Discussion Locked

Firewall - Any recomendations

0 helpful
7 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Has anybody use Symantec 5420 appliance? I am looking into the following firewall applainces:

PIX515
Symantec 5420
Sonicwall 3060

I have about 200 users. I am currenlty using WAN/LAN AND DMZ ports. I heared that 3060 has a bug in it and symantec 5420 is not a true stateful firewall. Cisco finally came out with PDM and wondering if am better off trying PIX515.

Any recomendations?

7 replies

by budthegrey

You might be able to save yourself a ton of cash and a bunch of aggrevation by checking out SmoothWall. it is a hardend, single-purpose Linux installation, and runs on minimal hardware. You probably have a "good enough" machine lying around. The "express" version is free, at http://www.smoothwall.org. The commericial version (http://www.smoothwall.net) has some additional capability, but does not cost a great deal.

by jasonhiner

If you have any experience with Cisco routing and switching then it's hard to go wrong with a Cisco PIX firewall. But if you're not already familiar with Cisco gear then the learning curve may be too steep and you could end up with an insecure config unless you invest in Cisco training. In that case, it may be worth going with the Symantec or Sonicwall solution.

Also, I noticed that someone else mentioned a Smoothwall solution. I wouldn't necessarily rule that out. You could get a standard rack-based server (with about a 1.5 GHZ processor and 512 MB of RAM) from your preferred server vendor and load the commercial version of SmoothWall or the open source product IPCop (which is better than the free version of SmoothWall). These are both robust solutions and are easy to administer. In fact, they are nearly on par with Symantec and Sonicwall. Of course, they aren't as powerful as Cisco PIX.

by wlbowers

Get the Pix solution with extended support. You will not find anything that is going to beat it.

Lee

This discussion is closed to new replies.