The Celestix MSA Security Appliances provide a cost-effective solution for perimeter defense for organizations of all sizes. The MSA appliances are powered by Windows Server 2003 and are equipped with Microsoft Internet Security and Acceleration (ISA) Server 2006. The end result is a fully integrated and out-of-box next-generation enterprise firewall, virtual private network (VPN), and Web cache solution. The MSA appliances provide multinetworking support, easy-to-use and highly integrated site-to-site VPNs, intelligent application-layer filtering capabilities, comprehensive and extensible authentication mechanisms, and vastly improved user interface and management features.

 

 

Celestix MSA Network Diagram Overview

 

 

 

 

Multi-Layer Firewall
• Maximize security with packet-level, circuit-level, and application-level traffic screening.

 

Stateful Inspection
• Examine data crossing the firewall in the context of its protocol and the state of the connection. Dynamic packet filtering opens ports only when necessary.

 

Broad Application Support
• Work transparently with dozens of major Internet applications using secure network address translation (SecureNAT), predefined protocols, and application filters.

 

Integrated Virtual Private Networking
• Provide standards-based, secure remote access with the integrated virtual private network (VPN) services of Microsoft Windows® Server 2003.

 

Integrated Intrusion Detection
• Identify and respond to common network attacks such as port scanning, WinNuke, and Ping of Death. This is based on technology from Internet Security Systems (ISS).

 

Smart Application Filters
• Analyze and control application-specific traffic with application-aware filters that inspect the actual data. Built-in intelligent filtering of HTTP, File Transfer Protocol (FTP), Simple Mail Transfer Protocol (SMTP), e-mail, H.323 conferencing, streaming media, RPC, and more.

 

 

High-Performance Web Cache
• Accelerate users’Web access and save network bandwidth through the fast RAM caching and optimized disk cache store in ISA Server.

 

Active Caching
• Optimize bandwidth usage with proactive refreshing of popular content.

 

Scheduled Content Download
• Distribute content and pre-load the cache on a defined schedule, ensuring efficient use of the network, consistent mirrored servers, and offline availability.

 

 

Multiple Interfaces for Flexible Deployments
• Supporting both auto-sensing 10/100/1000 and 10/100 interfaces, the MSA appliance easily adapts to network requirements, providing advanced levels of security beyond simple inside and outside networks. Using multiple interfaces, networks can be segmented
into more pieces, better separating potential threats from valuable resources.

 

E-Mail Content Screening
• Prevent unauthorized access to mail servers and stop unacceptable e-mail at the gateway.

 

Inspect SSL Traffic
• Provide end-to-end security with Secure Sockets Layer (SSL) bridging, inspecting the encrypted SSL traffic.

 

Secure Publishing
• Protect Web servers, e-mail servers, and e-commerce applications published behind the firewall from external attacks, allowing only authorized traffic.

 

 

Jog Dial Control and LCD Panel for Easy Network Configuration
• Initial installation and network configuration can be performed via the (40x2) LCD panel on the front of the appliance with the jog dial control.

 

Intuitive User Interface
• Focus on the task, not the tool: administer ISA Server with Microsoft Management Console (MMC) based user interface, graphical task pads, and wizards that simplify security and cache management.

 

 

Minimal Deployment Time
• Fully functional security appliance can be configured in as little as 30 minutes. Preinstalled and hardened operating system eliminates many time-consuming setup and installation procedures.

 

Full-featured Security Appliance at a Great Price
• Featuring Microsoft Internet Security and Acceleration (ISA) Server 2004, the MS0 appliance is truly an all-in-one solution offered at a great price.

 

Detailed Logging and Reporting
• Record all firewall and cache activity in standard data formats such as World Wide Web Consortium (W3C) and ODBC. Create graphical summary reports showing application usage, security events, and network activity.

 

 

Intuitive User Interface
• Web GUI for easy setup and configuration. Advanced configuration via Terminal Services (RDP)

 

Policy-Based Access Control
• Enforce Internet usage policy by controlling access by user, group, application, destination, schedule, and content type.

 

Integration with Microsoft Backend Infrastructure
• Authenticate network users with Active Directory/NT domain/RADIUS, or even third party mechanisms such as RSA SecurID. Utilize your existing Microsoft network services such as DNS and DHCP.

 

Monitoring and Alerting
• Track real-time session and performance monitoring data. Define alerts to notify an administrator, stop a service, or execute a script in response to important system events.