Solved

Thinking about Purchasing a Watchguard Firebox x550e- have questions

Posted on 2009-04-03
5
580 Views
Last Modified: 2013-11-16
I am looking at replacing our current firewall will something else. We are a small business with about 40 computers. I would like to do AV/IPS at the border and must do web filtering. We also use VPN and SSL VPN would be preferred for those that travel as we seem to have less issues with hotel firewalls. Other corporate locations are possible in the next 3 years.

I have homed in on the x550e from Watchguard. It seems very powerful, has the feature set I am looking for and the subscription pricing is much less than an equivalent Checkpoint. I have tried Sonicwall recently and still was not a fan, Netscreen was way too much and so on...

On to my questions:

How is the administration. Pretty straight forward? I have many years in the industry but every manufacturer is different.
Has it been a solid product for those on here that use it?
I am a little fuzzy for SSO. I must use their agent yes? What do I additionally get from the client being installed.
How bad is the latency with WebBLocker?

I guess that is it for now.

TIA

0
Comment
Question by:nkrueger84
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
5 Comments
 
LVL 32

Expert Comment

by:dpk_wal
ID: 24065999
WG configuration and management for X550e is done through software called Watchguard System Manager (WSM), which you can install on any windows machine. The GUI is simplified however you would need to go through the manual or seek some help to know where is what.

Yes, WG is a stable box and I have not seen many crashes.

SSO gives you flexibility of not putting passwords again and again as the client interacts with with server and eliminating the need.

There is no latency with webblocker as the database resides on one the local machines.

Please let know if you need more details.

Thank you.
0
 

Author Comment

by:nkrueger84
ID: 24080948
Does the Gateway AV/IPS have any impact on throughput or performance?
0
 
LVL 5

Expert Comment

by:ccreamer_22
ID: 24082537
Well, I have had allot of experience with these. If your users are going to vpn in through it, make sure they are not on Vista 32 or 64. Watchguard SSL VPN is still not completely compatible. You have to go though allot of back doors to get it to work. Other than that issue, it's a pretty good firewall. I would just say, in my humble opinion, that allot of these companies try to make their firewalls do multiple services that are outside of what a firewall is meant for. Once you start using a firewall for other things like antivirus, client vpn, intrusion detection, etc., they tend to have allot more problems and downtime. The firewall is probably your most important piece of equipment, because when it goes down no one can work and all the pressure is on. I would suggest, if possible, using the firewall with just its basic services. I would use another solution for VPN access and keep your network as simple and strait forward as possible to avoid those late nights of troubleshooting with support. I understand that small businesses do not have the luxury of large budgets, but there is also the case of how much down time is acceptable and what do you really need to get so that you can accomplish the companies goals. Good luck with whatever solution you come up with.
0
 
LVL 32

Accepted Solution

by:
dpk_wal earned 500 total points
ID: 24084240
There is some impact with AV/IPS enabled; impact depends on the load on the firewall; if the firewall is loaded to the limit then the latency would be high and very noticeable.
This is same with almost all the products out there in the market.

Thank you.
0
 
LVL 4

Expert Comment

by:Net-Doc
ID: 24098921
A couple of years ago we started moving away from the Watchguard deivces and have started using the Fortigates. We have seen our costs go down and improved uptime.
0

Featured Post

Put Machine Learning to Work--Protect Your Clients

Machine learning means Smarter Cybersecurity™ Solutions.
As technology continues to advance, managing and analyzing massive data sets just can’t be accomplished by humans alone. It requires huge amounts of memory and storage, as well as the high-speed power of the cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

To setup a SonicWALL for policy based routing to be used with the Websense Content Gateway there are several steps that need to be completed. Below is a rough guide for accomplishing this. One thing of note is this guide is intended to assist in the…
Imagine you have a shopping list of items you need to get at the grocery store. You have two options: A. Take one trip to the grocery store and get everything you need for the week, or B. Take multiple trips, buying an item at a time, to achieve t…
If you’ve ever visited a web page and noticed a cool font that you really liked the look of, but couldn’t figure out which font it was so that you could use it for your own work, then this video is for you! In this Micro Tutorial, you'll learn yo…
This is my first video review of Microsoft Bookings, I will be doing a part two with a bit more information, but wanted to get this out to you folks.

724 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question