All networking vendors are garbage in their own unique ways, you just need to find one that isn't terrible in the areas that are important to you. Threads like this will always have people putting forward their preferred choice and then somebody will follow up minutes later telling you about their terrible experiences.
Which Router for small business
- Thread starter jamoor
- Start date
I would not recommend any Juniper devices from a costly support perspective. Whilst the device itself is adequate, you must get a support contract if you want firmware updates, even day one out of the box... This cost might be fine and budgetted, but if you are considering a Draytek i doubt it. In whch case take two Drayteks, keep one as a warm standby.
Permabanned
- Joined
- 9 Jun 2009
- Posts
- 11,924
- Location
- London, McLaren or Radical
The Juniper support cost is very low though...
We have a lot of Watchguards and generally they are rock solid. Although our most expensive £15,000 model randomly locks up every few weeks which is a real pain and watchguard support can't find anything wrong. In the end we had to buy an IP power switch, so we can remotely switch it off and back on if it freezes.
Why did you not get Watchguard to replace it outright?
It's actually getting replaced under warranty in a few days.
Man of Honour
- Joined
- 30 Jun 2005
- Posts
- 9,515
- Location
- London Town!
That is generally how every serious vendor works though - the trade-off is you get issues fixed promptly and up to date firmware for the life of the product. Ongoing software dev isn't free...it's also, as pointed out, really very cheap for a low end SRX...
Mikrotik would fit the bill but if you’ve not configured one before you’d be best getting a consultant to get you up and running with one. If it’s an internet dependant business and you are going to rely on it then don’t skimp on the router and getting it deployed correctly.
RB2011, RB3011, RB1100AH4 even at top end a CCR1009.
Model number is fairly irrelevant as they will all happily route massively more than 30Mb and the OS is the same across the board.
RB2011, RB3011, RB1100AH4 even at top end a CCR1009.
Model number is fairly irrelevant as they will all happily route massively more than 30Mb and the OS is the same across the board.
If you're comfortable with configuring 'port forwarding' on a home router then you can work a DrayTek - that's the appeal of them. They then add a bunch of features that are useful to the target market - VPNs, remote management, bandwidth limiters, outbound firewalls, multiple subnets, and a support team that exists.
They're not an ASA, FortiGate, SRX whatever replacement, they don't try to be, and they cost a ton less. As long as you're capable of keeping the firmware up-to-date and you understand how to use the firewall then you should be good.
They're not an ASA, FortiGate, SRX whatever replacement, they don't try to be, and they cost a ton less. As long as you're capable of keeping the firmware up-to-date and you understand how to use the firewall then you should be good.
Soldato
- Joined
- 18 Oct 2002
- Posts
- 8,253
- Location
- The Land of Roundabouts
Pretty much this!
Sonicwalls are pretty good imo, they have there nuances but you don't have to be a network engineer to figure them out.
You also cant go wrong with a draytec but the interface suggesting a reboot on the slightest change is infuriating! I also find there firewall interface completely unintuitive. But they do constantly develop there firmware and you don't need a support agreement inplace to get the latest and greatest, they really are good at set and forget.
Meraki are stupidly easy to manage but you pay for it!
Which Sonicwall is it, and why are you just not using that, I do not know a model of Sonicwall that will not do what you want.
100% agree!
We have Juniper SRX240's as our branch office borders. Thats more because we had them spare than because they are appropriate for such a small business.
I saw some references to Fortigates. We're very pleased with them where we use them. Usually as Service Firewalls.
I've got some experience of CheckPoint and Cisco devices. Ultimately they are good products, but look at your requirements as I think all of the above are overkill for you.
If i was you I'd be looking at something really straightforward like the Ubiquity Unifi USG boxes. You probably don't even need a Pro to be honest for such a small user base and network link.
I saw some references to Fortigates. We're very pleased with them where we use them. Usually as Service Firewalls.
I've got some experience of CheckPoint and Cisco devices. Ultimately they are good products, but look at your requirements as I think all of the above are overkill for you.
If i was you I'd be looking at something really straightforward like the Ubiquity Unifi USG boxes. You probably don't even need a Pro to be honest for such a small user base and network link.
Fortinet are a bit of a mess at the moment, they can't seem to decide how certain configurations should be built and have made a bunch of changes in 5.4 and then changed it all up again in 5.6, and seem happy for the documentation to lag behind by several months.
If you're getting a Fortigate box then I'd get one that can still run 5.2, or give it another year or so for more development on 5.6 to sort itself out. In either case, make sure you're good with the CLI.
If you're getting a Fortigate box then I'd get one that can still run 5.2, or give it another year or so for more development on 5.6 to sort itself out. In either case, make sure you're good with the CLI.
Sparky__H
Sparky__H
I just spend the last few hours test deploying a 60E (after upgrading to 5.6.3) and I had to touch the CLI for:
- Renaming the AD Root cert to something less stupid.
- Working around a wildcard bug
- Bit of traffic analysis as it turns out I forgot to PVID an interface.
So far the 60E is smashing those awful Check Point 1400s.