Buying a Firewall/Security. device Ideas?

here2serve · 02-22-2008, 11:30 AM

Our Symantic firewall has been acting up so the company bought a Cisco firewall which is being returned today. I have been asked to look into OSS solutions.
Have 4 T-1s
We have close to 200 desktop users locally.
Need 4 dedicated VPNs
Web based VPNs
Anti virus scanning
Cashing
Content Filtering
Commercial support

I have contacted Smoothwall and Astaro and will get bids from them. I am in the process of building my own with Mandriva Linux and am testing IPCOP.

Ideas? Suggestions? Rude remarks? All are welcome.

{BBI}Nexus{BBI} · 02-22-2008, 11:40 AM

You might want to test out Smoothwall Express too as you're going down the IPcop route (It's a fork of smoothwall anyway). Or download the docs.

here2serve · 02-22-2008, 01:48 PM

Very comfortable setting up Mandriva and Ubuntu. I just got the company to start using Redhat for a new server. They are starting to love webmin. Astaro just gave me a bid at 12K. For that price I wonder if they plan on setting up and painting my new office too. Found a company that provides support for IPCOP and requested a bid. Smoothwall express does not seem to include content filetering.

{BBI}Nexus{BBI} · 02-22-2008, 02:11 PM

Yes Smoothwall Express is just a free cut down of their commercial product (which includes content filtering) to get that with the free version you can install DansGuardian.

here2serve · 02-22-2008, 02:24 PM

Didn't know that you could add it in. That might be worth looking into. Thanks

farslayer · 02-26-2008, 08:19 AM

Vyatta, would be worth taking a look at.. You can download the community edition to test.. or you can purchase a complete appliance with support..

http://www.vyatta.com/products/software.php
http://www.vyatta.com/products/appliances.php

Just noticed the request for Content filtering.. That is not a feature that is built into the vyatta boxes from what I can tell, but it still can't hurt to give them a call.

Fortinet is also Based on Open source.. they are reasonably priced initially and for ongoing subscription based support. AV Scanning of HTTP, SMTP, POP3, FTP, (nab the viruses before they enter your network) SPAM Filtering, Integrated IDS, Integrated Content filtering by category, VPN Support, Inline mode available so you can just plug it into your network without changing any other configurations. A pretty slick unit http://www.fortinet.com/

here2serve · 02-29-2008, 04:10 PM

The Boss has Smoothwall and Untangle in testing. So what ever he goes with is OSS. Thanks for the input.

{BBI}Nexus{BBI} · 02-29-2008, 06:34 PM

You're welcome