Security

Ask something
Discussion Locked

What firewall solution to get?????

0 helpful
13 replies

by dbauer

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

With so many firewalls out there, what one do I provide for my customers. More and more are getting DSL, schools are now required by regulations to provide filtering. Clients are asking for all levels, from simple security to filtering options andanti-virus built-in or available. What I'm looking for is one or 2 products that I can provide that are easy to use and able to scale to each solution. Of coarse, money is always an option that needs to be low.

db

13 replies

by jamesrl

There are "personal" firewalls and "dedicated" firewalls.

A personal firewall is not really a true firewall, but software which sits on the client and try to block suspicious activity.

A dedicated firewall is a separate computing device which sits between users and the net. They can be anything from something built into a router, or software running on a PC or Unix box.

It depends on your level of comfort with configuring network devices. The applicance type ones are generally less configurable and easier to set up. The freeware Linux ones may be more challenging to setup but seem more flexible. The Linux route is the least expensive - you can often use low end PCs, since Linux performs well on them.

There are anti-virus services which hook into firewalls but they seem expensive to me, and usually require to either run on a proxy or another dedicated box which acts like one. I'd be more concerned that each PC have up to date virus definitions, unless you are working witha very large organization.

There is a world of options out there. Check out Borderware, Checkpoint Software, Raptor etc.

James

by dbauer

Thank you very much for your reply.
We are already setting up some Linux solutions. Just still kind of wondering what other people are having luck with since there are so many options out there. db

by ebob

If you can get the budget, then do check out the "real" firewalls: Checkpoint FW-1, Cisco PIX, Raptor and Nortel are good brands. These are most appropriate for corporate situations.

Stepping down a bit, you can also consider adding "firewall functionality" to your network equipment. This is MUCH MORE than just adding a few filters to your routers. Real "firewall functionality" includes considerations such as "stateful packet inspection" and "address translation".

Another route to go is with the hardware-based "personal firewalls" that are becoming increasingly popular with the more sophisticated home and small business user. For about USD200 each site sharing a cable or DSL connection can put one of these between their dataset (cable or DSL "modem") and their LAN. If you run the same brand at all locations, then you can simulate VPNs across the Internet. Some brands: Asante, SMC, D-Link (I think).

by ebob

Anti-virus: This is NOT a firewall function. Having said that, I'll back off a bit and mention that some of the high-spec firewalls can include virus inspection capabilities. But this is an add-on. An I'll repeat: this is NOT a firewall function. True firewalls are working pretty low in the protocol stack.

To deal with viruses requires a lot more resources for the appliance to look up in the protocol stack. And since for most applications, looking for viruses includes looking inside emails, it also requires a knowledge of what your emails look like (so the appliance can know how to open the emails, look for attachments, and scan them...).

Because of this, it is almost always better to off-load the virus checking to a different system.

On small networks, I prefer to simply put good and proper virus software (any of the big brand names) on each system, and set them up to keep updated. (Easy to say, harder to do, as well know, too well!)

Hope that helps.

by dbauer

This is the type of info I am looking for.
If anyone has a particular solution that they like to use and why, please submit it.
I am currently evaluating some hardware devices like linksys, watchguard, and sonicwall. I am finding quite a difference between linksys and the others, but I am using the $90 linksys and the $300+ soho solutions from watchguard. I keep asking myself why the differences and do I need them.

by bill

We use SonicWall equipment the 'Pro' at our office, and their 'Tele2' at our telecommute sites.

They have an excellent filtering package available that includes a huge list of 'objectionable' sites (by category), as well as protection from many 'Hack Attacks'. They also can provide hardware VPN access for your remote users. The filtering section also provides for adding sites you want to allow or deny access to regardless of the subscription package settings.

They were a little more pricey than some other solutions I looked at, but, provided a wide range of features, most of which we wanted/needed. Set up was fairly straight-forward, and or DSL/Cable users just put the Tele2 between their PC and the DSL/Cable device.

They have worked out well for us, and I'd recommend them based on our experiences.

(No, I do not work for, nor have any affiliation with, the SonicWall folks)

-Bill

by vadhopper

I, too, big fan of the sonicwalls. They are certainly more expensive than the Linksys box (which I have also worked with) but that's because they perform packet inspection which can help to thwart a lot of DOS attacks. I think this is important for any site larger than five computers and with any sort of critical serving going on. You can also easily attach higher stack services such as anti-virus and VPN's. Linksys does not allow that. In general I have found the Sonicwall a great way to start, and you are much safer than with a Linksys box. Be prepared to spend some time on any system to work out access kinks. $200 spent on their tech support line to get it worked out in a couple of hours or less is usually worth it.

I am wondering what people have found in the personal firewall realm. The two I have had recommended is Norton and BlackIce defender. (I plan to look into that Tele2 as well). No experience with either as I have really focused on the Sonicwall soho and pro realm, but I have a security company which needs something cheap and reliable for modem only access. Thought this would be better than a $500 sonicwall.

Good discussion.

by bill

I like the SOHO unit as well, but as I recall, it didn't have native VPN support and the Tele2 did and that's why we used it.

I'm no 'Firewall Guru' and to my surprise I didn't really need any of their support so I can't speak to the quality of it.

Speaking of DOS attacks, we underwent a 12 hour 'Sudden Seven' attack recently and the SonicWall held up like a champ. I called the ISP the attack was being routed through, they found the bounce and ended it. I shudder to think what might have happened if we'd only had the Cisco between us and that.

In short, in my opinion, if you're going to have a full time internet connection you *need* to put something between you and the net to shield you from the inevitable.

This is a good discussion, I'm hoping more folks will jump in with their stories.

by mleroy

I've been looking at Zone Alarm. It allows you to block incoming traffic, which the other personal firewalls do, but it also allows you to set access on a case by case basis through rules you set up. It also can block outgoing messages, which most other personal firewalls do not do. It is free to home users.

by dbauer

Thank you very much for all your input!!
I have since bought a Sonicwall and configured it. It is very easy to setup. It does have alot of features and the prices are not terrible for adding those features. I have also researched the Watchguard SOHO and the only thing I didn't like about it was that it sounded like it was limited to 50 users and I wanted the option to expand beyond that.
Does anyone have the Sonicwall working successfully with more than 50 users and if so, what options do they have running? VPN or virus?
Is anyone using the virus solution provided by Sonicwall?
db

by karthikkumar

Firewall are a plenty in todays computing market and necessary.If you are looking for a good and cheap firewall,nothing beats ZoneAlarm available from www.zonealarm.com.It,s free and provides 4 security settings +the custom option which lets you specify your own settings.It also lets you specify security settings for local servers on your Lan and Internet servers differently and for further security it lets you lock out all traffic and Internet Access if you choose.If you want a higher grade security firewall,I recommend ZoneAlarm Pro and Norton Personal Firewall

by gary.m.waltman

I agree with all of the Sonicwall users out there. Sonicwall makes one of the best statefull packets inspection appliances and they are the easiest to configure. I'm no firewall guru and I had the Sonicwall Pro up and running in less then an hour. Make sure you completely understand the rules before you let it go though.
Firewall aren't just for protection from the Internet. We use our to protect our DATA from inside attacks. It really works great.

by bill

I've got to admit you got my attention with that! How are you using the SonicWall to do that? I'd love to have some discussion about how you identify an internal attack, and what your strategy is there!!

Feel free to contact me directly if you'd like!

This discussion is closed to new replies.