Yoggie's mini-computer offloads security duties

If you just don't have the spare RAM, processor cycles or patience anymore to run your daily allotment of security programs, you might want to consider offloading the task to the new Yoggie Gatekeeper mini-computer. The Linux-based device has a pair of Ethernet ports, one for taking in the unwashed internets, and one for sending the newly-scourged connection to your computer. In between, the Yoggie can manage firewall, VPN, virus, spyware, spam and phishing protection duties, along with all sorts of other security good stuff. The device also works for enterprise deployments, allowing IT staff to monitor workers in the field. Configurations include "Basic" and "Pro" versions, with 416MHz and 624MHz processors respectively, along with 64MB or 128MB of SDRAM and 64 or 128MB of flash memory, expandable via SD. Along with the obvious security benefits of this device, we're guessing good things can happen with that much processor, RAM and Linux kernel in one place, especially with prices at a mere $180 and $220 a pop.

[Via LinuxDevices]

[Tuna @ Sep 26th 2006 11:13PM]

That's a sweet little device. I'll add that to my parts list when I consider buying a new computer for gaming so I don't have to close my anti-vir program to get max performance when I am gaming.:p

[Russ @ Sep 26th 2006 11:29PM]

if they can keep miniaturizing it - we'll eventually have one that's the size of the RJ45 connector on the end of an ethernet cables.

which would also be good for snooping on data..

[hoohoo @ Sep 26th 2006 11:30PM]

this device has some great potential for nefarious activities. i like.

[Gr1zz @ Sep 26th 2006 11:56PM]

those specs could give the WRT a run for its money.

[Reg @ Sep 27th 2006 12:38AM]

[From the article]
"It is a miniature and robust computer that uses a fully hardened and secure embedded OS with the sole purpose of protecting the Windows XP platform."

Hah! I like the subtle inuendo -- Linux is secure, XP is not.


Cool device though. Very useful for enterprise users and admins.

[adrian @ Sep 27th 2006 1:27AM]

I hope you won't lose it, or leave it behind. Just imagine the functions if that technology will become widespread.

[Kevlar @ Sep 27th 2006 1:36AM]

So.. wait. If it's a separate OS, how will it scan files I open for viruses via an ethernet port? Sure, the internet is one way to get viruses, I can see the thing totally protecting that avenue of infection, but what about burned CDs, USB drives or other flash cards? It's like bolting the front door, but leaving the back door screen swinging in the breeze.

[Kevlar @ Sep 27th 2006 1:40AM]

In addition to my previous post, if it uses USB, which from the photo, it might, won't the Windows XP drivers be just as resource intensive by monitoring every file opened, or worse, copying every opened file via the usb connection onto the flash to be inspected? What if I open a 4 gig RAR file that is too big for the flash memory?

Also, what about Wireless networks. How is it going to monitor them?

Don't get me wrong, here, I'd love one of these to play with. I'm just asking questions that werent answered in TFA.

[Andy @ Sep 27th 2006 9:42AM]

It's not meant to provide protection to your local system, it just provides protection against the internet traffic. Think of it more as a redundant AV rather than an AV replacement.

Now, if this thing can do a full L2TP IPSec VPN I'd buy one in a heartbeat.

[TGIF @ Dec 14th 2006 4:24PM]

The USB connection is primarily for power.

An /optional/ low level driver allows the unit to wedge itself between your OS and your WiFi, so that your wireless traffic is filtered too.

(I don't know if this would be of any help for those exploits that take advantage of flaws in the wireless device drivers, such as the recent Broadcom driver fiasco.)

[rav3n @ Sep 27th 2006 4:18AM]

@Kevlar
-- FTA
" The Linux-based device has a pair of Ethernet ports, one for taking in the unwashed internets, and one for sending the newly-scourged connection to your computer. "

That means you plug your computer into this device via a network cable, and then on the OTHER FREE port on the device, you plug in your internet connection.

Let me try to text-diagram it (forgive me, I am far from an artist)

YOUR COMPUTER
| -- your ethernet port
| -- Yoggie port 1
YOGGIE DEVICE
| -- Yoggie port 2
INTERNET/ROUTER/ETC

[Kevlar @ Sep 27th 2006 1:08PM]

I think you misunderstood me. If I open a file off a CD, how will Yoggie's box protect me?

[Russ @ Sep 27th 2006 6:21AM]

i thought this was pretty cool - i've been waiting for something like this to happen.. but their FAQ makes it sound like it requires their server hardware:

http://www.yoggie.com/faq.shtml#Whatarethekeycomponents
"The solution is comprised of multiple Yoggie Gatekeepers and a single Yoggie Management Server to centrally manage the Yoggie Gatekeepers in the field."

still not a bad idea in a corporate environment.

[AnonymousCow @ Sep 27th 2006 9:47AM]

I don't think so. Take a look at

http://www.yoggie.com/home_users.shtml

[BlackCoffeeNoSugar @ Sep 27th 2006 10:56AM]

I think you were looking that the wrong section. Only the corporate solution needs a central server, but not the SMB/soho/home solutions.

[sygyzy @ Sep 27th 2006 3:26PM]

I love how it just says it'll protect your computer with AV, Firewall, etc but won't say how or what kind. Yeah, I have a $200 box that does that too, but I won't tell you what's inside it. Just trust me, it works.

[Othello @ Sep 27th 2006 4:30PM]

Well, it says on the page which AV it uses. Pro is Kapersky, basic is ClamAV.

[sygyzy @ Sep 27th 2006 5:28PM]

I missed that. Thanks for pointing it out. That's exactly the sort of information I was looking for.

[fcb1899 @ Sep 28th 2006 7:51AM]

it sounds and looks damn sexy. But I dont see every regular joe blow (the ppl that buy linksys, etc routers) buying tons of these. As a corporate tool it sounds interesting though.

[ilanoush @ Oct 22nd 2006 11:38AM]

it sounds like that's a fairly good solution for laptop users when on the road. When I am in a hotel or a wifi hotspot, I am supposed to be on the same network as other people so I could protect as/av but also vpn from this specific small device. I've read in the datasheet it uses power from the usb to laptop and that's smart.

[Kevlar @ Dec 15th 2006 1:41AM]

@ TGIF

WOW old, but thanks for the information. Definitley not what I was expecting to find in my inbox today, nearly 3 months later.