Solved

Basic Firewall questions

Posted on 2004-08-12
6
213 Views
Last Modified: 2010-04-14
I would like to upgrade our firewall to one that would have the following abilities:
1. function as a VPN endpoint, so that incoming client connections (from non static IP addresses) can be accepted.  I would like to find a VPN appliance that can handle all of the encryption so that I don't have to use one of my windows 2000 servers for this task.  I need only about 5-10 VPN tunnels with only a few concurrent connections
2. Have an access control feature that I can block internet access by username or group.
3. Easy to configure and maintain.
4. Be somewhat affordable (we are a small business).
5. Support no more than 50 users.

Someone recommended the Cisco PIX 501.  Any thoughts?

Thanks for the input.

0
Comment
Question by:pdbernier
  • 3
  • 2
6 Comments
 
LVL 9

Assisted Solution

by:jdeclue
jdeclue earned 125 total points
ID: 11786599
The PIX might be a bit difficult with regards to configuration. I would reccomend you take a look at the Netscreen products. They offer VPN, nice web interface and good pricing. Many small and medium companies use these products.

http://www.nscreensales.com/products/ns5xp.html
0
 
LVL 11

Accepted Solution

by:
NetoMeter Screencasts earned 125 total points
ID: 11787313
Hi!
Cisco 501 seems really to be the best choice for you.
It covers all the requirements that you have, gives you the ability to connect remotely to that office by using the cisco VPN client besides in the future if you want to connect this office to other offices you can create a Site-to-Site VPN.

As for the configuration - I can post you a sample configuration which covers all your needs and which works fine for many of my clients. You do not have to be a genius in order to replace the sample IP addresses with the real one's and to put the correct subnet masks.


NetoMeter
<removed by CS>
0
 

Author Comment

by:pdbernier
ID: 11787844
From the mfg. web sites, it looks like one distict difference is the Netscreen unit has a web interface, where the Cisco does not.  Is that correct and if so, how do you configure the Cisco 501?
0
Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

 
LVL 9

Expert Comment

by:jdeclue
ID: 11787881
I configure all types, and for corporate environments I mostly deal with Cisco, Symantec and CheckPoint. But, my own experience is that any Cisco product that must be maintained in-house requires Cisco IOS experience. You must be familiar with or learn the Cisco command line. If you do not, then you will be required to hire contractors to help in the event of problems or changes. If you go down the Cisco route, you should be prepared to learn alot. Know, that is not a bad thing, if you have the ability and time to do it, as Cisco IOS is a very valuable skill.

J
0
 

Author Comment

by:pdbernier
ID: 11787907
So how do you talk to the cisco 501?  Telnet? RS232?
Sorry for the dumb questions, but I'm relatively new to this (as you probably already figured out).
0
 
LVL 9

Expert Comment

by:jdeclue
ID: 11787935
telnet, rs232, either or. There web components as well.

J
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
There are many Password Managers (PM) out there to choose from. PM's can help with your password habits and routines, but they should not be a crutch you rely on too heavily. I also have an article for company/enterprise PM's.
This tutorial gives a high-level tour of the interface of Marketo (a marketing automation tool to help businesses track and engage prospective customers and drive them to purchase). You will see the main areas including Marketing Activities, Design …
Learn how to create flexible layouts using relative units in CSS.  New relative units added in CSS3 include vw(viewports width), vh(viewports height), vmin(minimum of viewports height and width), and vmax (maximum of viewports height and width).

920 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now