Celestix MSA Series Appliances:
Celestix MSA™ security appliances deliver a combination of
performance, reliability, ease of use, comprehensive support
and low price for the deployment of Microsoft’s ISA server firewall
that is unmatched in the industry. This has made the Celestix
MSA family the runaway market leader in ISA server appliances.
Features
and Benefits:
Ease of Deployment:
Celestix MSA appliances are delivered completely loaded and
configured for immediate use. There is no need to install any
additional software. Celestix’s unique SlingSHOT™ appliance
engine with its jog dial and LED display allows the user to
set initial configuration parameters like IP addresses in the
most simple and direct way possible. Installation is typically
performed in about 15 minutes from opening the box to a fully
functional firewall. A single point of contact for both hardware
and software support means that in the unlikely event that questions
or problems should arise they are answered promptly without
any finger pointing.
Seamless Integration with Microsoft infrastructure:
ISA server 2006 integrates seamlessly with major Microsoft
IT applications such as Sharepoint, Exchange Server and Active
Directory. ISA Server is the easiest and most direct way to
give external users access to enterprise applications such as
email, web services or Sharepoint services while maintaining
full access control and policy enforcement.
Ease of Use:
Celestix has made ISA server even easier to use by adding
an intuitive web-based management interface that can control
and monitor all aspects of the ISA firewall. Standard methods
of management are also supported but most users find the web-
based management system much easier to use. The web-based interface
is part of Celestix’s SlingSHOT appliance engine and is unique
to MSA appliances.
State-of-the-Art Security:
Enhanced MSA appliances run Microsoft’s Internet Security
and Acceleration (ISA) server 2006 one of the most advanced
third generation application layer firewalls on the market today.
Celestix enhances the security of ISA Server by prehardening
the operating system to ensure that it is secure against all
known vulnerabilities and exploits.

Superior Reliability, Maintainability and Availability:
Celestix’s SlingSHOT appliance engine makes several important
enhancements to the overall reliability, maintainability and
availability of the appliance that are not found on other appliances
or on general purpose servers that may be used to run ISA. Only
the Celestix MSA appliance with SlingSHOT provides
- a one-button disaster-recovery feature that can restore
the entire system to its last known good state or to the
factory default state. This includes application state as
well as the operating system. Only the Celestix MSA appliance
with SlingSHOT allows
- centralized software update management for secure, simple
and reliable distribution of software patches and new applications.
MSA 6000 and MSA 8000 appliances improve total system
- reliability and availability by making the most-failure-prone
elements hot swappable and redundant to avoid a single point
of failure. Power supplies, RAID disk arrays and fans can
all be replaced without bringing down the system. They have
built in redundancy so that a single failure of one of these
critical elements will not halt the system. All Celestix
MSA appliances can be used with uninterruptible power supplies
for predictable robustness in the event of power failures.
Superior Functionality:
The combination of Microsoft ISA Server 2006 and Celestix’s
MSA appliances delivers much more functionality per dollar spent
than any other firewall appliance. Celestix bundles in as standard
features many functions and capabilities that other manufacturers
offer only as extra price options.
- High Availability: All Celestix MSA appliances support
either Active/Passive or Active/Active failover support.
All models have integrated UPS support. Many models offer
disk redundancy with RAID arrays and all 2U appliances have
dual power supplies.
- Multi-level firewall: layer 1-7 stateful packet inspection
- NAT with application support for dozens of applications
and protocols
- Virtual Private Networking with 100 or more VPN connections
- All Ethernet ports are 10/100/1000 autosensing full
duplex
- SSL traffic inspection
- Integrated intrusion detection
- High performance web cache
- Application publishing (reverse proxy)
- Web filtering or Anti-virus scanning options
ISA Server supports the full range of Microsoft Network Access
Protection with authentication using Active Directory, RADIUS,
Kerberos and third party two factor authentication methods such
as RSA SecureID.
Editions and Models:

Celestix offers MSA appliances in a wide spectrum of feature
and performance configurations to meet the need of customers
ranging from small business with a single protected LAN up to
multi-national enterprises with many data centers and branch
offices.
License Editions:
- Workgroup Edition - Workgroup edition is intended
for organizations with a small number of protected LAN’s.
It is ideal for a company that wants to support up to 100
remote VPN users as well as web application publishing while
simultaneously protecting a local network with a state-of-the
art, third-generation application firewall. Workgroup edition
supports a two-server Active/Passive failover configuration
for high reliability.
