SonicWALL Network Security
Discussion
I have to say the only experience I had was bad, although it was 3-4 years ago.
Basically I bought a SonicWALL box to protect some servers I had in a colo centre, it cost about 2 grand.
It proved unreliable and would randomly - but frequently - stop forwarding packets. All would appear to be fine in the management interface, but it would have to be rebooted before it would allow traffic to pass.
SonicWALL did eventually get around to swapping it out (after many phone calls, diagnostics, firmware upgrades, etc.), meanwhile I had lost all hope and replaced it with a Cisco PIX, which I believe has worked flawlessly to this day. I can't remember what happened to the replacement unit they sent - I think we let it go on ebay for pennies.
I'd check out the new Cisco ASA appliances, I understand they can do everything you are looking for.
Basically I bought a SonicWALL box to protect some servers I had in a colo centre, it cost about 2 grand.
It proved unreliable and would randomly - but frequently - stop forwarding packets. All would appear to be fine in the management interface, but it would have to be rebooted before it would allow traffic to pass.
SonicWALL did eventually get around to swapping it out (after many phone calls, diagnostics, firmware upgrades, etc.), meanwhile I had lost all hope and replaced it with a Cisco PIX, which I believe has worked flawlessly to this day. I can't remember what happened to the replacement unit they sent - I think we let it go on ebay for pennies.
I'd check out the new Cisco ASA appliances, I understand they can do everything you are looking for.
When Doing server room installs / upgrades for clients ( Small Businesses ) we normally plump for the Zyxel Zywall 5, as it has a pretty goot feature set, and works well for us.
i currently have a spare one in stock at the moment if youre interested.
www.zyxel.co.uk/web/product_family_detail.php?PC1indexflag=20040908175941&CategoryGroupNo=D7ED938C-71E6-4F9A-8779-62F6509D5C62
it has all of the features you require too.
Firewall (ICSA Certified)
VPN (ICSA Certified) - 10 simultaneous IPSec VPN Connections
Anti-Virus/Intrusion Detection and Prevention
Content Filtering
i currently have a spare one in stock at the moment if youre interested.
www.zyxel.co.uk/web/product_family_detail.php?PC1indexflag=20040908175941&CategoryGroupNo=D7ED938C-71E6-4F9A-8779-62F6509D5C62
it has all of the features you require too.
Firewall (ICSA Certified)
VPN (ICSA Certified) - 10 simultaneous IPSec VPN Connections
Anti-Virus/Intrusion Detection and Prevention
Content Filtering
Thanks for the offer, but the link says it's suitable up to 30 users - I have 100-ish here and ten to a dozen at the remote sites. I'll have a look at the rest of the range though.
I'll also have a butchers at the Cisco offering (if I can find it - their website is v pretty but a nightmare to find anything if you're not sure what you're looking for or where to find it).
I'll also have a butchers at the Cisco offering (if I can find it - their website is v pretty but a nightmare to find anything if you're not sure what you're looking for or where to find it).
You might want to look at the Juniper Netscreen range. Fast, reliable and flexable and fairly straight forward to setup.
www.juniper.net/products_and_services/firewall_slash_ipsec_vpn/index.html
www.juniper.net/products_and_services/firewall_slash_ipsec_vpn/index.html
LordGrover said:
Any network admins out there who use any of the SonicWALL devices?
I'm looking for a fast and reliable replacement for Netpilots - I need to cover firewall, AV, IPS, content filtering and provide VPNs - preferably from one box per site.
If not SonicWALL, any other suggestions?
I'm looking for a fast and reliable replacement for Netpilots - I need to cover firewall, AV, IPS, content filtering and provide VPNs - preferably from one box per site.
If not SonicWALL, any other suggestions?
We have 5 SonicWALL hardware firewalls on our infrastructure and I have to say they are excellent. The support is very good and they are relatively easy to configure compared to the other units I've seen.
We use site-to-site VPN quite a lot using PRO 2040 units in the central datacentre and TZ170 or TZ170W on the smaller individual sites. (The PRO 1260 is just a TZ170 in a rack-mountable unit). What I would say is that be aware that switching on Gateway Anti-virus, IPS, Content Filtering, etc. overloads the TZ170/PRO 1260 and slows them down to less than current decent broadband speeds. If you're going to have those services switched on for every site you probably have to look at the PRO 2040 and above which are considerably more expensive but tend to be well priced compared to alternative brands.
If you need any more information feel free to email me through my profile or visit our website and email through the contact page.
roadsweeper said:
LordGrover said:
Any network admins out there who use any of the SonicWALL devices?
I'm looking for a fast and reliable replacement for Netpilots - I need to cover firewall, AV, IPS, content filtering and provide VPNs - preferably from one box per site.
If not SonicWALL, any other suggestions?
I'm looking for a fast and reliable replacement for Netpilots - I need to cover firewall, AV, IPS, content filtering and provide VPNs - preferably from one box per site.
If not SonicWALL, any other suggestions?
We have 5 SonicWALL hardware firewalls on our infrastructure and I have to say they are excellent. The support is very good and they are relatively easy to configure compared to the other units I've seen.
We use site-to-site VPN quite a lot using PRO 2040 units in the central datacentre and TZ170 or TZ170W on the smaller individual sites. (The PRO 1260 is just a TZ170 in a rack-mountable unit). What I would say is that be aware that switching on Gateway Anti-virus, IPS, Content Filtering, etc. overloads the TZ170/PRO 1260 and slows them down to less than current decent broadband speeds. If you're going to have those services switched on for every site you probably have to look at the PRO 2040 and above which are considerably more expensive but tend to be well priced compared to alternative brands.
If you need any more information feel free to email me through my profile or visit our website and email through the contact page.
I use TZ170's as well ... Very reliable
arfur said:
roadsweeper said:
LordGrover said:
Any network admins out there who use any of the SonicWALL devices?
I'm looking for a fast and reliable replacement for Netpilots - I need to cover firewall, AV, IPS, content filtering and provide VPNs - preferably from one box per site.
If not SonicWALL, any other suggestions?
I'm looking for a fast and reliable replacement for Netpilots - I need to cover firewall, AV, IPS, content filtering and provide VPNs - preferably from one box per site.
If not SonicWALL, any other suggestions?
We have 5 SonicWALL hardware firewalls on our infrastructure and I have to say they are excellent. The support is very good and they are relatively easy to configure compared to the other units I've seen.
We use site-to-site VPN quite a lot using PRO 2040 units in the central datacentre and TZ170 or TZ170W on the smaller individual sites. (The PRO 1260 is just a TZ170 in a rack-mountable unit). What I would say is that be aware that switching on Gateway Anti-virus, IPS, Content Filtering, etc. overloads the TZ170/PRO 1260 and slows them down to less than current decent broadband speeds. If you're going to have those services switched on for every site you probably have to look at the PRO 2040 and above which are considerably more expensive but tend to be well priced compared to alternative brands.
If you need any more information feel free to email me through my profile or visit our website and email through the contact page.
I use TZ170's as well ... Very reliable
Another vote for the 2040/TZ170 combination
ErnestM
Gassing Station | Computers, Gadgets & Stuff | Top of Page | What's New | My Stuff