Celestix MSA 3200 Series Threat Management Gateway

Features & Benefits:

Celestix MSA™ security appliances deliver Microsoft’s Forefront Threat Management Gateway 2010 for unmatched multi-threat protection with industry-leading ease of use and value. Performance, reliability, and ease of deployment/management backed by expert Celestix customer support have made MSA the world’s best-selling Microsoft security appliances.

Superior security gateway functionality

Microsoft’s Forefront Threat Management Gateway 2010 (TMG) puts fortified layers of best-in-class security functions throughout your network to block, detect, and thwart attacks from beyond the edge, at the edge, and inside your network.

• Web (URL) filtering blocks users from visiting infected websites and lets administrators control users’ access to enforce corporate Web policies.
• Web anti-virus/anti-malware security functions inspect files, scripts and all other forms of portable code to block sophisticated Web-based attacks
• Advanced application-layer firewall secures your network with layer 1-7 stateful packet inspection
• HTTPS inspection examines encrypted traffic to detect and stop malware tunneling.
• Network Inspection (intrusion detection/prevention) thwarts suspicious activity inside the firewall
• Reverse proxy permits secure application publishing
• Forward proxy permits secure Web browsing
• Caching speeds Web traffic and conserves network bandwidth
• IPSec VPN delivers secure remote user access and site-to-site connectivity
• Windows 64-bit Server 2008 R2 operating system

TMG supports the full range of Microsoft Network Access Protection with authentication using Active Directory, RADIUS, Kerberos, Celestix HOTPin™ and third-party authentication.

MSA’s comprehensive security features make possible an immense number of deployment scenarios to let you keep ahead of dynamic security requirements.

MSA appliances deploy quickly and easily

Celestix delivers MSA security appliances fully integrated and configured for immediate use right from the box. Rack, connect, power, and configure your MSA for live security within 15 minutes. Celestix’ Comet™ appliance engine lets you set initial configuration parameters using the MSA’s jog dial and front panel display on the spot. Comet’s™ web UI has set-up wizards that guide you through set up and configuration quickly and easily. For deployment questions, Celestix is your single point of contact for highly expert, prompt technical support for hardware and software.

MSA security is easy to administer Celestix’ proprietary Comet™ appliance-engine software provides MSA series appliance users with industry leading features for easy administration. Besides the jog dial and front panel display UI for headless communication with the network, Comet™ provides users with a web-based management interface for monitoring and controlling all features of Microsoft’s TMG and all Celestix’ MSA appliance features in a single UI. Seamless Integration with Microsoft infrastructure Celestix purpose builds MSA appliance platforms in close cooperation with Microsoft infrastructure experts for seamless integration with Microsoft networking components such as Active Directory, Exchange Server, SharePoint and others. MSA security appliances are the simplest and most robust way to publish enterprise applications such as email, Web services, and SharePoint services while maintaining full access control and policy enforcement.

Superior performance, ease of maintenance, and availability

Because of Celestix’ purpose-built appliance hardware and Comet™ appliance engine software, MSA appliances have earned an international reputation for great performance and reliability. We engineered our 6th generation hardware platforms to optimize the performance of TMG using the latest high-speed components and architecture optimized for 64-bit operations. We harden our appliance hardware platforms by eliminating all hardware components not needed to run TMG. Eliminating extraneous hardware and drivers removes security vulnerabilities and potential points of failure. Simplified hardware also reduces power and cooling requirements for cost savings on energy.

• One button reset and Last Good Version on-box backup features let you experiment with configurations or perform recovery with little or no risk.
• Celestix’ software update system sends you alerts, prescreened updates and patches for the OS, application, and appliance engine through a single convenient UI.
• MSA 6200 and higher capacity models further enhance their reliability by incorporating hot-swappable power supplies, RAID disc arrays and fans. These components have built-in redundancy so that failure of a single component will not halt the system.
• High Availability: Branch and Enterprise Edition appliances can be clustered into active/active high availability arrays.

