Upgrading Internet Access and adding firewall

DebbieHamatani used Ask the Experts™
Hi Experts --

I need some advice.  My company is currently upgrading our internet speeds from 5mb download and upload to 100mb download and 20mb upload.  With the higher speeds, this is a good time to upgrade the networking components.  The curernt internet connection is  2-T3 lines that connect into a Cisco 2800 Series Router which connects to the various switches in our office.  

One upgrade solution is to install a firewall (looking at a Checkpoint firewall) in front of a gigabit router (does not need to be wireless) which connects to the switches.  The switches will all be upgraded to 48-port switches 10/100/1000.

Does anyone have any recommendations on the firewall, router, and/or switches? Is there a better solution?  Would it be possible to purchase the router with all the firewall options, or should the network have a separate firewall and router?

Thanks for all of our support!
Debbie Hamatani

Thanks for all your advice
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
I would just start up a chat on Cisco.com and see what they recommend based on your users and the devices you want to install. That gives you a starting point and you can start comparing routers and Firewalls that have similar specs.
DebbieHamataniIT Specialist I


Thanks for the suggestion.  I did just that!  They recommended a Cisco 2900 series router.

I was hoping the group could provide a little more specific especially regarding the hardware.

The 2900 seems like a reasonable upgrade. Did they recommend the firewall option?
DebbieHamataniIT Specialist I


Is there a firewall option?  I am trying to get a feel of what is included for the price.  If there is a firewall option?  Is it better to combine the router and firewall or should they be separate devices on the network?
What was the exact model they suggested? Did you tell them you needed a firewall too? Cisco is usually very good at getting you the device that matches your needs.

Having a separate firewall is probably pricier.

Here's a video on Cisco Security - http://www.cisco.com/en/US/products/ps6540/index.html


Integrated Network Security for Data, Voice, Video, and Mobility

Security is essential to protect a business' intellectual property while also ensuring business continuity and providing the ability to extend the corporate workplace to employees who need anytime, anywhere access to company resources. As part of the Cisco' SAFE architectural framework that allows organizations to identify, prevent, and adapt to network security threats, the Cisco 2900 Series Integrated Services Routers facilitate secure business transactions and collaboration.
The Cisco IOS Software Security technology package for the Cisco 2900 Series offers a wide array of common security features such as advanced application inspection and control, threat protection, and encryption architectures for enabling more scalable and manageable VPN networks. The Cisco 2900 Series offers onboard hardware-based encryption acceleration to provide greater IPSec throughput with less overhead for the route processor when compared with software-based encryption solutions. Cisco Integrated Services Routers offer a comprehensive and adaptable security solution for branch offices that includes features such as:
• Secure connectivity: Secure collaborative communications with Group Encrypted Transport VPN, Dynamic Multipoint VPN (DMVPN), or Enhanced Easy VPN

• Integrated threat control: Responding to sophisticated network attacks and threats using Cisco IOS Firewall, Cisco IOS Zone-Based Firewall, Cisco IOS IPS, Cisco IOS Content Filtering, and Flexible Packet Matching (FPM)

• Identity management: Intelligently protecting endpoints using technologies such as authentication, authorization, and accounting (AAA) and public key infrastructure (PKI)

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial