Recommend me a firewall!

[CAM]

Our network manager asked me this morning about security for the school as we are currently running a rather old version of ISA Server. I pointed him to Smoothwall's site as that's the only one I know of but I want to provide alternatives too. Can anyone else recommend other companies we can use?

 

The connection is behind the LA's systems and they handle filtering for us already so we don't need a full-on web filtering system, just a firewall and proxy server really.

[CyberNerd]

Cisco ASA. Can't beat it really.

[Soulfish]

Cisco ASA. Can't beat it really.

 

...unless you get a Palo Alto . Aka the Rolls Royce of the firewall world, but also one of the most expensive

 

Depending on traffic levels and what you want your firewall to do (full AV/IPS/Layer 7 filtering, or simply a basic firewall?) then others to look at include Sonicwall, Watchdog, Fortinet and Juniper.

[CAM]

@Soulfish Any of those you'd particularly recommend?

 

Also spotted Smoothwall Express but I don't think that will handle nearly 1000 users(!) Wonder what that would be like on my home LAN though...

[FN-GM]

@Soulfish Any of those you'd particularly recommend?

 

Also spotted Smoothwall Express but I don't think that will handle nearly 1000 users(!) Wonder what that would be like on my home LAN though...

 

Do you have VLANS? If so Smoothwall Express can we struck off right away

[cpjitservices]

PfSense.

 

pfSense Open Source Firewall Distribution - Home

[Soulfish]

If you hadn't guessed I'm a fan of Palo Alto . They are expensive though, and that's even with discounts! Watchguard/Sonicwall/Fortinet are all fair at the cheaper end of the market and tbh do pretty much everything you could want

[SchoolsBroadband]

+ 1 for Fortinet here. I'm currently at their Fast & Secure conference in Cannes, France. I hear the weather in Leeds is just as nice as here which is frustrating!!

 

 

FYI I'm going to have quite a few refurb units in the next 12 months as we move people over to our hosted Fortinet platform.....

[ass17]

An alternative and cheaper to smoothwall is ClearOS. Very good stuff!!

[MatthewL]

If all you are after is firewall I would recommend Watchguard.

[ful56_uk]

+1 for the palo alto box

[tom_newton]

+ 1 for Fortinet here. I'm currently at their Fast & Secure conference in Cannes, France. I hear the weather in Leeds is just as nice as here which is frustrating!!

 

 

FYI I'm going to have quite a few refurb units in the next 12 months as we move people over to our hosted Fortinet platform.....

 

Irritatingly i'm in sunny southampton with our developers - the weather in Leeds is obviously giving it big style while we are both away >

[SchoolsBroadband]

Irritatingly i'm in sunny southampton with our developers - the weather in Leeds is obviously giving it big style while we are both away >

 

Yes, can you believe it, it was thunderstorms in Nice when we landed whilst in Manchester glorious sunshine......

[mrbios]

Another +1 for Palo Alto here, would have gone with PA if it wasn't for going to the SchoolsBroadband hosted fortinet solution. Granted I'm in no way disappointed about that, as the fortinet solution was my second choice behind PA. (In no way can i complain about the amount of money saved though!) Just behind those two though i also give a +1 to watchgaurd.

[clodhopper]

Which palo alto boxes are most people going with ??

[psillars]

Hi,

 

I can arrange Demo units for SonicWALL or Palo Alto. If it is of interest, PM me.

[CAM]

Thanks guys, I've passed names of potential products on.

@psillars: Cheers, will drop you a line if the NM goes for either of those (I think Palo Alto may be out of price range though).

[RTFM]

We have a SonicWall and can recommend it

[chazzy2501]

I remember that Astaro used too be well respected they were bought by Sophos and they still do a free fully featured for home use UTM but also do a free essential firewall for business. I don't know if they've gone down in peoples respect?