MSA security is easy to administer

Celestix’ proprietary Comet™ appliance-engine software provides MSA series appliance users with industry leading features for easy administration. Besides the jog dial and front panel display UI for headless communication with the network, Comet™ provides users with a web-based management interface for monitoring and controlling all features of Microsoft’s TMG and all Celestix’ MSA appliance features in a single UI.

Seamless Integration with Microsoft infrastructure

Celestix purpose builds MSA appliance platforms in close cooperation with Microsoft infrastructure experts for seamless integration with Microsoft networking components such as Active Directory, Exchange Server, SharePoint and others. MSA security appliances are the simplest and most robust way to publish enterprise applications such as email, Web services, and SharePoint services while maintaining full access control and policy enforcement.

Usage Scenarios:

Reverse Proxy Deployment

Connecting and Secure Your Branch Offices

Businesses need to connect remote-site branch offices to their corporate headquarters, provide security-enhanced Internet access from branch offices and utilize limited bandwidth more efficiently. Organizations can use MSA appliance (TMG 2010) as a Branch Office Gateway to connect to and secure their branch offices, while efficiently utilizing network bandwidth. By providing HTTP compression -- caching of content, including software updates and site-to-site virtual private network (VPN) capabilities integrated with application-layer filtering -- MSA appliance (TMG 2010) makes it easier to securely expand corporate networks.

Defending Your Environment Against External and Internal Web-Based Threats

Businesses need to connect remote-site branch offices to their corporate headquarters, provide security-enhanced Internet access from branch offices and utilize limited bandwidth more efficiently. Businesses need to eliminate the damaging effects of malware and attackers through comprehensive tools for scanning and blocking harmful content, files, and Web sites. Web access protection with MSA appliance (TMG 2010) can help organizations protect their environments from internally- and externally-originating Internet-based threats. With a hybrid proxy-firewall architecture, deep content inspection, granular policies, and comprehensive alerting and monitoring capabilities, MSA appliance (TMG 2010) makes it easier to manage and protect your network.

Editions & Models:

Celestix offers MSA security appliances in a wide spectrum of feature and performance configurations to meet needs that range from small businesses who have a single protected LAN to multinational enterprises that have several data centers and multiple branch offices.

License Editions:

Workgroup Edition [i] - Workgroup Edition is designed for organizations with a small number of LAN’s. It is ideal for companies who want to support up to 100 remote VPN users as well as Web application publishing, while simultaneously protecting a local network with a firewall that is state-of-the-art.

Standard Edition [s] - Standard Edition is useful in smaller environments which do not require load balancing or failover. It allows for more extensibility than Workgroup Edition by supporting up to 1,000 VPN users.

Branch Office Edition [b] - Branch Office Edition enhances the common features of TMG with centralized management of multiple branch office sites. Branch Office Edition supports up to 100 VPN users. MSA’s with Branch Office Edition supports high availability with active/active failover and Network Load Balancing between two servers. Centralized management allows administrators to easily enforce a common firewall policy and compliance auditing throughout the enterprise.

Enterprise Edition [e] - is the full-featured version of TMG for large enterprises. Enterprise Edition offers up to 4,000 concurrent VPN connections and can be deployed within manageable arrays of up to 50 appliances.

Models:

MSA 3200c - The MSA 3200c is a special purpose appliance that deploys TMG Enterprise Management Server (EMS). With TMG Enterprise Edition, EMS stores the configuration and policy information for enterprise arrays. Network professionals use EMS to maintain consistent configurations and policy across multiple Enterprise Edition appliances and arrays of appliances. One EMS appliance can support a virtually unlimited number of Enterprise or Branch edition TMG appliances. High availability deployments require two EMS appliances.

MSA 3200 - Celestix engineers designed model MSA 3200 security appliances for medium size deployments of 100 to 250 users. MSA 3200 appliances increment hardware performance with an Intel Core 2 Duo processor. Enhanced processor power and memory ensure that the maximum recommended number of users supported by the MSA 3200 will not experience a degradation in performance.

