LITE2+ Leverages Capabilities Of Broadband Connections

VPN connectivity is becoming a key requirement for remote workers, and the LITE2++broadband gateway meets that concern by employing both a PPTP VPN server and IPsec VPN support. The PPTP-based VPN server offers a quick, easy VPN solution for users running Windows-based systems, and it also offers an easy way for solution providers to remotely support customer networks. For those desiring enhanced security over ease of use, the unit provides IPsec-based VPN connectivity. IPsec is also a good choice for secure connections between routers or branch offices.

The LITE2++is designed to be easy to set up, but CRN Test Center engineers were disappointed with some of the default setup tasks. First, the unit is shipped with the integrated DHCP server disabled, which forces installers to manually turn on the system or use the included CD to ease initial IP setup.

Most vendors in this field choose plug-and-play simplicity and eschew manual IP setup during initial install. In SnapGear's defense, initially disabling the DHCP server can prevent problems on existing networks, but odds are the LITE2++would be the only DHCP server on a small network.

Once initial IP setup is accomplished, installers can quickly set up the basic connectivity features of the unit using a browser-based setup wizard. The wizard configures initial WAN and LAN settings.

CRN Test Center engineers found the browser-based interface intuitive but lacking in some key features. For example, it lacks the ability to control the range of leased addresses via the unit's integrated DHCP server and can support only five port-forwarding rules. Online help is abundant, but printed manuals included with the unit tend to gloss over key configuration elements.

Those concerns aside, the unit provides all the important features needed in a branch or small-office environment, along with some additional capabilities. For sites lacking static public IP addresses, the LITE2++offers Dynamic DNS, a service available from third parties that associates a static URL with the unit's non-static external IP address. Dynamic DNS enables solution providers to bring Web services, remote access and VPN support to almost any broadband-based connection.

Solution providers will want to implement Dynamic DNS as soon as it's feasible to add remote support to the equation. Another advantage offered by most Dynamic DNS services is the ability to remap ports. Some broadband ISPs are blocking ports 80 and 21, which prevents setting up an Internet-accessible Web server or FTP server. Port remapping allows requests to be forwarded to alternate ports. Solution providers should always check the ISP's policies to make sure enabling such features are covered under the ISP's terms of service.

The LITE2++'s integrated firewall employs stateful packet inspection and robust filtering options, which should meet the needs of most small businesses. SnapGear offers optional subscription-based content filtering, which can be used to control access to Web sites based upon predefined categories.

Security-aware offices will appreciate the unit's integrated intrusion-detection features, which allow administrators to quickly monitor and block suspicious activities such as port scans, probes and other questionable external activities. Those leveraging remote-access and VPN services will find that the included intrusion-detection capabilities offer peace of mind.

Smaller offices and solution providers will benefit from the unit's PPTP VPN server, which can support several remote users. The unit also includes a PPTP VPN client, allowing an easy method to link the unit to a remote VPN server.

Those looking to up the security ante while connecting to remote routers can implement the unit's IPsec-based VPN. Although setting up an IPsec VPN can be a complex project, SnapGear provides a combination of documents and white papers to ease setup of IPsec-based VPNs.

Solution providers remotely supporting the device will find its ability to support dial-in modem connections a welcome feature. In many cases, remote administrations have to force a reset of a router, and Internet-based connectivity can be lost. Dial-in support solves that dilemma by opening another route to the unit's administration console.

Solution providers will find that SnapGear's LITE2++offers a robust feature set that should meet the needs of any small broadband-connected office. Despite initial configuration missteps and some limiting features, solution providers will appreciate many of the extras found in the unit, especially the combination of PPTP VPN support, Dynamic DNS, intrusion detection and content filtering.

CHANNEL PROGRAM SNAPSHOTS
>SNAPGEAR LITE2
PRICE: $299
MARGIN: 25 to 40 percent
WARRANTY: one year
DISTRIBUTORS: Ingram Micro
TECH RATING:

CHANNEL RATING:

CHANNEL OVERVIEW: West Jordan, Utah-based SnapGear provides pre- and post-sale technical support over the phone to help solution providers close deals. The vendor's solution provider Web site includes basic marketing and technical resources and competitive sales information, and a monthly newsletter updates partners on technical and sales news. Technical training is provided quarterly at the vendor's headquarters, and MDFs are available.

Note: Vendors can earn up to five stars for technical merit and five for their channel program. If the average of these two scores is four stars or greater, the product earns CRN Test Center Recommended status.