Firewall Advice

Associate
Joined
3 May 2009
Posts
805
Hi Guys, We are due to have our broadband line upgraded in the next few months to a 50mb Virgin Business line.

We currently have a 8mb internet line so a big upgrade for us!

We also have several other lines (one dedicated email line, a line for VPN) and we are looking to integrate them at some point.

I am looking into securing this line with some sort of firewall appliance, keeping in mind it may be used for all of these things.

The requirements:
Number of users = 200

Can support atleast 5-6 concurrent IPSEC VPN site-to-site tunnels.
Ideally with some sort of web filtering so we can block websites for certain users (facebook for some but not others)
Ideally under £700 (way too low?)
Branded, want something that is known in the market.
Ideally UK support

We are in the small/medium business sector, so price is always a priority im afraid.

We do have some PIX 515e kicking around but I find them quite difficult to use, im not a great fan of coding and prefer a GUI any day, ive heard good things about Juniper and watchguard but cant find roughly how many users each model is for.

Line will have general internet surfing traffic, and then eventually email traffic (1 exchange server, 7k-10k emails per day in/out) site to site VPN for 5 small branch offices (each less than 20 users using only RDP to a terminal server)

Much appreciated!

Ash
 
Thanks for the responses guys, ill take a look into sonicwall, anybody used the netgear stuff?

Not a great fan of PDM or cisco IOS, im sure the asa improved this but we would need the asa5510 which is rather over budget :(

Same as usual though they ant everything for nothing, are software firewalls worth looking at? such as untangle etc?
 
Holy thread revival!!

well ive been tearing my hair out and im still looking, each manufacturer has different specs, does anybody know a good way of calculating whats currently going through our pix?

I have been looking at the xtm 505 and can get one with 3 years subscription for £1500

http://www.watchguard.com/products/xtm-5/compare.asp?p1=xtm505&p2=xtm510&p3=xtm520&p4=xtm530

our reseller reckons we would need a 520/530 and that he puts a 505 in for 30 people businesses, surely hes having me on with sales patter?
 
If it's UTM you want at a decent price point, aswell as built in IPSEC/SSL VPN support i would go for the Fortigate.

As mentioned above the 80c is your best fit.

http://www.fortinet.com/products/fortigate/80C.html

I normally sit in the Cisco camp but they cant compete at this level in terms of bang for buck.

Im not familiar with the current Watchguard portfolio but they havent done a bad job in the past.

it says the 80c is branch office? This firewall is mainly going to sit on our internet line which will have a 50mb virgin broadband connectiong into it, will it handle it? the 750mbps throughput looks fine but im just wary that its advertised as branch office.
 
Back
Top Bottom