Re: Good Retail/SOHO Gateway/Firewall for Scans?

Andres Lewis wrote:
> Hi All - does anyone recommend a particular brand or model of broadband 
> gateway/firewall to run
> scans behind?  I can't get scans done in a timely fashion without my devices 
> failing unless I do
> VERY slow scans.
>
> I'm looking at SonicWall (TZ 180 TotalSecure) and CheckPoint (Safe@Office 
> 500) but was hoping
> there's something cheaper.  Also haven't done testing on either so if anyone 
> has please advise...

If you are performing scans from behind a firewall through a NATed
interface on a low-cost router, you could easily be hitting the maximum
number of simultaneous sessions on these devices. If there is anyway to
route/firewall with real IP addresses, you can avoid the hit from the
NAT process.

Another solution would be to run a computer as a gateway with some sort
of Linux/BSD firewall and have Nessus running directly on that so that
it has direct access to your provider's network.

And lastly, perhaps it is possible to obtain more IP addresses from your
ISP and place a dedicated scanner on a dedicated IP.

Ron Gula
Tenable Network Security



_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus