
Journal sillypixie's Journal: Firewall Appliances 25
Hi all,
Well enough of the emotional crap -- let's do some geeking!!!
My company has been running an OpenBSD firewall for a long time, but now we're experiencing tough-to-diagnose intermittent problems. I have a cold failover I'm going to move to here right away, but the bottom line is that I don't have the time or desire to maintain these machines any more, and so we're looking to shell out a bit of cash to purchase an appliance instead.
Does anyone have recommendations as to what kind of appliance would work? We have a small office, 20 people -- at any given time, 10 of them are on the outside, wanting to retrieve email & files, and possibly VPN in, and 10 of them are on the inside, trying to get out
I appreciate the help!
Heheh (Score:1)
I'm looking at ways of getting rid of our Cisco PIXs (8 in total) from here and our regional offices to put OpenBSD units in place. PIX is overpriced shit, IMHO.
Re: (Score:2)
Re: (Score:1)
Re: (Score:2)
Re: (Score:1)
Re: (Score:2)
Actually both windows and linux worked great with the cisco vpn on the firewall, so I will certainly give them the thumbs up there. Configuration of the client machines was a snap, but I don't know how hard it was to configure the cisco firewall, since we outsourced that part.
Re: (Score:2)
True for routers and related gear.
For firewalls or midrange switches not so much.
Juniper's firewalls will handle just as much traffic as a Cisco and they are much easier to configure.
HP switches are fine for everything except specialized needs or carrier class situations.
Re: (Score:2)
Re: (Score:1)
Re: (Score:2)
http://www.openbsd.org/cgi-bin/man.cgi?query=diskl ess&sektion=8 [openbsd.org]
I have some time to play with the OS and have it reinstalled if it doesn't work, but it just might have to be penguins after all.
Re: (Score:2)
It's statements like that where I say to myself: Thank God I work on Sun boxes. Barring a hardware failure, I still have a console server and the serial console to OpenBoot and a LOM to power-cycle the box that's 2000 km away.
Re: (Score:1)
Very Important Feature (Score:2)
What do you mean, not that kind of appliance?
Re: (Score:2)
Re: (Score:2)
The VPN stuff is a nice-to-have, right now we have various web apps configured to give us access to our windows fileserver, and that is enough for most people. If the cost either
Lok? (Score:2)
Those are appliances built from OpenBSD... might be a bit overkill for a few dozen people though. Of course, things like Cisco PIX aside, if reliability of your system is an issue you could always setup another machine and use CARP to provide redundancy.
Re: (Score:2)
Re: (Score:2)
http://froogle.google.com/froogle?q=airlok [google.com]
Looks like they start at about $3K and the one company has the base model for $2300. I haven't investigated this much as to whether or not it's suitable for what you want to do, but since it's also based on OpenBSD it may have a good chance of being reasonably familiar anyway. I also found an old P
Netgear prosafe VPN Firewall FVS318 (Score:2)
Re: (Score:2)
We moved from a Cisco PIX to Nokia appliances (Score:2)
Re: (Score:2)
Checkpoint's VPN like their firewalls is _MUCH_ easier to configure and integrate into your network than Cisco.
Re: (Score:2)
Firewalls (Score:2)
* WatchGuard Firebox: either the X Edge or the X Core though the SOHO 6 would likely meet your needs. Good solid product and much smarter than a mere packet filter. (full disclosure, I used to work for them so I like their products)
* Checkpoint: Real firewalls with a good interface and decent integration with enterprise and windows networks. Not sure what there is for affordable appliance based solutions using checkpoint software. Checkpoint is pretty much _t
Re: (Score:2)