Re: Firewall Appliance

As far as linux/bsd goes.  Nothing beats PF in my opinion.  I have run PF
for years using OpenBSD.  There's a lot of linux distributions out there
that have gui this, and web based that.  When it comes down to it, as far as
minimalism, efficiency and simplicity goes OpenBSD and PF are the choice for
me.  It's saved my butt from being dos'd and has protected my network for
years.


-Jonathan Lindsey
Network Engineer
3D Research Corporation


-----Original Message-----
From: [email protected] [mailto:[email protected]] On Behalf Of
Kyle Petree
Sent: Tuesday, March 25, 2008 8:30 PM
To: New Mexico Linux Users Group Mail List
Subject: Re: [NMLUG] Firewall Appliance

Oh for work I love the new Cisco ASA's - the 5505's are in the same
price range as the older PIX's and with the right IOS support all the
above...

-----Original Message-----
From: [email protected] [mailto:[email protected]] On Behalf
Of Nick Frost
Sent: Tuesday, February 19, 2008 1:42 PM
To: New Mexico Linux Users Group Mail List
Subject: Re: [NMLUG] Firewall Appliance

Kyle Petree wrote:

> I went down this road and use a very basic version of X-IRT loaded on
an
> Asus "firewall/AP".  Chose this because it had the most memory/flash
at
> the time and was only $65.    Wireless performance blows on mine, but
it
> does its job for the rest...

If one does not need multiple subnets/interfaces, then I am frequently a

fan of appliances for firewall usage.
I have used Netgear FVS318's with varying degrees of success (not for 
work though).  At work at various jobs, we have used Sonicwall, 
Netscreen, and Cisco products.  The Cisco Pix 501 is very affordable & 
reliable (if a bit dated by now), supports VPN, but does not support 
transparent tunneling, which may cause VPN client problems for some 
users.  If one needs multiple subnets on a custom box, the Checkpoint 
products are reputed to work well (albeit expensive) for enterprise 
implementations.  I like the Cisco stuff, but for those unfamiliar with 
the Cisco IOS and FOS (Finesse Operating System), set-up thereof may be 
a challenge.

Lately I have been eyeing the ZyXel ZyWall's because of their features, 
performance/price, and they are well-reviewed;

ZyXEL ZyWALL 2 PLUS 24 Mbps $156.99
http://www.newegg.com/Product/Product.aspx?Item=N82E16833181021

ZyXEL ZyWALL P1 30Mbps VPN Throughput 80Mbps Firewall  $70.99
http://www.newegg.com/Product/Product.aspx?Item=N82E16833181104

-Nick

------------------------------
Nicholas S. Frost
7 Avenida Vista Grande #325
Santa Fe, NM  87508
www.nickorama.com
------------------------------
_______________________________________________
NMLUG mailing list
[email protected]
http://lists.b9.com/cgi-bin/mailman/listinfo/nmlug
_______________________________________________
NMLUG mailing list
[email protected]
http://lists.b9.com/cgi-bin/mailman/listinfo/nmlug

_______________________________________________
NMLUG mailing list
[email protected]
http://lists.b9.com/cgi-bin/mailman/listinfo/nmlug