- Branch Office Edition - Branch office edition
enhances the common features of ISA Server 2006 with centralized
management of multiple branch office sites. Branch office
edition supports up to 1000 VPN users. High Availability
is supported with Active/ Active failover and Network Load
Balancing between two servers. Centralized management allows
users to easily enforce a common firewall policy and compliance
auditing throughout the enterprise. At least one system
within the enterprise must be running ISA Configuration
Storage Server (CSS), this system can be either a ISA Enterprise
Edition server or the Celestix MSA2000c configuration storage
server.
- Enterprise Edition - Enterprise Edition is the
full featured version of ISA Server 2006 for large enterprise
users. It offers unlimited VPN connections and can support
clusters of up to 32 servers with full active/active fail
over and network load balancing between all servers.
Models:
- MSA2000 - Celestix’s entry level server for small
to medium enterprises, the MSA2000, is recommended for deployments
with 100 or fewer users. It uses an Intel Celeron D processor
to provide the most powerful yet economical application
level firewall appliances available to small to medium businesses.
The MSA2000’s combination of powerful hardware and world
class software far exceeds what is available in any comparably
priced SMB firewall appliance.
- MSA2000i includes ISA Workgroup Edition.
- MSA2000c is a dedicated configuration storage
server.
Note: MSA2000c is not intended as a standalone
security appliance. Its function is to provide remote
configuration management services to a network of ISA
server appliances running Branch Office Edition.
- MSA3000 - The Celestix MSA3000, for medium sized
deployments of 100 to 250 users, increments hardware performance
with a Pentium 4 processor. Additional processor power and
memory ensures that the greater number of users supported
by the MSA3000 will see no degradation in performance.
- MSA3000i includes ISA Workgroup Edition.
- MSA3000b includes ISA Branch Office Edition.
- MSA4000 - The Celestix MSA4000 is designed for
deployments with 250 to 500 users. It uses a Pentium D dual
core processor to ensure that the larger number of users
continues to enjoy high performance. A hardware cryptographic
accelerator offloads computer intensive cryptographic operations
to support VPN users and public key infrastructure with
no degradation in system performance.
- MSA4000i is offered with ISA Server Workgroup
Edition.
- MSA4000b uses ISA Branch Office Edition.
- MSA5000 - The Celestix MSA5000 can support 500
to 750 users with an Intel Core 2-Duo processor. A hardware
cryptographic accelerator performs both symmetric and public
key cryptography to ensure that large numbers of VPN users
do not slow down system performance.
- MSA5000e includes ISA Server Enterprise Edition.
- MSA6000 - When security means availability, choose
the MSA6000. The Celestix MSA6000 is a high reliability
system intended for mission critical applications in large
enterprises. MSA6000 is packaged in a 19” 2U chassis with
fully redundant dual power supplies and a RAID 5 disk array.
All disks, power supplies and fans are hot swappable so
the system has built in redundancy in those components most
likely to fail in service. A hardware cryptographic accelerator
ensures that large numbers of VPN users will not slow down
system throughput.
- MSA6000b includes ISA Server Branch Office
Edition.
- MSA6000e includes ISA Enterprise Edition.
- MSA8000 - MSA8000 is Celestix’s newest and highest
performance appliance. Built on the new Celestix Scorpio-XP
appliance platform, two Xeon Quad-core processors provide
ample performance for the most demanding large enterprise
deployments with up to 2000 users. The MSA8000 is a high
availability 2U appliance with a 2 disk RAID 1 array, dual
power supplies and hot swappable disks, power supplies and
fans.
- MSA8000e includes ISA Server Enterprise Edition.
Plug In Software:
All MSA appliances can be upgraded with additional plug in
software functions.
Websense Security Suite:
Built on an enterprise-class Internet filtering platform,
Websense Enterprise helps companies to improve employee productivity,
conserve bandwidth, and mitigate security risks. Websense Enterprise
integrated with MSA allows businesses to detect and manage employee
access to the Internet and network applications such as Instant
Messaging and Peer-to-Peer. Websense Enterprise leverages the
packet-capturing capabilities of MSA allowing organizations
to scale reliably as transaction volumes increase.
Kaspersky® Anti-Virus:
Kaspersky® Anti-Virus for Microsoft ISA Server is a tightly
integrated solution that protects all incoming HTTP and FTP
traffic on the local network. The application offers protection
not only from viruses, but also from potentially harmful programs.
The solution is based on the Kaspersky Anti-Virus Engine, which
provides one of the highest detection rates of malicious programs
in the world.