Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Please tell me an Enterprise UTM/Firewall list from where I can choose which firewall to buy...

I'm currently trying Cyberoam and Kerio Winroute among the commercial ones.

I've tried ISA server and popular opensource distro's.

You can include both opensource distro's and commercial names..

Thanks.

share|improve this question

closed as too localized by Mark Henderson Jan 14 '12 at 3:33

This question is unlikely to help any future visitors; it is only relevant to a small geographic area, a specific moment in time, or an extraordinarily narrow situation that is not generally applicable to the worldwide audience of the internet. For help making this question more broadly applicable, visit the help center.If this question can be reworded to fit the rules in the help center, please edit the question.

1  
Is it too early to ask a question like this? :-) –  Josh May 6 '09 at 13:59
    
I ended up using Cyberoam UTM 50ia –  Josh Jul 22 '09 at 9:40
add comment

12 Answers

up vote 5 down vote accepted

Here are two options you may want to check out:

IP Cop is a Linux distro that I have heard some good things about. This solution was implemented over a year ago at a local non-profit and has been running solid ever since.

Watchguard is a commercial appliance that we ran at one of my last job sites and that I was really impressed with. Not only will it handle threat mitigation, but it can also provide VPN for your network and some of the models come with built in wireless capabilities.

share|improve this answer
    
Watchguard systems are nice, I've used a Firebox and the logging features were somewhat to be desired however, it lacked simple things such as filters. –  Adam Gibbins May 6 '09 at 14:12
    
The only Watchguard system I dealt with (an older one) had limited support for semi-complex routing rules (that I knew the underlying Linux kernel could handle). –  Harper Shelby May 6 '09 at 14:30
    
I demoed a Watchguard Firebox unit a couple of months ago. It didn't do anything more than the other firewalls out there. It just cost less. One thing that turned me off was that for some of the extra features (web filtering for example), a Windows box was required to host the database. So much for "all in one". In the end, OpenBSD + pf was the winner. –  David Jun 28 '09 at 1:55
    
Just like David I also used a Linux for some time but it did not meet my expectations. In the end I settled for pfSense which uses FreeBSD + pf, along with a great web interface for easy management. –  Luis Ventura Aug 11 '09 at 3:09
add comment

We recently switched from an aging Watchguard to a Juniper SSG and have been really impressed. The SSGs come in a number of models depending on performance and feature requirements. We don't use many of the UTM features so I can't speak specifically to those, but you should definitely put Juniper on your list.

http://www.juniper.net/us/en/products-services/security/ssg-series/

share|improve this answer
    
Love the Juniper (Netscreen) models. We have an SSG 140 that's great for us. –  Clint Miller Jun 26 '09 at 22:48
add comment

Try out this.http://www.fortinet.com/ One of our client is already using and its doing wonderful job.

share|improve this answer
    
Fortinets products work very well, we Deploy them regularly. Very reliable and with the subscription the anti-virus at the firewall save the network from many viruses. –  Grishanko Jul 6 '09 at 16:37
add comment

Take a look at Astaro. They sell ready UTM devices with their software installed (do a 30-day trial to see if it does what you need). If you have a spare computer with 2 ethernet cards, you can download Astaro for free and install it to make a dedicated router. They even have VMWare appliances available.

Another option is m0n0wall, which is completely free. It's based on FreeBSD. Like the free version of Astaro, you install it on a computer to turn it into a dedicated UTM device.

There's also Smoothwall, which is Linux based and installed like Astaro or m0n0wall.

All of these are excellent products and should do what you need.

share|improve this answer
    
Having used both Smoothwall and M0n0wall I would use m0n0wall ... it is really a great product especially for the price. also check out pfsense a monowall derivative –  trent May 6 '09 at 14:59
add comment

Have you looked at Checkpoint?

share|improve this answer
    
We were loaned a Checkpoint to get us through a DOS. One plus was it worked in bridged mode. The downside was it required major hardware to get it to perform acceptably. –  David Jun 28 '09 at 1:53
add comment

SonicWall has a great line of appliance hardware and subscription based services. You can check them out here

If you're looking for something cheaper there is a good list at the wikipedia

share|improve this answer
add comment

Check out pfsense. FreeBSD+pf based. The web based interface is easy to use. The download CD is both a live and an install image, so you can try it with out having to install it. A VMWare appliance is also available for testing if you don't have a spare box laying round. pfsense also comes with a selection of add-on packages that install with the click of the mouse. Check them out too as they may add a feature your looking for (or wanted but didn't know it yet).

share|improve this answer
add comment

If anyone interested an open souce firewall you can look into Untangle UTM or endian UTM. Very impressive UTM consist of firewall , openVPN , Web filtering , IDS and more.

share|improve this answer
add comment

I recommend you try Ideco Gateway (www.idecogateway.com)

excellent firewall/vpn/router/shaper and more

you'll need to download an iso image from the site and burn it to a cd and install from there

Although it's commercial prices are really good, times better than ISA or Kerio and more secure because it's based on Linux

share|improve this answer
add comment

I would recommend that it is also worth looking at SmoothWall's UTM and commercial firewall offerings. I won't comment on the quality of the kit - as I am irretrievably biased (I work @ SmoothWall).

share|improve this answer
add comment

Gartner has a June 2009 report out for Small/Midsize business devices, top contenders were from:

Watchguard Fortinet SonicWall

All do weeny little appliances for your remote offices right up to mega sized highly-redundant multi-WAN boxes for your Headquarters.

If you need more 'Enterprise' sized boxes then you'd be looking at something from Cisco or Juniper Networks probably.

Watchguard have recently released their XTM (version 11) software which gives all their products a good overhaul. They also do some agressive trade-in pricing if swapping over from other manufacturers.

share|improve this answer
add comment

You cant beat a DEC SEAL firewall !

share|improve this answer
add comment

Not the answer you're looking for? Browse other questions tagged or ask your own question.