We run fortinets, these are pretty good but cost. Ditto FW1 (ie cost), you will
need to look carefully at the cost of a decent box with fw1 v something like a
fortinet.
Lots of ports means lost of cost either way. I think fw1 is licenced on IP
addresses in some way....so you will need to ask the vendor(s) about the cost.
The cheap black boxes I am not impressed with eg PIX, but this will depend on
your use and payment options.
-----Original Message-----
From: Miguel José Hernández y López [mailto:me@mike.com.mx]
Sent: Tuesday, 16 May 2006 1:16 p.m.
To: firewalls@securityfocus.com
Subject: Re: (recomendation for firewall)
El lun, 15-05-2006 a las 09:23 -0300, Federico Raúl López Sarmiento
escribió:
I would like to replace the current firewall (PC-clon) for a hardware
firewall (i.e. pix, asa, etc).
The main requirement is that the firewall can handle 5 or more ethernet
interfaces, supports vpn pass trought, has 1 or 2 gigabit interfaces (or
all) and can handle full constant traffic for each interface
Another important thing, i would like to know the price for that fw.
Any suggestion ?
Regards
I recommend you CheckPoint Fw-1, integrates access, control,
authentication, network address translation, content security, auditing
and more. It has a three tier architecture, Stateful Inspection
technology and the Open Platform for Security (OPSEC) to deliver a
highly scalable solution that integrates and centrally manages all
aspects of Internet security.
The Stateful Packet Inspection is awesome. VPN's for network to network
or client to network encryption. You can use more than 5 interfaces
10/100/1000. The Management console provides a single GUI interface
which is simple to use. :-)
Kind regards,
--
----
Un cordial saludo...
MIKE
http://www.mike.com.mx
