Re: Firewall-y stuff

2012-05-09 Thread Christopher Bodnar
Yes, just the one port. It's easier to think of BITS as a sub-component of IIS. So if your IIS communication is working over 80 or 443, you should be good to go. http://technet.microsoft.com/en-us/library/cc732428.aspx Christopher Bodnar Enterprise Achitect I, Corporate Office of

RE: Firewall-y stuff

2012-05-09 Thread Ziots, Edward
I believe you need both 80/443 outbound opened if you are going to allow http/https. So its two ports. Z Edward Ziots CISSP, Security +, Network + Security Engineer Lifespan Organization ezi...@lifespan.org From: James Rankin [mailto:kz2...@googlemail.com] Sent: Wednesday, May

RE: Firewall-y stuff

2012-05-09 Thread Ziots, Edward
To: NT System Admin Issues Subject: Re: Firewall-y stuff Yes, just the one port. It's easier to think of BITS as a sub-component of IIS. So if your IIS communication is working over 80 or 443, you should be good to go. http://technet.microsoft.com/en-us/library/cc732428.aspx http

Re: Firewall-y stuff

2012-05-09 Thread James Rankin
Thanks for the clarification Chris On 9 May 2012 15:52, Christopher Bodnar christopher_bod...@glic.com wrote: Yes, just the one port. It's easier to think of BITS as a sub-component of IIS. So if your IIS communication is working over 80 or 443, you should be good to go.

Re: Firewall-y stuff

2012-05-09 Thread James Rankin
Cheers On 9 May 2012 15:52, Ziots, Edward ezi...@lifespan.org wrote: I believe you need both 80/443 outbound opened if you are going to allow http/https. So its two ports. ** ** Z ** ** Edward Ziots CISSP, Security +, Network + Security Engineer Lifespan

Re: Firewall-y stuff

2012-05-09 Thread James Rankin
*Subject:* Re: Firewall-y stuff ** ** Yes, just the one port. It's easier to think of BITS as a sub-component of IIS. So if your IIS communication is working over 80 or 443, you should be good to go. http://technet.microsoft.com/en-us/library/cc732428.aspx *Christopher Bodnar

RE: Firewall-y stuff

2012-05-09 Thread Ziots, Edward
, Security +, Network + Security Engineer Lifespan Organization ezi...@lifespan.org From: James Rankin [mailto:kz2...@googlemail.com] Sent: Wednesday, May 09, 2012 11:05 AM To: NT System Admin Issues Subject: Re: Firewall-y stuff Bit of both. We need a Windows 2008 R2 Server to talk

Re: Firewall-y stuff

2012-05-09 Thread James Rankin
ezi...@lifespan.org ** ** *From:* James Rankin [mailto:kz2...@googlemail.com] *Sent:* Wednesday, May 09, 2012 11:05 AM *To:* NT System Admin Issues *Subject:* Re: Firewall-y stuff ** ** Bit of both. We need a Windows 2008 R2 Server to talk to Windows 7 clients

RE: Firewall-y stuff

2012-05-09 Thread Ziots, Edward
NO worries.. Z Edward Ziots CISSP, Security +, Network + Security Engineer Lifespan Organization ezi...@lifespan.org From: James Rankin [mailto:kz2...@googlemail.com] Sent: Wednesday, May 09, 2012 11:42 AM To: NT System Admin Issues Subject: Re: Firewall-y stuff That's pretty

RE: Firewall-y stuff

2012-05-09 Thread Ken Schaefer
May 2012 11:05 PM To: NT System Admin Issues Subject: Re: Firewall-y stuff Bit of both. We need a Windows 2008 R2 Server to talk to Windows 7 clients that are on the other side of a firewall, using SQL and BITS traffic On 9 May 2012 15:54, Ziots, Edward ezi...@lifespan.orgmailto:ezi

Re: Firewall/Router recommendations

2011-10-07 Thread Angus Scott-Fleming
On 5 Oct 2011 at 21:08, Kurt Buff wrote: Well, true, but IMHO it's much more important to find the root cause ATM, since the unit has until now performed to expectations. +1 on that suggestion. Check out the ClearOS logs. Perhaps the OP has an infected box applying a DDOS to someone off

RE: Firewall/Router recommendations

2011-10-06 Thread Mayo, Bill
+1 on the ASA here, too. From: Jon Harris [mailto:jk.har...@gmail.com] Sent: Wednesday, October 05, 2011 6:06 PM To: NT System Admin Issues Subject: Re: Firewall/Router recommendations +1 on the ASA no experience with NetScreen Jon On Wed, Oct 5, 2011 at 5:42 PM, Erik Goldoff egold

RE: Firewall/Router recommendations

2011-10-05 Thread Erik Goldoff
I would look to Cisco ASA or Juniper/Netscreen Erik Goldoff IT Consultant Systems, Networks, Security ' Security is an ongoing process, not a one time event ! ' -Original Message- From: Matthew W. Ross [mailto:mr...@ephrataschools.org] Sent: Wednesday, October 05, 2011 5:15 PM

Re: Firewall/Router recommendations

2011-10-05 Thread Jon Harris
+1 on the ASA no experience with NetScreen Jon On Wed, Oct 5, 2011 at 5:42 PM, Erik Goldoff egold...@gmail.com wrote: I would look to Cisco ASA or Juniper/Netscreen Erik Goldoff IT Consultant Systems, Networks, Security ' Security is an ongoing process, not a one time event ! '

RE: Firewall/Router recommendations

2011-10-05 Thread Kim Longenbaugh
Depending on your budget, Check Point has some good offerings. You can get appliances, software you can install on your own hardware, and I think even a VMware template. The software mode has the added benefit that you can install it on newer, more powerful hardware as it becomes available.

RE: Firewall/Router recommendations

2011-10-05 Thread Stringham, Steven
Look at Fortinet's Fortigate products. Very nice with filtering, etc. available. -Original Message- From: Matthew W. Ross [mailto:mr...@ephrataschools.org] Sent: Wednesday, October 05, 2011 2:15 PM To: NT System Admin Issues Subject: Firewall/Router recommendations Good Afternoon, list

RE: Firewall/Router recommendations

2011-10-05 Thread Erik Goldoff
...@lrlaw.com] Sent: Wednesday, October 05, 2011 6:38 PM To: NT System Admin Issues Subject: RE: Firewall/Router recommendations Look at Fortinet's Fortigate products. Very nice with filtering, etc. available. -Original Message- From: Matthew W. Ross [mailto:mr...@ephrataschools.org] Sent

RE: Firewall/Router recommendations

2011-10-05 Thread Tom Miller
Goldoff IT Consultant Systems, Networks, Security ' Security is an ongoing process, not a one time event ! ' -Original Message- From: Stringham, Steven [mailto:sstri...@lrlaw.com] Sent: Wednesday, October 05, 2011 6:38 PM To: NT System Admin Issues Subject: RE: Firewall/Router

Re: Firewall/Router recommendations

2011-10-05 Thread Kurt Buff
Don't look for a new firewall right now. Do figure out why the response is so crappy after having been fine for so long. I take that as a signal that something has drastically changed in your environment. Can you characterize your current traffic? In particular, look for indications that you're

Re: Firewall/Router recommendations

2011-10-05 Thread Steve Kradel
I'd say the OP needs to both figure out the root cause, *and* buy a new firewall as the vendor's support program's been tried and found wantin'. --Steve On Wed, Oct 5, 2011 at 11:37 PM, Kurt Buff kurt.b...@gmail.com wrote: Don't look for a new firewall right now. Do figure out why the

Re: Firewall/Router recommendations

2011-10-05 Thread Kurt Buff
Well, true, but IMHO it's much more important to find the root cause ATM, since the unit has until now performed to expectations. Almost anything in the right class will handle what he needs, once he figures out what's happening. Heck, even a simple pfsense box on decent hardware will do what he

RE: FIREWALL

2011-02-08 Thread Nigel Parker
: RE: FIREWALL Is the machine behind a hardware firewall (a.k.a. SOHO router or better) or connected directly to the Internet? If you said there's a hardware firewall, then what are you looking to protect against that the hardware firewall hasn't already covered? Carl -Original Message

RE: FIREWALL

2011-02-08 Thread Nigel Parker
Thanks Looks like this is worth investigating Regards Nigel -Original Message- From: Kurt Buff [mailto:kurt.b...@gmail.com] Sent: 07 February 2011 17:39 To: NT System Admin Issues Subject: Re: FIREWALL You might want to take a look at this: http://corelabs.coresecurity.com

RE: FIREWALL

2011-02-08 Thread Carl Houseman
AM To: NT System Admin Issues Subject: RE: FIREWALL Hi The machine is behind a router However it has been the victim of an attack, the router offers only minimal support (port blocking) Thanks Nigel -Original Message- From: Carl Houseman [mailto:c.house...@gmail.com] Sent: 07

Re: FIREWALL

2011-02-07 Thread Andrew S. Baker
Most AV products today have some firewall component (although not all of the free ones). If you're already using one, check out its firewall component. Do you have some specific requirements? Otherwise: http://www.google.com/search?q=free+windows+firewall *ASB *(Find me online via About.Me

RE: FIREWALL

2011-02-07 Thread Erik Goldoff
Well, maybe an old unsupported version of Zone Alarm for an unsupported OS ? http://www.oldversion.com/ZoneAlarm.html Erik Goldoff IT Consultant Systems, Networks, Security ' Security is an ongoing process, not a one time event ! ' -Original Message- From: Nigel Parker

RE: FIREWALL

2011-02-07 Thread Nigel Parker
Hi Yep I know :-) UPGRADE However this link maybe the best option didn't know about this site Thanks Nigel -Original Message- From: Erik Goldoff [mailto:egold...@gmail.com] Sent: 07 February 2011 11:40 To: NT System Admin Issues Subject: RE: FIREWALL Well, maybe an old

