• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 94
  • Last Modified:

Simple firewall with VLAN and stateful packet inspection

I need to install a simple firewall device that provides stateful packet inspection.
Data rate requirement is low.
Number of ports needed is low.
A VLAN capability is needed.
What would you recommend?
0
Fred Marshall
Asked:
Fred Marshall
  • 2
  • 2
2 Solutions
 
Blue Street TechLast KnightCommented:
Hi Fred,

Can you tell me more about why you specifically only require SPI? Your specifics are pretty vague and relative. What do you consider to be "low" in terms of ports and data rates?

Honestly a security appliance offering SPI (Statefull Packet Inspection) is worthless in this day and age. Simply blocking ports is a technology practice of  the 90's...you need to actually be able to inspect the traffic. You need at minimum a security appliance that offers DPI (Deep Packet Inspection) and the ability to inspect encrypted traffic (SSL-DPI). I'd recommend a SonicWALL; any of their products will run DPI & SSL-DPI (ability to decrypt & inspect traffic)(minimum), include 5x1-GbE ports (minimum), and 25 VLAN Interfaces (minimum). For example, you can get a SonicWALL SOHO for around $266 (USD) without security services: https://www.sonicwall.com/en-us/products/firewalls/entry-level. I can't really recommend a particular device because I don't know how many users you have or how many connections are running.

FYI: Cisco RV series are only SPI capable - and again worthless - you might as well just run a router with Windows Firewall (that was a joke ;)).

Let me know if you have any further questions.
0
 
Fred MarshallPrincipalAuthor Commented:
I was hoping this was an easy question.  I have experience with RV042s at one end of the spectrum and Juniper SRX series at the other.
 I don't think the RV042 will meet the requirement and I am looking for a standalone *of that sort* that won't require the SRX.  
You need at minimum a security appliance that offers DPI
No, I meant what I said.  I need at a minimum a security appliance that offers SPI.  This, to meet a specification.  I would contrast this with NO SPI which I'm sure is easy to obtain.
I can't really recommend a particular device because I don't know how many users you have or how many connections are running.
I said the data rate was low.  How will a count of connections or users help modify that?  If you must: One connection and one user and very transient at that.
Thanks for the reply.  I'm hoping that something at the "low end" will do the job.
0
 
masnrockCommented:
I would agree with BST the aspect of DPI vs SPI. While it's certainly your choice at the end of the day, I would also advise you should get something that offers DPI. You certainly do not need a very high end device, and the Sonicwall SOHO certainly isn't. So the recommendation actually is pretty reasonable IMO.

The RV042 would be a horrible choice from the VLAN requirement. While they can do VLANs, you can only have one VLAN per port (no trunk ports). Which means that the only way you have can multiple VLANs on the same port is with the help of a managed or web smart switch.

If you feel that strongly about trying to use a Cisco SMB unit, then you're better off using the RV325. I would personally still take the Sonicwall over it, but it's not my choice to be made.
0
 
Fred MarshallPrincipalAuthor Commented:
Thank you both!
Blue Street Tech:  Sorry, I somehow missed your recommendation at first.  I guess I got focused on "can't recommend".  :-(  That's exactly what I was looking for!
masnrock:  Thanks for the alternate suggestion!
0
 
Blue Street TechLast KnightCommented:
No problem. Glad I could help!
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Protect Your Employees from Wi-Fi Threats

As Wi-Fi growth and popularity continues to climb, not everyone understands the risks that come with connecting to public Wi-Fi or even offering Wi-Fi to employees, visitors and guests. Download the resource kit to make sure your safe wherever business takes you!

  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now