Hi,
Just focus on a proper and reliable solution in term of support because the big
deal is after the sale.
I recommend Symantec SGS 5420 or something higher.
Cheers
_____
De : dballester@kernpharma.com [mailto:dballester@kernpharma.com]
Envoyà : mercredi 22 mars 2006 18:52
à : 3shool@gmail.com
Cc : firewalls@securityfocus.com
Objet : Re: Enterprise Gigabit Firewall
El miÃ, 22-03-2006 a las 15:34 +0530, 3 shool escribiÃ:
Hello Everyone,
We are planning to purchase an Enterprise Firewall for our Head
Quarters. I have been doing some research recently on various possible
options. I do have budget restrictions and that is one important
factor which is going to influence management's decision.
WHat we need is an Enterprise Firewall that can:
1. Establish site-to-site VPN between our 4 branch locations
2. Establish client-to-site VPN for roaming users
3. Should support 500 Internet users at HO
4. Has a Gateway Antivirus, IPS and Content Filtering
Optionally, we also plan to move our SAP servers on this firewall in a
new zone. We would opt this only if the firewall provides us gigabit
throughput for our SAP servers.
For this solution I have been thinking of ISS, SonicWALL, Checkpoint
and Netscreen. It would be great if the list could put their thoughts
on what would be ideal for our scenario. I have also heard that
SonicWALL has a gigabit firewall model, Pro 5060. The price seems to
be really low compared to Checkpoint+Nokia, but would SonicWALL 5060
be a good option?
Thanks in advance.
GNU/Linux with iptables + IKE/Racoon ( ipsec ) , openvpn ( an very easy VPN ) +
Clamav ( antivirus ) + Snort ( IDS ) + bonding ethernets ?
All for free ( as beer ) and near for free ( as beer )
In any way, my 2 cents, don't concentrate all in one product/machine, if this
one goes down, all your services goes down with it. I like more the cluster
with low budget machines or blades aproach , but this is only MMO
Regards
David Ballester
