Control how the Internet is used at your company.

Astaro enables users to divide their Internet bandwidth as desired. If the web server should be as responsive for customers as possible, the highest priority can be allocated to all applications. Though our control application, bandwidth can also be reserved for web traffic ahead of other requests.

Descriptions & Screenshots Bandwidth Control

Astaro’s Quality of Service setup is easy; you specify the available bandwidth you have from your ISP and let our auto-rules intelligence optimize your Internet connection. Shaping and prioritization of smaller packets is done automatically. Diving deeper,  it is possible to craft specific rules which match traffic patterns or ports with bandwidth maximums and minimums. If you can dictate which applications or users are able to utilize the Internet, you control how a fixed resource is used during different conditions.

For example, you can allow the use of Bittorrent programs during the entire workday for the company at a rate of 10Mbps, but then limit Bittorrent use to only 2Mbps for a certain group or user. These types of rules can be created and managed for almost any type of traffic. With Astaro, you can make sure that the proper programs get the right priority for the Internet connection you have. If you would like your web server to always respond quickly to your customers by getting preference ahead of other traffic like a picture download from Google Images, our bandwidth control can reserve bandwidth for web traffic ahead of these other requests.


 

Available Platforms

Astaro Security Gateway Hardware Appliances

Astaro Security Gateway Hardware Appliances

Our hardware appliances are purpose built, high-performance security devices. They integrate Astaro’s security applications with a hardened Operating System on optimized Intel-compatible server systems that cater to every business size. This section details the series of Astaro Security Gateway hardware models available.

Astaro Security Gateway Software Appliance

Astaro Security Gateway Software Appliance

Our software appliances include the operating system and all security applications bundled within a single software image. While offering the same capabilities as the hardware platform, they can be easily installed on your hardware of choice – maximizing deployment flexibility. The Astaro Security Gateway software appliances are much easier and faster to set-up than software applications that require the installation of an operating system in advance.This section details the security applications available, technical information and deployment scenarios.p

Astaro Security Gateway Virtual Appliance for VMware

Astaro Security Gateway Virtual Appliance for VMware

Our virtual appliances include a software appliance which has already been pre-installed and pre-configured for VMware environments. Being the first unified threat management product that has been certified as “VMware Ready”, it allows for the secure and easy deployment of an "all-in-one" security solution within a virtual environment. This section details the security applications available, technical information and deployment scenarios.

 


 

Technical Information

Astaro’s QoS uses a combination of prioritization and bandwidth reservation mechanisms which are based on internaet standard Differentiated Services (DiffServ) and Integrated Services (IntServ) protocols. The following functionality is offered:

  • Outbound Dynamic Bandwidth Reservation (Guaranteed Minimum, Maximum Limit) Based on:
    • Source/destination server or network
    • Service/Port
    • TOS/DSCP bits
    • Pre-defined traffic selectors for IM/P2P applications
  • Inbound Queuing Optimization via:
    • Stochastic Fairness Queuing (SFQ)
    • Random Early Detection (RED)
    • Proportional bandwidth shaping
    • Dynamically adapts amount of reserved bandwidth to available link speeds
  • Download Equalizer
    • Intelligently drops downlink packets to avoid network congestion
  • Upload Optimizer
    • Accelerates TCP handshake packets (SYN, ACK, …)

This feature is included within the optional Network Security subscription.