Re: Need firewall advice

I have to agree about the Watchguard. The X core series look great on 
paper and setup and management are as simple as advertised, but it can't 
run any of the add-in applications or even it's own proxies without 
running out of memory. It also gives itself a DOS if you have more than 
about 300 connections open. One person running a web broadcast can kill 
it, requiring someone go into the computer room to do a hard reboot.

I'm in the process of building a ipcop firewall which has handled all 
the traffic I could send through it in testing, gracefully, and without 
ever requiring a hard reboot. I don't have enough experience with ipcop 
or smoothwall yet to recommend them, but my testing has shown them to be 
very robust and I would recommend they be added to your testing list.

-Mike

joekim13@gmail.com wrote:
> Stay away from Watchguard, nothing but a box with nice blinky lights in the front. 
>
> If you want something easy and rock solid i would for the the Netscreen 5gt or 
> SSG5 (replacement of 5gt).
>
> Easy enough to configure via web and plenty of features if you need additional 
> services such as anti-virus via kaspersky, anti-spam via brightmail, or url 
> filtering via surf control or external websense.
>
> Joe
>
>
>