Do you recognize a good idea when you see one? We want to hear from you!
Header Image

I suggest you ...

Wireless Security: Isolate Networks Completely

Actually (v7.508) it is not possible to isolate a guest Wi-Fi network from the internal networks completely. Configuration scenario: Separate network for the Wi-Fi guests. DHCP and DNS service for that network on the Astaro. With version 7.508 it is possible the resolve internal hostnames when a request route is set to the internal DNS servers (the forwarders on the Astaro set to DNS servers on the internet). It must be possible to filter out the internal domain names on the guest network.
Another bad thing is that the Wi-Fi guests can access internal Web Servers when they use the transparent Web Proxy on the Astaro. For that setup it is nice to have complete blocking for internal resources. The Web Proxy profiles need a destination setting configurable to destination “Internet” (Network definition).

11 votes
Vote
Sign in
Check!
(thinking…)
Reset
or sign in with
  • facebook
  • google
    Password icon
    I agree to the terms of service
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    Benjamin SchwitzerBenjamin Schwitzer shared this idea  ·   ·  Flag idea as inappropriate…  ·  Admin →

    5 comments

    Sign in
    Check!
    (thinking…)
    Reset
    or sign in with
    • facebook
    • google
      Password icon
      I agree to the terms of service
      Signed in as (Sign out)
      Submitting...

      Feedback and Knowledge Base