01-12-2006, 06:14 PM
|
|
virtualizing the world
|
|
Join Date: Mar 2004
Location: Kansas City, MO
Posts: 2,444
|
|
Hello,
What 'cost-effective' firewall would you recommend for preventing SYN Floods from occuring?
Thanks
|
01-12-2006, 08:38 PM
|
|
Web Hosting Master
|
|
Join Date: Jun 2001
Location: Denver, CO
Posts: 3,210
|
|
What do you consider to be cost effective, and how large of a SYN flood are you seeking to mitigate?
__________________
Jay Sudowski // Handy Networks LLC // Co-Founder & CTO
AS30475 - Level(3), HE, Telia, XO and Cogent. Noction optimized network.
Offering Self Managed, Truly Dedicated Server and Colocation from our Private Denver Data Center.
Current specials here. Check them out.
|
01-12-2006, 11:41 PM
|
|
virtualizing the world
|
|
Join Date: Mar 2004
Location: Kansas City, MO
Posts: 2,444
|
|
Anything that seems reasonable for what it does... just ignore the cost-effective, as I just need solutions, cost doesn't matter.
About 1000 connections.
|
01-13-2006, 01:59 AM
|
|
Community Guide
|
|
Join Date: Apr 2005
Posts: 1,214
|
|
|
01-13-2006, 02:04 AM
|
|
virtualizing the world
|
|
Join Date: Mar 2004
Location: Kansas City, MO
Posts: 2,444
|
|
That will not protect against a SYN flood. I am talking about a physical firewall......
|
01-13-2006, 10:25 AM
|
|
virtualizing the world
|
|
Join Date: Mar 2004
Location: Kansas City, MO
Posts: 2,444
|
|
Any specific models you recommend from any of these companies?
|
01-13-2006, 11:30 AM
|
|
Web Hosting Master
|
|
Join Date: Aug 2004
Location: Karachi, Pakistan
Posts: 747
|
|
It all depends on your attack size (current), your budget, what you are trying to protect, etc. - The answer is not that simple I'm afraid.
Prolexic is a scrubin service - so no model there. For Foundry, it would be their Layer2/3 or Layer 4/7 Switches that rate-limit DDoS attacks. For Juniper it would be the netscreen firewalls. For all others, the products are signular and only differing in bandwidth/clustering capabilities.
__________________
"I drink too much. The last time I gave a urine sample it had an olive in it. ".
Rodney Dangerfield (from "I Get No Respect!").
|
01-13-2006, 11:31 AM
|
|
virtualizing the world
|
|
Join Date: Mar 2004
Location: Kansas City, MO
Posts: 2,444
|
|
Thanks for your help. I found a solution. The Cisco PIX 506E seems to fit my needs.
|
01-13-2006, 02:46 PM
|
|
WHT Addict
|
|
Join Date: Oct 2004
Posts: 150
|
|
Netzentry also has SYN Flood protection as part of its Flood Guard solution.
|
01-13-2006, 05:46 PM
|
|
Junior Guru Wannabe
|
|
Join Date: Jul 2003
Location: Saint Louis, MO
Posts: 85
|
|
What kind of network connection do you have? Some of the units mentioned here would be overkill for smaller connections.
|
| Thread Tools |
Search this Thread |
|
|
|
| Display Modes |
 Linear Mode
|
| Postbit Selector |
|
|
Posting Rules
|
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
HTML code is Off
|
|
|
|
|
|
| Login: |
|
|
| Advertisement: |
|
|
| Web Hosting News: |
|
|
|
