Redundant ISP router

Hello- I need a solid, reliable recommendation for an 8 workstation (incl POS) hotel/restaurant/golf pro shop. They are ordering a cable connection to augment the speed of their T1, which is quite slow, especially since they also share their WiFi with hotel guests (yeah, that's right, no firewall between the WiFi and the POS, aside from a windows firewall on the POS). I will also ask them to firewall off the WiFi traffic, but that I know how to handle. My question is, what kind of small office firewall should I propose that can handle either dynamic or failover ISP connections?

Note: POS is Point of Sale, not what you are thinking.
HardwareDudeAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

duttcomCommented:
I have a Netgear UTM 25 (in a small office scenario) which has dual WAN failover. I can run two connections in either failover or load balancing mode and it has been easy to administer and maintain thus far, and it does a great job with SPAM too. It's a lot better than the Watchguard it replaced, but that is just my opinion.
0
HardwareDudeAuthor Commented:
duttcomm - Thank you for your response, I was trying to find reviews on the unit but I guess it has not been out long, as there are few on newegg or Amazon.
0
duttcomCommented:
I've had mine a couple of years now. Netgear's firewalls are not very well known, but I tend to like Netgear stuff (switches etc) because it's reliable and about the right price and quality level for the small sized business it runs in. As I mentioned, I had a Watchguard but I never really warmed to it. The dual WAN ports are great - I have the option to route traffic two and from either port even down to specific LAN IP's and there is a DMZ option (which I don't use).

I note that if you google "Dual WAN firewall", you will get lots of results on the Netgear units. I don't know why so many firewall manufactuers don't offer mid-level dual WAN models given how useful a redundant line is (I learned that lesson the hard way).

Good luck in your search!
0
KuppingerCole Reviews AlgoSec in Executive Report

Leading analyst firm, KuppingerCole reviews AlgoSec's Security Policy Management Solution, and the security challenges faced by companies today in their Executive View report.

HardwareDudeAuthor Commented:
duttcom- Thank you for your advice, but it seems that firewall is sold with a specific number of end users in mind. Since my customer is a hotel with WiFi, that number will fluctuate quite a bit and Netgear was not able to convey how the licensing works. I called Netgear Presales - first they were not familiar with that product and then they disconnected me (three times). Not having much luck with them.
0
Garry GlendownConsulting and Network/Security SpecialistCommented:
Take a look at Fortinet firewalls ... lots of features, decent ability to handle controlling traffic between the different areas, and also supports policy routing as well as backup routing ... FortiGate 60D should be more than sufficient to handle both the primary link as well as the cable link, as well as provide up to 50mbit of content scanning/filtering ... please note that it only has ethernet links so you will still need an external router to handle the T1 line ...
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
pergrCommented:
I second the Fortinet proposal. Just what you need.

If you want several WiFi access points, then it can also work as a WiFi controller.
0
Alan HardistyCo-OwnerCommented:
We always us Draytek Routers. The new 2860n had 6 Gigabit LAN ports, can connect via ADSL / VDSL / Ethernet and USB, so 4 potential WAN connections.

It can also offer Vlan's so you can separate your POS from the network and / or separate your wifi traffic from the remaining traffic.  You can configure one WiFi per VLAN and that gives you plenty of flexibility.

They are easy to configure and work brilliantly.  Personally I won't touch anything with Netgear written on it - bitter experience has proven them to be very flaky and unreliable.

Alan
0
SteveCommented:
I'm with Alanhardisty.
Have used many routers/firewalls and tend to find the Drayteks quite good in their price range.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Network Security

From novice to tech pro — start learning today.