ASG 220

Flexible feature-complete security

for medium sized networks!

110 | 120 | 220 | 320 | 425 | 525 | 625

Overview Pricing Deployment Failover Model Comparisons

__________________________________________________________________________________________________

Overview

The Astaro Security Gateway 220 is designed to provide complete protection for mid-sized businesses and offices with up to 300 users. Its flexibility and excellent price-performance make this appliance a perfect choice for organizations seeking complete, cost-effective perimeter security.

The rack-mountable ASG 220 offers a highly flexible, feature-complete and easy-to use solution to protect small-to-medium sized networks. Equipped with 8 separately manageable Network Ports it can be easily deployed even within enterprise-class scenarios including load balanced and fail-over connections, but without the hassle of complicated configuration and maintenance.

Based on Intel-compatible technology the ASG220 provides high reliability and performance and can be easily extended with new security measures as new threats arrive, hence protecting your investment for many years.

The ASG 220 comes with the following:

Networking: Internet Routing, Bridging, DNS server & proxy, DynDNS, DHCP server & relay, NTP support, automatic QoS.
Network Security: Stateful Packet Inspection, Firewall & Network Address Translation (DNAT/SNAT/Masquerading).
Remote Access: PPTP and L2TP over IPSec support (including iPhone support).
Logging/Reporting: Full logging on local hard drive, searching, real-time reports for hardware, network usage and network security, daily executive reports.
Management: Web-based GUI in local languages, setup wizard, configuration backup & restore, administrator notifications, SNMP support, centralized management via Astaro Command Center.
Support: Web Support, 72 hour bring in^ hardware replacement during the period of 1 year as well as unlimited access to support platforms such as the Astaro Knowledgebase and MyAstaro.com. Upgrade to Standard Support* when you add Astaro's Network Security, E-mail Security, and/or Web Security applications or when you add the Full Guard Bundle.

To further enhance your network security and functionality of your ASG 220, you can add any combination of the following applications in 1, 3, or 5-year subscription choices:

Network Security: Adds an IPS, DoS Protection, IPSec & SSL Branch Office VPN and Remote Access, Advanced Routing (OSPF, Multicast), custom QoS, server Load Balancing, generic/SOCKS/IDENT proxies and VoIP Security AND provides you Standard Support* which is upgradeable to Premium Support**.
Mail Security: Keeps your inbox clean and protects your SMTP and POP3 mail traffic by offering features like Antispam, Antiphishing, dual Antivirus Scanning, clientless E-mail Encryption and individual UserPortals AND provides you Standard Support* which is upgradeable to Premium Support**.
Web Security: Protects your network from web-based threats and allows you to manage user roles by offering features like URL Filtering, Spyware Protection, Antivirus Scanning, HTTPS Scanning, IM/P2P Control and User Reporting AND provides you Standard Support* which is upgradeable to Premium Support**.
Full Guard Bundle: Includes Network Security, E-mail Security, and Web Security. Does not include the ASG 220 appliance.
Full Guard Premium Bundle: Includes Full Guard but with Premium Support**. Does not include the ASG 220 appliance.

