Comments on: Choosing the right Firewall: Hardware or Software Firewall http://www.indomino.net/blog/2007/06/07/choosing-the-right-firewall-hardware-or-software-firewall/ My Passion about Lotus Notes, Domino, Email and IT Related Sun, 22 Jan 2012 15:31:08 +0000 hourly 1 http://wordpress.org/?v=3.2.1 By: IPCop Firewall Review | Domino, Email, Spam and IT Related http://www.indomino.net/blog/2007/06/07/choosing-the-right-firewall-hardware-or-software-firewall/comment-page-1/#comment-210 IPCop Firewall Review | Domino, Email, Spam and IT Related Tue, 06 May 2008 09:36:39 +0000 http://www.indomino.net/blog/?p=41#comment-210 [...] Continuing on my previous post. [...] [...] Continuing on my previous post. [...]

]]> By: Ubuntu http://www.indomino.net/blog/2007/06/07/choosing-the-right-firewall-hardware-or-software-firewall/comment-page-1/#comment-157 Ubuntu Thu, 23 Aug 2007 01:25:35 +0000 http://www.indomino.net/blog/?p=41#comment-157 Overall this is a reasonable article and I am glad I found it. It seems to be pushing one product though. For home users ( not it depts) software firewalls seem to cause nothing but trouble with nubes-the main purpose seems to be to reasure the buyer and remove cash from their pockets. The new IPCop seems to have some advanced features especially with wireless traffic. It should be interesting to see the real world hardware requirements. Overall this is a reasonable article and I am glad I found it.
It seems to be pushing one product though.
For home users ( not it depts) software firewalls seem to cause nothing but trouble with nubes-the main purpose seems to be to reasure the buyer and remove cash from their pockets.
The new IPCop seems to have some advanced features especially with wireless traffic.
It should be interesting to see the real world hardware requirements.

]]> By: bfebrian http://www.indomino.net/blog/2007/06/07/choosing-the-right-firewall-hardware-or-software-firewall/comment-page-1/#comment-155 bfebrian Sat, 09 Jun 2007 02:37:43 +0000 http://www.indomino.net/blog/?p=41#comment-155 Thanks you all for sharing. @Erv Kosch Thanks for the info, in the event there is Cisco representative, but they not helping that much. They can answer a simply question like how much is the price. @Robert Fortinet can also dump all the log to syslog server, but then I have to look for another software to create report from that log. I know that there are many software for that, but for paid Firewall I want simplicty, event the price is reasonable. @Chris I use hardware and software firewall terminolgy to just simplyfy things. For Cisco the event mention the processor and memory they used for their Firewall, like PIII and 256 MB Ram. They just nicely packed in 1U or 2U chasing. @Chris and Ronald Thanks for the info of m0n0wall and pfSense. Thanks you all for sharing.

@Erv Kosch
Thanks for the info, in the event there is Cisco representative, but they not helping that much. They can answer a simply question like how much is the price.

@Robert
Fortinet can also dump all the log to syslog server, but then I have to look for another software to create report from that log. I know that there are many software for that, but for paid Firewall I want simplicty, event the price is reasonable.

@Chris
I use hardware and software firewall terminolgy to just simplyfy things. For Cisco the event mention the processor and memory they used for their Firewall, like PIII and 256 MB Ram. They just nicely packed in 1U or 2U chasing.

@Chris and Ronald
Thanks for the info of m0n0wall and pfSense.

]]> By: Ronald http://www.indomino.net/blog/2007/06/07/choosing-the-right-firewall-hardware-or-software-firewall/comment-page-1/#comment-154 Ronald Fri, 08 Jun 2007 20:18:23 +0000 http://www.indomino.net/blog/?p=41#comment-154 Hi, when your at it , have a look at pfsense firewall. It is one of the best software firewalls i know. It is a fork of M0n0wall. http://www.pfsense.com Regards, Ronald. Hi,
when your at it , have a look at pfsense firewall. It is one of the best software firewalls i know.
It is a fork of M0n0wall.
http://www.pfsense.com

Regards,
Ronald.

