SMB or Consumer Router?

[scottay]

I'm doing a big install of 6 new computers and a server for a small business, and I'm trying to pick out a router.

Generally, for my clients with 5-6 computers I generally just pick up a Cisco EA2700 (or similar) consumer style router. Should I look at stepping this up to a small business style router? I'd really like to not spend more than $200 on a router, but if there's a compelling reason I'm more than happy to present a basic business style router.

What y'all think?

 

[mikeroq]

I have a couple of these out in the wild. I'm sure I could do better but they are working just fine for their purposes. One is an office supply store with 5 computers, they were having some network issue with their POS. Changing the router didn't totally get rid of it but it did make it better. I think the software company changed something to make it work (online system). Other is a country club, 9 computers + server (AD,DNS,DHCP)

 

[YeOldeStonecat]

I agree with the Cisco RV series (previously from Linksys Small Business products line)...we've deployed hundreds and hundreds of RV models since that line came out. Very solid, stable, fast, able to handle high loads, good firewall features on them (which steps them way above the consumer models). We usually keep a few RV220w models on our shelf for quick deployment. The 220 model is much faster and has better wireless performance and range.

However, in recent years we are firm believers in having UTM appliances at the edge, and we do our best to try to get clients to use those...instead of plain NAT routers. UTM appliances (Unified Threat Management) adds antivirus and anti ad/spyware/malware scanning on the appliance itself, as well as anti phishing, content filtering, and a broad range of other SPI and deep SPI and attack blocking features. Really cuts down on the malware calls so even through yes they cost more up front, they typically pay for themselves very quickly because you're being called out there much less.

 

[Metanis]

However, in recent years we are firm believers in having UTM appliances at the edge...

I've never used one. What product line and model do you recommend for small businesses with less than 10 PCs?

 

[altrenda]

Check out these for small businesses.
http://store.netgate.com/Netgate-m1n1wall-2D2-Silver-P222C61.aspx

Add Snort, Squid and and a few tweaks to pfSense to make a little UTM with open source software.

From a site YeOldeStonecat is familiar with http://www.smallnetbuilder.com/secu...uild-your-own-utm-with-pfsense-part-1?start=1

Not quite an Untangle appliance, but no subscription.

 

[YeOldeStonecat]

I've never used one. What product line and model do you recommend for small businesses with less than 10 PCs?

I like Untangle....but granted for a business network of less than 10x PCs..it's hard to get cost effective, ready to roll appliance starting at 600+ bucks.

You can build your own on good little x86 hardware using the free version of Untangle (I've done that for a lot of my smaller clients).

Or you can get the ready to go ones from Netgear, ZyXel, Sonicwall...amongst others.

Although I love PFSense...very fast and solid, and I like Tim Higgins site at smallnetbuilder, to be honest....PFSense with just Clam and Squid does not equal a good UTM. It's helpless and useless against todays web based malware threats.

Back to Tims site..they just reviewed a nice affordable Cisco ISA550w unit for small businesses.....and it has Kaspersky AV for an option.
http://www.smallnetbuilder.com/secu...sa550w-integrated-security-appliance-reviewed

 

[mikesit]

Do you still install local AV on workstations if you use a UTM appliance?

 

[YeOldeStonecat]

Do you still install local AV on workstations if you use a UTM appliance?

Yes..absolutely.
Having "brand A" antivirus on the workstations...
And "brand B and even brand C" antivirus at the gateway....you end up checking things 2 or 3 times over.

Combine that with a safe DNS service....(set the domain controllers DNS service to forward to those instead of the ISPs)....

And you end up with a great multi-layered layer of protection.