VASCO Data Security - A World Leader in Strong AuthenticationVASCO aXsGUARD Gatekeeper

A total solution for remote access

AxsGUARD Identifier Hardware

Overview:

aXsGUARD Gatekeeper is VASCO's remote access solution. Built upon proven VASCO VACMAN core technology, aXsGUARD Gatekeeper offers a total solution for secure network connectivity.

With the advent of mobile computing technology, employees want to access their mail, documents, corporate network files, applications and even websites effortlessly, anywhere, at any time. As businesses adapt to a mobile workforce, they face a number of growing security concerns. When opening up a company's network through remote access technology, security is one of the most important considerations. IT administrators need to make sure that employees access corporate resources in a secure way, whether the employee is in-house, working from home or on the road. At the same time, security concerns must be balanced with the needs of the user ensuring a smooth and simple user experience.

Access should be provided through a secure, encrypted connection in order to protect the corporate network from hackers and malware. To ensure that the user is in fact who he claims to be, strong user authentication should be in place. Monitoring, auditing and reporting features provide IT administrators with the necessary tools to check all network activity. aXsGUARD® Gatekeeper, VASCO's remote access solution, addresses the security issues IT administrators face.

Packaged Offering

aXsGUARD Gatekeeper is available in two versions:

  • aXsGUARD Gatekeeper Remote Access Solution Basic including:
    • Firewall with DMZ and IPS: offers protection against sophisticated hacking attacks and ensures that confidential information stays confidential
    • VPN: provides the freedom to work securely from home or abroad with full access to system resources
    • Monitoring and logging
    • Directory service integration
    • Strong user authentication through the built-in VACMAN® controller or PKI using VASCO DIGIPASS KEY 200 or DIGIPASS KEY 860 in combination with DIGIPASS CertiID
    • Policies and rules for different remote access connections
    • Authentication functionality from any other Radius client
  • aXsGUARD Gatekeeper Remote Access Solution Enterprise includes everything from the basic bundle and:
    • Application firewall: allows customers to quickly integrate strong user authentication to websites and protect web servers against various Internet hacks
    • SSL VPN-portal: SSL-VPN allows users to securely connect to applications from any computer via a standard web browser
    • Bandwidth management
    • Support of multiple Internet lines
    • Public DNS

Optional User Licenses

Additional optional user licenses can be added to both the Remote Access Solution Basic and Enterprise:

Authentication:
aXsGUARD Gatekeeper has a built-in VACMAN Controller, only additional user licenses and DIGIPASS® devices need to be purchased.

Content Scanning:
When connecting your LAN to the Internet, a firewall alone doesn't provide sufficient protection. Malware can enter the companies' IT infrastructure through mail and web access.

To complete the Internet protection offering, aXsGUARD has the possibility to add content scanning, allowing you to:

  • Check mails against spam, viruses, spyware and phishing
  • Create your own rules, based on each user
  • Block websites based on URL or blacklist
  • Get statistics of the web traffic from your company
  • Use Trend Micro anti-virus and anti-spyware
  • Use the mail server together with webmail, which turns aXsGUARD Gatekeeper into a complete Internet communication server.

aXsGUARD Gatekeeper Services

aXsGUARD Gatekeeper offers more than just an appliance. It comes with a complete service package, helping IT administrators to manage their infrastructure and keep it secure at all times:

  • Easy accessible through web based GUI
  • Predefined rules and policies based on system, IP, group and users to quickly configure your aXsGUARD Gatekeeper
  • Automated updates, upgrades and patches, assuring every aXsGUARD runs the same version
  • Automated backup every three hours at VASCO® Service Center
  • Warnings when load is high, so the system can be upgraded in advance
  • Lifetime hardware warranty with standard exchange
  • A spare unit concept allowing faster replacements
  • Onsite hardware replacements through optional Professional Services

Features & Benefits:


Easy setup

The easy set up and user-friendly, web-based interface allows customers to get aXsGUARD Gatekeeper up and running in less than two hours.

