[OT] Firewalls - Recommendations?

system · December 29, 2004, 2:37pm

Always a rush around here. I mentioned in my 2005 IT plan we would need a new firewall. So now our president wants me to order it (and get it invoiced) BEFORE the end of the year. I have about 2 hours to research a replacement for our 5 year old Sonicwall Pro. Stay with them? Symantec? WatchGuard? Cisco?

Any favorites that you folks are happy with? Do you recall the approximate cost? Notable features to be looking for?

We are a pretty simple setup (no Intra-net yet). Might want to do some VPN from home. Also considering hosting our web site ourselves so not sure what impact that has on firewall features. We have about 40 internet capable users (max 10 at one time) so volume is not huge.

Any suggestions would be very much welcomed.
Thanks,
Todd Caughey
Harvey Vogel Mfg. Co.

[Non-text portions of this message have been removed]

system · December 29, 2004, 2:45pm

What doesn't your Sonicwall provide that you need in 2005?

Charles

----- Original Message -----
From: "Todd Caughey" <caugheyt@...>
To: <vantage@yahoogroups.com>
Sent: Wednesday, December 29, 2004 2:36 PM
Subject: [Vantage] [OT] Firewalls - Recommendations?

>
> Always a rush around here. I mentioned in my 2005 IT plan we would need a
new firewall. So now our president wants me to order it (and get it
invoiced) BEFORE the end of the year. I have about 2 hours to research a
replacement for our 5 year old Sonicwall Pro. Stay with them? Symantec?
WatchGuard? Cisco?
>
> Any favorites that you folks are happy with? Do you recall the
approximate cost? Notable features to be looking for?
>
> We are a pretty simple setup (no Intra-net yet). Might want to do some
VPN from home. Also considering hosting our web site ourselves so not sure
what impact that has on firewall features. We have about 40 internet
capable users (max 10 at one time) so volume is not huge.
>
> Any suggestions would be very much welcomed.
> Thanks,
> Todd Caughey
> Harvey Vogel Mfg. Co.
>
>
> [Non-text portions of this message have been removed]
>
>
>
>
> Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
have already linked your email address to a yahoo id to enable access. )
> (1) To access the Files Section of our Yahoo!Group for Report Builder and
Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
> (2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
> (3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links
> Yahoo! Groups Links
>
>
>
>
>
>
>
>
>

system · December 29, 2004, 2:53pm

At 02:36 PM 12/29/2004, you wrote:

>I have about 2 hours to research a replacement for our 5 year old
>Sonicwall Pro. Stay with them? Symantec? WatchGuard? Cisco?

How 'bout IPCop http://www.ipcop.org/ on a Linux box? Simplest install is
to boot & run directly from a CD, and configure with a web browser. But if
you need extra features down the road, it's pretty much guaranteed you can
add and configure them.

-Wayne Cox
Twenty Three, Inc. -- Information Technology Consulting
828-685-2338

[Non-text portions of this message have been removed]

system · December 29, 2004, 3:09pm

Todd,

Take a hard look at the Fortigate-100 from Fortinet. www.fortinet.com

With the 100 you get:
* DMZ port
* Integrated Anti-Virus
* Email blocking by word
* Integrated intrusion detection and removal
* VPN
* Web based interface ( command line also if you want to get gritty )

I've been using one of these for the last 9 months or so. Nice box.
About half the price of a CISCO PIX with 5 times the features.

They have a whole line of models to pick from. The 100 is the 2nd or
3rd box up the rope as I recollect. Annual maintenance for updates and
signature files is very reasonable and the signature files are
automatically updated on a push basis from Fortinet.

There is at least one Vantage consulting company on the list who sells
these boxes who can probably get you a good deal.

If you post a msg asking for a price and some info - offline - I'm sure
they'd be willing to quote you a box.

Todd Anderson

________________________________

From: Todd Caughey [mailto:caugheyt@...]
Sent: Wednesday, December 29, 2004 1:37 PM
To: vantage@yahoogroups.com
Subject: [Vantage] [OT] Firewalls - Recommendations?

Always a rush around here. I mentioned in my 2005 IT plan we would need
a new firewall. So now our president wants me to order it (and get it
invoiced) BEFORE the end of the year. I have about 2 hours to research
a replacement for our 5 year old Sonicwall Pro. Stay with them?
Symantec? WatchGuard? Cisco?

