+ Post New Thread
Results 1 to 7 of 7
Internet Related/Filtering/Firewall Thread, UTM and application control performance in Technical; ...
  1. #1
    gshaw's Avatar
    Join Date
    Sep 2007
    Location
    Essex
    Posts
    2,713
    Thank Post
    175
    Thanked 227 Times in 209 Posts
    Rep Power
    68

    UTM and application control performance

    Just wondering who is running a UTM-style appliance with application-level control and how is it working for you?

    Reason being we want to implement BYOD wireless access but without some way of controlling the usage and bandwidth of applications such as iPlayer, YouTube and suchlike I can see it being a free for all killing our Internet connection.

    As a result I'm looking at a new firewall appliance with app-level control being one of the key features... needs to service 300-350 desktops plus however many we get on guest wi-fi (50-100 perhaps?)

    Thus far Palo Alto really stands out on app-level control but not sure if their smaller box (which comes in at around £1300 for the box plus £800ish for licensing) has enough grunt... define "enterprise branch office"

    http://www.paloaltonetworks.com/prod...ms/pa-200.html

    Gut instinct says the PA-500 is a better long-term bet but support costs double (they never miss a trick do they!)

    Others that I've looked at...

    Sonicwall, seems to have the feature set but not sure how good the app control is in practice
    Fortinet, pricier than Sonicwall and same question over app-level control
    Watchguard, has some level of app control but seems to be pricey (had a quote for an XTM 520 that's on a level with the PA-500 Palo Alto box)

    We'll have to use content filtering that comes with the firewall for now, not expecting any of them to be brilliant in that regard but will do the job for now...

  2. #2
    jamesreedersmith's Avatar
    Join Date
    Sep 2009
    Location
    Ruskington
    Posts
    1,189
    Thank Post
    81
    Thanked 261 Times in 233 Posts
    Rep Power
    78
    Is this a duplicate post!

  3. #3
    gshaw's Avatar
    Join Date
    Sep 2007
    Location
    Essex
    Posts
    2,713
    Thank Post
    175
    Thanked 227 Times in 209 Posts
    Rep Power
    68
    Quote Originally Posted by jamesreedersmith View Post
    Is this a duplicate post!
    Realised I'd put the original in the wrong category so deleted it and re-created here

  4. #4
    jamesreedersmith's Avatar
    Join Date
    Sep 2009
    Location
    Ruskington
    Posts
    1,189
    Thank Post
    81
    Thanked 261 Times in 233 Posts
    Rep Power
    78
    In which case Smoothwall speak to @tom_newton

  5. #5

    Join Date
    Dec 2007
    Posts
    889
    Thank Post
    94
    Thanked 165 Times in 140 Posts
    Rep Power
    50
    We use (2x) SmoothWall UTM-1000 Appliances with Ruckus.

    SmoothWall deals with all the networking (DNS.DHCP, VLAN etc) for the guest/student WLAN and we use the 'rate limiting' option within Ruckus to control the bandwidth speed for up/downloads which is based per user.

    Yes, highly recommended SmoothWall (and Ruckus!)

  6. #6

    AMLightfoot's Avatar
    Join Date
    Feb 2011
    Location
    Hampshire, England
    Posts
    2,243
    Thank Post
    406
    Thanked 663 Times in 414 Posts
    Rep Power
    272
    Regarding App-level control, the smoothwall cannot interact with apps specifically, but you can set bandwidth limiting on domains - so iplayer and youtube can be limited and the bandwidth can be throttled per proxy client or across all proxy clients (so you could potentially limit the domain youtube.com to 1Mb of bandwidth shared between proxy clients - they'll very quickly tire of trying to watch Rhianna videos when it takes forever to load and buffers every half a second...)

    If you are looking for content filtering, contact Smoothwall to look at the Guardian3 product. @tom_newton can put you in touch with an appropriate sales representative. They can sort you out with some evaluation media to have a play with that you can pop into VirtualBox and mess about with.

  7. #7
    gshaw's Avatar
    Join Date
    Sep 2007
    Location
    Essex
    Posts
    2,713
    Thank Post
    175
    Thanked 227 Times in 209 Posts
    Rep Power
    68
    Smoothwall won't be able to stop Skype and anything that tunnels over port 80 that's the main issue... is filtering by domain really enough these days?



SHARE:
+ Post New Thread

Similar Threads

  1. WSUS and domain controllers?
    By Kyle in forum Windows
    Replies: 4
    Last Post: 6th July 2008, 03:03 AM
  2. Geek maths and classroom control
    By ITWombat in forum Educational Software
    Replies: 6
    Last Post: 21st April 2006, 09:49 PM
  3. Systems and Applications Manager -University of Hertfordshir
    By tosca925 in forum Educational IT Jobs
    Replies: 0
    Last Post: 21st September 2005, 05:46 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
Web Statistics