• MSA 3200i includes TMG Workgroup Edition.
• MSA 3200b includes TMG Branch Office Edition.

MSA 4200 - Celestix designed MSA 4200 security appliances for deployments with 500 to 1,000 users. It uses a Core 2 Duo processor to ensure that the larger number of users continues to enjoy high performance.

• MSA 4200i includes with TMG Workgroup Edition.
• MSA 4200b uses TMG Branch Office Edition.

MSA 5200 - MSA 5200 security appliances are built to support 500 to 750 users with a Xeon Quad Core processor with 1333MHz Front Side Bus.

• MSA 5200s includes TMG Standard Edition.
• MSA 5200e includes TMG Enterprise Edition.

MSA 6200 - For an added measure of availability, choose the MSA 6200. The MSA 6200 is a high-reliability security system intended for mission critical applications in large enterprises. Celestix packaged MSA 6200 security appliances in a 19” 2U chassis with redundant dual power supplies and a RAID 1 disk array. All disks, power supplies and fans are hot-swappable with built in redundancy.

• MSA 6200s includes TMG Standard Edition.
• MSA 6200b includes TMG Branch Office Edition.
• MSA 6200e includes TMG Enterprise Edition.

MSA 8200 - MSA 8200 is Celestix high-performance appliance. Built on the new Celestix H2 appliance hardware platform, dual Quad- Core Intel Xeon 5500 Series (Nehalem Architeture) processors provide ample performance for the most demanding largeenterprise deployments with up to 5,000 users. The MSA 8200 is a high availability 2U appliance with a four-disk RAID 5EE array, dual power supplies and hot-swappable disks, and fans.

• MSA 8200e includes TMG Enterprise Edition.

Specifications:

Technical Specifications
Hardware	MSA 3200 Series		MSA 4200 Series		MSA 5200 Series		MSA 6200 Series			MSA 8200 Series
Model	MSA 3200i	MSA 3200b	MSA 4200i	MSA 4200b	MSA 5200s	MSA 5200e	MSA 6200s	MSA 6200b	MSA 6200e	MSA 8200e
Security Application	All-in-one Threat Management (Firewall, VPN, Web proxy, Web anti-virus, Web anti-malware, E-mail security, Network Inspection System)
Ideal for	Small businesses requiring an affordable, integrated security appliance with unmatched ease of use		Small businesses/branch offices requiring an affordable, integrated appliance that grows with their needs		Medium enterprises needing high performance, advanced networking features, and strong security solutions.		Medium enterprises/main offices that need strong security and a solution that offers business continuity.			Main offices/ headquarters with up to 5,000 users that need high availability, enterprisegrade performance & security.
TMG 2010 Ed	Workgroup	Branch	Workgroup	Branch	Standard	Enterprise	Standard	Branch	Enterprise	Enterprise
Recommended Users	500 Users		1,000 Users		2,500 Users					5,000 Users
OS	Windows Server 2008
NLB Array Size	n/a	2	n/a	2	n/a	8	n/a	2	8	8
Max. VPN Connections	100	100	100	100	1,000	4,000	1,000	100	4,000	4,000
CPU	Intel® Core 2 Duo		Intel® Core 2 Duo		Quad Core Intel® Xeon®					2 x Quad-Core Intel® Xeon® Nehelam
Memory	4 GB		4 GB		8 GB					12 GB
L2 Cache	3 MB		6 MB		6 MB					2 x 3 MB
Front Side Bus	1066 MHz		1333 MHz		1333 MHz					Quick Path
Hard Drive	SATA-II 300GB Available Storage (1 x 320GB Hard Drive)		SATA-II 120 GB Available Storage (2 x 160GB Hard Drive)		SATA-II 300GB Available Storage (1 x 320GB Hard Drive)		SATA-II 300GB Available Storage (2 x 320GB Hard Drive)			SATA-II 300 GB Available Storage (4 x 160GB Hard Drive)
Disk Mirror Hardware RAID	-		RAID 1		-		RAID 1			RAID 5EE
10/100/1000 Ports	6									8 (with 10 Gbe ports option)
Power Supply	220W						2 x 300W			2 x 460W
Form Factor	1U						2U
Dimensions (H x W x D) inch	1.75” x 17.5” x 12.25”						3.5” x 17.5” x 17.5”			3.5” x 17.5” x 22.5”

