Re: Enterprise Gigabit Firewall

El miÃ, 22-03-2006 a las 15:34 +0530, 3 shool escribiÃ:

> Hello Everyone,
>
> We are planning to purchase an Enterprise Firewall for our Head
> Quarters. I have been doing some research recently on various possible
> options. I do have budget restrictions and that is one important
> factor which is going to influence management's decision.
>
> WHat we need is an Enterprise Firewall that can:
> 1. Establish site-to-site VPN between our 4 branch locations
> 2. Establish client-to-site VPN for roaming users
> 3. Should support 500 Internet users at HO
> 4. Has a Gateway Antivirus, IPS and Content Filtering
>
> Optionally, we also plan to move our SAP servers on this firewall in a
> new zone. We would opt this only if the firewall provides us gigabit
> throughput for our SAP servers.
>
> For this solution I have been thinking of ISS, SonicWALL, Checkpoint
> and Netscreen. It would be great if the list could put their thoughts
> on what would be ideal for our scenario. I have also heard that
> SonicWALL has a gigabit firewall model, Pro 5060. The price seems to
> be really low compared to Checkpoint+Nokia, but would SonicWALL 5060
> be a good option?
>
> Thanks in advance.


GNU/Linux with iptables + IKE/Racoon ( ipsec ) , openvpn ( an very easy
VPN ) + Clamav ( antivirus ) + Snort ( IDS ) + bonding ethernets ?

All for free ( as beer ) and near for free ( as beer )

In any way, my 2 cents, don't concentrate all in one product/machine, if
this one goes down, all your services goes down with it. I like more the
cluster with low budget machines or blades aproach , but this is only
MMO



Regards

David Ballester