which firewall applicance is suitable for my company?

HI, network gurus:

I got a new project from my boss to set up firewall for our company. We have two sites, one is with 50 employees and the other is wit 20 users. Both sites use pure data T1 from Telepacific. I will install firewall applicance behind their white Airtran gateway. I have the following questions need your attention.

1. Which brand should I use? I have a budget of $2800 for HQ and $1500 for the small site. Do I need choose Sonicwall or juniper network. I only know these two brands are big brand.

2. For HQ, some sales recommend sonicwall NSA 2400 totalsecure or Juniper Networks SSG320M Appliance; which one is better or some other suggestions.

3. for the remote site, which one is good?  Juniper Networks SSG20 Appliance or SonicWALL NSA 240 Firewall Appliance.

4. Any suggestion for the installation progress. I never installed firewall before. thank you.
Jason YuAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

mattibuttCommented:
use cisco firewall its got academic wing as well so while you implement it at the sametime you can learn about it as well
0
digitapCommented:
1. I'd go with sonicwall.  I'm not familiar with Juniper.2. Sounds like NSA 2400 migh suit you well for the site with 50 users.3. TZ210 should be sufficient for the 20 user site.4. You want to make sure the Sonicwall appliances have public IP addresses.  I'm not familiar with the gateway hardware provided by your ISP.  You'll want to coordinate with them on connecting your SW with their hardware.  In the end, public IP on the WAN interface of the SW.
0
Jason YuAuthor Commented:
Great replies. If I choose cisco firewall, which model should I buy, from which company.

Thanks.

If the price is not very different, I will go cisco, if not, I will go sonicwall.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
KuppingerCole Reviews AlgoSec in Executive Report

Leading analyst firm, KuppingerCole reviews AlgoSec's Security Policy Management Solution, and the security challenges faced by companies today in their Executive View report.

digitapCommented:
I'm not familiar with Cisco hardware to make that recommendation.  Your zones need to be modified to include some Cisco experts.  Currently, you only have one zone.  If you are uncertain which zones would be best, click the Request Attention in the lower right hand of your question above and request a Mod's help in suggesting and changing the zones of your question.  Initially, you can only select 3 zones, but a mod can add more than that to get more attention.
0
ZxesesCommented:
Personally, I'd balk at setting the budget before the proper devices are chosen.  If you get a Cisco, you get all the community support that goes with it.  If you get any other brand, you're pretty suck solving most issues on your own or with direct company contact.

Full retail on a Cisco ASA 5520 is about 10k, but you don't need to buy a new one and there are tons of discounted new ASA's out there.

http://www.cisco.com/en/US/products/ps6120/prod_models_comparison.html

May I suggest for your needs:
Cisco ASA 5510 Security Plus Firewall Edition Bundle
Includes: 2 Gigabit Ethernet + 3 Fast Ethernet interfaces, 250 IPsec VPN peers
$2700+

And for the remote site:
#ASA5505-SEC-BUN-K9
The 5505 is plenty for your remote needs, and this one is $1044 sale price and has a full feature set including support for two ISP's.

Both of these fit perfectly into your current budget.  While I'd be inclined to use the 5520 on your main site, that does not fit the budget you mention.

0
digitapCommented:
glad we could help and thanks for the points!
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Hardware Firewalls

From novice to tech pro — start learning today.