Avatar of Steelers4life
Steelers4lifeFlag for United States of America

asked on 

sonicewall config ? Quck question ?

We are looking at a new sonicwall firewall. I was told that tz170 should work nice for what we have . However I noticed the user nodes limit is 25 . We have about 80+ computers on the network I was informed this would still work if we redirect are traffic to our server then out does anyone know how this would work ? This is new grounds for myself .
Software FirewallsNetwork Management

Avatar of undefined
Last Comment
ccomley
SOLUTION
Avatar of jbla9028
jbla9028
Flag of United States of America image

Blurred text
THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
SOLUTION
Avatar of Neranel
Neranel
Flag of United States of America image

Blurred text
THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
Avatar of Neranel
Neranel
Flag of United States of America image

jbla

having used SonicWalls i do know that the Node limit is for active connections thorugh the firewall on a per computer basis.  You can purchase additional liceses however.

As for a VPN limit there is one of those as well, but it varies based on model and version.
Avatar of jbla9028
jbla9028
Flag of United States of America image

thanks for the clarification Neranel. From experience I do not recommend sonicwalls. I have 3 of them and I am replacing them with Cisco ASA 5505s  which can handle more users and more more advanced configurations. I used to run a sonic wall Pro at my main site, I replaced it with a CIsco 5510 and my VPN users noticed a huge performance boost. if you are familiar with Cisco Devices I would look at the Cisco ASAs
Avatar of Neranel
Neranel
Flag of United States of America image

I also steer my clients away from sonic walls to the two product series i spoke of earlier.  Unless your 500+ nodes you dont need to buy cisco though. Though if your a nonprofit go buy cisco at techsoup.org, the prices for nonporfits that ate 501c3 are insane.
Avatar of Steelers4life
Steelers4life
Flag of United States of America image

ASKER

I think the issue is not the licensing but they seem to think you have more control from a servers point if you push it through the server.

As for the other questions we do user DHCP and is that 25 node deal per Natted Connection ? I mean we have 80+ computers with DHCP and they use NAT and only go out the 1 internet Ip to the router would that sitll work or do we need more licenses ?
Avatar of Neranel
Neranel
Flag of United States of America image

no, each computer that will connect to the internet through the device will eat one node while it has an active connection.

one computer having connections on multiple ports will not increase its usage, it will still only use 1 node.

It is pretty apparent what the connecting thorugh your server was trying to accomplish as if you wanted to do that for sake of control, the sonic wall has web filtering and email scanning functionality bbuilt right in, (those are the capabilities that a proxy server(the method sugested) would get you.) if thats the desire, use the sonic wall, as the routing through the server will not benefit you those features unless you also buy a software such as ISA server. (which will slow down your server horrendously as mentioned before.
Avatar of Neranel
Neranel
Flag of United States of America image

the nodes have nothing to do with DHCP, though the sonicwall as well as every other device mentioned in the thread has the ability to also be a DHCP server.
Avatar of jbla9028
jbla9028
Flag of United States of America image

well you'd have more control if you were using something like ISA server or another content mangement server software. it sounds like you're not using that though. That's basically the only thing that would necessarily give you more control. routers/firewalls should do anything you would need I imagine.

Avatar of Steelers4life
Steelers4life
Flag of United States of America image

ASKER

I thank you all for you help I am going to call and maybe get more info. As we do not have an ISA server here or anything like that at this point.
ASKER CERTIFIED SOLUTION
Avatar of ccomley
ccomley
Flag of United Kingdom of Great Britain and Northern Ireland image

Blurred text
THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
Software Firewalls
Software Firewalls

Software firewalls, also known as host-based firewalls, provide a layer of software on one host that controls network traffic in and out of that single machine. Most operating systems now include firewall software, but many available software firewalls include central distribution, antivirus systems and disaster recovery.

20K
Questions
--
Followers
--
Top Experts
Get a personalized solution from industry experts
Ask the experts
Read over 600 more reviews

TRUSTED BY

IBM logoIntel logoMicrosoft logoUbisoft logoSAP logo
Qualcomm logoCitrix Systems logoWorkday logoErnst & Young logo
High performer badgeUsers love us badge
LinkedIn logoFacebook logoX logoInstagram logoTikTok logoYouTube logo