Sign in with
Sign up | Sign in
Your question

Anoyone know a good vendor for stand alone hardware firewalls?

Last response: in Business Computing
February 6, 2011 8:25:54 AM

:bounce:  Can anybody recommend reputable vendors for professional stand-alone hardware firewalls? Places with responsive, high quality support staff? Thanks!
February 6, 2011 12:02:35 PM

What's the purpose/needs? Most people on this site are home users, and the firewalls built into our routers are good enough. Do you need more then this?
February 7, 2011 5:41:53 AM

Small business network use f/ T1 with room to grow. Full or half rack size would be most convenient.
February 7, 2011 1:53:39 PM

Sonicwall makes very good hardware firewalls, and their support is top notch. We use one of their solutions at work.
February 7, 2011 3:59:06 PM

COLGeek said:
Some of the best in the business can be found at Barracuda Networks. Link is below:

We use a Barracuda spam filter, but their firewall solution used to give us endless headaches, so we got rid of it.
a b 8 Security
February 7, 2011 4:05:20 PM

mavroxur said:
We use a Barracuda spam filter, but their firewall solution used to give us endless headaches, so we got rid of it.

Sorry for your troubles. When a previous organization of mine used them, we had a great experience with them, including pretty decent tech support when required.

Personally, if it were me (for the consideration of the OP), I would build my own Linux based firewall and save the time and money of dealing with any commercial solution. That way he can customize as much as desired. A stand-alone firewall really doesn't require a tremendous amount of processing horsepower. Something for the OP to think about.
February 9, 2011 3:18:08 AM

Thank you for the suggestions. At least I have a place to get started.

Both companies offer a lot of choices. I'm kinda surprised so many models have completely different functions. At least from the Barracuda models, it looks like you can't get spam & virus protection, as well as VPN and firmware port securing in the same unit. Are there not any all-in-one models? :heink: 

Some of my questions may best be answered by their sales techs. :sarcastic: 
February 9, 2011 4:15:24 AM

If you're looking for all-in-one, you might look at an Astaro Security Gateway. They're easy to manage and combine several protection schemes into one box. They also have several capacity models so you can price the device for your needs.

I've personally deployed two Juniper firewalls at my offices. They're good, but not all together intuitive to configure. I didn't go with Astaro at the time because of the expense of deploying an all-in-one at a large office like mine.

I've got Sonicwall's anti-spam solution running on a Windows server in my office, and can vouch for their support being responsive. No experience with their firewalls or any of their hardware solutions.

The Juniper brings up a sideline subject. I'm going to guess that as a small business setup, you don't keep an IT Pro on staff. That makes an easy to configure firewall all the more important. Even so, it's also critical you take any configuration choices and changes seriously and try to consider the consequences to security of every setting. I can't tell you the number of stories I've heard of an improperly configured firewall leaving a gaping hole or causing network collisions. I'd suggest that whatever solutions you begin to consider, you ask to demo the product, either live on site or a web demo, so you can get an overview of it's capabilities and functions, and then have someone on staff trained on it's use. Most manufacturers have a training program to get you familiar with the device.
February 9, 2011 5:38:29 AM

I must still be missing something. Why are we buying a hardwall firewall? What's wrong with whats built into routers? Spam filter is perhaps the best idea I've heard so far, but that should be built into your Email server and not your FW. I still fail to grasp why "we" are spending $$$ on this.
February 9, 2011 6:29:41 AM

If you want a low cost solution it might worth to have a look at IPCop which is designed for home and small businesses. It is free and you can install it on literally any old pc with a couple of inexpensive network cards.
We have it at work and it works fine for years and years.
Cheap and does the job...
February 9, 2011 2:23:51 PM


a b 8 Security
February 9, 2011 2:42:06 PM

IPCOP with add-ons for SPAM and content filtering will do what any commercial vendor can offer. Also, a good old PC with 2 network adapters is all it takes. Several have suggested such a course of action as an alternative to buying something.
March 4, 2011 7:14:51 PM

I would highly suggest Watchguard. Their support is great and the configs are pretty easy to figure out.
March 4, 2011 7:22:01 PM

I respectfully disagree. I've had two Watchguard Fireboxes and while some of the configs are straight forward, a few like IPsec tunneling are non-intuitive and require external software on a desktop in order to configure.
October 5, 2011 5:40:55 PM

Blue coat is what we use for firewall and proxy. If you're for a good vendor and a reputable appliance servicing your firewall needs, I suggest you avoid solutions that use community supported software like pfsense.

While I agree with xai's post above me that pfsense is a great application, I think the fact that the underlying software is community/open source product doesn't lend itself much support in a corporate environment.
February 20, 2012 1:14:19 AM

wildwell said:
:bounce:  Can anybody recommend reputable vendors for professional stand-alone hardware firewalls? Places with responsive, high quality support staff? Thanks!

I agree with Sonic Wall interface is excellent and protection goes to the granular level, although depending on time of day support can be sketchy. "visual graffiti" distributes them and does an excellent job of their own support. I HIGHLY recommend.

February 27, 2012 5:10:19 AM

We just swapped out one of our sister sites Watchdogs and replaced them with Astaro. Once we know everything is smooth on our end we're replacing our Watchdog set up with Astaro.