Low operating cost

aXsGUARD achieves low Total Cost of Ownership with highly reliable hardware, add-on modules, and competitive support contracts. Four hardware models allow customers to choose their performance and connectivity needs. An upgrade program and unique spare unit concept allow you to keep your systems running with a minimum of downtime.

Automated maintenance

Administrative tasks are reduced with automated back-ups ensuring the latest configuration is always available. If a system breaks down, VASCO will return an appliance with the latest configuration pre-installed (see maintenance contract for conditions). Automated updates provide aXsGUARD Gatekeeper with the latest software version and virus updates without user intervention. Maintenance contracts allow upgrades on the fly, to more powerful models at a mere price difference.

BASIC VERSION ENTERPRISE VERSION CONTENT SCANNING

General

  • Web based GUI for appliance administration
  • LDAP Synchronization from:
    • Microsoft Active Directory
    • Novell e-Directory
    • Generic LDAP
  • Automated online updating system
  • Automated remote backups at VASCO Service Center
  • Complete set of network protocols
  • Monitoring and logging
  • Built in strong user authentication(*) for:
    • Admin tool
    • Radius clients
    • Surf and Firewall authentication
    • VPN or RAS
    • SSL-VPN web portal (Enterprise Edition)
    • Application Firewall (Enterprise Edition)
  • Radius Server
  • Single Sign On, integrated in your domain
  • Predefined rules and policies allow a fast setup
  • Groups and user based configuration allow easy and secure setup
  • VLAN support
  • Bridging support
  • Integrated PKI, with Certificate Authority (CA)

includes everything from Basic version plus:

Application Firewall

  • Protects web servers in your LAN and DMZ
  • Malicious URL filter
  • URL Sanitizer
  • Routing based on IP Address, port number or hostname
  • Predefined rules for OWA and Citrix with Single Sign On

BASIC VERSION

Web traffic

  • Web proxy with adjustable cache
  • Single Sign On for Domain and Workgroup client PC
  • Additional authentication allowed for kiosk pc's
  • Extension filtering
  • VPN tunnel scanning
  • Multilayer Defense system
  • Statistics showing who (optional) is surfing where and when
  • Filter selection for statistics

Mail traffic

  • SMTP Relay Server
  • System-, Group- and User-based policies
  • Basic Virus scanning
  • E-mail attachment filter
  • E-mail spam detection/quarantine delete
  • Embedded file detection (ZIP, RAR, TGZ,…)
  • File content control
  • Black and white list (e-mail, IP, text, dns)
  • E-mail disclaimer
  • Pattern matching with points
  • Multiple blacklist servers
  • MIME header check
  • SPF support
  • Greylisting

E-mail server

  • POP3
  • IMAP4 mail server
  • Unlimited number of mailboxes
  • Distribution lists
  • Central address book
  • Out of Office
  • Mail forwarding
  • Remote mailbox retrieval
  • Group mailbox retrieving and dispatching Webmail (https to aXsGUARD mail server or external mail server

 

SSL-VPN Webportal

  • Allows connection to all your applications through a java compatible web browser
  • No additional client software needed • Personalized web portals
  • Single Sign On with DIGIPASS
  • Predefined applications:
    • Terminal Server / Remote Desktop / VNC
    • Citrix (ICA)
    • Fileserver (Webbased/Webdav)
    • Portforwarding, allowing fat clients
    • Webforwards (Reverse proxy, Replacement proxy, Tunneled Web forward)

Firewall

  • Spict Firewall
  • DoS and DDoS attack blocking
  • IP/Packet filter
  • Host, Group and user policies
  • Separate RAS policies
  • IPS and IDS
  • Real time monitoring
  • Historical reporting on Internal hard disk
  • Active System Attack monitoring
  • Protocol analysis

Additional networking features

  • Multiple Internet Gateways
  • Redundant Internet Connections with automatic failover
  • Policy based routing
  • Load balancing
  • Bandwidth management
  • Quality of Service
  • Full Policy based traffic shaping
  • Static and Dynamic bandwidth shaping
  • Time based bandwidth management
  • Bandwidth management inside VPN tunnels
  • Public DNS server allowing you to publish your public domain names towards the Internet
  • Automatic failover allows to reroute your web servers and VPN tunnels instantly
  • Allows aXsGUARD Gatekeeper Backup systems (BE only)

