Firewall Recommendations for Business

[ConozoComputers]

I have a customer who has the following

• 100up/20down internet (just upgraded from a service offering 20/4
  
• 40 workstations setup on a domain
  
• Unifi wireless system where just about every employee has an iphone connected
• VPN service that allows for 9 connections
• Most of their network traffic is to an internal server, but they do send a lot of emails, and only half of them really use the internet that much at all

Their current firewall is a very old and inadequate Cisco Pix 501, it cannot handle the new internet speed so they need a new one. I'm new to firewalls and would like to get an idea of what to use, I also have the chance to pass this job off it i wish to someone else but i want to learn here. The other business recommended the Cisco ASA 5512-x to handle the new speeds and current load they use.

I dont really know much about cisco ASA firewalls with regards to their limits, capabilities, and licensing. I have experience with sonicwall firewall and i like the security features of it but it hasn't been exactly rock solid. Thank you for any input.

 

[YeOldeStonecat]

For non-UTM, we've used Cisco RV series was our "go-to" edge device for many years. The Linksys LRT224 is taking over..we've been using that for a while now as our entry level router...as well as Ubiquiti's EdgeRouters also. Haven't played with the remote VPN of the EdgeRouter.

For UTM, we use Untangle....good VPN features.

 

[mrapoc]

I've only ever played with untangle. Was up and running in literally 10 mins (excluding install).

As an amateur to utm..I was impressed!

 

[altrenda]

For a firewall, I prefer pfSense. Easy to set up, high performance, great support, both online and paid.

If you want a full UTM, which you should, Untangle is the way to go.

 

[gikstar]

For a firewall, I prefer pfSense. Easy to set up, high performance, great support, both online and paid.

If you want a full UTM, which you should, Untangle is the way to go.

We also use pfSense for a firewall device... doesn't require much in the way of hardware and you can use just about any old computer (we prefer dual-core units though which I can pickup for $20 if need be) or if the client has a rack we like to use an older 1u server.

 

[Moltuae]

or if the client has a rack we like to use an older 1u server.

I was just contemplating doing the same for one customer and I've been looking at buying a used 1U server, possibly a ProLiant G6 or a Dell of a similar vintage. Are there any you'd recommend or avoid?

 

[goldmercury]

I'd suggest a Draytek - good solid hardware and nice easy to use GUI which is always a plus if scared off by the ASA's.