Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a medium sized organization with users between 300-500 users. I am looking for software firewall for this type orgnization.

Which type of software do you guys prefer, am not looking for hardware firewall...Can u suggest me some names of software firewall for this kind of organization.



i want to Examine the various software firewalls available and compare their functionalities, cost, features and type of protection.

share|improve this question
If you want a border firewall, as your answer to @Dave below says, and you want a software one, then you'll need to tell us what hardware (and OS) you plan on running under it. Also, please fill in some details, like why a hardware firewall isn't a good solution for you. – mfinni Jun 11 '10 at 20:38
Please edit the question to answer these: How much bandwidth will pass through the device? Will you have a lot of static mappings? Will you want to do any kind of advanced IPS/IDS/virus scanning on the firewall? What hardware and/or operating system do you need it to run on? – David Jun 11 '10 at 22:10

Is this a software firewall for client computers or a firewall for intranetwork access or something else?

If you're talking about a software firewall for individual computers, it depends on their operating system.

If you're talking about a centralized firewall, then iptables on Linux is great. An alternative is pf in the BSD world.

share|improve this answer
yes am talking about centralized firewall.. – user45019 Jun 11 '10 at 20:32

What exactly do you mean by "software firewall"? Nearly all firewalls (yes, even Cisco ASAs) are "software firewalls".

My firewall platform of choice is PFSense. It's based on FreeBSD, has a nice GUI, and will run on standard x86 hardware, from within VMware, or on dedicated embedded hardware as well.

share|improve this answer
hey thanks, heard about checkpoint.. can you recommend me which checkpoint firewall to use. and what is the cost of the software ?/ – user45019 Jun 11 '10 at 20:35
I've never touched a checkpoint firewall, so I can't give a recommendation for or against. – EEAA Jun 12 '10 at 4:27

ive tried out almost every firewall distro avaliable, and have a list of favourites i always reccomend to others. in no particular order:

  • eBox (Ubuntu based --currently runs 8.04, soon to be 10.04, with 1.5)
  • Endian (LFS based)
  • pfSense (BSD based)
  • ClearOS (CentOS based -- 5.5)

you may also look at Untangle (it has potential imho) but its not quite there yet. ymmv.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.