If you don’t want to grant full network access use the Transport Extender which allows you to fine tune access to selected LAN resources by declaring specific protocols and ports. Shared resources on the LAN can be advertised using the Network Place option which loads a simple Windows Explorer style interface listing all systems in the same domain or workgroup. You can browse network shares, select files and folders on the remote systems and download them to your system. You can also browse local files and upload these to permitted destinations on the LAN.
During testing we found the S10 easy enough to get to grips with and opted to give the WAN port a static address and connect it to a switch with a bunch of XP PCs hanging of it and acting as mobile clients. On the LAN side we had a Windows Storage Server 2003 NAS appliance providing web and FTP services which we used to test the three SSL VPN functions. Using the Network Extender allowed us to access all systems on the LAN and to test the Transport Extender we defined FTP, HTTP, HTTPS and remote management over RDP for the NAS appliance which were duly advertised in the client portal page. Access can be finely controlled for each user as you can decide which of the three services are advertised, assign fixed or dynamic IP addressing for the Network Extender and activate the web cache cleaner which automatically tidies the client up after a remote session has disconnected.
If you’re using the S10 as your Internet router you can take advantage of its access controls and bandwidth management tools. The firewall can be customised with packet filtering rules, virtual servers can be declared and activated to a schedule and MAC address filtering can be employed. Content filtering in reality is nothing more than URL filtering but you can create policies that combine URL keywords and domains along with restrictions on downloading Java applets, ActiveX controls and cookies. For the price, QoS (quality of service) features are definitely a cut above the rest as you can create multiple profiles which contain a packet flow direction and a selected service plus source and destination IP addresses. Guaranteed, maximum and minimum bandwidth in Kbps can be specified along with DiffServ (differentiated services) which uses gold, silver and bronze traffic classifications.
For too long small businesses have had to struggle with complex IPSec VPNs and the management overheads they generate. Well, not any longer as Billion delivers a well featured SSL-VPN appliance which is far easier to install and manage and a highly affordable choice for small businesses.