Features

The trouble with a better mousetrap is that it soon becomes yesterday's model: when you build security around a growing enterprise it is well to avoid obsolescence by adapting an EdgeForce appliance with its modular specification and performance.

The SmartFilter product from Secure Computing was one of the earliest products to perform category-based URL filtering. Now in version 3.2, the basic principles of the product remain, with performance and management improvements aimed at making the task of controlling web access as simple as possible.
SmartFilter is intended to sit on a web proxy behind a firewall, or on the firewall itself. The product comprises agents that reside on the gateways, a management server that runs on Windows, Solaris and Linux servers, and a management console which can run on the same platforms. The server and console components are both Java based.

The principle of Xiscan is a good one. It takes the idea of war dialing software, which hackers have used to their advantage for many years to scan telephone networks in an attempt to locate entry points, and turns it against the enemy.
Xiscan works in the same way that the hackers have always used automated telephone dialers – to probe for weaknesses in the network. The difference is that it is designed to be used within the network, to locate rogue modems and bring users to heel.
The basic idea is that if hackers can use automated dialers to gain an advantage over legitimate users, then why can't the legitimate user do the same? It is a very good question – and there is something very satisfying about the idea of wrestling control of hacker-type tools, and using them for legitimate ends. Xiscan takes the wardialer idea and turns it on its head, using it as a way to monitor the network from within.

In today's world of CD-ROMs and high-capacity DVDs, it is easy to forget that there are other storage media which still have considerable popularity. One frequently overlooked example of this is the humble tape, which is still vital for many businesses. 
Modern tapes have extremely high capacities, and developments in fiber channel mean that recording speeds are incredibly fast. However, there is an inherent security risk – after the tape has been recorded, when the data becomes portable, and therefore at risk. This is increased if you send the tapes off site to a firestore. How can you be certain that the courier isn't simply going to vanish with your confidential client records?

This solution also delivers backup and restore and, unlike the previous solution, is designed with the smaller workgroup environment in mind. With the initial installation setting up a server, it also provides a centralized repository. In addition Lockstep advise an optional mirror backup off-site to ensure a complete recovery is possible of all corporate data.

This is one for the serious business with a need for high availability and disaster recovery in its overall plan. The capability not only to replicate files but also only the part that has changed, is just one of Double-Take's virtues.

Easy Recovery Lite is just one of Ontrack's solutions for recovering data. This solution does not repair lost or corrupt computer hardware settings, nor does it repair registry and configuration settings, but it does concentrate on data recovery. With an emergency boot disk to hand, even when you cannot access Windows, files can be extracted.

This next solution is ideal for publishers and media houses that rely on Macintosh computers for their production activities. Intego Personal Backup X allows the user to back up their critical files, clone volumes and synchronize files between two volumes.

This is an enterprise recovery solution that provides centralized control for a fast backup and restore that is controlled by the administrator. Recovery Manager provides a system that also allows a full restore for any computer that has been unable to reboot. It does this by storing all registry and system files for each protected workstation, allowing a full recovery on any machine covered by Recovery Manager.

This is a solution designed for the SME market. (We reviewed version 6, but 6.5 is now available.) Instead of simply making incremental backups Retrospect Backup uses backup sets to ensure all data can be recovered. Whereas many solutions only copy the new or changed part of a file, Retrospect keeps a set of all changed data so that if you later find that the version you have been working on has errors in it you can call back the 'best' version. Saved to your hard drive as well as to the server, a user can quickly call up and restore the version that they need to refer back to.

Symantec Ghost Enterprise Edition is an disk imaging solution. It does, however, allow incremental backup of all your client computers' data, providing the ability to restore any networked computer that has crashed. This includes restoration of the operating system and settings, all applications that it was running and all data files.

Fortinet offers a range of what it calls 'anti-virus firewalls' for all markets, from the home user to the large enterprise and carrier-class service provider.

Ingrian offers a range of appliances that are designed to secure any application that uses secure socket layer (SSL) transactions, while at the same time speeding up the performance. The company has recently added other features, including authentication, authorization, GZIP compression and an interface to external intrusion detection systems.

NetPilot was created to be a turnkey solution for businesses to solve all their internet connectivity requirements. It provides internet routing and the sharing of a single ISP account; proxy-based firewall and NAT; web server and web caching; servers for DNS, DHCP, FTP and email; access control and URL filtering. In addition it can act as a file and print server for Windows workstations.

This solution provides remote installation, backup and restore capabilities from a central console. Altiris Client Recovery Solution ensures that users can be back at work swiftly should they experience a system crash or virus damage. It requires 30Mb of hard disk space and a minimum of 150MHz processor power on the client side, with server requirements stretching to 350MHz processor, 100Gb hard disk, 128Mb RAM, Microsoft SQL 7.0 and IE 5.0 all running on Windows 2000 Server.

McAfee is well known for anti-virus software, and has built its complete anti-virus engine into an internet gateway product that examines HTTP, FTP, SMTP and POP3 traffic for viruses. It also performs content filtering and acts as an email anti-relay. Within the content filtering mechanism anti-spam functionality is included.

Primarily a content-filtering platform, the Minesweeper CF 500 came with optional extras for intrusion detection and vulnerability assessment. Content filtering comprises URL blocking, anti-virus and anti-spam. Standard features include a firewall with an IPsec VPN and a DHCP server.

SonicWALL is well known for its firewalls, but it is now starting to add optional functionality to the range. The model tested came with the extra-cost items of content filtering and anti-virus. Vulnerability assessment is another optional extra, but was not supplied on the review unit.

The Symantec Gateway Security product combines firewall, content filtering and intrusion detection in one rack-mounted system that is 1U high. The content filtering includes anti-virus and anti-spam, plus the blocking of inappropriate content and non work-related surfing. The firewall has all the usual features you would expect from a modern firewall: stateful inspection, packet filtering, NAT, IPsec VPN and full inspection application proxies.

Based on a Toshiba Magnia SG20 solution developer kit, this unit runs a special version of Linux created by Astaro. It includes a firewall, VPN, DHCP server, traffic management and content filter. The latter includes web blocking and anti-spam.
The firewall uses stateful packet inspection and includes proxies for HTTP, HTTPS, SMTP, POP3, DNS, IDENT and SOCKS. It has user authentication and offers protection from the most common forms of DoS attacks. Of course, it provides network address translation. In addition it detects port scanning.