a lot of questions from a newby

[Tgellan]

Hello,

I´m new to this, have read most of the ONLINE documentation. Didn´t find a link to the "normal" documentation...

1. If I buy the 3 user Standard, may I then upgrade to the Pro 6 user for only the difference in prizing? Or does the standard cover all my needs so far (see the other questions)?

2. I do use a DSL router, the WinGate server will have 3 NICs. NIC-A connected through the router to the internet (Firewall setting in router such that only this IP may adress the internet) NIC-B connects to the router to provide access for PCs connected by this router. NIC-C connects to a distant HUB, regrouping a few other (less secured, infected?) PCs on a DMZ. Is this configuration possible with WinGate / secure?

3. ISP has a monthly download limit, may I set an equivalent in the users definition? Ok, I found a few topics on this, but my aim is not to completely limit the user, but rather to inform that the limit is reached and that from now on every download will increase the costs... Or maybe to enable the users to check the current summed up download in total and on a per user base...? So the kids will have the bill presented at the end of the month ;-) and can´t rely on not knowing :-(

4. As I understood there is no possibility to have ZoneAlarm run on the same PC as WinGate due to dll limitations and so on.... As I have both ZA and PC-Cillin as a registered version (1 and 2 licences), I´m interested in continuing to use them. Is there any clever solution? Ok, ZA I may leave it, as similar functionality is integrated in WG, but the AntiVirus?

5. Are there any severe known limitations in WG? Like restricted use to ebanking or such?

Thanks

[adrien]

Hi

1. Upgrades within the same version number are based on the difference in license cost, plus a $10 handling/transaction surcharge, so the list price for an upgrade from WinGate 6.0 Standard 3 concurrent users to WinGate 6.0 Professional 6 concurrent users is $100 USD

2. The DMZ features of WinGate are designed for protection of servers that have public IP addresses. WinGate does not do NAT from a DMZ interface to the Internet (it routes instead). If you don't have public IPs for these machines you could make this another Internal interface, but then you don't get the same control over inter-internal network traffic. If this isn't a problem, then WinGate should be fine in this configuration.

3. This is a bit more tricky. You can set a hard limit, but then the errors are not likely to suit your purposes. Also, depending on how your users connect to the Internet, the traffic accounting may be inaccurate as some traffic may not be counted in the user traffic data.

4. Actually we have run ZoneAlarm on the same machine as WinGate before. It seems to cause more problems with the WinGate VPN than anything else. As for antivirus, depending on what it does (i.e. if it scans traffic by intercepting it there could be problems), then in general just getting it to not scan the WinGate log files can improve performance a lot, without you having to uninstall it completely.

5. Hmmmmmmmm... none spring to mind of that ilk... perhaps others could comment here.

Adrien

[Tgellan]

1. Upgrades within the same version number are based on the difference in license cost, plus a $10 handling/transaction surcharge, so the list price for an upgrade from WinGate 6.0 Standard 3 concurrent users to WinGate 6.0 Professional 6 concurrent users is $100 USD

Ok, this sound great... Only linked to version numbers? So, if for instance I do come around in lets say a few years, it will still count? Exagerating of course, but you get the idea...

2. The DMZ features of WinGate are designed for protection of servers that have public IP addresses. WinGate does not do NAT from a DMZ interface to the Internet (it routes instead). If you don't have public IPs for these machines you could make this another Internal interface, but then you don't get the same control over inter-internal network traffic. If this isn't a problem, then WinGate should be fine in this configuration.

Ok... So if I do understand this right... I may use the configuration as described, but instead of the notion of DMZ for NIC-C, that one will be defined for WG purposes in the same way as NIC-B? Behind I then may connect it to another router with policies and so on. Which should give me two separated nets with protection and so on?

3. This is a bit more tricky. You can set a hard limit, but then the errors are not likely to suit your purposes. Also, depending on how your users connect to the Internet, the traffic accounting may be inaccurate as some traffic may not be counted in the user traffic data.

OK... finally found the doc, thought there were more than "only" the help files... So now I tend to another solution: Instead of blocking, I just allow for full download, but playing on the logs, didn't get it in the docs right now.
So the idea is to have a per user download log sumery, which I then could use to have the kids know of their download rate. Is that possible? Because I understood the logs as per WG server and not per user... or on transaction base and not summed up? Hope that may be realized?!

4. Actually we have run ZoneAlarm on the same machine as WinGate before. It seems to cause more problems with the WinGate VPN than anything else.

So? It could be possible to have ZA run on the server???
Anyway that will be on my own PC ;-)))

As for antivirus, depending on what it does (i.e. if it scans traffic by intercepting it there could be problems), then in general just getting it to not scan the WinGate log files can improve performance a lot, without you having to uninstall it completely.

Would it be possible to use virtual NICs? So that the antivirus makes a gateway from NIC-A to PseudoNIC, and WG takes that PseudoNIC as its LAN connection? (Don't know if the idea of PseudoNIC may be realized... but I think it should?)

5. Hmmmmmmmm... none spring to mind of that ilk... perhaps others could comment here.

Grin

Thanks for your time