Firewall recommendations...
I have 4 rack mounted (web,backup,data,email) servers...i wanted to implement a appliance firewall...i have reasonable amount of traffic and a dedicated 2.5 mb/s.....possibly compared to the traffic that hits this website....i am curerntly looking at servgate, cisco pix, sonicwall and maybe checkpoint firewall-1...anyone have any recommendations on these or have used these before....
Re: Firewall recommendations...
Quote:
Originally posted here by dynosys
I have 4 rack mounted (web,backup,data,email) servers...i wanted to implement a appliance firewall...i have reasonable amount of traffic and a dedicated 2.5 mb/s.....possibly compared to the traffic that hits this website....i am curerntly looking at servgate, cisco pix, sonicwall and maybe checkpoint firewall-1...anyone have any recommendations on these or have used these before....
Ok. You have probably already made your choice, but I figured I would give you some info. Just in case.
You requirement of 2.5 mbps is just about the top capability in 3DES of the Sonicwall SOHO3 series. If you are looking for pure throughput however, and not needing the VPN capabilities, then they are an extremely cheap way to go. And if you grow, they have upgrade (read trade in) style programs. In fact, you would be looking in the neighborhood of $380 for a SOHO3, that could handle up to ten servers. You can upgrade it easily. Reliability? Awesome. Setup? Easy. Reporting? Too much information (with VPN going you could give yourself 50K emails a day if your not careful). Wanna go cheap, but like the SonicWALL, and wanna save for something better later? Get a WebRAMP 700s, new, off ebay. You are looking at like $80, and it will handle your throughput. Barely. Just not in 3DES. It just happens to be 10BaseT.
What I am looking at is the 3com Embedded Firewalls. Similar situation, but would be closer to $1500. Also, I need a lot higher throughput (have gigabit capable, but tiered costs, so am trying to get as close to 100 mbps as possible). If anyone can comment on them it would be appreciated.
Checkpoint. Beware. While great firewalls, they can be an absolute money pit.
Pix. Great firewalls, atrocious interface. I am currently looking at a 515 for a client. You could do with a 501.
Just remember: what you have does not require an enterprise grade switch. With your listed requirements, a Firebox at Frys’ would work. I would suggest being careful, and not over spending on it. Save now, to help later expansions, or keep accounting happy.
Hell, if you are buying for a company, you might throw Checkpoint and Watchgaurd to them. And then find a “radical solution”, and show the pix of soho. With plans to increase capacity later on as requirements increase. It shows you are thinking of today, but you are also thinking of tomorrow.
Hope that helps.