Does anyone have any experience migrating from a Cisco PIX to a so-called non-enterprise grade firewall/router/vpn?
I'm a non-networking professional (developer) that flunked the CCNA (only got a 730) and find myself missing the ease of configuration you get with home firewall/router products.
The environment is a small office with a remote office.
As far as I can tell, the D-LINK DFL-CPG310 will do what we need:
- Site to Site VPN (to connect the remote office to the local office)
- DHCP Server (unlike the PIX you don't pay extra for licenses)
- Will route packets into and out of the originating interface (so home users connected to the local office by VPN can see resources on the remote office's LAN). PIX wouldn't do this.
- VPN Server (vista support would be a nice plus)
- Built-in DMZ support.
- Web based configuration interface (would prefer one that did not have a command-line as an option as a way to guarantee everything can be configured via web)
- syslog support. So we can dump a continuous stream of logs to a PC until we need the hard-drive space and delete them.
- Access controls with enough power to be useful. E.g., we can block access to a site or block access entirely by MAC Addr without ever writing a single ifconfig-like line.
- A website with a link to the user manual.
Things we don't need:
- A serial port interface. For anything in any way.
- Separate VLANs. We're all one big happy subnet.
- TFTP support. We'll just upload config backups by browser.
- 24x7 tech support. By the time they send someone it would have been cheaper to buy a replacement.
- A website with dozens of links to dozens of tips that aren't relevant.
- Separate installation, configuration, maintenance and upgrade guides each of which is as long as a medium sized novel.
- A separate command reference that's longer than the bible.
I'm open to any other products people have had success with.