Security

Ask something
Discussion Locked

Firewall recommendation

0 helpful
7 replies

by markin 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

In the next few months I'm going to be bringing DSL service into my
work place and I need some help on a hardware firewall. I have about 60
users spread out between four locations and will hopefully have them all
setup with DSL service by the end of next summer. I want to connect my
branch's up to us using a VPN solution. Theirs certain features that I
want on this firewall. I would like to be able to shut down all
Internet service (incoming/outgoing) after hours and on weekends because
that just invites hackers into the system. So I guess the firewall
would need an internal clock of some kind. I also want to have my users
log in before using the Internet and restrict my users to a certain list
of web sites that they will have access to. One more concern I have.
We aren't using a formal PC network here (Win2000 or Novell) but we do
have our PC's (Win95/98) connected into a hub and we have sharing
enabled to use printer's on the network and to share some files. Do I
need to worry about changing any of this if we have a good firewall
system in place?

Can you recommend a firewall product?

Mark McWilliams

7 replies

by stillatit

For the firewall, a lot depends on what you are willing to spend, the degree of control you need, and features. If you don't care about cost, I would suggest Checkpoint. For much less, you can go with Sonicwall.

Another approach is to use an NTserver at each site, using RRAS, VPN and Proxy Server.

Rather than insisting that your firewall have a clock, think about putting in some extra hubs, one of which is on a timer. This lets you choose a firewall for the other features you need in it.

Gateway router and/or firewall
hub
hub controlled by timer
hub
rest of your network

You can kill power on the center hub without risking any impact on either your network or your firewall. This will kill the network connection, but unlike killing a router, firewall or PC, a hub has no settings to lose, and comes right back when power comes back. Another advantage over a clock in the firewall is that it can be quickly turned back on if someone needs to work late without needing a security admin to do it.

Good luck.

by gbjoe

Like the previous person posted, it all depends on cost vs need, functionality, etc..

There are a few on the market that boast VPN functionality. I may suggest seriously looking at Checkpoint's Firewall-1. It is fairly easy and intuitive to install and use. It is one of the leading firewall's right now.

Good luck

by ryttinch

Cisco makes a good firewall called the PIX. Unless you're familiar with how cisco works, though there may be a bit more of a learning curve than with Checkpoint FireWall-1. I did work with the PIX firewall for a bit, but never got the opportunity to set up VPN connection with it. The ability to setup VPN connectivity with Checkpoint's product, however, is fairly straight forward...as are many things that have a GUI interface.

I think if you were looking at it with a straight cost value, Iwould probably suggest going with a Cisco PIX, as you get everything from the order, and don't have to add any extras. With Checkpoint, if you're installing it on Unix, you have to pay for the GUI client (unless you will be installing the GUI client on a windows box), You have to pay for the management server, you have to pay for VPN capabilities, and so on.

That being said, I am using Checkpoint's FireWall-1 package where I work now, and I do like it. I just wish it wasn't so very costly...but I guess you should expect to pay for one of the better products out there.

This discussion is closed to new replies.