Networking

Metavize EdgeGuard Appliance Simplifies Network Protection

By // August 23, 2006, 4:30 AM PST

Image 1 of 25

  • front.jpg

    Maintaining pace with break/fix projects, Microsoft updates and other routine responsibilities doesn’t leave network administrators much time to prevent intrusions, battle spyware, fight viruses and protect against other network threats. Fortunately, organizations such as Metavize are creating hardware appliances organizations can deploy that simplify the process.

    The Metavize EdgeGuard Gateway Security Platform provides a simple solution to the complex challenge of network protection. The 1U rack-mountable appliance provides a buffer between the public Internet and your organization’s systems.

    Configuration is fairly straightforward. A wide range of protective modules – from antivirus to rogue protocol control – are available. The Gateway Security Platform itself retails for $1,495. The price includes the Clam AntiVirus Scanner, OpenVPN, EdgeReport, Router, Attack Shield and Firewall modules.

    Additional appliances (programs) are available a la carte and can be purchased at any time. Pricing varies, from PhishNet for $25 a month to Web Content Control for $95 a month.

    Here’s how it looks and works.

  • front.jpg

    The Metavize EdgeGuard Gateway Security appliance is an attractive 1U-sized component you can add to your network to provide everything from virus and spyware control to Web content filtering.

  • back.jpg

    You can administer the EdgeGuard gateway directly (by attaching a mouse, keyboard and monitor) or by connecting it via an Ethernet cable. The LAN-side network connects using the blue Internal Ethernet port; the WAN-side connection is completed using the red Ethernet port.

  • mv1.jpg

    Upon connecting to the Metavize EdgeGuard appliance you’ll be greeted with a screen essentially offering a single option: Launch EdgeGuard Client. The only other option is to install Java 1.5 (which is used to power the EdgeGuard client).

  • mv2.jpg

    After clicking on the Launch EdgeGuard Client, administrators are asked whether they wish to Trust the application (authenticated by Thawte). This screenshot was captured when launching the client using Mac OS X.

  • mv3.jpg

    Once you execute the EdgeGuard client utility, the program presents the Metavize EdgeGuard Setup Wizard. This wizard is used to set up and configure the security gateway.

  • mv4.jpg

    Clicking Next Page reveals the License Agreement. Review the agreement, by scrolling to the bottom and accepting the agreement, then click Next.

  • mv5.jpg

    mv5.jpgEnter contact information and specify the number of systems covered and click Next.

  • mv6.jpg

    Enter the activation key to proceed. Metavize provides the 16-digit code to its customers. Without the code, you cannot activate the security gateway.

  • mv7.jpg

    The Metavize EdgeGuard Setup Wizard next requires that you specify a password for the admin account. The password is required to access the administrator account and make changes to the security appliance after setup is complete. Also, the wizard requires that you specify the timezone (which the device requires to generate accurate traffic and system reports).

  • mv8.jpg

    In its sixth step, the wizard requires that you specify a hostname and external TCP/IP network information for the EdgeGuard device. Enter the appropriate information and click Next Page.

  • mv9.jpg

    mv9.jpgThe Metavize EdgeGuard Setup Wizard offers a Connectivity Test, which checks the network settings provided in the last step to ensure the device possesses proper DNS configuration. Should the test fail, double-check your network connections (or confirm the appliance’s Ethernet ports are properly connected).

  • mv10.jpg

    Here’s the Metavize Connectivity Check in action. The check tests TCP/IP configuration to ensure DNS settings are properly configured.

  • mv11.jpg

    When the test completes, the Connectivity Check displays a success message confirming DNS and TCP configurations are properly set.

  • mv12.jpg

    The setup wizard’s next step covers routing. You can choose to either configure the security gateway as a router or a transparent bridge. Setting the EdgeGuard to Router prompts the device to enable NAT; configuring the device as a Transparent Bridge disables the gateway’s NAT feature.

  • mv13.jpg

    The wizard’s ninth step, configuring e-mail information, is optional. Administrators will likely wish to enter their e-mail address information here, as the EdgeGuard appliance can send reports and other alerts directly to the administrator.

  • mv14.jpg

    Click Next Page and the wizard will complete. The next screen administrators will see is the EdgeGuard’s default menu. Note the Upgrade button on the bottom left; users should choose to upgrade the device before continuing to ensure the EdgeGuard is operating with the latest patches and updates.

  • mv15.jpg

    After clicking Upgrade, the device will begin downloading updates, as shown here.

  • mv16.jpg

    Once upgrades are applied, you can load the software modules your organization wishes to deploy. Numerous options are available: SpamGuard, PhishNet, Spyware Blocker, Web Content Control, Clam AntiVirus, Hauri AntiVirus Scanner, Intrusion Prevention, Rogue Protocol Control, Firewall, Router, OpenVPN, Attack Shield and EdgeReport. A special Total Security Bundle package is available that offers subscribing to some of the most popular modules at a discount.

  • mv17.jpg

    To purchase and load a new application, click on the application within the left side menu (beneath the Store tab). Once an application is selected, it will begin loading (and its download progress will be displayed, as shown here).

  • mv19.jpg

    Once applications are loaded, they’ll appear within the main menu when you select the Toolbox tab. Click an application’s Power button to turn it on.

  • mv20.jpg

    Once an application’s enabled, it’ll begin operation. Here the SpamGuard module’s been enabled (hence the directions to enable it by pressing the Power Button are grayed out).

  • mv21.jpg

    Click an application’s Show Settings button to display additional information for that application. Here you can see the Clam AntiVirus Scanner is configured to scan inbound HTTP files. Additional tabs (Email, File Transfer, General Settings and Event Log) offer additional even more configuration options.

  • mv22.jpg

    Here the Router application’s NAT settings are displayed. In addition to being able to configure NAT settings, the Router application also offers DMZ, Redirect, DHCP, DNS and other services and features.

  • mv23.jpg

    EdgeGuard’s Intrusion Detection module monitors and protects against network intrusions. Rule and Variable lists can be custom-tailored to meet your organization’s specific requirements. An event log is also available for tracking system events. The EdgeGuard’s other applications offer similar custom configurations. Better yet, Metavize offers free 30-day trials for most every module, meaning you can test modules in your organization before committing to using them long-term.

front.jpg

Maintaining pace with break/fix projects, Microsoft updates and other routine responsibilities doesn’t leave network administrators much time to prevent intrusions, battle spyware, fight viruses and protect against other network threats. Fortunately, organizations such as Metavize are creating hardware appliances organizations can deploy that simplify the process.

The Metavize EdgeGuard Gateway Security Platform provides a simple solution to the complex challenge of network protection. The 1U rack-mountable appliance provides a buffer between the public Internet and your organization’s systems.

Configuration is fairly straightforward. A wide range of protective modules – from antivirus to rogue protocol control – are available. The Gateway Security Platform itself retails for $1,495. The price includes the Clam AntiVirus Scanner, OpenVPN, EdgeReport, Router, Attack Shield and Firewall modules.

Additional appliances (programs) are available a la carte and can be purchased at any time. Pricing varies, from PhishNet for $25 a month to Web Content Control for $95 a month.

Here’s how it looks and works.

Related Topics:

Networking Data Centers Storage Hardware Security Virtualization Cloud