Web Hosting Talk : Web Hosting Main Forums : Colocation and Data Centers : a good firewall

[madpato]

well i need to acquire a good firewall (price friendly) nothing too advanced just one that gets the job done (port/ip filtering, etc)
its for a small business, any ideas? i know that cisco stuff is some of the best available, but they are kinda expensive.

PS: dunno if this goes in this forum, if im wrong move the thread to the right forum

[LibraHost]

how about a Cisco ASA 5505? (with the advanced license) runs about $1100 combined. the advanced license is needed for dmz creation, also uncreases number of concurrent connections from 10k to 25k.

HTH

[ollebanan]

Originally Posted by madpato

well i need to acquire a good firewall (price friendly) nothing too advanced just one that gets the job done (port/ip filtering, etc)
its for a small business, any ideas? i know that cisco stuff is some of the best available, but they are kinda expensive.

PS: dunno if this goes in this forum, if im wrong move the thread to the right forum

Just configure iptables, it's free!

[hhw]

Check out pfsense, it's FreeBSD with PF and a user friendly web interface.

[111111z]

thats how I do the firewall too....

Just configure iptables, it's free

Via webmin(makes it easy to configure) its called linux firewall in webmin....

[jewps]

I second PFSense. It's stupidly flexible and capable.

[page-zone]

I'll third pfsense, and works nicely as a transparent bridge.

[madpato]

i do have iptables, the deal is that i need a firewall for a server rack, so it must be hardware -.-

[dwinslow]

You need a Netscreen SSG-5. They are very inexpensive, very solid, and very fast. Just my $.02

[Red Squirrel]

You could get a 1U server with two nics and make it dedicated as a Linux firewall (pfsense, or other distro)

[RN-Chris]

Originally Posted by Red Squirrel

You could get a 1U server with two nics and make it dedicated as a Linux firewall (pfsense, or other distro)

This. I'm actually working on something very similar to this myself.

[rey]

If you attempt to turn a server into a firewall, you may want to consider redundancy due to possibility of HD crash, and so on. If your network is mission critical, I highly recommend to get a ready made, solid state firewall such as Netscreen, Sonicwall, Tipping Point or TopLayer.

If you want to handle DoS/DDoS, I recommend Gigabit interface. A lot of DoS/DDoS today can go as high as 400-500 or even 700Mbps. So, if your pipe to your provider is only 100Mbps, your firewall will only be effective to block less than 100Mbps attack.

Just a thought.

[madpato]

Originally Posted by rey

If you attempt to turn a server into a firewall, you may want to consider redundancy due to possibility of HD crash, and so on. If your network is mission critical, I highly recommend to get a ready made, solid state firewall such as Netscreen, Sonicwall, Tipping Point or TopLayer.

If you want to handle DoS/DDoS, I recommend Gigabit interface. A lot of DoS/DDoS today can go as high as 400-500 or even 700Mbps. So, if your pipe to your provider is only 100Mbps, your firewall will only be effective to block less than 100Mbps attack.

Just a thought.

The idea of pfsense is really interesting but our servers ar "almost" mission critical so i need something i can rely on. Any specific model u could tell me about?

[rey]

I've seen this more and more in our datacenter (both our cabinet and cage customers use this):
http://www.sonicguard.com/PRO4060.asp

Everyone seems to be happy with Sonicwall. It has quite a few features and easy management GUI.

Hope this helps.

[Dynash]

What about CSF?: http://www.configserver.com/cp/csf.html