Solved

Thinking about Purchasing a Watchguard Firebox x550e- have questions

Posted on 2009-04-03
5
567 Views
Last Modified: 2013-11-16
I am looking at replacing our current firewall will something else. We are a small business with about 40 computers. I would like to do AV/IPS at the border and must do web filtering. We also use VPN and SSL VPN would be preferred for those that travel as we seem to have less issues with hotel firewalls. Other corporate locations are possible in the next 3 years.

I have homed in on the x550e from Watchguard. It seems very powerful, has the feature set I am looking for and the subscription pricing is much less than an equivalent Checkpoint. I have tried Sonicwall recently and still was not a fan, Netscreen was way too much and so on...

On to my questions:

How is the administration. Pretty straight forward? I have many years in the industry but every manufacturer is different.
Has it been a solid product for those on here that use it?
I am a little fuzzy for SSO. I must use their agent yes? What do I additionally get from the client being installed.
How bad is the latency with WebBLocker?

I guess that is it for now.

TIA

0
Comment
Question by:nkrueger84
5 Comments
 
LVL 32

Expert Comment

by:dpk_wal
Comment Utility
WG configuration and management for X550e is done through software called Watchguard System Manager (WSM), which you can install on any windows machine. The GUI is simplified however you would need to go through the manual or seek some help to know where is what.

Yes, WG is a stable box and I have not seen many crashes.

SSO gives you flexibility of not putting passwords again and again as the client interacts with with server and eliminating the need.

There is no latency with webblocker as the database resides on one the local machines.

Please let know if you need more details.

Thank you.
0
 

Author Comment

by:nkrueger84
Comment Utility
Does the Gateway AV/IPS have any impact on throughput or performance?
0
 
LVL 5

Expert Comment

by:ccreamer_22
Comment Utility
Well, I have had allot of experience with these. If your users are going to vpn in through it, make sure they are not on Vista 32 or 64. Watchguard SSL VPN is still not completely compatible. You have to go though allot of back doors to get it to work. Other than that issue, it's a pretty good firewall. I would just say, in my humble opinion, that allot of these companies try to make their firewalls do multiple services that are outside of what a firewall is meant for. Once you start using a firewall for other things like antivirus, client vpn, intrusion detection, etc., they tend to have allot more problems and downtime. The firewall is probably your most important piece of equipment, because when it goes down no one can work and all the pressure is on. I would suggest, if possible, using the firewall with just its basic services. I would use another solution for VPN access and keep your network as simple and strait forward as possible to avoid those late nights of troubleshooting with support. I understand that small businesses do not have the luxury of large budgets, but there is also the case of how much down time is acceptable and what do you really need to get so that you can accomplish the companies goals. Good luck with whatever solution you come up with.
0
 
LVL 32

Accepted Solution

by:
dpk_wal earned 500 total points
Comment Utility
There is some impact with AV/IPS enabled; impact depends on the load on the firewall; if the firewall is loaded to the limit then the latency would be high and very noticeable.
This is same with almost all the products out there in the market.

Thank you.
0
 
LVL 4

Expert Comment

by:Net-Doc
Comment Utility
A couple of years ago we started moving away from the Watchguard deivces and have started using the Fortigates. We have seen our costs go down and improved uptime.
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Join & Write a Comment

Suggested Solutions

Title # Comments Views Activity
Asa 5520 Configuration 3 60
Questions on windows ports 13 64
Cisco ASA 5506 4 39
Cisco ASA 5516-X Configuration 4 45
We sought a budget ($5,000) firewall solution that would provide all the performance we needed with no single point of failure.  Hosting a SAAS web application in our datacenter, it was critical that we find a way to keep connectivity up and inbound…
This article offers some helpful and general tips for safe browsing and online shopping. It offers simple and manageable procedures that help to ensure the safety of one's personal information and the security of any devices.
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…
Excel styles will make formatting consistent and let you apply and change formatting faster. In this tutorial, you'll learn how to use Excel's built-in styles, how to modify styles, and how to create your own. You'll also learn how to use your custo…

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now