Security

Ask something
Discussion Locked

Firewall Security

0 helpful
9 replies

by blkdrgn

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I need help... I am an ALL in one Admin at the small company I work for. We are just now getting DSL for our internet connection.. what my question is what is recommended for firewall support for my company.. I don't want to make the DSL connection live until I know I am atleast somewhat protected.. yes I know I can't be 100% protected but I do need to know what i need. I am new in the Sys Admin field but have been a Tech for 4 years...so any help will do...
Thanks

9 replies

by wpteh

More details is needed on your company network's setup :

1) DSL modem connected directly to hub/switches?
2) Budget?
3) Number of users?

Let's assume your company have less than 20 users, 1 Server, 1 hub/switch, low on budget and the DSL modem connected directly to the hub/switch.

I will not suggest a physical Firewall (e.g. WatchGuard Firebox) because that will put a big strain on the budget and your maintenance. Instead, I suggest putting the 'firewall' capabilties on the software side. Some good Firewall software are available for free/low cost on the Internet now. e.g. ZoneAlarm and Tiny Personal Firewall. You can download them at www.softseek.com and try them out.

Since your company is small, it is unlikely that you willbecome a hacking target. It is however more important that you might want to prevent malicious users from making use of your DSL connection and make every PC of yours a 'Zombie' for their wide-scale DOS (Denial of Service) attack.

So I feel thatinstalling software Firewall on each individual PC and Server will be sufficient for your security concern.

Good luck.

5mm.
Singapore.

by blkdrgn

Well I have an NT 4 server and a 2000 server with 2 HP switches.. the router is plugged into the switch. I have a total of about 25 users which only about half need access to the internet. So I am looking at blocking both unwanted incoming traffic as well as blocking certain out going traffic as well...
My Router does have a software firewall built in, it is the Speedstream 5871, I have tried installing Zonealarm on my 2000 server and it keeps crashing saying it cant find the netutils.dll filealthough I am running it on my W2K Pro workstation and laptop and running it at home. I did a search on my workstation to find out it is installed with Zonealarm so now I confused on why it won't install.

by ddunkink

OpenBSD is a UNIX OS that has a great firewall included in it. I don`t know how involved you want to get with learning UNIX but the firewall is toutted as one of the best... and it`s FREE ...and it runs on alot of older hardware so you can set it upwithout bustin yer budget...and yes it does the job very very well.

by yahue

Most good DSL ISP's will offer you an option to have a firewall or the router you get already has a firewall built in.

by at

Since your a all in One Admin wonder, with a small office and budget. I would suggest a software solution like "Personal Firewall" by SyGate. Its affordable, easy to install and administrate. I believe it can also, expand into an Enterprise version as well. You can download a copy at http://www.sygate.ca

by dbauer

Our company has been using hardware and software firewalls for this. We use Winproxy or Microsoft proxy for most software installs. We use Linksys or Webramp for hardware solutions. All of these depending on solution needed. Large ones get pix firewalls and/or router solutions, but it sounds like you need something smaller.

by ebob

LinkSYS, Asante, SMC and others have boxes that are perfect for your use.

Typically these are switches with between 4 and 8 ports that sit inside your dataset (DSL or Cable "modem"). They are expandable with more hubs. Some of them have built-inprint servers and ports for analogue modems for a redundant dial-up link.

This way you don't have to frig around with the PCs at your site, or dedicate a system for proxy/firewall duties.

by admin

I use this setup for several places your size. Get the hardware solution, they are cheap ($100-200), easy to expand, relatively secure, and don't require much messing around -near 0 hour maintanance. Having gone through other solutions, I highly recommend this for your use. It may not document this application in the box, but it works slick. If you have questions, feel free to e-mail me :)

This discussion is closed to new replies.