Solved

Thinking about Purchasing a Watchguard Firebox x550e- have questions

Posted on 2009-04-03
5
571 Views
Last Modified: 2013-11-16
I am looking at replacing our current firewall will something else. We are a small business with about 40 computers. I would like to do AV/IPS at the border and must do web filtering. We also use VPN and SSL VPN would be preferred for those that travel as we seem to have less issues with hotel firewalls. Other corporate locations are possible in the next 3 years.

I have homed in on the x550e from Watchguard. It seems very powerful, has the feature set I am looking for and the subscription pricing is much less than an equivalent Checkpoint. I have tried Sonicwall recently and still was not a fan, Netscreen was way too much and so on...

On to my questions:

How is the administration. Pretty straight forward? I have many years in the industry but every manufacturer is different.
Has it been a solid product for those on here that use it?
I am a little fuzzy for SSO. I must use their agent yes? What do I additionally get from the client being installed.
How bad is the latency with WebBLocker?

I guess that is it for now.

TIA

0
Comment
Question by:nkrueger84
5 Comments
 
LVL 32

Expert Comment

by:dpk_wal
ID: 24065999
WG configuration and management for X550e is done through software called Watchguard System Manager (WSM), which you can install on any windows machine. The GUI is simplified however you would need to go through the manual or seek some help to know where is what.

Yes, WG is a stable box and I have not seen many crashes.

SSO gives you flexibility of not putting passwords again and again as the client interacts with with server and eliminating the need.

There is no latency with webblocker as the database resides on one the local machines.

Please let know if you need more details.

Thank you.
0
 

Author Comment

by:nkrueger84
ID: 24080948
Does the Gateway AV/IPS have any impact on throughput or performance?
0
 
LVL 5

Expert Comment

by:ccreamer_22
ID: 24082537
Well, I have had allot of experience with these. If your users are going to vpn in through it, make sure they are not on Vista 32 or 64. Watchguard SSL VPN is still not completely compatible. You have to go though allot of back doors to get it to work. Other than that issue, it's a pretty good firewall. I would just say, in my humble opinion, that allot of these companies try to make their firewalls do multiple services that are outside of what a firewall is meant for. Once you start using a firewall for other things like antivirus, client vpn, intrusion detection, etc., they tend to have allot more problems and downtime. The firewall is probably your most important piece of equipment, because when it goes down no one can work and all the pressure is on. I would suggest, if possible, using the firewall with just its basic services. I would use another solution for VPN access and keep your network as simple and strait forward as possible to avoid those late nights of troubleshooting with support. I understand that small businesses do not have the luxury of large budgets, but there is also the case of how much down time is acceptable and what do you really need to get so that you can accomplish the companies goals. Good luck with whatever solution you come up with.
0
 
LVL 32

Accepted Solution

by:
dpk_wal earned 500 total points
ID: 24084240
There is some impact with AV/IPS enabled; impact depends on the load on the firewall; if the firewall is loaded to the limit then the latency would be high and very noticeable.
This is same with almost all the products out there in the market.

Thank you.
0
 
LVL 4

Expert Comment

by:Net-Doc
ID: 24098921
A couple of years ago we started moving away from the Watchguard deivces and have started using the Fortigates. We have seen our costs go down and improved uptime.
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Occasionally, we encounter connectivity issues that appear to be isolated to cable internet service.  The issues we typically encountered were reset errors within Internet Explorer when accessing web sites or continually dropped or failing VPN conne…
Network traffic routing plays key role in your network, if you have single site with heavy browsing or multiple sites, replicating important application data from your Primary Default Gateway ,you have to route your other network traffic from your p…
This Micro Tutorial will give you a basic overview how to record your screen with Microsoft Expression Encoder. This program is still free and open for the public to download. This will be demonstrated using Microsoft Expression Encoder 4.
In this video I am going to show you how to back up and restore Office 365 mailboxes using CodeTwo Backup for Office 365. Learn more about the tool used in this video here: http://www.codetwo.com/backup-for-office-365/ (http://www.codetwo.com/ba…

863 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

22 Experts available now in Live!

Get 1:1 Help Now