Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win


Best VMware Firewall/Router?

Posted on 2010-09-07
Medium Priority
Last Modified: 2012-05-10
Hi, is Vyatta the best virtual appliance for VMware if I'm looking for the following:

1) free installation initially; with options to add subscription services for Intrusion Prevention, Gateway Antivirus, etc.
2) Ability to handle vlans with multiple DHCP servers

I'm looking for a vmware router/firewall to protect a Server 2008 small biz network.

How does pfSense or other solutions compare to Vyatta?

Question by:goldylamont
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
LVL 19

Expert Comment

by:vmwarun - Arun
ID: 33621668
Personally, I have not worked with pfSense, hence I cannot put forth my opinions.
Vyatta is solid to be deployed in virtual environments, but the free edition might not be able to provide you all features.
LVL 28

Accepted Solution

bgoering earned 1000 total points
ID: 33621939
Personally I use Monowall (http://m0n0.ch) for a virtual firewall and Snort for IDS. Can't comment on Vyatta much as I have only "played" with it in a lab environment - but from what I have seen it is pretty solid, but a bit more difficult to configure than Monowall.

Good Luck
LVL 32

Assisted Solution

nappy_d earned 500 total points
ID: 33622494
Also take a look at www.smoothwall.org. They make a vmware appliance.

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.


Author Comment

ID: 33622919
cool thanks for links. does anyone have experience working with these companies after paying for security services. my plan is to use the free version of the router at first and then to upgrade and start using firewall subscriptions so I have it constantly updating to the latest threats. I'm sure all solutions can do what I need on the router side but would be great to hear from users who use fee based subscriptions for live network security updates. thanks.
LVL 28

Expert Comment

ID: 33623207
I don't believe Monowall has a paid version. The situation I described with Monowall and Snort is for a small network I take care of. My main job has all Cisco for firewalls and IDS/IPS - good experience with that but it is all paid and physical devices.
LVL 29

Assisted Solution

by:Michael Worsham
Michael Worsham earned 500 total points
ID: 33623603
Another option would be to deploy Untangle as a Virtual Appliance

Untangle Virtual Appliance on VMware

Author Comment

ID: 33624637
So far Vyatta still seems like the best option for my needs--Untangle and MonoWall don't seem to handle vlans as is listed in my requirements. Smoothwall can do vlan but only with the Advanced version and I can't find pricing anywhere.

Guys I found this video; it's really good and shows how to setup up vlan using Vyatta on vmware. Really cool:

I was also checking out Endian Firewall software and it looks really cool but still not the best for me. I'd like to make a list of all the best software firewalls and user's experiences for others visiting this page.

Also, has no one out there had experience with paid versions of any of these services?

Thank you
LVL 28

Expert Comment

ID: 33627424
Actually Monowall does have VLAN support. From http://m0n0.ch/wall/features.php

m0n0wall already provides many of the features of expensive commercial firewalls, including:

web interface (supports SSL)
serial console interface for recovery
set LAN IP address
reset password
restore factory defaults
reboot system
wireless support (access point with PRISM-II/2.5/3 cards, BSS/IBSS with other cards including Cisco)
captive portal
802.1Q VLAN support
stateful packet filtering
block/pass rules
NAT/PAT (including 1:1)
DHCP client, PPPoE, PPTP and Telstra BigPond Cable support on the WAN interface
IPsec VPN tunnels (IKE; with support for hardware crypto cards, mobile clients and certificates)
PPTP VPN (with RADIUS server support)
static routes
DHCP server and relay
caching DNS forwarder
DynDNS client and RFC 2136 DNS updater
SNMP agent
traffic shaper
SVG-based traffic grapher
firmware upgrade through the web browser
Wake on LAN client
configuration backup/restore
host/network aliases"

However there is no paid version nor IDS support in the same product - so likely you are right in that Vyatta would be best for you. Just wanted to set the record straight on the VLAN support :)

Author Comment

ID: 33628762
I'm hosting this firewall as a Virtual Appliance--I'm unsure if monowall supports vlans in a virtual appliance. I suppose it's possible but there aren't any articles on it that I can find so I was skeptical. But yes it does look as if it supports vlans on certain hardware (possibly vmware but undocumented?)
LVL 28

Assisted Solution

bgoering earned 1000 total points
ID: 33631120
LOL - well I guess I can't say that I have tested Monowall VLAN support under vmware myself as I haven't had the need for VLAN support in Monowall. I was just going on their specs for that.

However I do know that if you trunk vlans from a physical switch to a vmnic -> vswitch then create a portgroup and specify 4095 for the VLAN number, then all vlans will pass through to the the virtual machine NIC. With E1000 Nics I know I can see them all from the guest... So maybe there is hope. I have tested that scenario with an F5-LTM appliance when we were evaluating load balancers....

Author Closing Comment

ID: 33758119
thanks guys

Featured Post

Q2 2017 - Latest Malware & Internet Attacks

WatchGuard’s Threat Lab is a group of dedicated threat researchers committed to helping you stay ahead of the bad guys by providing in-depth analysis of the top security threats to your network.  Check out our latest Quarterly Internet Security Report!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

When converting a physical machine to a virtual machine using VMware vCenter Converter Standalone or vCenter Converter Enterprise, if an adapter type is not selected during the initial customization the resulting virtual machine may contain an IDE d…
In this article, I will show you HOW TO: Create your first Windows Virtual Machine on a VMware vSphere Hypervisor 6.5 (ESXi 6.5) Host Server, the Windows OS we will install is Windows Server 2016.
Teach the user how to edit .vmx files to add advanced configuration options Open vSphere Web Client: Edit Settings for a VM: Choose VM Options -> Advanced: Add Configuration Parameters:
Teach the user how to use create log bundles for vCenter Server or ESXi hosts Open vSphere Web Client: Generate vCenter Server and ESXi host log bundle:  Open vCenter Server Appliance Web Management interface and generate log bundle: Open vCenter Se…

618 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question