This is of course a very subjective question. It is hard to say a
particular security device is effective in any given context. For
example is an ASIC based firewall effective if an ACL is configured to
allow access to a service that is vulnerable? Many people have given
good recommendations and I would say if any are configured correctly
they would add security.
However you mention that you want to protect an IIS server but you need
this service available for your business, how would firewall X protect
your IIS service from attack? Maybe you could restrict access to this
service to only trusted business types or maybe not? Some firewalls
are more application based, i.e. they understand application protocols
and can protect those devices from application specific attacks. Many
attacks hit the application itself rather than the firewall device.
Say I attack port 80 (HTTP) which the firewall is allowing access to
and I exploit the server, and then initiate a connection from the
server back to me? Most firewalls are configured to allow outbound
access by default including the Cisco PIX (Security levels on
interfaces, ACL's to prevent this) so is this an issue with the
firewall itself or configuration of the specific firewall?
To sum up my blathering, a secure solution is often not a black and
white answer but more of a process to validate and mitigate risk to
your assets. How you mitigate risk to your assets is by defining your
attack vectors, asset value, and cost to implement. Only then do you
know if a given security device is "secure" in its role.
Thanks,
-Cory
On Mar 10, 2005, at 9:01 PM, Randy Opper wrote:
Can someone let me know what company makes the most secure and strong
small office firewall.
Sonicwall looks good for about $500 but I know there are others.
It would be even better if the interface was easier to use.
I presently have a Sonicwall in one office and it works great but I am
not sure about how secure they are. I need strong securtity to protect
a machine that is running IIS. IIS is running a service for my
business. I need to secure the system from attack.
Any suggestions????
--------------------------------------------------------------------------
FREE Download - The Future in Desktop Firewalls is Available Now
NEW NetOp Desktop Firewall, the world's first driver-centric
firewall software - protecting your laptops and corporate PCs at
ring-zero! NetOp features sophisticated process & application
control, centralized management and multiple network user profiles -
NetOp is able to increase security when mobile users plug back
into your network. Step into a more secure future - Try it FREE
http://www.securityfocus.com/sponsor/CrossTec_firewalls_050315
--------------------------------------------------------------------------
