Solved

Best firewall for site-to-site VPN, NAT, with 25 user LAN?

Posted on 2006-07-07
6
339 Views
Last Modified: 2013-11-16
I am looking for any suggestions on the best firewall that has the ability to do site-to-site VPN's, NAT to at least 2 or 3 devices, and 25 users on the LAN?  Also with the site-to-site does the site that is connecting usually have to have the same type of device?  I have never setup a site-to-site VPN before only client to site.  Watchguard is our preference because that is what my boss prefers but I have worked with Netgear, Cisco PIX, Sonicwall, and Watchguard in the past.  Any suggestions would be helpful.  Thanks.

Mitch
0
Comment
Question by:mcseipsc97
  • 2
6 Comments
 
LVL 19

Accepted Solution

by:
nodisco earned 250 total points
ID: 17059816
Hey Mitch

Its a question that appears quite a lot :
http://www.experts-exchange.com/Security/Firewalls/Q_20399700.html

http://www.experts-exchange.com/Security/Q_20317199.html

All of what you are requesting to achieve is possible with any of the above firewalls.  I would go with Cisco because support for their devices/configuration is so widely available.  Smartnet support is excellent and even if you choose not to buy long term support, there is a wealth of config help on Ciscos site and EE for e.g.

How to configure a PIX for site to site IPSec tunnel:
http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a0080094761.shtml

hope this helps
0
 
LVL 13

Assisted Solution

by:hstiles
hstiles earned 250 total points
ID: 17073985
If you've used Watchguard in the past and are happy with it, then stick with it.

Site to site VPN is very straightforward with Watchguard hardware.  I have found it simple enough to set up SOHO - SOHO, Edge to Core, Core to Core, Edge to Edge, etc...

Do you require additional functionality such as UTM (Gateway AV, web blocker, spam blocker).  If so, then you would want to look at the X series of device, starting with the X700 or 550e (1 BOVPN tunnel but can upgrade to 10).  If yo requirements are pretty basic and you just need the devices for site to site VPN don't want all the extra security features, then a pair of Edges will serve you well enough.
0
 

Author Comment

by:mcseipsc97
ID: 17075381
No we don't require anything fancy.  Just need a secure connection to another site at all times.  So Watchguard Edge would give us those capabilities?
0
 
LVL 13

Expert Comment

by:hstiles
ID: 17081092
Yes.  The only other question would be throughput.  You'd need to check the Watchguard site to ensure that the throughput of each edge device will be sufficient for your link speed.  I'd be surprised if it wasn't though.
0

Featured Post

IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

Suggested Solutions

To setup a SonicWALL for policy based routing to be used with the Websense Content Gateway there are several steps that need to be completed. Below is a rough guide for accomplishing this. One thing of note is this guide is intended to assist in the…
The DROP (Spamhaus Don't Route Or Peer List) is a small list of IP address ranges that have been stolen or hijacked from their rightful owners. The DROP list is not a DNS based list.  It is designed to be downloaded as a file, with primary intention…
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…
In this seventh video of the Xpdf series, we discuss and demonstrate the PDFfonts utility, which lists all the fonts used in a PDF file. It does this via a command line interface, making it suitable for use in programs, scripts, batch files — any pl…

758 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now