Recommend Firewall

V

Vitamin_uk

Limp Gawd
Joined
Jan 6, 2004
Messages
181
Hi All,

We have just purchased a 1/4 rack of colocation. :)

The aim is to offer a BDR solution for our customers as well as moving our VOIP and office environment to the facility.

I am after a hardware rack firewall. We only have 2mb transit in and out of the data centre burstable to 100Mb at present as we are only concentrating on moving our on premise servers to the data centre however the idea is to provide BDR to our clients.

Any ideas will be welcome. I have looked at Sonicwall and even thought about an untangle box what about an ASA? :D
 
Are you wanting something utm or just a straight up firewall? I would say an Asa but if you want more later like content filtering check out sonicwalls or maybe fortigate.
 
Nope just the firewall really. Not a massive CISCO head are the ASA's easy enough to configure?

Have configured a few Cisco switches etc and routers so I imagine it's not difficult???
 
Vitamin_uk said:
Nope just the firewall really. Not a massive CISCO head are the ASA's easy enough to configure?

Have configured a few Cisco switches etc and routers so I imagine it's not difficult???
Click to expand...

If you use the ASDM they aren't that bad to configure once you figure out the terminology and layout and how they work.
 
calvinj said:
Are you wanting something utm or just a straight up firewall? I would say an Asa but if you want more later like content filtering check out sonicwalls or maybe fortigate.
Click to expand...

I vote Sonicwall, for UTM features, plus ssl vpn and other features..
 
untangle is meant for users really, work stations and so on, for a server network you don't need what makes Untangle good, UTM's are really needed on a "Server" network since you allow in and out the access you want,

personally for me PFSense works great or just a OpenBSD box with uptables
 
ASA 5510 with SSM is about as top notch UTM as you can possibly envision.

Or I would even say better yet get a Cisco 2901 ISR and purchase with IOS zone firewall.

Part # is 2901/SEC-K9.

IOS Zone is even easier to use than ASA and just as powerful in almost all respects save for the fact that the ASA does a little bit deeper and faster on scanning packets. But these new routers are fabulously fast. I own one or else I wouldn't vouch for them.

Also these new routers along with the ASA's can do a feature called Cisco IPS (Intrusion Prevention System) which scans for viral files, trojans, mal, spy, filter url's, everything at the outside interface before allowing traffic to pass to your vulnerable inside.
 
What will you have the servers doing?
If you have an e-mail server up there...something like Untangle would be good....as you can have it filter SMTP traffic for spam/phish/viruses...and do the quarantine digests to all the end users each morning.
If it's servers just for ASP hosted stuff, or remote desktop services/published apps, or web...you could drop to a plain firewall doing just NAT, and open/forward only the minimum ports necessary to provide the services you need. Often times the co-lo host will do that for you....NAT you and open/forward ports you request.
 
thanks for the advice so far. Just to clarify Im not really after the UTM features if Im honest. Could I pick a decent Juniper up from eBay?:mad: funds are a little tight on this project if Im honest. Once I know things are working well I will be more than happy to start looking at new.:)

So many choices:D
 
You must log in or register to reply here.
Back
Top