Web Hosting Talk : Web Hosting Main Forums : Dedicated Server : question about juniper firewalls

[myserve]

Hello,
i want order a juniper ssg5 but i have some quetions and our main usage for this is just close all ports for our ip range and just open that ports who users need them :
1) in datasheet of ssg5 told max security polices 100 , this mean that we can open or close ports for every ip up to 100 rules right?
2) which one is better ? fortigate 60c or juniper ssg5 ?
i do not need ips because we have another firewall that it has ips,

Thanks,

[shell-box]

I have used Fortigate and Junipers they both work great! I do not like either one. I would look at Cisco or Watchguard for Paid Firewalls. If you have a server with two or more nics it might be wise to try one of the free firewalls out there. PFsense, Untangled, or Wolverine

PFSense http://www.pfsense.org/
Untangled http://www.untangle.com/
Wolverine http://www.coyotelinux.com/downloads

If you want to spend money go with a Cisco..

[XLHost]

Originally Posted by shell-box

I have used Fortigate and Junipers they both work great! I do not like either one. I would look at Cisco or Watchguard for Paid Firewalls. If you have a server with two or more nics it might be wise to try one of the free firewalls out there. PFsense, Untangled, or Wolverine

PFSense http://www.pfsense.org/
Untangled http://www.untangle.com/
Wolverine http://www.coyotelinux.com/downloads

If you want to spend money go with a Cisco..

I second WatchGuard, although they are a bit slow with features (cough: IPv6) they are tremendously easy to use and ever since version 11 has come out they have been tremendously stable. We have something like 100 of their firewalls in our datacenter anything between a Firebox II to a XTM 810.

[centauricw]

I use Juniper firewalls a lot and have no faults with them.

As for the policies, you can define more than one source IP, port and destination IPs in a single policy. I usually create a group with all the server IPs and use the group for destination IP in the policies. It's rare that you would get anywhere near the 100 policy limit unless you have very complex rules.