IT Employment

Ask something
Discussion Locked

Firewall/Routers

0 helpful
5 replies

by charlesharris

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I have recently been tasked to impliment a Firewall/Router for a client that has no security. They run a webserver (mission critical and confidential information on it). There will be approx 8 other nodes connected through this device on a full T1. The site averages 14k per day. My question is, can I install a product designed for SOHO without creating a bottle neck to the webserver? Are there any solid recommendations on brands? Why?

5 replies

by lordinfidel

It will depend on how much they can spend.

If they are already connected via a t1 then they should already have a router.

Depending on your skill set, you can cheaply employ a linux based solution. Linux running on a p133 with 32 megs of ram can pass alot of traffic without creating a bottleneck.

Essentially you would want 2 netwks behind the fwl (which is behind the router), a prod netwk for the web server and a user netwk.

With a little creativity, you can run priorities on the segments to allow a higher priority for traffic to the web server.

by powell

If all you are doing with the Firewall is routing requests, should be fine to run a Linux box as the Firewall. You could look at free distros, or Firegate Linux, RedHat Advanced, etc.

by charlesharris

Thank you for your time and suggestion. However, we are lookinga t implementing an router/firewall appliance. Security is just as much a concern as routing. It is my understanding that the appliances offer much greaty level of security than that of OS/Software based Services.

by lordinfidel

Security or lack of it, will depend on the knowledge of the admin.

Take linux. Something that is touted as secure.
A default installation in the hands of an admin that does not know what they are doing, and it is insecure.

Then there is windows. An OS that is touted as insecure. Put it in the hands of a seasoned admin who knows how to lock it down, can be very secure.

Even firewalls and routers need advanced configuration before they can be touted as secure.

Obviously though, the lack of an OS makes the most secure systems. Which is why most routers have embedded OS's in them.

The higher end firewalls are typical appliances that can be secured.

You are going to have to figure out what your budget is before going to shop.

If you can only spend a couple of hundred dollars, then I would spend that money on a linux based solution.

If you have 10's of thousands to spend, then go with a checkpoint and cisco based systems.

This discussion is closed to new replies.