Best Firewall backup/replacement

Posted on 2006-06-08
Last Modified: 2013-11-16
We currently have a Symantec gateway 5420 firewall appliance in place on our network.
Everything is working great and we haven't had any major problems with it.  We feel that one day, that will change.
Everything on our network has been clustered or has some sort of a failover method should one of our servers fail, except for our firewall.  If it goes down,  we will have no internet access, and our websites will be inacessable as well as a number of other problems.
Does anybody have a recommendation as to what kind of software or hardware we can purchase to protect ourselves in the event of a failure?
One device that has been suggested is a "Watchguard Firebox® X 750e"  
another option would be to buy another Symantec box and have them running clustered,  but this would be a very expensive method.

any suggestions would be greatly appreciated.

Question by:rbunn
    LVL 12

    Accepted Solution

    If I were you I go for another Symantec product and make a pair and run it in HA. If you have to go for diff vendor box then you may not be able to configure in auto failover. Instead you have a hot stby ( not so hot i guess), which you need to manually change ot do a complex routing changes ( Configure routes with diff metric/cost so failvoer the traffic to the second firewall).
    If your budget allows may be you can even consider replacing your existing single firewall with a pair of cheap alternatives. ( Honestly I dont know the price of Watchguard or Symantec but if you can convince mgmt, that it should be done then I think its quite easy)
    LVL 9

    Assisted Solution

    I like Juniper but I'm picky :)
    LVL 13

    Assisted Solution

    Where are you based?

    The 5420 and 750e are closely matched in terms of performance.  Both have around 200MBps throughput.  The Firebox has two additional ports.

    I reckon if you were to contact a Watchguard reseller I'm sure that you'd be offered a very good price to tyrade-in your Symantec appliance for a pair of Firebox X devices.  Watchguard are very keen for new business as they must make far more on their software and support subscriptions than the appliance hardware.

    I would also consider getting pricing for a pair of entry level peak devices as these have gigabit interfaces, even higher throughput and come with Fireware Pro.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    How to run any project with ease

    Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
    - Combine task lists, docs, spreadsheets, and chat in one
    - View and edit from mobile/offline
    - Cut down on emails

    To setup a SonicWALL for policy based routing to be used with the Websense Content Gateway there are several steps that need to be completed. Below is a rough guide for accomplishing this. One thing of note is this guide is intended to assist in the…
    The DROP (Spamhaus Don't Route Or Peer List) is a small list of IP address ranges that have been stolen or hijacked from their rightful owners. The DROP list is not a DNS based list.  It is designed to be downloaded as a file, with primary intention…
    Sending a Secure fax is easy with eFax Corporate ( First, Just open a new email message.  In the To field, type your recipient's fax number You can even send a secure international fax — just include t…
    In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor ( If you're interested in additional methods for monitoring bandwidt…

    759 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    8 Experts available now in Live!

    Get 1:1 Help Now