Any favorites that you folks are happy with? Do you recall the
approximate cost? Notable features to be looking for?

We are a pretty simple setup (no Intra-net yet). Might want to do some
VPN from home. Also considering hosting our web site ourselves so not
sure what impact that has on firewall features. We have about 40
internet capable users (max 10 at one time) so volume is not huge.

Any suggestions would be very much welcomed.
Thanks,
Todd Caughey
Harvey Vogel Mfg. Co.

[Non-text portions of this message have been removed]

Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
have already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder
and Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
(2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
(3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links

Yahoo! Groups Sponsor
ADVERTISEMENT
click here
<http://us.ard.yahoo.com/SIG=1290svhg2/M=294855.5468653.6549235.3001176/
D=groups/S=1705007183:HM/EXP=1104435470/A=2455397/R=0/SIG=119u9qmi7/*htt
p://smallbusiness.yahoo.com/domains/>

<http://us.adserver.yahoo.com/l?M=294855.5468653.6549235.3001176/D=group
s/S=:HM/A=2455397/rand=172433042>

________________________________

Yahoo! Groups Links

* To visit your group on the web, go to:
http://groups.yahoo.com/group/vantage/

* To unsubscribe from this group, send an email to:
vantage-unsubscribe@yahoogroups.com
<mailto:vantage-unsubscribe@yahoogroups.com?subject=Unsubscribe>

* Your use of Yahoo! Groups is subject to the Yahoo! Terms of
Service <http://docs.yahoo.com/info/terms/> .

[Non-text portions of this message have been removed]

system · December 29, 2004, 3:19pm

Chris and Wayne, thanks for the input. I've been on the phone with CDW's security gurus and made a rush decision on another Sonicwall (Pro 3060) for $2,200. I guess the new OS is a lot easier to use than the old one and VPN actually works now (or is easy enough for even me to configure anyway). It also has some automatic failover features to a second line (like a standby DSL or cable modem) that might be handy if we even do web hosting.

Normally I would like to research this sort of thing a bit more and learn the lingo. I did find out that CDW's security guys are not really in favor of the Symantec hardware (despite their recent 16 page color glossy brochure). Apparently there have been serious firmware patch level problems on a multitude of issues and customers are complaining to CDW. Their guy was recommending wither Sonicwall or Watchguard.

One nice thing...there is no trade-in on the old unit so I can take it home and use it for hardware VPN until it eventually fails. Althouhg I might have to get a static IP address from Comcast.

We don't have any Cisco products here and I'm a total linux dummy so configuring ipcop would take too much time (and risk) for me to try it.

Thanks again for the ideas.
-Todd

-----Original Message-----
From: Wayne Cox [mailto:wmc20@...]
Sent: Wednesday, December 29, 2004 1:52 PM
To: vantage@yahoogroups.com
Subject: Re: [Vantage] [OT] Firewalls - Recommendations?

At 02:36 PM 12/29/2004, you wrote:

>I have about 2 hours to research a replacement for our 5 year old
>Sonicwall Pro. Stay with them? Symantec? WatchGuard? Cisco?

How 'bout IPCop http://www.ipcop.org/ on a Linux box? Simplest install is
to boot & run directly from a CD, and configure with a web browser. But if
you need extra features down the road, it's pretty much guaranteed you can
add and configure them.

-Wayne Cox
Twenty Three, Inc. -- Information Technology Consulting
828-685-2338

[Non-text portions of this message have been removed]

Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must have already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder and Crystal Reports and other 'goodies', please goto: http://groups.yahoo.com/group/vantage/files/.
(2) To search through old msg's goto: http://groups.yahoo.com/group/vantage/messages
(3) To view links to Vendors that provide Vantage services goto: http://groups.yahoo.com/group/vantage/links

Yahoo! Groups Sponsor

ADVERTISEMENT
<http://us.ard.yahoo.com/SIG=129u8ab7b/M=294855.5468653.6549235.3001176/D=groups/S=1705007183:HM/EXP=1104436396/A=2455397/R=0/SIG=119u9qmi7/*http://smallbusiness.yahoo.com/domains/> click here
<http://us.adserver.yahoo.com/l?M=294855.5468653.6549235.3001176/D=groups/S=:HM/A=2455397/rand=929668805>

_____

Yahoo! Groups Links

* To visit your group on the web, go to:
http://groups.yahoo.com/group/vantage/

* To unsubscribe from this group, send an email to:
vantage-unsubscribe@yahoogroups.com <mailto:vantage-unsubscribe@yahoogroups.com?subject=Unsubscribe>

* Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service <http://docs.yahoo.com/info/terms/> .

