I'm looking at firewall appliances.  There are two possible SIMPLE options
for deployment, both are T1 links to Internet, IPSec VPN to corporate
(LAN-to-LAN type link), and allow outbound web surfing.  Admin will be done
remotely from corporate location.

Environment1 is less than 50 hosts, little to no non-VPN inbound traffic
(DNS maybe, mail and other services are gateway'ed via corporate VPN).

Environment2 is less than 200 hosts (a lot of that is not desktops,
no/little Internet traffic from them, maybe 50 desktops generating 80% of
traffic), Inbound traffic goes to DMZ segment with low traffic web server,
DNS, SMTP, and some lite FTP traffic.  A handful of remote mobile VPN links
from sales user's laptops via Internet dial-ups in the field may occur on
any given day (implies need for VPN laptop software).

Ideal solution is same device in both locations with cost < $6000 ea
(software and hardware).  As of now, Netscreen-10 devices are at the top of
the list, comments from experienced users of these devices are welcome.
Comments on other devices that may be of interest are welcome.  Pointers to
appliance reviews/whitepapers are also welcome.  In fact, I'll pretty well
take any info on any appliances that remotely fit these environments :-).
Feel free to spare the list members and blast me info in private.  Like the
old B&J commercials said: "Thank you for your support".



Dana Nowell     Cornerstone Software Inc.
Voice: (603) 595-7480 Fax: (603) 882-7313
mailto:[EMAIL PROTECTED]



**********************************************************************
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
[EMAIL PROTECTED] and include the original mail with headers 
if possible.
**********************************************************************
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]

Reply via email to