__________________________________________________________________________________________________

PRICING / SKUs

Astaro Security Gateway 220
SKU	Description	List Price	Get Price!
ASG 220 Appliance
ASGN02200AP	Astaro Security Gateway 220 Appliance	$1,275	Get Price!
Astaro Security Gateway 110 Appliance
Security Bundles (Do not include appliance. 1, 3, or 5-year subscriptions.)
Full Guard Bundle: Includes Network Security, E-mail Security, plus Web Security Applications
ASGN02201FG	Full Guard Bundle - 1-year	$2,870	Get Price!
ASGN02203FG	Full Guard Bundle - 3-year	$6,485	Get Price!
ASGN02205FG	Full Guard Bundle - 5-year	$9,725	Get Price!
Full Guard Premium Bundle: Includes Full Guard Bundle but with Premium Support**
ASGN02201FP	Full Guard Premium Bundle - 1-year	$3,135	Get Price!
ASGN02203FP	Full Guard Premium Bundle - 3-year	$7,105	Get Price!
ASGN02205FP	Full Guard Premium Bundle - 5-year	$10,670	Get Price!
Astaro Security Gateway Full Guard Bundle
Security Applications (Network, E-mail, or Web Security) Can purchase in 1, 3, or 5-year subscriptions. Add to ASG 220 appliance in any combination. If purchase all three, then your best value is one of the Full Guard bundles listed above. All come with Standard Support* which can be upgraded to Premium Support**.
Network Security Application Subscription
ASGN02201NS	Network Security Application - 1-year	$795	Get Price!
ASGN02203NS	Network Security Application - 3-year	$1,910	Get Price!
ASGN02205NS	Network Security Application - 5-year	$2,865	Get Price!
E-mail Security Application Subscription
ASGN02201MS	E-mail Security Application - 1-year	$1,150	Get Price!
ASGN02203MS	E-mail Security Application - 3-year	$2,760	Get Price!
ASGN02205MS	E-mail Security Application - 5-year	$4,140	Get Price!
Web Security Application Subscription
ASGN02201WS	Web Security Application - 1-year	$1,430	Get Price!
ASGN02203WS	Web Security Application - 3-year	$3,435	Get Price!
ASGN02205WS	Web Security Application - 5-year	$5,150	Get Price!
Astaro Security Gateway Security Applications
Security Application Subscription Renewals
Full Guard Bundle
ASGN02201FGR	Full Guard Bundle Renewal - 1-Year	$2,727	Get Price!
ASGN02203FGR	Full Guard Bundle Renewal - 3-Year	$6,161	Get Price!
ASGN02205FGR	Full Guard Bundle Renewal - 5-Year	$9,239	Get Price!
Full Guard Premium Bundle
ASGN02201FPR	Full Guard Premium Bundle Renewal - 1-Yr	$2,979	Get Price!
ASGN02203FPR	Full Guard Premium Bundle Renewal - 3-Yr	$6,750	Get Price!
ASGN02205FPR	Full Guard Premium Bundle Renewal - 5-Yr	$10,137	Get Price!
Network Security Application
ASGN02201NSR	Network Security Renewal - 1-Year	$756	Get Price!
ASGN02203NSR	Network Security Renewal - 3-Year	$1,815	Get Price!
ASGN02205NSR	Network Security Renewal - 5-Year	$2,722	Get Price!
E-mail Security Application
ASGN02201MSR	E-mail Security Renewal - 1-Year	$1,093	Get Price!
ASGN02203MSR	E-mail Security Renewal - 3-Year	$2,622	Get Price!
ASGN02205MSR	E-mail Security Renewal - 5-Year	$3,933	Get Price!
Web Security Application
ASGN02201WSR	Web Security Renewal - 1-Year	$1,359	Get Price!
ASGN02203WSR	Web Security Renewal - 3-Year	$3,264	Get Price!
ASGN02205WSR	Web Security Renewal - 5-Year	$4,893	Get Price!
Astaro Security Gateway Application Renewals
Upgrades Model/Competitive Upgrades (i.e. ASG 220 to ASG 320 or competitive to Astaro): There are no upgrade SKUs for this type of upgrades. However, please call CPU at 800-880-4200 and we will obtain special pricing from Astaro. We will need your License ID# to obtain the pricing if upgrading an Astaro unit. If doing a competitive upgrade to Astaro, then we will need to know what you currently have.
Support Upgrade from Standard to Premium
ASGN02201PS	Upgrade to Premium Support - 1-Year	$310	Get Price!
ASGN02203PS	Upgrade to Premium Support - 3-Year	$775	Get Price!
ASGN02205PS	Upgrade to Premium Support - 5-Year	$1,180	Get Price!
Astaro Security Gateway 110 upgrades
Astaro VPN Appliances to use with ASG 110
RED 10 Appliance & Extended Warranty For using a RED appliance you need at least a central ASG with a valid Network Security Subscription running ASG V7.504 or higher. When ordering a warranty extension you need to provide the serial number of the RED appliance with your order unless ordering with the intended RED 10 appliance on the same order.
RED00100APUS	Astaro RED 10 Appliance w/1-yr Warranty & US Power Supply	$295	Get Price!
RED00102WE	Astaro RED 10 – 2 Year Warranty Extension (24 hour up front^^^ hardware replacement)	$75	Get Price!
Astaro VPN Appliances RED 10
ASG 220 Accessories
Cables, Power Supplies, & Misc.
ASG0000CA	ASG Appliance - Power Cable for US	$5	CALL
ASI1GB000	Astaro Smart Installer, 1GB, bootable USB flash drive / CD-ROM	$99	CALL
Rackmount Kits
ASG0001RM	Rackmount Ears (2 pcs) for 1U Units	$15	CALL
ASG0002RM	Rackmount Ears (2 pcs) for 2U Units	$20	CALL
Memory & Revision Upgrade
ASG2202MU	ASG 220 rev.2 Memory Upgrade Kit to 1GB	$75	Get Price!
ASG22013U	ASG 220 rev.1-to-rev.3 Upgrade, replacement unit - without activation key	$1,099	CALL
Astaro Security Gateway 110 Accessories
Back to Top

__________________________________________________________________________________________________

DEPLOYMENT

Astaro Security Gateway 220 allows you to flexibly mix and match the type of security you would like to deploy for your network.

