Remote ethernet devices

Posted on 2012-03-14
Last Modified: 2014-11-12
Anyone familiar with the use of "remote ethernet devices" that can securely connect branch offices over the public cloud?  There is a product from Sophos Network Security call Astaro Remote Ethernet Devices that are plug and play boxes that you power up at your remote offices and automatically connect up to your private WAN to all other branches with the same box.  Almost like subscribing to MPLS or private VPN service.
My business partners are all wanting to move their business to the public cloud (Amazon, Terremark, etc...) Anyone with experience using these products and/or similar products?
For the Remote Ethernet Devices, I would be most interested in a VM version so that it can be launced in the cloud.
Question by:mrkent
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 6
  • 5
LVL 24

Expert Comment

by:Dirk Kotte
ID: 37721756
the astaro/sophos RED simply creates a layer2 VPN Tunnel to another location.
but it is not available as virtual appliance.
but you can use the virtual UTM Appliance (Firewall) to build a VPN to amazon.
thats supported...
"This feature has been released in Version 8.300 of ASG and is now available! You may locate ASG Amazon Machine Images by searching “ASG” from the community tab of the AMI marketplace in Amazon Web Services"

Author Comment

ID: 37722994
"to build a VPN to amazon"   What do you mean?  VPN from where to where?  And what device to what device?
LVL 24

Expert Comment

by:Dirk Kotte
ID: 37723783
you can use ASTARO/SOPHOS VPX to build a S2S VNP from your office to your virtual computing environment at the Amazon cloud.

ASL can build IPSec VPN's to nearly any other device.
Get 15 Days FREE Full-Featured Trial

Benefit from a mission critical IT monitoring with Monitis Premium or get it FREE for your entry level monitoring needs.
-Over 200,000 users
-More than 300,000 websites monitored
-Used in 197 countries
-Recommended by 98% of users


Author Comment

ID: 37724535
In your initial post, when you said the RED creates a layer 2 VPN to another location:  1. Since it connect thrus the internet, how does it get thru since it must have layer 3?  IPSEC? 2. Does the other location have to be another Astaro Red?

ASL? Is that another abbreviation or typo?
Being able to build IPSEC VPN to nearly any other device, I'm trying to determine why it would be better than any other VPN termination product like the Cisco 871 for example.

With IPSEC is the key exchange via pre-shared keying?

Thanks for the info
LVL 24

Expert Comment

by:Dirk Kotte
ID: 38245218
The devices - at one Side Sophos UTM (or AstaroSecureLinux == ASL/AstaroSecureGateway == ASG/ ... thats all the same) and Astaro RED at the other side creates a VPN using Layer 3. But within the tunnel they transmit Layer2 data.

With SophosUTM at booth sides you can transmit L2 or L3 data through the tunnel.

The VPN are not better than using Cisco Router/ASA or other Device, but the management is much more simple.

With SophosUTM (ASL/ASG) you can use PSK and Certificates.      

The new version are very nice. take a look.

Author Comment

ID: 38246068
So it looks like SophosUTM to SophosUTM is the best option for me because I am most interested in transmitting L3 data thru the tunnel.

Thanks for the update.
LVL 24

Accepted Solution

Dirk Kotte earned 500 total points
ID: 38247279
VPN SophosUTM to SophosUTM is a simple to manage solution.
You can try it for free.
Take 2 PC's with >=2 NIC's 1-2 GB RAM and install the free software.
you need the network-security subscription (or a 30 day demo license).
i can create the demo-lic for you.
If you are happy with the solution, you can buy the  network-security subscription and also 1-2 appliances.
all configurations made while testing are reusable.

Author Comment

ID: 38247405
Thanks for the offer to get the demo-lic
I had already recently purchased three hardware RED appliances and an ASG Virtual hub (Essential Firewall/Net security/Web security product) for 10 users.  I had the virtual hub installed in Amazon, an AWS instance.  And I mapped the hardware appliances to each other via that hub.  Giving a hub and spoke topology.
But I really like the idea of connecting two virtual hubs together and passing tunneled L3 traffic between them.
Do you think I need to purchase another virtual ASG virtual hub for this or can I get a demo license and try it out -in other words get another demo virtual hub in the Amazon (or another cloud provider, I'm married to Amazon) cloud?
LVL 24

Expert Comment

by:Dirk Kotte
ID: 38247587
i am not aware about other cloud providers using (virtual) ASG.
also i don't know nothing about AWS Pricing.
If you can create another virtual ASG virtual hub and only missing the license, you can use a demo key.

Author Comment

ID: 38247622
That's all I need to know.  If I can create another "test" hub on my own AWS with a demo key for the second ASG virtual hub, then I'm all set and can try it out.
LVL 24

Expert Comment

by:Dirk Kotte
ID: 38580440

Featured Post

Free NetCrunch network monitor licenses!

Only on Experts-Exchange: Sign-up for a free-trial and we'll send you your permanent license!

Here is what you get: 30 Nodes | Unlimited Sensors | No Time Restrictions | Absolutely FREE!

Act now. This offer ends July 14, 2017.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The next five years are sure to bring developments that are just astonishing, and we will continue to try to find the balance between connectivity and security. Here are five major technological developments from the last five years and some predict…
Make the most of your online learning experience.
Sending a Secure fax is easy with eFax Corporate ( First, just open a new email message. In the To field, type your recipient's fax number You can even send a secure international fax — just include t…
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…

631 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question