[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 690
  • Last Modified:

An enterprise grade cheap Router/VPN/Firewall Device

Hi,
I need to run backup site for my main servers on fibre internet connection (70-100MBPS).

I have 6-7 servers  and I am looking for following features
1. 5-8 LAN ports
2. Should able to handle at least 5-10 concurrent VPN connections successfully
3. Solid Firewall
4. Port Forwarding
5. Possibly load balancing between 2-3 web servers - though not important
6. Logging
7. Internal DHCP server with local DNS
8. Traffic shaping so that http , ssl,ssh traffic have priority over others

Do these device look ok to you?
1. Netgear ProSafe FVS318
2. Watchguard FireBox 500

Or can you suggest any?
0
crazywolf2010
Asked:
crazywolf2010
3 Solutions
 
John HurstBusiness Consultant (Owner)Commented:
Probably all you want does not fall into the category of cheap.

Have you looked at Juniper Netscreen devices. These enterprise grade, include hardware VPN and multiple tunnels. Something like the SSG140, for example. I have SSG5 machines at clients with lesser needs than you.

http://www.juniper.net/us/en/products-services/security/ssg-series/ssg140/
0
 
Craig BeckCommented:
You could buy a Cisco 2851 from Ebay which will do all of that with the right software feature set on it (apart from load-balancing).
0
 
toddjusticeCommented:
I am personally familiar with both of those devices.  While the Netgear fits most of your requirements, I don't believe it has any load balancing capabilities.  I also really like Watchguard devices, but you have to be careful because some features require additional licensing, which drives up cost.

Take a look at Barracuda - they have a new Firewall "NG" that I believe supports all of the functions you are looking for.
0

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now