[manu]

:D Guys,

Which is the best Hardware Firewall which has a nice Web interface?..

Which one you use, why do you use it?. Why do you feel it is best?

Manu :D

[mrBob]

ehm, i dunno which one is best
i like my sitecom router... it has an easy web interface
easy to configure (port mapping, logs, backup dns [when the standard DNS address failes, i can still connect to the inet while some others can't who don't use backup dns :)], upgradable firmware etc.)
these are prolly standard options, i dunno
never seen other router's interfaces, only mine :P
and a friend from a friend of mine has a real good one (also quite expensive) and has many options but he can't configure it cuz it's too difficult (sooo many options)
he also have to wait for his dad, so that sux :ph34r:
better buy a 'normal' one

[youvegotmail]

hi,

we are using
1) symantec appliances 5xxx type which are really nice firewall boxes
with a lot of cute features.
2) netscreen xxx in various sizes depending on the location
also a nice box
3) cico 525 and 535
integrates nicely into cisco environments
all of which are nice boxes
if you plan to use vpn's then stay with 1+2 personnally
i don't like cisco's vpn too much.

regards,
u.

[youvegotmail]

oopppsss i forgot.
personally i like the symantec appliance V2.0 best
reasons:
1) it is all in a box
firewall
content scanner
vpn protection
2) FULL state inspection
3) features
4) management interface
5) vpn driver is cute too
their IP sec version rocks.
regards,
u-

[l0wkey]

I like my linksys BEFSX41 it was only 60 bonez and it can terminate two IPSEC VPN tunnels plus all the standard firewall features.

[SteveW]

Another great feature of the pix is if you don't want a true IPSEC VPN it has the abillity to use PPTP. No client needed for most Windoze implementations, they already have it. The PDM (web interface) has been greatly improved as well. In the beginning it wasn't good for much.

[Spookie]

Heres my picks
Enterprise - I would say CyberGuard First EAL4 rated Firewall in the business.
Second Choice would be CheckPoint

On the Small - Medium Business side - CyberGuard Snap Gear----NetScreen---- GnatBox -

For Wireless I would say Air Defense, and for applications I would say Teros

[packet]

Here are my pics:

Enterprise with ultimate security:
#1 - Sidewinder (by a nose)
#2 - Cyberguard

And actually I thought sidewinder had a higher security rating than Cyberguard, I'm going to go get some references for that before I say it is so.

Enterprise with decent security and super speed:
#1 - Netscreen - Easy management, very fast, easy VPN
#2 - PIX - Cause I've used it for 10 years.

Medium to small
#1 - Netscreen
#2 - Watchguard (comes with a free content filter and nice proxies) One big negative for me: no command line (!)

[Spookie]

I'm not familiar with that product, looking forward to the info on Sidewinder.

Heres some info -on CyberGuard I'm curious though on the analysis posted on Sidewinders website. Having Pix ahead of CyberGuard. I have nothing against the Pix , just curious how it got that score?

[packet]

Sidewinder is made by Secure Computing and does indeed have the EAL4+ they also say that they are the only one and that anyone else who says that they have it only had a small portion of their firewall certified.

In any case, extremely secure and great to work with. Plus it comes with built in mail gateway, split-dns, content filtering, and lots of other fun stuff.

--G>>P

[tolf]

Problem Ive found with the PIX PDM is that it does not fully support all the commands offered...

[packet]

I've never liked any of the PIX graphical management utilities. PDM is the best so far but thats not saying much. I still say if you want to have a PIX learn the command line.

--P>G

[SteveW]

"Sidewinder is made by Secure Computing and does indeed have the EAL4+ they also say that they are the only one and that anyone else who says that they have it only had a small portion of their firewall certified."

Thats funny, when I went to cyberguard 2 years ago for training they made the same claim. LOL. Oh well, they all are better than most of their competition and leagues ahead of the rest.

One final opinion. Cyberguard bought Snapgear. For a lil soho firewall the snapgear has some interesting features. IPSEC VPN, PPTP, some IDS/IPS as it can be configured to dynamically filter detected attacks. I wouldn't protect my bank with it but for a home or small office on a tight budget it does the job.