Get Adobe Flash player
Featured Partners
Please wait while JT SlideShow is loading images...
Aperture HostInTouch Tech
JT SlideShow Module v1.5.1

Solutions by Competitor

Astaro Essential Edition vs. Untangle Lite

The unified threat management market is filled with competitors with different offerings of the same features. This review is a comparison of Astaro Essential Software Appliance versus Untangle Lite.

Let’s start with what Astaro and Untangle give you for free.

Astaro Essential Edition

1. Router – The router mode allows you to use Astaro as an internet NAT router on the edge of your network.
2. Bridging- The bridge mode allows you to install Astaro between an existing firewall/router and the core switch to achieve all the functionality you need without having to replace the existing firewall/router.
3. DNS Server – Astaro has a DNS server built in so small networks without a local DNS server can resolve domain names both internally and on the internet. It also stores DNS records in a proxy so that repeat DNS requests are filled more quickly.
4. Dynamic DNS – Astaro supports the use of dynamic DNS services.
5. DHCP Server – Astaro has an DHCP server built in to assign dynamic IP addresses to the local network. It also provides DHCP relay services to existing DHCP servers on the network.
6. NTP – Astaro supports the use of NTP (network time protocol)
7. QOS – Astaro uses Automatic QOS to determine quality of service rules for VoIP and other popular services.
8. Firewall – Astaro includes a stateful packet inspection (SPI) firewall as well as network address translation (NAT).
9. VPN – Astaro supports PPTP and L2TP over IPSEC VPN’s.
10. Reports – Astaro generates logs and reports relating to machine health, network usage, and network security statistics.
11. Interface – Astaro includes an web based GUI with multiple language support for setup, backup and restore, administrative alerts, and SNMP configuration.
12. Management - There is also an Astaro command center, which is a web based GUI that allows you to administer multiple Astaro devices in different locations.

Untangle Lite


1. Router – Untangle router mode allows you to use Untangle as an internet NAT router on the edge of your network.
2. Bridging – Untangle bridge mode allows you to install untangle between an existing firewall/router and the core switch to achieve all the functionality you need without having to replace the existing firewall/router.
3. DNS Server – Untangle has a DNS server built in so small networks without a local DNS server can resolve domain names both internally and on the internet.
4. Dynamic DNS – Untangle supports dynamic DNS services.
5. DHCP Server – Untangle has a DHCP server built in to assign dynamic IP addresses to the local network.
6. NTP – Untangle supports the use of NTP (network time protocol)
7. QOS – Untangle uses QOS and must be manually setup with QOS rules for VoIP and other services.
8. Firewall – Untangle includes a stateful packet inspection (SPI) firewall and network address translation (NAT).
9. VPN – Untangle has Open VPN built in and can achieve site to site and site to client SSL VPN connections. It cannot however establish VPN connections using IPSEC.
10. Reports – Untangle generates reports and logs for all its modules, and delivers them in a PDF format via email or through the GUI.
11. Interface – Untangle provides a unique web based GUI to display all of its modules. The GUI is in the form of a virtual server rack and is very intuitive and easy to use. There is however no alternative to the Astaro command center, so each device must be administered individually.
12. Web Filter – Untangle includes free of charge a decent web filter. It will filter web traffic as it passes through the device and either pass, log, or block the traffic. The web filter has a list of 15 categories of web sites that allow you to easily stop users from browsing sites that contain pornography, gambling, violence, ect. The web filter also had pass and block lists that allow you to statically pass or block specific sites. The only weak area of the open source web filter is that it does not scan HTTPS traffic and you cannot enforce safe searches through portal sites like Google and yahoo.
13. Spam Blocker – Untangle includes free of charge a spam blocker that filters SMTP, POP, and IMAP traffic for spam messages. You can drop spam over a certain spam score, quarantine suspicious mail, or mark suspicious mail as spam and pass it along to the end user. The spam blocker also includes tar pitting functionality, domain blacklist and white list capability, as well as other helpful features.
14. Virus Blocker – Untangle includes free of charge a virus blocker that filters websites, downloads, and emails for viruses. If it catches a virus it will block it at the gateway preventing it from reaching the network. The virus blocker module includes some basic settings, such as file type categories, white lists, and black lists.
15. Spyware blocker – Untangle includes free of charge a spyware blocker that will filter web traffic for malicious spyware cookies and active X controls. It includes some basic settings, such as white lists, black lists, and file types.
16. Protocol Control – Untangle includes free of charge a protocol control module that allows you to block specific network protocols such as P2P file sharing applications and streaming music from running inside your network. Protocol control includes a large amount of settings and categories that allow you fine grain control over what protocols you do and do not allow to run on your network.
17. Ad Blocker – Untangle includes free of charge an ad blocker module that filters web traffic for banner advertisements and pop ups and strips them out of the web page before it is displayed to the end user.
18. Intrusion prevention – Untangle includes free of charge an intrusion prevention service module (IPS) that allows you to block intrusion prevention attempts from outside your network. It contains a vast list of well known and emerging intrusion prevention techniques and will actively deny entry if one of those techniques are employed by a computer hacker.
19. Attack Blocker – Untangle includes free of charge an attack blocker module that will actively block common denial of service (DOS) and other disruptive network attacks from both inside and outside the network. It scans both internal and external traffic for excessive packets and either passes, limits, drops, or rejects the traffic depending on it’s score.
20. Phish blocker – Untangle includes free of charge an Phishing blocker that filters out phishing (information stealing) emails and web sites before they reach your users.
21. Captive Portal – Untangle includes free of charge a captive portal feature that lets you display terms of service and acceptable use policies to guests and users before they can access the internet. The captive portal also allows you to setup local or radius authentication so that users must sign in before being able to surf the web.