[Non-text portions of this message have been removed]

system · December 29, 2004, 5:40pm

1. Selective port blocking and policy based NAT
2. VPN I can figure out and up to 50 remote connections (old one allowed 5)
3. DMZ configuration (4 of the 6 ports are WAN/DMZ selectable)
4. Multiple WAN sources with load balancing and automatic failover
5. Most of all...realiability, old one has been off maintenance/support for a year now - banking the savings for a new one
6. Software add-on for reporting activity and intrusion detection stats

Mostly just a general feeling that the state of the art must have advanced some in 5 years and the bad guys are always thinking up new exploits. The old unit is pretty primitive. It was time for a tech refresh. I just wasn't expecting a green light so soon.

-Todd C.

-----Original Message-----
From: Charles Paluska - HPN [mailto:cpaluska@...]
Sent: Wednesday, December 29, 2004 1:46 PM
To: vantage@yahoogroups.com
Subject: Re: [Vantage] [OT] Firewalls - Recommendations?

What doesn't your Sonicwall provide that you need in 2005?

Charles

----- Original Message -----
From: "Todd Caughey" <caugheyt@...>
To: <vantage@yahoogroups.com>
Sent: Wednesday, December 29, 2004 2:36 PM
Subject: [Vantage] [OT] Firewalls - Recommendations?

>
> Always a rush around here. I mentioned in my 2005 IT plan we would need a
new firewall. So now our president wants me to order it (and get it
invoiced) BEFORE the end of the year. I have about 2 hours to research a
replacement for our 5 year old Sonicwall Pro. Stay with them? Symantec?
WatchGuard? Cisco?
>
> Any favorites that you folks are happy with? Do you recall the
approximate cost? Notable features to be looking for?
>
> We are a pretty simple setup (no Intra-net yet). Might want to do some
VPN from home. Also considering hosting our web site ourselves so not sure
what impact that has on firewall features. We have about 40 internet
capable users (max 10 at one time) so volume is not huge.
>
> Any suggestions would be very much welcomed.
> Thanks,
> Todd Caughey
> Harvey Vogel Mfg. Co.
>
>
> [Non-text portions of this message have been removed]
>
>
>
>
> Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
have already linked your email address to a yahoo id to enable access. )
> (1) To access the Files Section of our Yahoo!Group for Report Builder and
Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
> (2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
> (3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links
> Yahoo! Groups Links
>
>
>
>
>
>
>
>
>

Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must have already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder and Crystal Reports and other 'goodies', please goto: http://groups.yahoo.com/group/vantage/files/.
(2) To search through old msg's goto: http://groups.yahoo.com/group/vantage/messages
(3) To view links to Vendors that provide Vantage services goto: http://groups.yahoo.com/group/vantage/links

Yahoo! Groups Sponsor

ADVERTISEMENT
<http://us.ard.yahoo.com/SIG=129et0qf8/M=294855.5468653.6549235.3001176/D=groups/S=1705007183:HM/EXP=1104435955/A=2455397/R=0/SIG=119u9qmi7/*http://smallbusiness.yahoo.com/domains/> click here
<http://us.adserver.yahoo.com/l?M=294855.5468653.6549235.3001176/D=groups/S=:HM/A=2455397/rand=184257560>

_____

Yahoo! Groups Links

* To visit your group on the web, go to:
http://groups.yahoo.com/group/vantage/

* To unsubscribe from this group, send an email to:
vantage-unsubscribe@yahoogroups.com <mailto:vantage-unsubscribe@yahoogroups.com?subject=Unsubscribe>

* Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service <http://docs.yahoo.com/info/terms/> .

[Non-text portions of this message have been removed]