VPN server

  • PPtP Server (no limit on clients)
  • SSL-VPN Server with Open VPN client (no limit)
  • Proposes IP Address support for PPtP Server
  • IPSec Gateway to Gateway and Client to Gateway
  • Fault tolerant VPN
  • L2TP Support (no limit on clients)
  • Simplified routing over VPN

STANDARD VERSION (= Basic version plus:)

Web traffic

  • Trend Micro virus and malware scanning with automated engine updates

Mail traffic

  • Trend Micro virus and malware scanning with automated engine updates

Technical Specifications:

Gatekeeper Appliances


Models: AG3443 AG3604 AG5506 AG7500
Recommended users* Enterprise Bundle 25 100 500 1500
Recommended users* Basic Bundle 50 250 1000 2000
Operating System Gatekeeper Core OS 7.6
Chassis Form Factor 1U Rack Mount 1U Rack Mount 1U Rackmount 2U Rack Mount
Processor Type Intel® Atom™ 330 Dual-Core 1.6GHz (FSB 533 MHz) Intel Celeron® Processor 440 LGA775 FSB800MHz 512K Intel® Core™2 Duo E8400Δ 3GHz 1333MHz 6MB LGA775 Intel® Xeon Proc. 5520/2.26GHz/5.86GTs 8MB
Memory 1GB 667MHz DDR2 ECC CL5 DIMM 4GB 667MHz DDR2 ECC CL5 DIMM 4GB 800MHz DDR2 ECC CL5 DIMM 12GB 1066Mhz DDR3 ECC CL7
Disk n/size


Hot Swappable
Raid formatted

1 x HDD/WD REII/320GB SATA 7200rpm 16MB>

No
None

1 x HDD/WD REII/500GB SATA 7200rpm 16MB

No
None
1 x HDD/WD REII/500GB SATA 7200rpm 16MB

No
None
2 x HDD/WD REII/500GB SATA 7200rpm 16MB

Yes
RAID 1
Disk Size 1 x 320 GB 1 x 500 GB 2 x 1 TB  
Power Supply AC 100~240V, 50/60 Hz, 4-2 Amp Max 200W max 80 PLUS Certified AC 100~240V, 50/60 Hz, 4-2 Amp Max 200W max 80 PLUS Certified AC 100~240V, 50/60 Hz, 4-2 Amp Max 200W max 80 PLUS Certified AC 100~240V, 50/60 Hz, 10-4 Amp Max 700W max 80 PLUS Certified
Power Redundancy No No No Hot Swappable
Network Ports 3 GbE NIC 4 GbE NIC 6 GbE NIC 10 GbE NIC
Management Web GUI, SSH, Console Port
Dimensions (WxHxD) 437mm x 43mm x 249mm 17.2" x 1.7" x 9.8" 437mm x 43mm x 249mm 17.2" x 1.7" x 9.8" 426mm x 43mm x 365mm 16.8" x 1.7" x 14" 437mm x 89mm x 450mm 17.2" x 3.5" x 17.7"
Weight 6,7 kg (<15lbs) 6,7 kg (<15lbs) 7.7 kg (<17 lbs) 17.6 kg (<38.8 lbs)
Compliance Safety UL, C-UL, CE, EMC FCC, CE, Environment RoHS
Operating Temperature 10 to 35 °C, 50 to 90 °F
Operating Humidity 8 to 90% (non-condensing)
Storage Temperature -40 to +70 °C, -40 to 158 °F
Storage Humidity 5 to 95% (non-condensing)
Reliability MTBF 45,000 hours (5 Years)
Mounting Position Horizontal orientation, 19" Rack, 1 U Horizontal orientation, 19" Rack, 1 U Horizontal orientation, 19" Rack, 1 U Horizontal orientation, 19" Rack, 2 U

Deployment:

Gatekeeper deployment

Documentation:

PDF File
Download the VASCO aXsGUARD Gatekeeper Data Sheet (.PDF)