Conclusion

Astaro and Untangle both share some nice and attractive features. If your considering Astaro as a decent SMB firewall you really cant go wrong here. However, if you’re looking for more features and a real open source unified threat management (UTM) solution, then Untangle is the clear winner.

Astaro leaves a lot to be desired in its free offering. As a basic firewall router it holds its own against Untangle, however if you look past that you will find a large void of services. There is no web filter, virus blocker, spam blocker, spyware blocker, ad blocker, phish blocker, or captive portal. They have also decided to leave out key pieces on the security side, such as IPS, attack blocking, and protocol control.

Astaro does have its advantages over Untangle. For instance, its native support of IPSEC is very attractive. Another attractive offering is the Astaro command center, which is nice for IT support companies and managed service companies.

These things alone are not enough to set it apart from Untangle however. For most SMB users, Untangle provides better features and value than Astaro, hands down.

 

Customers that switch from Sonicwall to Untangle, do so because they already know the value of network security devices, but need to cut costs. Instead of running multiple SonicWALL products, such as a Sonicwall Anti-SPAM Gateway and a Sonicwall Content Filtering Service, Untangle customers enjoy all these security features consolidated into a single system.

Untangle provides robust web content filtering, virus & spam blocking, and advanced security protection at a fraction of the price of Sonicwall.

“Untangle® gives us everything we need for keeping our staff and students safe, and at a cost about half that of competitors."

David Palme, Director of Technology, Portland Public Schools

 

Recommendation

Consider the Untangle Premium package, which includes eSoft Web Filter, Kasperksy AntiVirus and Commtouch Anti-Spam services.

  • Filter websites by critical categories for CIPA such as Pornography, Illegal Drugs, Dating, and Hate and Aggression, as well as manage access to web mail, shopping, proxies, and other sites
  • Control Internet usage based on 53 categories that covers over 100 million URLs.
  • URLs that have not been seen before are processed and classified in real-time, allowing you to stay one step ahead
  • Block https/ssl sessions by IP, thwarting a popular work around for standard web filtering solutions
  • Mandate SafeSearch usage across all major search engines, centrally.
Other features include:
  • Policy Management – Create web usage policies and rules based on user and/or time of day, e.g. for teachers, staff, and students of different age groups.
  • Monitoring - Untangle Reports lets you see who’s doing what on your network, including reporting by active directory user name. This lets you monitor for violations of your acceptable use policy and identify suspect behavior
  • Control Instant Messenger and other P2P applications – port hopping applications such as instant messenger and bit torrent can bypass standard firewall rules, consume network traffic, introduce malware, and open a door for predators.
  • Block Viruses, Spyware, Spam, Phish, and Other Malware – Untangle scans all traffic including http and ftp for viruses, worms, spyware, phishing, and other threats to protect your network and the personal information of your users.
 

