Virus Protect & Tracking Internet Use

I will address your question in parts:

Part one:

You say: I want to have tight security

With just 10 users in your office, you can go for the Opensource solution "Linux" box with IP Tables/IP Chains and Snort. However if you are falling short of techies or are concerned about support, Checkpoint's VPN-1/Firewall-1 for SOHO market is also another option that will come with support agreements to straighten out problems faster.

You say: I want to monitor what the users are doing on the internet.

Use Internet FIltering software like Websense or SurfContorl. Surfcontrol is my favourite because of integration with Checkpoint Firewall-1 (OPSEC compliant) as well as it has a whole bunch of granular filtering options.

Bottomline:

Commercial Options:

Checkpoint SOHO
SurfContorl

Opensource:

It is a big world out there. So many good products for free but at a price - You need to be a techie yourself or have some techies around you, till you settle down with the setup. But the opensource solutions are extremely robust. It is a trade-off, so consult your peers as well about their experiences in this regard.

Thanks,
Rookie

I will address your question in parts:

Part one:

You say: I want to have tight security

With just 10 users in your office, you can go for the Opensource solution "Linux" box with IP Tables/IP Chains and Snort. However if you are falling short of techies or are concerned about support, Checkpoint's VPN-1/Firewall-1 for SOHO market is also another option that will come with support agreements to straighten out problems faster.

You say: I want to monitor what the users are doing on the internet.

Use Internet FIltering software like Websense or SurfControl. Surfcontrol is my favourite because of integration with Checkpoint Firewall-1 (OPSEC compliant) as well as it has a whole bunch of granular filtering options.

Bottomline:

Commercial Options:

Checkpoint SOHO
SurfControl

Opensource:

It is a big world out there. So many good products for free but at a price - You need to be a techie yourself or have some techies around you, till you settle down with the setup. But the opensource solutions are extremely robust. It is a trade-off, so consult your peers as well about their experiences in this regard.

Thanks,
Rookie

For a SOHO environment I would recommend a Sonic Wall appliance. It will provide you with the following:

1. Content Filtering at the gateway for mail and web.
2. DoS (Denial of Service) protection.
2. Integrated Virus protection.
3. Surf Control for restricted web sites w/password access.

more info: http://www.sonicwall.com

For a little higher end solution, take a look at a Cisco PIX 501 or 506.