This is achieved through an optional selection of fully integrated security applications (Network Security, E-mail Security, & Web Security) which you are freely able to activate on your hardware appliance upon purchase of a 1, 3, or 5-year subscription of the desired application or combination of applications.

NOTE: If you desire all three of the above applications then your best value would be to add either the Full Guard Security Bundle or the Full Guard Premium Security Bundle (Full Guard + Premium Support**).

Deployment Option A: Only Main Office with up to 300 users.

Replace your existing Firewall/Router with or if no firewall exists install an Astaro Security Gateway 220. This will provide you a basic firewall with very limited protection. Depending on your needs, you can add one or more of the following security applications through a 1, 3, or 5-year subscription to provide advance security protection for your office:

Network Security,
E-mail Security, and or
Web Security.

By adding one or more of the security applications or security bundles, you provide your organization a more advanced secured environment for LAN and servers. However, like with all other firewall brands, when you add additional security applications to the base firewall, the performance and the number of recommended users drops because it has to process more information and tasks. If considering adding any of the Security Applications to your ASG 220, please give us a call at 800-880-4200 so we can help determine the correct model for your particular network environment and security needs. It may be best to move up to an ASG 320.

__________________________________________________

Deployment Option B: Main Office + Branch offices that access the Internet ONLY through main office's firewall. Each location equals up to 300 users.

Main Office will need an ASG 220 with the Network Security Application plus either the E-Mail or Web Security applications depending on your needs. If all three applications will be installed then go with the Full Guard or the Full Guard Premium bundles. NOTE: Might need to consider going to an ASG 320 if you have over 75-150 users and are adding any Astaro Security Applications. Call us at 800-880-4200 for assistancen in determining the best model for your particular scenario.
Branch Office will need Astaro's RED 10 VPN Appliance for secure and affordable VPN connections at each branch location.

__________________________________________________

Deployment Option C: Main Office + multiple branch offices with THEIR OWN Internet access. Each location has up to 300 users.

The main office will need an ASG 220 and depending on the number of users at each branch, they will need either an ASG 120 or 220. Since all locations will have their own Internet connection, they will need to add on either the Full Guard Bundle or the Full Guard Premium Bundle to secure their network, e-mail and web access at the gateway. Depending on the number of users, adding on the security bundles may require the main office to go to an ASG 320.
If they plan on communicating with each other by VPN, then the main office should have an ASG 320 appliance with the Full Guard or Full Guard Premium Bundle and each of the branch offices, depending on the number of users at each branch, should have an ASG 120 or 220 with the same security bundle.

__________________________________________________________________________________________________

FAILOVER (High Availability)

Active/Passive Failover for Your ASG Appliance

If up-time is important to the operation of your company and you don't want to pay for unproductive employees while they wait for your access to e-mail and the Internet to come back up, then you should seriously consider purchasing a second ASG appliance to connect to the primary ASG appliance for automatic failover.

Even though in the Active/Passive scenario the secondary does not require any services to be added to the appliance BOTH the primary and secondary appliances must be the same model. At any point the primary goes down, the secondary unit will automatically kick in and take over so that you experience only a few minutes, if any at all, downtime. The services of the primary will transfer over to the secondary unit. The secondary unit will continue filling in until you get a replacement for the primary or get it back up and running.

_____________________________________

Active/Active Failover for ASG Appliance

If up-time and load balancing . . .

Is important to the efficient operation of your company,
You don't want to pay for unproductive employees while you wait for your e-mail and Internet access to come back up and
You want to improve the efficiency of the network,

. . . then you need to purchase one or more additional ASG appliances WITH the same services as the Primary ASG appliance and hook them up to the primary unit for automatic failover and load balancing capabilities. In the Active/Active scenario, BOTH the primary and the additional appliances hooked up to it, MUST have the same services AND be of the same model.

At any point the primary goes down, the additional units will automatically take over the work of the primary until such time you can have it replaced or get it back up and running. Since all units are active and running along with the primary, the work load on the network is shared among all units thus increasing the performance of the network. Even though all units MUST have the exact same services on them, you can even assign one unit to handle certain security applications (i.e. Primary handles Network Security, Unit 2 handles E-mail security and Unit 3 handles Web Security).

Further assistance, contact

CPU Distributing, Inc.

