Security

Ask something
Discussion Locked

Firewall/Routers

0 helpful
5 replies

by charlesharris

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I have recently been tasked to impliment a Firewall/Router for a client that has no security. They run a webserver (mission critical and confidential information on it). There will be approx 8 other nodes connected through this device on a full T1. The site averages 14k per day. My question is, can I install a product designed for SOHO without creating a bottle neck to the webserver? Are there any solid recommendations on brands? Why?

5 replies

by charlesharris

We will have a total of 8 devices connected to the VPN.... The concern here isn't how many connections to the VPN, but more along the lines of how much traffic (concurrent connections and throughput of the appliance).

by alveden

No true, the firewall act as a chokepoint for all traffic going through, both incoming and outgoing. Therefore any connection would affect the performance and sizing of the box. It would be helpful if you can provide more info on the network infra.
1. Is the firewall or the router doing the vpn?
2. What sort of enviroment are you implementing in? ISP, hosting, co-location, or customer site.
3. Usage information, company size (IT)
4. 14k ... kb? ...
5. And is it just the webserver being protected by the firewall or the whole network?

by charlesharris

The router/firewall is located onsite for a web services server. We are a subnet of a much larger network. We can not, nor do we control the dynamics of the network outside of the machines in our immediate location. Our server currenlty receives 14k hits per day with an average session lasting five to ten minutes.

The facility doesn't use nor does it need VPN. There are two employees currenlty - looking to add two more with in the next year. These machines will also sit behind the firewall/router. So total, we are looking at four workstations and two servers.

Chuck

by frommer

Anytime I need to implement a firewall involving a web server and other clients, I like to place the web server in a DMZ. You can then allow inbound access to the web server without allowing inbound connections to the client pc's.
Most SOHO or hometype firewall/routers do not make this possible. One inexpensive way you could handle this in to implement a Linux based firewall on a pc thet has 3 NICs installed. My recommendation if cost is less of an issue would be mabye a PIX 506...
Also witha DMZ config if the web server was somehow compromized it would still be isolated from the rest of the internal network...

This discussion is closed to new replies.