Customers that switch from Barracuda to Untangle, do so because they already know the value of network security devices, but need to cut costs. Instead of running three appliances, such as a Barracuda Spam & Virus Firewall, a Barracuda Web Filter and a Barracuda IM Firewall, they have consolidated all these functions into a single system using only Untangle.

Untangle provides robust web content filtering, virus & spam blocking, and advanced security protection at a fraction of the price of Barracuda.

“Untangle® gives us everything we need for keeping our staff and students safe, and at a cost about half that of competitors."

David Palme, Director of Technology, Portland Public Schools

 

Recommendation

Consider the Untangle Premium package, which includes eSoft Web Filter, Kasperksy AntiVirus and Commtouch Anti-Spam services.

  • Filter websites by critical categories for CIPA such as Pornography, Illegal Drugs, Dating, and Hate and Aggression, as well as manage access to web mail, shopping, proxies, and other sites
  • Control Internet usage based on 53 categories that covers over 100 million URLs.
  • URLs that have not been seen before are processed and classified in real-time, allowing you to stay one step ahead
  • Block https/ssl sessions by IP, thwarting a popular work around for standard web filtering solutions
  • Mandate SafeSearch usage across all major search engines, centrally.
Other features include:
  • Policy Management – Create web usage policies and rules based on user and/or time of day, e.g. for teachers, staff, and students of different age groups.
  • Monitoring - Untangle Reports lets you see who’s doing what on your network, including reporting by active directory user name. This lets you monitor for violations of your acceptable use policy and identify suspect behavior
  • Control Instant Messenger and other P2P applications – port hopping applications such as instant messenger and bit torrent can bypass standard firewall rules, consume network traffic, introduce malware, and open a door for predators.
  • Block Viruses, Spyware, Spam, Phish, and Other Malware – Untangle scans all traffic including http and ftp for viruses, worms, spyware, phishing, and other threats to protect your network and the personal information of your users.
 

Organizations that use WebSense have long identified the need for robust web content filters. Indeed, web content filtering is the primary need of 87% of our customers, too. Many had been using WebSense for years, but could no longer afford their expensive subscription fees.

Issue

 

  • In the current budgetary climate, you are under pressure to cut vendor costs.
  • WebSense annual subscription renewal fees are expensive.
  • Web content filtering is now a required IT service.

What's an IT manager to do?

Untangle provides robust web content filtering at a fraction of the price of Websense.

“Untangle® gives us everything we need for keeping our staff and students safe, and at a cost about half that of competitors."
David Palme, Director of Technology, Portland Public Schools

Recommendation

If robust web content filtering is your primary need, consider the Untangle Standard package, which includes eSoft Web Filter.

  • Filter websites by critical categories for CIPA such as Pornography, Illegal Drugs, Dating, and Hate and Aggression, as well as manage access to web mail, shopping, proxies, and other sites
  • Control Internet usage based on 53 categories that covers over 100 million URLs.
  • URLs that have not been seen before are processed and classified in real-time, allowing you to stay one step ahead
  • Block https/ssl sessions by IP, thwarting a popular work around for standard web filtering solutions
  • Mandate SafeSearch usage across all major search engines, centrally.

Other features include:

  • Policy Management – Create web usage policies and rules based on user and/or time of day, e.g. for teachers, staff, and students of different age groups.
  • Monitoring - Untangle Reports lets you see who’s doing what on your network, including reporting by active directory user name.
  • Control Instant Messenger and other P2P applications – port hopping applications such as instant messenger and bit torrent can bypass standard firewall rules, consume network traffic, introduce malware, and open a door for predators.
  • Block Viruses, Spyware, Spam, Phish, and Other Malware – Untangle scans all traffic including http and ftp for viruses, worms, spyware, phishing, and other threats to protect your network and the personal information of your users.
 
Need Help?

LiveZilla Live Help

News Flash
Untangle 9.0, IPSEC, and Enterprise Hardware

Untangle Appliances is proud to announce the upcoming addition of IPSEC and enterprise appliance platforms to our existing appliance line up. Untangle 9.0 will now include IPSEC VPN interoperability with other routers and firewalls on the market, as well as site to site IPSEC VPN between 2 untangle appliances.

Read more...
Monthly Poll
Which premium feature is most useful?