in the cloud.
My business partners are all wanting to move their business to the public cloud (Amazon, Terremark, etc...) Anyone with experience using these products and/or similar products?
For the Remote Ethernet Devices, I would be most interested in a VM version so that it can be launced in the cloud.
ASKER
"to build a VPN to amazon" What do you mean? VPN from where to where? And what device to what device?
you can use ASTARO/SOPHOS VPX to build a S2S VNP from your office to your virtual computing environment at the Amazon cloud.
http://aws.amazon.com/en/ec2/#functionality
ASL can build IPSec VPN's to nearly any other device.
http://aws.amazon.com/en/ec2/#functionality
ASL can build IPSec VPN's to nearly any other device.
ASKER
In your initial post, when you said the RED creates a layer 2 VPN to another location: 1. Since it connect thrus the internet, how does it get thru since it must have layer 3? IPSEC? 2. Does the other location have to be another Astaro Red?
ASL? Is that another abbreviation or typo?
Being able to build IPSEC VPN to nearly any other device, I'm trying to determine why it would be better than any other VPN termination product like the Cisco 871 for example.
With IPSEC is the key exchange via pre-shared keying?
Thanks for the info
ASL? Is that another abbreviation or typo?
Being able to build IPSEC VPN to nearly any other device, I'm trying to determine why it would be better than any other VPN termination product like the Cisco 871 for example.
With IPSEC is the key exchange via pre-shared keying?
Thanks for the info
Update:
The devices - at one Side Sophos UTM (or AstaroSecureLinux == ASL/AstaroSecureGateway == ASG/ ... thats all the same) and Astaro RED at the other side creates a VPN using Layer 3. But within the tunnel they transmit Layer2 data.
With SophosUTM at booth sides you can transmit L2 or L3 data through the tunnel.
The VPN are not better than using Cisco Router/ASA or other Device, but the management is much more simple.
With SophosUTM (ASL/ASG) you can use PSK and Certificates.
The new version are very nice. take a look.
The devices - at one Side Sophos UTM (or AstaroSecureLinux == ASL/AstaroSecureGateway == ASG/ ... thats all the same) and Astaro RED at the other side creates a VPN using Layer 3. But within the tunnel they transmit Layer2 data.
With SophosUTM at booth sides you can transmit L2 or L3 data through the tunnel.
The VPN are not better than using Cisco Router/ASA or other Device, but the management is much more simple.
With SophosUTM (ASL/ASG) you can use PSK and Certificates.
The new version are very nice. take a look.
ASKER
So it looks like SophosUTM to SophosUTM is the best option for me because I am most interested in transmitting L3 data thru the tunnel.
Thanks for the update.
Thanks for the update.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Thanks for the offer to get the demo-lic
I had already recently purchased three hardware RED appliances and an ASG Virtual hub (Essential Firewall/Net security/Web security product) for 10 users. I had the virtual hub installed in Amazon, an AWS instance. And I mapped the hardware appliances to each other via that hub. Giving a hub and spoke topology.
But I really like the idea of connecting two virtual hubs together and passing tunneled L3 traffic between them.
Do you think I need to purchase another virtual ASG virtual hub for this or can I get a demo license and try it out -in other words get another demo virtual hub in the Amazon (or another cloud provider, I'm married to Amazon) cloud?
I had already recently purchased three hardware RED appliances and an ASG Virtual hub (Essential Firewall/Net security/Web security product) for 10 users. I had the virtual hub installed in Amazon, an AWS instance. And I mapped the hardware appliances to each other via that hub. Giving a hub and spoke topology.
But I really like the idea of connecting two virtual hubs together and passing tunneled L3 traffic between them.
Do you think I need to purchase another virtual ASG virtual hub for this or can I get a demo license and try it out -in other words get another demo virtual hub in the Amazon (or another cloud provider, I'm married to Amazon) cloud?
sorry,
i am not aware about other cloud providers using (virtual) ASG.
also i don't know nothing about AWS Pricing.
If you can create another virtual ASG virtual hub and only missing the license, you can use a demo key.
i am not aware about other cloud providers using (virtual) ASG.
also i don't know nothing about AWS Pricing.
If you can create another virtual ASG virtual hub and only missing the license, you can use a demo key.
ASKER
That's all I need to know. If I can create another "test" hub on my own AWS with a demo key for the second ASG virtual hub, then I'm all set and can try it out.
Thanks!
Thanks!
solved?
but it is not available as virtual appliance.
but you can use the virtual UTM Appliance (Firewall) to build a VPN to amazon.
thats supported...
"This feature has been released in Version 8.300 of ASG and is now available! You may locate ASG Amazon Machine Images by searching “ASG” from the community tab of the AMI marketplace in Amazon Web Services"