Gajshield GS 500A

This device is equipped with IPS, VPN, URL filtering, anti-virus and
bandwidth management but doesn't have a SPAM Filter. But still it can scan
viruses from incoming and outgoing mails. Configuring this device is not easy,
either you should have full knowledge of the device or you should get it
configured by qualified personnel. This device has four 10/100 Ethernet ports,
one console port and two USB ports. Each of the ethernet ports can be configured
individually for separate usage, like LAN, WAN and DMZs. Leaving the first port
which can only work as a LAN port, the other three can be configured for load
balancing features, both for active-active and active-passive requirements. Like
others, this UTM provides virus screening over SMTP, POP3, HTTP and FTP.
Different addressing modes provided by this device includes NAT, PAT, one-to-one
NAT, etc. It also has URL filtering, which can be applied over a group for
allowing or disallowing specific websites and you can configure this
functionality on a schedule basis. That means you get the liberty to define the
time range when any specific sites will be open or closed. For instance you can
disable Orkut from 9 am to 5 pm, and after that Orkut will be enabled till 9 am
of the next morning.

Tests and results For testing vulnerabilites we ran Nessus, with the default
condition of the device, and it didn't show any warning and holes in the device.
The anti-virus performed pretty well and let through only 9% of viruses which is
actually one of the best reasult we get. We also tested it for some recent
viruses, and the results were up to the mark. This one doesn't have a built in
anti-spam, so if you are planning to buy this device then make sure that you
have other provisions for handling spams. We then tested it for spoof attacks,
which it successfully detected; however, it was not able to block it. Then we
tried for denial-of-service attacks, and this device was not even able to detect
it.

Bottomline: A nicely priced product for SMBs but doesnt have a spam
filter inbuilt into it.

BOTTOM LINE: A good UTM for SMB's, but only if you are planning to use
it as a second line of defense and already have a SPAM filter and client level
anti-viruses running.