Discussion Locked

Do I need a firewall?

0 helpful
13 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I'm setting up a shared internet connection for my network. I'm going to use Microsoft's ISA serve to share the connection and manage all the users. Microsost also says that it can be used as a firewall. Can I rely on that alone, or should I get a separate hardware firewall?

13 replies

by computechie

Any type of firewall is a good idea, especially if your going to be using a broadband connection. Software firewalls always tend to run a little slow from my experiences with them, since they are running on top of other programs, and have to use your computers resources to filter all the incoming packets. I'm using a cable modem, and without the firewall active, I can acheive speeds of over 100KB/sec constantly. With software firewalls running, I'm lucky to be able to get 20KB/sec from the slower filtering process. A hardware firewall would always be the best solution, as they are usually even more configurable than their software counterparts. They are always much faster as well, you should see very little to no speed reductions. Heres a webpage that should help you further research software vs hardware firewalls: http://www.firewallguide.com/
Hope this helps.

by ppoll

my question was not wether to get a software or hardware firewall. I wanted to know if I needed an additional firewall besides for ISA server. I want to get that for it's other features and I'd like to know if that's enough of a firewall. In the past I've worked with proxy server and I has another firewall with it as well, because proxy server was not secure enough. I've heard that MS made ISA much more secure, and I'd like to know if that would be enough, or if I'd still need another firewall.

by tjc

That really is personal preference, don't you think. It's really up to you if you want to chance it all on a MS product with it's problems or add on more products with there own problems. Combine this with how much time you want to spend on setup and fixing any problems that arise.

by estebandelatorre

It all depends on what you need. If you will use the internet (not ISA) for browsing purposes only, email only, you will survive without a firewall.
In the case that yoy setup a WEB server sitting inside of your LAN, yes you will need a firewall, since internet people will be "close to" your lan.

by mebudman

ISA is a pretty good firewall in itself. This is not a next version of Proxy Server, this is a real firewall. I ran the trial version and was very impressed tight control it placed on my internet point of presence. It literally closed all the ports. I had to configure the ports I wanted to open, how my internal network was going to communicate, who need what services. I did not have to install special software on each client (as with Proxy server). The axiom to remember is only open the ports you need (less is better) and then only open the ports you need for the machines you need (a subset of less is even better). To answer your question of do you need another firewall whether it be hardware or software, no. ISA is a good firewall.

Let me know if you have any questions.

by penguinsrule

If the Question is do you need a firewall if you have ISA? No, ISA is a firewall, and a good firewall. If the question is, is ISA the best firewall out there that you can get? the answer is No absolutely not.
It all depends on your security requirements. Is it a cost effective solution for many businesses - yes. Again, it all goes to your specific business needs.

by mdeshame

Get another firewall!

Stop the insanity of believing MS products are secure. They are NOT, nor will they ever be secure.

Case in point MS' very secure IIS security was shredded by numerous exploits such as Nimda and CodeRed.

ISA serve willstop the newbies, the wannabees and the half hearted, casual glancers, (assuming that YOU secure it properly)but it is not going to prevent someone with enough determination (locks were only invented to keep the HONEST people out).

This discussion is closed to new replies.