Firewall appliance

[crobertson]

I don't know what I should be looking for in a firewall applicance, so I'll ask what I do know. Does anyone have a recomendation (even an older one) that has;

DHCP server
Good ddos / DoS protection
bandwitch monitoring & limiting
Windows management GUI
Ping blocking

What else should I be lookin for?

We currently have a netgear firewall, and its version of ddos protection is shutting down if I get to many pings or attempts. It works great other than that. It Does port forwarding, vpn etc. It does not have any bandwith limiting though.

Is bandwith limiting important or should I use a software based monitoring? Any help would be appreciated.

 

[Emerald]

what netgear device are you using?

 

[crobertson]

FVS318v3 Prosafe VPN Firewall.

 

[Emerald]

are you using the latest firmware?

how many users?

any VPNs?

what is your budget?

for the price the Netgear is as good as it gets whereby I do not like their Firewalls.

 

[crobertson]

Small company...
Yes, the latest firmware, talked with their support and they recomended to get a newer one. Quit supporting my version.. (go figure)
only about 40 users
No VPNs yet
Things are tight.. looking at about 150.00 down. I know not much to work with, but I was looking at some good ones on ebay. I don't mind used. Sonic wall has some pretty good ratings, but I don't know what their gui is like.

 

[Emerald]

i found that most GUI are very similar.

I used the Sonicwall T210 good router but not cheep.

 

[crobertson]

Best answer selected by crobertson.

 

[robey]

if you have an old PC lying around, put a 2nd NIC in it and have a look at Untangle http://www.untangle.com/ to install on it.

we have it installed on a Zotac Zbox with a USB NIC for WAN port, and onboard NIC for the LAN side.

it should have eveything you need, and has a simple clean Web-based GUI


Robey

 

[arnep]

When working as a consultant, I prefer real, open source firewall software on affordable hardware. You can find very cheap router hardware at http://www.pcengines.ch/order1.php?c=2 (Soekris is good as well) and then writing a software image to the CF card, such as http://m0n0.ch/wall/ or http://www.pfsense.org or http://www.vyatta.com or http://www.halon.se

All of these are free, and all good in different ways.