Networks

Ask something
Discussion Locked

Selecting a Firewall

0 helpful
6 replies

by it_jp

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

We're trying to enforce security for our small (100 users) network. We currently have a free Linux Firewall which does a pretty good job as far as security. But we need few servers in the DMZ and our current firewall can only have one.

As of now, I need to gather or research on different firewalls and their pricing. Any recommendations would be greatly appreciated.

Thank you very much.

6 replies

by cactus pete

If you feel pretty goo about your Linux abilities, you might consider just building the whole thing yourself. IPTables and your own scripts may be the best way to go. For such a small user base, this will give you a pretty good flexibility/effectiveness ratio.

by rbranco

At our offices we use SonicWALL. They are cheeper that lots of other people with an easy web interface. They are also certified by labs such as the West Cost Labs.
They also offer inbuilt virus protection, web filtering, VPN, DHCP, redundancy.

Briliant.

by mike o

I second the SonicWall solution. Very easy to use and set up and very flexible. I've used it in a high school with over 100 computers, and my Internet-facing servers were on the DMZ.

Otherwise you might want to set up two Linux boxes: one at the WAN connection to firewall your DMZ machines and then the other between your DMZ machines and your LAN.

Good luck,
Mike

by tommymcbrayer

For what you have described I would probably have to recomend a CISCO PIX 506E. Here is the link so that you can see what it is all about.

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_data_sheet09186a0080091b13.html

Don't know what your budget is but this one is reasonably priced for a company your size. You will have to check on the prcing through your rep, but the box retails for about $ 1,000. This box will also provide for a lot of possible spansion such as VPN ifneed be in the future.

TL McBrayer CCNP, CNE-5, CNE-6, CXE

by wlbowers

I second the Cisco solution. We looked at the Linux
possibility and decided to let the professionals lock it
down. They have several models with hardware
variations. And their tech support is great.

Good Luck Lee

This discussion is closed to new replies.