Best Firwall solution for me?

I am the IT manaer for a medium size company.  We have about 45 computers and 3 servers on our network.  We have a NAT router firwall currently and it is closed to all ports that are not needed inbound.  I have tested this.  The firewall/router is maintained and provided by our ISP.  I recently have had an issue with a computer connecting to an outside ip address and opening 1000+ ports.  Issue explained here
I would like another hardware firwall that I can controll and limit ourbound ports.  

Could someone suggest an easy firewall/internet appliance that is not too $$ and easy to setup and maintain?
Who is Participating?
WestezConnect With a Mentor Commented:
Take a look at Checkpoints SafeOffice or VPN1 UTM Edge appliances.  I'm not sure of the price, I've heard their under a $1000.  You might try googling for firewall hardware appliances for other products that are out there.
What is the budget something around 2000 will get you running a full statefull packet inspection low mainentance appliance and will let you grow as your needs grow.
jamessaAuthor Commented:
I would like less than that, but if that is where they start I will have to go for it.  I would have to put that on next years budget though.
Simple Misconfiguration =Network Vulnerability

In this technical webinar, AlgoSec will present several examples of common misconfigurations; including a basic device change, business application connectivity changes, and data center migrations. Learn best practices to protect your business from attack.

idyllicsysConnect With a Mentor Commented:
The SonicWall TZ170 Unrestricted with the Complete Security Gateway package sells for about $1100. Or if you can wait a few weeks, they just released the TZ190 for about the same price with a faster processor and a PC Card slot for cellular dial backup.
jamessaAuthor Commented:
Does anyone have experience with checkpoint or sonicwall?
rsivanandanConnect With a Mentor Commented:
Take a look at Juniper's firewall or Cisco's firewall.

For you NS5gt from Juniper/PIX 501 from Cisco should do.

And yeah, it will come to you about 800 dollars.

nitadminConnect With a Mentor Commented:
Hi jamessa,

For easy and quick configuration and best price I suggest Sonicwall TZO 170 with unlimited users.
If you willing to spend some money then go with Cisco PIX 515. However, there a steep learning curve with regard to configuring this device.

mahe2000Connect With a Mentor Commented:
try smallest cisco pix (PIX 501)

good luck!!!!
jabiiiConnect With a Mentor Commented:
Personally I'd recommend the Juniper Netscreen. But the PIX is "swell" too :)

Part of choosing your FW, is what kind of support you will be utilizing, whether it be the vendor, or coming here. Your familiarity with the product, cost, performance, etc etc. All of it needs weighed in on your decision.  That's why when people post here asking for a FW. the First thing most expert's respond with, ok, what is your price range, what architecture are you going to be implementing it with, bandwidth etc etc.

Both have 10 vpn limit. Dimensions and weight are similar. But look at your performance.

CIsco 501 Security Applicance
 firewall throughput,                   60 Mbps
 3DES VPN throughput,               3 Mbps
 Concurrent connections:             7,500 (Cisco wins this one vs the 5series)
Dimensions (H x W x D): 1.0 x 6.25 x 5.5 in. (2.54 x 15.875 x 13.97 cm)
Weight: 0.75 lb (0.34 kg)

Firewall performance                   75 Mbps
3DES VPN performance                20 Mbps
Deep Inspection (DI) performance 75 Mbps
Concurrent sessions                    2000
New sessions/second                  2000
Dimensions (H/W/L) 1/8.25/5 inches
1.5 lbs

C 501

NS 5

Here is a checklist, granted it's from Juniper so might be slighted, but will help you compare FW's for you.

Here's some 3rd party studies of FW's.

2006 Products of the year,289483,sid14_gci1160468_tax299825,00.html?track=NL-20&ad=543466&adg=299807


You can also search here there are plenty of other threads like this one, choosing FW's and VPN's. comparing Cisco/Juniper/Sidewinder etc.

My 2 cents :)
Hope it helps.
jamessaAuthor Commented:
Wow that is good stuff.   Let me look at all of this.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.