Security

Ask something
Discussion Locked

Firewall for Small Buisness

0 helpful
9 replies

by hrk10

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
What would be a good choice for a firewall that I plan to attach a web and Mail server as well as about 10-25 client machines. The main goal is to prevent any one from the outside getting past the web server but still able to ftp from the web server. I cannot use NAT of PAT for the clients. I also have a small budget. (Less than $1000)

9 replies

by isys

Sonicwall SOHO3 might fit the bill. See how it works at www.sonicwall.com. About $800.00.

You might be able to get something cheaper, but remember you get what you pay for. Make sure your device is capable of handling the anticipated throughput.

by jehu

HI,
Here is a free and cheap soultion if you have an old pc. www.e-smith.org. I use it and it work great. I don't know if this will help but check out the website and read their documentations and post this question in their forum.

Good Luck,
Jehu.

by infosecmgr

There are a lot of good firewalls for under $1000 but I don't know of any that provide a DMZ for that amount of money. If you are deploying a web and mail server, I would definitely want a DMZ to put them in. That way they are not totally exposed yet they are isolated from internal systems. If you decide to stay with the sub-$1000 firewall, I would recommend the PIX 501. Cisco builds a great firewall IMHO. Good luck.

by dlafrombois

I agree with Sonic wall except I would recommend that Sonicwall Pro 100,200, or 300 boxes. THese boxes are more harden'd then the tele or soho. One of them even includes a DMZ, which was also recommended by another participant. We have suggested this to other clients.

WHat's great about the sonic wall products is the upgrades are still free. The support needs more work but they are working on this. THe product is easy to setup and assumes what you already want. No traffic from the internet to the intranet. So out of the box it is mostly configured. The configuration is accomplished through IE or netscape.

The other advantage is if you would like to do VPN's down the road and you do not purchase the box with this solution then you may upgrade the box to VPNs.

It will also, as an option, ensure that all your users have current virus software installed.

Hope this helps.

This discussion is closed to new replies.