Results 1 to 10 of 10

Thread: Firewalls

  1. #1

    Firewalls

    When choosing a firewall solution, do you prefer a hardware based solution or a software based solution?


    For either one, what are features that you consider to be absolutely necessary and what are the features that are nice to have?

  2. #2
    Join Date
    Nov 2010
    Location
    /home/kristoffer
    Posts
    2,793
    I have only worked with software based firewalls, but I believe hardware firewalls off-load the server.

    IP blocking (automatically), port allow/disallow are necessary.
    Serverfruit - awesome cPanel hosting!
    Bacon forever!

  3. #3
    I always consider port control a given, however there is more than one way to "close" a port. You can have it in one of three states. Allow, Deny, Drop. Drop can fool people who do not know better into thinking that whatever they were looking for does not exist.


    When it comes to IP Blocking, explain this more in depth please.

  4. #4
    Join Date
    Nov 2010
    Location
    /home/kristoffer
    Posts
    2,793
    With IP blocking I mean that when a person request a page from the server from an IP that is blocked, it will not answer that client at all like if the server is down.
    Serverfruit - awesome cPanel hosting!
    Bacon forever!

  5. #5
    Join Date
    Jan 2011
    Posts
    451
    Hello,

    For normal servers CSF is more than enough. It will give better security to the server. Hardware firewalls is costly and they are designed for specific issues.
    " Your work is to discover your work and then with all your heart to give yourself to it. "

    That's the mark of a true professional !

  6. #6
    Would something such as Portscan Detection automate blocking, and if there is an automated process there would be a way to add/remove manually.

  7. #7
    Join Date
    Apr 2011
    Location
    Clouds
    Posts
    347
    is you are a regular target of DDOS go for the hardware firewall.
    hostcats.com - Linux|Windows
    Shared|Reseller|Tomcat|vps|dedicated servers|Cloud
    Datacenters:USA|India Cloud: OnApp
    100 days Full Refund| No Questions are asked!

  8. #8
    Quote Originally Posted by cptechie View Post
    Hello,

    For normal servers CSF is more than enough. It will give better security to the server. Hardware firewalls is costly and they are designed for specific issues.
    Just because it is a hardware solution does not always mean that it will be pricey. The only real benefit I see to a hardware solution is that the support all goes to one company.

    You can always take a fresh machine, and turn the software solution into your own hardware solution at a fraction of the cost.

  9. #9
    Join Date
    Jan 2011
    Posts
    451
    Hello,

    I just mentioned that because high budget companies only goes for Hardware firewall. Yes, ofcourse the support will be undertaken by the company. I was just giving you an advise. Rest, as you wish. Good Luck.
    " Your work is to discover your work and then with all your heart to give yourself to it. "

    That's the mark of a true professional !

  10. #10
    Right now, I am mainly interested on the implementations and features that WHTers look for in a firewall for their hosting company/infrastructure.

Similar Threads

  1. Firewalls
    By VuzeHosting in forum Hosting Security and Technology
    Replies: 2
    Last Post: 04-26-2010, 04:29 AM
  2. What about firewalls ?
    By Lunar-Gang in forum Web Hosting
    Replies: 15
    Last Post: 04-25-2010, 11:09 AM
  3. Host based firewalls or lan based firewalls?
    By nomad71 in forum Running a Web Hosting Business
    Replies: 2
    Last Post: 06-26-2003, 02:56 AM
  4. Firewalls and Such
    By infuseweb in forum Hosting Security and Technology
    Replies: 15
    Last Post: 02-14-2003, 01:41 PM
  5. Firewalls... Which is better?
    By Cybertoad in forum Hosting Security and Technology
    Replies: 16
    Last Post: 11-13-2002, 02:30 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •