[itdiscuss] Firewalls

[Jon Barton]

They start at ~$600.  A one year next day replacement/tech support contract
is $60. 

Why I like them:

I've deployed/supported ~50 of them. They have fantastic VPN support,
support multiple VLANs, Multiple security zones... Any combination of IP
mappings, natting, etc. The SSG-5 has most of the same features that
Juniper's high end (~$50,000) firewalls have, just less capacity, fixed # of
interfaces.  You can upgrade the license and use a pair of SSG-5 to use
Active/Passive or Active/Active and it works seamlessly.  They do screening
of the most common attacks like port scanning, Denial of Service attacks,
etc.  you can also get a more expensive model that does Antivirus snap-ins,
but I haven't used that feature.

Juniper is a high end product, and going to be around a while. 
Spec sheet: http://www.juniper.net/products/integrated/dsheet/100176.pdf


If your network is simple, like have 6 PC's and 1 inbound policy, and allow
anything outbound, you'll be fine with a d-link or other SOHO FW.

Jon Barton
Soundmind Network Solutions, LLC
Roswell, GA
jon at soundmind.cc


-----Original Message-----
From: discuss-bounces at itdiscuss.org [mailto:discuss-bounces at itdiscuss.org]
On Behalf Of Jason Powell
Sent: Wednesday, November 12, 2008 9:37 AM
To: IT Discussion Forum
Subject: Re: [itdiscuss] Firewalls

Tell us why? How much?

I've heard go stuff about Juniper, but the SSLVPN quote a got a few
years ago gave me a heart attack ;-)

-----Original Message-----
From: discuss-bounces at itdiscuss.org
[mailto:discuss-bounces at itdiscuss.org] On Behalf Of Jon Barton
Sent: Wednesday, November 12, 2008 9:24 AM
To: IT Discussion Forum
Subject: Re: [itdiscuss] Firewalls

Juniper ssg-5 is the best small office fw out there. 
Sent from my Verizon Wireless BlackBerry

-----Original Message-----
From: <blloyd at buskercom.com>

Date: Wed, 12 Nov 2008 06:46:21 
To: <discuss at itdiscuss.org>
Subject: [itdiscuss] Firewalls


_______________________________________________
it discuss mailing list: discuss at itdiscuss.org
Mailing List: http://itdiscuss.org/discuss
Web Discussion Board: http://itdiscuss.org/discuss-forum
Wiki: http://itdiscuss.org/wiki
Internet Relay Chat: irc://irc.freenode.net/citrt


_______________________________________________
it discuss mailing list: discuss at itdiscuss.org
Mailing List: http://itdiscuss.org/discuss
Web Discussion Board: http://itdiscuss.org/discuss-forum
Wiki: http://itdiscuss.org/wiki
Internet Relay Chat: irc://irc.freenode.net/citrt

_______________________________________________
it discuss mailing list: discuss at itdiscuss.org
Mailing List: http://itdiscuss.org/discuss
Web Discussion Board: http://itdiscuss.org/discuss-forum
Wiki: http://itdiscuss.org/wiki
Internet Relay Chat: irc://irc.freenode.net/citrt