800-880-4200

sales@cpu-distrib.com

__________________________________________________________________________________________________

Model Comparison

Model	110/120	220	320	425	525	625
User Range	1-10 / 25-80	75-300	200-800	600-1,500	1,300-3,500	2,000-5,000
Licensed Users (Unique IP Addresses a.k.a. nodes)	10 / Unlimited	Unlimited
Max Recommended Users
Firewall	10/80	300	800	1,500	3,500	5,000
UTM	10/25	75	200	600	1,300	2,000
Performance
Firewall Throughput	200 Mbps	1.8 Gbps	3 Gbps	3.8 Gbps	5.5 Gbps	10 Gbps
VPN Throughput	90 Mbps	260 Mbps	350 Mbps	400 Mbps	500 Mbps	580 Mbps
Intrusion Prevention Throughput	120 Mbps	280 Mbps	450 Mbps	550 Mbps	800 Mbps	1.1 Gbps
UTM Throughput	35 Mbps	65 Mbps	125 Mbps	135 Mbps	200 Mbps	350 Mbps
E-mail Throughput (seen/hr)	250,000	400,000	600,000	1,200,000	1,500,000	2,200,000
E-mail Throughput (scanned/hr)	30,000	52,000	78,000	130,000	200,000	250,000
Concurrent Connections	90,000	300,000	600,000	1,000,000	1,700,000	2,500,000
System
Hard Drive	80 GB	160 GB	160 GB	160 GB	2 x 320 GB, RAID 1*	2 x 450 GB SAS, RAID 1*
10/100 Mbps Ehternet Ports	4	-	-	-	-	-
Gigabit Ethernet Ports	-	8	8	6	10	10
Gigabit SFP Ports (PCI-E)	-	-	-	2	4	8
USB Ports	2	4	4	3	2	2
COM Ports (RJ-45)	1	1	1	1	1	1
VGA Ports (Rear)	1	1	1	1	1	1
LCD Display	-	1	1	1	1	1
Quarantine Storage	30 GB	60 GB	60 GB	60 GB	120 GB	200 GB
Log/Reporting Storage	40 GB	80 GB	80 GB	80 GB	160 GB	220 GB
Active/Passive HA (Hot Standby)	Yes: Requires a secondary ASG appliance of the same model as the primary ASG appliance to be connected to the primary appliance. When the primary fails, the secondary unit will automatically come up and take over and any security applications on the primary ASG appliance will transfer to the secondary unit.
Active/Active HA (Clustering)	Yes: Requires one or more additional ASG appliances of the same model as the primary ASG appliance to be connected to the primary appliance. If primary fails, then the remaining units will take over the work of the primary. All units are working with the primary to share the work load. Primary must also include Network Security, E-mail Security, and/or Web Security applications or either the Full Guard Bundle or Full Guard Premium Bundle. Whatever security applications are on the primary unit MUST also be included on the additional units. Allows for load balancing to create a more efficient network and security environment. Even though all units MUST have the exact same services on them, you can even assign one unit to handle certain security applications (i.e. Primary handles Network Security, Unit 2 handles E-mail security and Unit 3 handles Web Security).

*Standard Support: Included with every Network Security, E-mail Security, or Web Security application 1, 3, or 5-year subscription. It offers a 24 hour bring in^^ hardware replacement, automatic software updates as well as technical 10x5 support via Astaro partners. Upgradeable to Premium Support**.

**Premium Support: Can be purchased as an optional upgrade from Standard Support for 1, 3, or 5 years. It offers a 24 hour up front^^^ hardware replacement, automatic software updates as well as technical 24x7 support via Astaro engineers.

^72 Hour Bring In Hardware Replacement: Included with the basic unit with no additional Security Applications. The end-user sends the defective device to Astaro at their own risk and expense. A replacement unit will be sent out within 72 hours FOLLOWING RECEIPT of the defective device. It is well advised that the end-user obtain a tracking number for the shipment of the unit so they know when it has been received by Astaro and for any claim purposes that may arise. If an end-user receives a broken appliance (DOA) they will be entitled to a 24 hour upfront^^^ service - valid for the FIRST 30 days from the PURCHASE date. The 72 hour bring in service is valid throughout a period of 1-year from the PURCHASE date.

^^ 24 Hour Bring in Hardware Replacement: Included with Standard Support services. It is the same as the 72 Hour bring in service mentioned above but instead of 72 hours it is 24 hours on the replacement unit. Also, the 24 hour bring in service is valid throughout the purchased security application (Network, E-mail, Web, or Full Guard Bundle) subscription period of 1, 3, or 5 years.

^^^24 Hour Up Front Hardware Replacement: Included with Premium Support. The end-user sends the defective device to Astaro at their own risk and expense. A replacement unit will be sent within 24 hours after notification and receipt of an RMA number at Astaro's expense. The 24 hour up front service is valid throughout the purchased premium support upgrade or Full Guard Premium Bundle contract of 1, 3, or 5 years.