Filtering/Firewall - what do you use?

[mdrabble]

I'm looking at the different options available - and taking an age trying to slot testing etc in between other day to day bits - which is proving difficult at times.

 

Currently use Smoothwall - but not happy with the reporting, but cannot fault the filtering side of things or the firewall. - so still on my list of contenders.

 

Plan to look at Sonicwall and Sophos, Fortinet with FastVue

 

Downloaded VMs for Sonicwall and Sophos, - but only just getting round to looking at Sonicwall.

 

So, I'm just after a quick poll to see what the majority of schools are using.

Edited December 13, 2023 by mdrabble

[mdrabble]

Mods - how do I remove the public option from the poll?

 

Cheers :-)

Edited December 13, 2023 by mdrabble

[nwkeene]

as i can't select two options above... we use Fortinet for our firewall and smoothwall for our filtering...

[LeMarchand]

Fortinet, previously Smoothwall. Both part of the LA solution.

[CHiLL]

We have Sophos and if reporting is important to you, Sophos alone isn't going to meet your requirements. The reporting in Sophos is poor, but Fastvue can be used (additional purchase) to have better reports. We don't have Fastvue, so I can't comment on it.

[paulkerton]

We're looking at the moment. Most of the different services above (currently using RM Safetynet) but also chatting with Lightspeed Systems as well as those above.

[TechMonkey]

I'd make a list of what you want, or what you don't want, and use that as a yard stick. I have been through this process a couple of times and every system is made up of compromises, you have to decide which ones you are happy, or least not happy, with.

 

Currently I am stuck with Ubiquiti firewalls, and they are horrible. I'm sure they can do a whole heap of stuff, but I haven't had any training on them and anything I have tried to do is horrifically complicated. Want to block a port on multiple network groups? Oh you will have to create an individual rule to do that for each network, why would you want one rule to cover multiple things!

I am used to Smoothwall firewall, which although rudimental, I could make it do everything I wanted and knew it worked. Group services, ports, IPs, and block something across all of them, some of them or something with an exception.

 

Some of the big firewall names will happily admit that their filtering is an added bonus, not something that they actively develop or adjust filter lists, which in an Education setting I think is really important. They certainly won't be content aware.

 

I hear a lot of good things about Sophos and how it is worth jumping ship to them over Smoothwall, and then hear you have to buy a third party system to make the logs worthwhile!

 

Ultimately, I think the best option is Smoothwall for filtering, and something industry standard for firewall, but is it worth the cost and having two separate systems? That is again a compromise you have to decide upon.

[sigma]

Fortigate/Netsweeper

[bknaggs]

Smoothwall filtering with Sonicwall firewalling.

[altecsole]

Barracuda Web Security Gateway. I wouldn't recommend.

[Aprice]

Currently Smoothwall across the estate, however I do think Smoothwall need to up their game for the on premise product. Especially on the reporting aspect.

[yac2016]

Sophos is a poor UI and really buggy, tbh most of these firewalls are…Pfsense for the win

[midweek]

PfSense and Securly here. I don't miss Smoothwall at all.

[rogerdnixon]

Pfsense + Securly at secondary and UDM Pro/SE + Securly at primary.

[ITGuyNW]

Currently Smoothwall across the estate, however I do think Smoothwall need to up their game for the on premise product. Especially on the reporting aspect.

 

I agree with this.

The reports I get through now seem to list websites visited for unclicked links when doing google searches and its very unhelpful.

 

Fortunately Impero seems to give me more accurate websites visited information.

[paulellam]

RM SafetyNet/ Smoothwall Monitor, a primary school here and have no issues with either

[mcolbourn]

WatchGuard Firewall and Lightspeed Filtering both work fine for their purpose.

[kevin_lane]

Currently sophos utm 9 looking at the xgs I think personally think sophos do a really good job at filtering and ticks all the filtering test from the kcsie document, report side I think maybe could be better.

[MYK-IT]

Using Sophos XGS (upgraded earlier in year from Sophos XG) combined with Fastvue Reporter that we've used approx 7 years now.

 

Just waiting/hoping that Sophos can sort out some form of cloud-based filtering, based upon on-site firewall filtering rules. Especially as we use Sophos Central, all school assets have Sophos AV etc. (which only offers very basic web-control) and Sophos 'heartbeat' functionality is there already. Plus Sophos Central allows remotes/cloud based control of the on-site firewall... Just need to link it all together, like magic [emoji92][emoji6]

[Olliedawg]

sophos XG210 with FastVue for enhanced reports. Looking to upgrade within the next year though

[mdrabble]

Currently use Smoothwall and it is hard pressed to beat filtering wise, it just the reporting side of things that suffers. - Firewall, is simple but works.

 

Looking at Sonicwall - firewall looks good, yet to test the filtering side of things. - have also a Fastvue trial key to install with Sonicwall.

 

Sophos, will be downloading and testing after Christmas, once I have looked at Sonicwall.

 

Both Sonicwall and Sophos can use Fastvue - and the reports from Fastvue look good.

[mrbios]

Sophos, previously Smoothwall. Currently running a pair of Sophos XGS3300 appliances in HA.

 

Smoothwall is the better filtering product. Sophos is the better firewall product. Think i prefer Sophos overall, just wish it had the dynamic content modification stuff that Smoothwall has really. Built in reporting in Sophos is a bit crap, have fastvue on top for all the safeguarding alerts and insights.

Edited December 14, 2023 by mrbios

[Wave9_Lee]

Using Sophos XGS (upgraded earlier in year from Sophos XG) combined with Fastvue Reporter that we've used approx 7 years now.

 

Just waiting/hoping that Sophos can sort out some form of cloud-based filtering, based upon on-site firewall filtering rules. Especially as we use Sophos Central, all school assets have Sophos AV etc. (which only offers very basic web-control) and Sophos 'heartbeat' functionality is there already. Plus Sophos Central allows remotes/cloud based control of the on-site firewall... Just need to link it all together, like magic [emoji92][emoji6]

@MYK-IT it's on the roadmap along with secure DNS. Some interesting developments in 2024 especially around MDR etc.

[Olliedawg]

WatchGuard Firewall and Lightspeed Filtering both work fine for their purpose.

 

I've been looking at the Watchguard M390 with Security Suite to replace our Sophos XG210. Out of interest why did you opt for separate filtering solution? Is the Lightspeed cloud also?