Business Router/Firewall recommendations

[blubomber]

My company is getting ready to aquire a new property. We are there is not an existing internet connection there. We are most likely going to install a DSL line and i was wondering what some of the TechIMO members could recommend for a DSL Router/Firewall?

There will probably be about 20 users on property. The network wll be a mix of Windows and Unix. I would also like a router with VPN capability.

Thank you for any replies.

[VHockey86]

Cisco makes some pretty nice business routers, but you'd easily be spending a few hundred dollars.

Another option would be to setup a computer with linux and configure it as a gateway.

[M_Six]

If you want the VPN to be hardware on the business side and software on the client side, you'll need to go with Cisco or WatchGuard. Linksys makes several VPN routers, but the software on the client side is the built-in Windows VPN software and that is nothing for non-techies to be messing with.

[DVNT1]

one good solution http://www.zyxel.com/product/security/zywall10.htm

[blubomber]

Thank you for the replies.

DVNT1, thanks for the link. Do you use that router or one from the same company or know someone who does? I have not heard of ZyXEL before.


VHockey86, i am exploring the possiblity of using a linux box as a router/firewall. I am just not sure if a computer or an appliance would make a good router/firewall.

[DVNT1]

Originally posted by blubomber
...DVNT1, thanks for the link. Do you use that router or one from the same company or know someone who does? I have not heard of ZyXEL before...

I've used a few different ones (and now use a ZyWall10W). I've normally hear good things from others who use Zyxel's products too.

ZyXEL's firewalls typically have a lot of features and configurability which also relates to it's higher costs.

[blubomber]

would a SOHO appliance be appropriate for what i need it for?

I may ask for 2 so that i can put one in our main property that has 90-100 users and a published Exchange server. in the near future probably an ftp server also. I have been shying away from the SOHO appliances and looking at DSL router/firewalls for up to 250 users. something like the ZyWALL 100. I have been looking at similar products from Watchguard, which seems to have a good reputation in the Firewall/router community.

[DVNT1]

The ZyWALL 100 has a DMZ port which may be useful.

The ZyWall 100 supports a through of 32Mbps as opposed to the 25Mbps in the ZyWall 10 firewall.

The ZyWall 100 also supports 100 VPN tunnels instead of just 10.

The ZyWall 100 supports 400 ACL rules instead of just 50.

The ZyWall 100 supports 4096 NAT sesions instead of just 1024.

The ZyWall 100 supports 50 static routes as opposed to 12

The ZyWall 100 has a more complete bandwidth management then the ZyWall 10.


You will have to determine if these improvements are needed and worth the cost.

As for Watchguard, I have no information good or bad.

[blubomber]

DVNT1, are you using the 10W to protect the network where you work or at home?

[DVNT1]

Home, but I route a backup Internet connection via my residence and a T1 line.

The outer most firewall at work is a Netscreen-100.