]]> By: Chris Buechler http://www.indomino.net/blog/2007/06/07/choosing-the-right-firewall-hardware-or-software-firewall/comment-page-1/#comment-153 Chris Buechler Fri, 08 Jun 2007 16:03:00 +0000 http://www.indomino.net/blog/?p=41#comment-153 The whole "hardware vs. software firewall" argument is bunk. First the entire terminology is wrong. All firewalls have software! Cisco PIX firewalls are nothing more than standard PC hardware with software on a flash card. Every so-called "hardware" firewall is essentially the same. Just because Cisco (and similar vendors) package a piece of hardware and software and sell it to you doesn't make it some magically better solution. It's still a piece of hardware and it's still running software. If you'd like open source with commercial support, check out the BSD options, m0n0wall and PFSense. Both are vastly superior in many ways to the typical Linux solutions (there are several new PFSense users on the forum every day ditching IPCop and swearing to never go back), and both are also commercially supported (I won't go into depth on that, but if you watch the project websites you'll see full info on that soon). I love Cisco gear, and PIX's are great firewalls. But I'll also take a PFSense box any day. For most networks it's just as good and in some instances better. IMO the Linux firewall distributions don't compare. The whole “hardware vs. software firewall” argument is bunk. First the entire terminology is wrong. All firewalls have software! Cisco PIX firewalls are nothing more than standard PC hardware with software on a flash card. Every so-called “hardware” firewall is essentially the same.

Just because Cisco (and similar vendors) package a piece of hardware and software and sell it to you doesn’t make it some magically better solution. It’s still a piece of hardware and it’s still running software.

If you’d like open source with commercial support, check out the BSD options, m0n0wall and PFSense. Both are vastly superior in many ways to the typical Linux solutions (there are several new PFSense users on the forum every day ditching IPCop and swearing to never go back), and both are also commercially supported (I won’t go into depth on that, but if you watch the project websites you’ll see full info on that soon).

I love Cisco gear, and PIX’s are great firewalls. But I’ll also take a PFSense box any day. For most networks it’s just as good and in some instances better. IMO the Linux firewall distributions don’t compare.

]]> By: Robert http://www.indomino.net/blog/2007/06/07/choosing-the-right-firewall-hardware-or-software-firewall/comment-page-1/#comment-152 Robert Fri, 08 Jun 2007 09:51:44 +0000 http://www.indomino.net/blog/?p=41#comment-152 Hi, I work for a competitive company to Fortinet (our product are better :-) ) but that's not the point of the post. Most large company firewalls with UTM (Unified Threat Management) services offer logging. The logging can be done either on the appliance if it has a hard disk (but the price goes up) or the logging can be directed to a nominated server on the network. Any sophistacted device will offer this feature. Good luck. My view, go with the hardware and not the software protection. Hi, I work for a competitive company to Fortinet (our product are better :-) ) but that’s not the point of the post.

Most large company firewalls with UTM (Unified Threat Management) services offer logging. The logging can be done either on the appliance if it has a hard disk (but the price goes up) or the logging can be directed to a nominated server on the network.

Any sophistacted device will offer this feature.

Good luck. My view, go with the hardware and not the software protection.

]]> By: Erv Kosch http://www.indomino.net/blog/2007/06/07/choosing-the-right-firewall-hardware-or-software-firewall/comment-page-1/#comment-156 Erv Kosch Fri, 08 Jun 2007 03:12:11 +0000 http://www.indomino.net/blog/?p=41#comment-156 In my experience a hardware firewalls have always been best. Mainly because a decent PIX has a remarkable amount of flexibility in it settings and has a company to stand behind it. You can't say that with most open source software. In my experience a hardware firewalls have always been best. Mainly because a decent PIX has a remarkable amount of flexibility in it settings and has a company to stand behind it. You can’t say that with most open source software.

]]>