 

Subscriptions & Upgrades:

Web Security Subscriptions

Your Celestix MSA appliance can be enhanced with higher security via Microsoft ForeFront TMG Web Protection Services. It provides continuous updates for malware filtering and access to cloud-based URL filtering to protect against the latest Web threats. Due to Microsoft's licensing programs, Celestix is not authorized to provide these services. This service can be purchased via Microsoft ForeFront Resellers. Please click for a Microsoft reseller near you.

Celestix MSA Upgrade Program

Introduction - By participating in the Celestix Upgrade Program, you ensure your network is protected by the very latest in security, reliability, and performance available without hurting your bottom line. The Celestix Upgrade program is available to current Celestix customers with earlier generation products wishing to upgrade to our latest line of threat management solutions.

Details - Celestix customer is able to upgrade an earlier generation Celestix appliance, to eligible new Celestix solutions at 25% off the standard purchase price. To activate Upgrade products one must simply retire the eligible earlier generation Celestix appliance already on their account with 8x5 or 24x7 support contract. Not all devices are eligible for all Upgrade appliances. Specific eligibility details are outlined in the “Eligibility Chart”.

How to Purchase Celestix Upgrade Products - If you have an eligible product you would like to upgrade, simply purchase the Upgrade part number that corresponds to the desired available Upgrade product. Celestix products with unique Trade Up part numbers are available through this website. The discount is built into the price so you see the savings instantly.

Activating Upgrade Products - During activation of the Upgrade product you will be required to identify an eligible product on your account to be replaced. The specific device must be active in order to complete the activation of the Upgrade product. (To verify that the device you wish to replace is active and please contact your local reseller or Celestix at upgrade@celestix.com This e-mail address is being protected from spambots. You need JavaScript enabled to view it ) Once the eligible device has been identified, it will be retired and the new box will become active.

• Retired product will be removed from the customer’s Support contract account
• Retired product will not be eligible for upgrades, support, or software updates

Further Action Required - To complete the process, a certificate of retirement (CORE) must be completed and returned to Celestix within sixty (60) days of activation. The CORE can be returned via an email to upgrade@celestix.com This e-mail address is being protected from spambots. You need JavaScript enabled to view it. The CORE will certify that the retired device used in the upgrade has been destroyed and properly disposed of in accordance with local environmental standards. Celestix reserves the right to deactivate the new Upgrade product if at any time if the Upgrade product is determined to have been activated in violation of any of the Upgrade Program’s Terms and Conditions.

Eligibility Chart:

Terms and Conditions:

1. Celestix Networks reserves the right to deactivate an Upgrade product at any time if found to be in violation of program guidelines.
2. Distributors or resellers found to be abusing the Celestix Upgrade Program may face penalties from Celestix, which may include but are not limited to: termination of partnership status, loss of specific partnership benefits as deemed appropriate by Celestix, and/or exemption from participating in any or all Celestix promotions and/or programs that benefit partners and/or end users.
3. Celestix reserves the right to change or cancel any aspect of this program at any time. 
4. Upgrade offer valid for Celestix MSA Series products only.
5. For certain products Upgrade is restricted, review “Eligibility Chart” for qualifications. 
6. In order to be eligible for the Upgrade Program, the device being upgraded must be activated in the same Support contract account that the new Upgrade product will be activated in.
7. Device being upgraded must not have been previously retired or otherwise deactivated prior to activation of new Upgrade product.

Documentation:

Celestix MSA Series Data Sheet (.PDF)