Solved

Creating secure environment: NAT or PROXY?

Posted on 2009-05-14
4
366 Views
Last Modified: 2013-11-22
I am trying to provide secure internet environment for my users.

   - Should I consider utilizing proxy server, or NAT one?

   - In both cases a hardware firewall will protect LAN from WAN.

Thank you.
0
Comment
Question by:mrmut
  • 2
4 Comments
 
LVL 6

Accepted Solution

by:
KevinCovert earned 400 total points
ID: 24390985
It depends on the size of your environment and the money budgeted to implement the solution.  I would start looking at the lower end sonicwalls that provide IDS, content filtering, and spam filtering at the perimeter.  If that is too spendy there are open source solutions out there, but they are not as turn-key, but they can run on some older hardware.  Untangle is one that I have deployed in the past for my church and its pretty feature rich for the cost (FREE).

While there are open source solutions out there, if this is to support a business they may prefer to go with a paid solution to get the phone technical support.  Like I said it all depends.

Hope that helps.
0
 
LVL 6

Expert Comment

by:KevinCovert
ID: 24390988
NAT is the way to go in my book.
0
 

Author Comment

by:mrmut
ID: 24391753
Thansk, tho I don't know if I was specific enough - I am wandering is Proxy we access more secure than NAT.
0
 
LVL 7

Assisted Solution

by:LANm0nk3y
LANm0nk3y earned 100 total points
ID: 24391773
Proxy is a little better to control and easier than NAT, but you tend to have more problems if you run into software that needs direct connection and is not a proxy-aware.  You can't have NAT or Proxy without any third-party add-on to filter the content.

KevinCovert pretty much says it as far as content filtering and such -- barracuda is another good one.  
0

Featured Post

Connect further...control easier

With the ATEN CE624, you can now enjoy a high-quality visual experience powered by HDBaseT technology and the convenience of a single Cat6 cable to transmit uncompressed video with zero latency and multi-streaming for dual-view applications where remote access is required.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Imagine you have a shopping list of items you need to get at the grocery store. You have two options: A. Take one trip to the grocery store and get everything you need for the week, or B. Take multiple trips, buying an item at a time, to achieve t…
There are two basic ways to configure a static route for Cisco IOS devices. I've written this article to highlight a case study comparing the configuration of a static route using the next-hop IP and the configuration of a static route using an outg…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

840 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question