SG UTM
Suggest, discuss, and vote on new ideas for SG UTM. The ultimate network security package.
-
Logical DMZ
Suppose I have one device which needs unfettered access to/from the web. If my machine is out of NICs, I cannot dedicate a NIC to a DMZ "network". I just want to allow one particular device to come and go without restriction. It would be nice to be able to logically DMZ a host based on IP or MAC address for that purpose.
NOTE: I am aware that I can create IP Filter rules and DNAT rules for a host to have seemingly unfettered Internet access, but trust me... that does not work for some devices. I have tried... several…
4 votes -
Networking: Multipath WAN rules by Application
It would be great If we could assign our Adsl line for all P2P software, (or dedicate line for skype and other IM) while keep our main line clean for business. Today it's possible to achieve it only by port assigning, not by Layer 7 pattern.
30 votes -
OSPF support for IPv6
Much easier to use OSPF rather than static routes...
18 votes -
PoE port on 110\120 or Red Device
With it becoming more common to have VoIP phones in home offices it would be an added benefit to have a PoE port on one or more of the 4 Ethernet ports on the ASG110\120 or Red Device. Additionally it could be used to power a single Astaro wireless access point for a small or home office.
3 votes -
SCEP Suport
Hi,
I would like to have support for SCEP in Astaro. Is this at all possible ? It would be a great enhancement for Astaro in the enterprise especially with all the mobility you see now.
6 votes -
Networking: DHCP Release for Interfaces
Like an interface configured as a DHCP Client that has the "Renew" button. I'd like to see the addition of a "Release" button that performs a proper DHCP_RELEASE such as performed by "dhcpcd -k <interface>"
9 votes -
OSPF in Clustering Mode
Currently routes that are learned by OSPF are not installed into the routing tables of slave/worker nodes. Having OSPF routes propagate from the master node to slave/worker nodes would make things easier to configure in a complex network rather than trying to maintain static route tables.
7 votes -
Support Vodafone VDSL
Astaro should also support Vodafone VDSL (VLAN ID 132) in WebAdmin
3 votes -
Networking: Time-Based network interface enable / disable
Switch a whole interface on or off based on time conditions (i.e. guest network interface switched off during non-office hours)
2 votes -
QoS - Automatic Traffic Shaper Groups for RED and VPN tunnels
There is a need for a easier way to make a "fair" traffic shaping for specific services a RED traffic, VPN Tunnels and similar services. Actually it's difficult to set up and maintain working QoS Rules per RED or VPN connection, because every change in topology (new RED devices or tunnels added or removed) requires complete reconfiguration and reassignement of the available bandwidth for these tunnels. In my eyes a good approach would be, if we could:
- define a Bandwidth Group in ASG to guarantee and limit bandwidth for a group (already possible)
- extend the Bandwidth group with the ability…
8 votes -
RED: Configurable RED Service Port
I want to set up an Astaro RED tunnel over port 443 and not 3400. Please make this configurable.
12 votes -
DHCP Static Mapping: Select a Host Definition instead of manually enter the ip address
Just to avoid to enter twice the same IP address (and to modify twice in case of variation), it would be useful in DHCP Static Mapping the possibility to choose a Host Definition instead of manually enter its ip.
6 votes -
WAN Link Balancing by Volume/Amount
We recognized that ASG is not able to handle volume based failover for dedicated lines.
This is a importend feature for our customers
2 votes -
Suppport ISDN
ISDN-Interface for Fallback / Emergency / Remote-Configuration Possibilities
5 votes -
Networking: Support for Cable Modem using L2TP Authentication
Some Cable ISP require you to use a L2TP login to connect to the Internet.
We need a L2TP option in the interfaces to be able to do this connection10 votes -
AstaroOS: Add tcptraceroute
To enable more thorough troubleshooting it would be nice to have either tcptraceroute or a traceroute that supports -T
1 vote -
Authentication: Member Of (Add Groups to User)
It would be a nice feature if we can add Users to Groups directly by editing the User. (Something like a Member of feature)
1 vote -
WebAdmin: Grouping controls for DHCP Servers
Like Firewall rules which work great, it would be nice if you could group / color code DHCP Servers.
If you use WLAN and RED you'll have a lot of DHCP Servers and there is no chance to group them logical (only possible by a naming schema)
1 vote -
Networking: Uplink Monitor Action to Restart Unit
As an augmentation Internet Connection Monitoring, we'd like to have the ability to tell the Astaro to reboot if the internet connection is not available after a predefined interval (say 15 minutes). This would solve issues we have with having to power cycle remote ASG units to get them to reconnect with various ISP equipment.
6 votes -
Networking: Assign DNS Servers via Interface
I would like to be able to assign DNS servers to interfaces. Right now it's global.
10 votes
- Don't see your idea?