3 replies
If you are planning to deploy commercially, I would recommend a separate device for your firewall. There's lots of lesser expensive devices (relatively) that will do this for you such as Netscreen, Sonicwall, Cisco PIX. The benefit here is scaling- as you add more devices you still control in- and outbound access through one machine.
Zone Alarm will work fine if that's your choice too. The difference is that Zone Alarm will control traffic by the OS application (SQL, terminal services, media player, for example) whereas a dedicated firewall will control traffic via protocol or port number (FTP, HTTP, etc.). Using ZA (or other host-based) firewall means administering multiple applications. Doesn't scale well as you add devices.
Hope that helps -
by allen
by allen
This discussion is closed to new replies.
Trending Security posts
Sort by Trending