hi guys,

thansk for your responses, very useful. Yes ideally a multi box approach would be great and preferred, however the "BOSS" wants all in one solution in his define wisdom.

So we are tryng our best to accomodate and research such an appliance. So far the astaro is looking like the kiddie, we did get some recommendations from a reseller offering fortinet but we coudlnt find any good review on it.

Astaro are looking like what we watn at the moment unless anyone has any thing further to add.


we are basically looking for the following (IDS/IPS,Anti spam, web content filter, etc) and be able to accomodate the following:

Can it sit inline with an ISA 2004 comfortable, we use ISA 2004 as our edge firewall?

Can you disable the firewall feature so we can continue to just use ISA 2004?

Does it comfortable handle drive by downloads?

Can any one of the features be disabled if not required?

Does it offer IDS as well as IPS?

Also does the IPS/IDS work in a routed environment or would we need one in each site?

We have 4 sites (subnetted) who all use the same edge firewall/gateway to the outside world