Small business and home users are starting to reap the benefits of being a prime target sector for many hardware and software vendors. The demographic profile of existing and future Internet users has led to the development of products such as the ISB2LAN-H4 at prices that were inconceivable only a few years ago. The product is aimed primarily at customers who wish to provide multiple users with a shared Internet connection, while maintaining peace of mind with firewall protection.

The most common mistake regularly made by suppliers in this marketplace is to inflict installation procedures that require decoding and implementation by experienced administrators. The ISB2LAN-H4 eschews this trend by being one of the simplest pieces of hardware this reviewer has ever installed. This is doubly impressive when the range of functions is considered.

The ISB2LAN-H4 was installed on a Windows NT LAN but also supports Mac and Linux configurations. The default settings will offer adequate functionality for the majority of users but more experienced administrators with the need or inclination will be kept occupied by an impressive array of configuration options. These include reserving IP addresses for individual machines, creating virtual servers, sharing a single email account, and so on.

The firewall relies on network address translation (NAT) as its first line of defense. The multiple IP addresses on the private LAN are translated to one public address that is sent out across the Internet, ensuring that the address of a PC on the LAN is never transmitted on the Internet. It is this technology which enables the ISB2LAN-H4 to be used with low-cost Internet accounts such as xDSL or cable modems, where only one TCP/IP address is provided by the Internet service provider (ISP). With the ISB2LAN-H4 the user is able to have numerous private addresses behind the single address provided by the ISP. This functionality translates into ‘simple and cheap’ for small business owners.

The functionalities described above meet well-defined market needs, but the proof of the pudding, as ever, is in the performance. The most common downfalls for similar products are dropped connections, slowdowns and freezes, leading to a frustrated and irate user group. The ISB2LAN-H4 was put through its paces by eight concurrent users carrying out normal day-to-day activities, including miscellaneous surfing, Quicktime streaming and real audio/video. Over a period of extensive activity the ISB2LAN-H4 managed to retain all connections with little impact on speed and no freezes.

The ISB2LAN-H4 allows up to 253 computers to share a single Internet connection with just over 2.5Mb of bi-directional throughput and a built in four-port hub. If your organization has a virtual private network (VPN) the ISB2LAN-H4 supports multi-session IPsec and PPTP ‘pass-through.’ This will allow multiple clients on the LAN to read incoming packets. Security features allow administrators to implement password protection to prevent unauthorized users from modifying the configuration. The access control facilities are developed enough to limit Internet and email access by individual workstation.

One issue which will arise for many users sooner rather than later is the fact that many protocol developers chose to ignore NAT when designing suites. The good news is that the ISB2LAN-H4 has methods of dealing with such ‘rogue’ protocols. One way to deal with them is by defining a ‘special application.’ This option allows you to specify which ports and which protocols (TCP or UDP) certain protocols use. It can be useful, but it comes at a price – only one computer on your network can use the special application at a time.

There are a few applications that refuse to work even when allocated ‘special’ status. In this instance there is only one option, which requires you to ‘expose’ a computer. To quote ISB2LAN’s manual, “This feature, if enabled, allows one (1) computer on your LAN to be exposed to all users on the Internet, allowing unrestricted two-way communication between the ‘Exposed Computer’ and other Internet users or servers.” This is a powerful feature, but should be used with caution as you are no longer afforded the protection of the firewall and also only one computer at a time can be exposed.

System requirements are for a 10-base T Ethernet RJ45 connection, TCP/IP web browser. You should, of course, have an account from an ISP, a cable or xDSL connection, cable or xDSL modem with RJ45 connection or interface and an installed network interface card. The documentation is available online in searchable HTML format, which is fast becoming a standard requirement, as well as on disk or CD-ROM. This will allow rapid access to this comprehensive resource.

The ISB2LAN-H4 offers an easy to use product. The set-up for default mode is extraordinarily simple and should allow even committed technophobes a successful installation. Small business owners or home office workers seeking an inexpensive Internet sharing device can be assured that the ISB2LAN-H4 represents a stable solution. The security features will be a welcome bonus and represent a good first line defense.

The decision for many will be based on cost, and it seems likely that the cost savings of shared Internet access will represent an immediate payback for many small businesses. It is recommended that even if you fall outside this category, and cannot justify the purchase on cost alone, you should consider the security protection afforded by the ISB2LAN-H4.
   

SC On-Line
SC Magazine
www.scmagazine.com