RE: FIREWALL

2011-02-07 Thread Erik Goldoff
Subject: RE: FIREWALL Hi Yep I know :-) UPGRADE However this link maybe the best option didn't know about this site Thanks Nigel -Original Message- From: Erik Goldoff [mailto:egold...@gmail.com] Sent: 07 February 2011 11:40 To: NT System Admin Issues Subject: RE: FIREWALL Well, maybe

RE: FIREWALL

2011-02-07 Thread Nigel Parker
-Original Message- From: Erik Goldoff [mailto:egold...@gmail.com] Sent: 07 February 2011 14:25 To: NT System Admin Issues Subject: RE: FIREWALL No worries ... there are a few similar sites that archive old versions of freeware good for getting freeware that evolved to shareware

Re: FIREWALL

2011-02-07 Thread Kurt Buff
You might want to take a look at this: http://corelabs.coresecurity.com/index.php?module=Wikiaction=viewtype=projectname=Core_Force It's a Windows port of the BSD PF firewall. Kurt On Mon, Feb 7, 2011 at 02:28, Nigel Parker nigel.par...@ultraframe.co.uk wrote: Hi Trying to find a Free

RE: FIREWALL

2011-02-07 Thread Carl Houseman
Is the machine behind a hardware firewall (a.k.a. SOHO router or better) or connected directly to the Internet? If you said there's a hardware firewall, then what are you looking to protect against that the hardware firewall hasn't already covered? Carl -Original Message- From: Nigel

RE: Firewall Q

2011-01-07 Thread Raper, Jonathan - Eagle
Yes. IP and protocol specific. As long as the IP address matches and the protocol requirements are the same, you should be good to go. Jonathan L. Raper, A+, MCSA, MCSE Technology Coordinator Eagle Physicians Associates, PA jra...@eaglemds.comBLOCKED::mailto:%20jra...@eaglemds.com

RE: Firewall Q

2011-01-07 Thread Kim Longenbaugh
The only catch here is that the FW may refuse to recognize the new server until you clear the ARP cache, or, alternatively, manually change the MAC address to match the old one. Messing with the MAC address is definitely not recommended in almost all situations, though. From: David Lum

RE: Firewall Q

2011-01-07 Thread Raper, Jonathan - Eagle
...@eaglemds.comBLOCKED::mailto:%20jra...@eaglemds.com www.eaglemds.comBLOCKED::http://www.eaglemds.com/ From: Kim Longenbaugh [mailto:k...@colonialsavings.com] Sent: Friday, January 07, 2011 10:04 AM To: NT System Admin Issues Subject: RE: Firewall Q The only catch here

RE: Firewall Q

2011-01-07 Thread Kim Longenbaugh
not a problem since changes to FWs and routers are usually done during maintenance windows. Either way clears the arp table. From: Raper, Jonathan - Eagle [mailto:jra...@eaglemds.com] Sent: Friday, January 07, 2011 9:13 AM To: NT System Admin Issues Subject: RE: Firewall Q Good catch, Kim. I don't

RE: Firewall Q

2011-01-07 Thread Raper, Jonathan - Eagle
...@eaglemds.com www.eaglemds.comBLOCKED::http://www.eaglemds.com/ From: Kim Longenbaugh [mailto:k...@colonialsavings.com] Sent: Friday, January 07, 2011 10:17 AM To: NT System Admin Issues Subject: RE: Firewall Q We run into it here usually when replacing a router

RE: Firewall Q

2011-01-07 Thread Erik Goldoff
Pretty much yes, firewalls base definition is around Layer 3, TCP/IP address and/or port #s, and NOT FQDN or NetBIOS name, if that’s what you’re asking. Erik Goldoff IT Consultant Systems, Networks, Security ' Security is an ongoing process, not a one time event ! ' From: David Lum

RE: Firewall Q

2011-01-07 Thread Erik Goldoff
, not a one time event ! ' From: Kim Longenbaugh [mailto:k...@colonialsavings.com] Sent: Friday, January 07, 2011 10:04 AM To: NT System Admin Issues Subject: RE: Firewall Q The only catch here is that the FW may refuse to recognize the new server until you clear the ARP cache, or, alternatively

RE: Firewall Q

2011-01-07 Thread Raper, Jonathan - Eagle
Associates, PA jra...@eaglemds.comBLOCKED::mailto:%20jra...@eaglemds.com www.eaglemds.comBLOCKED::http://www.eaglemds.com/ From: Erik Goldoff [mailto:egold...@gmail.com] Sent: Friday, January 07, 2011 10:26 AM To: NT System Admin Issues Subject: RE: Firewall Q Pretty much

RE: Firewall Q

2011-01-07 Thread Kim Longenbaugh
True, but I think I overlooked that because we use something else beside our firewall to anchor those tunnels. From: Raper, Jonathan - Eagle [mailto:jra...@eaglemds.com] Sent: Friday, January 07, 2011 9:24 AM To: NT System Admin Issues Subject: RE: Firewall Q Yes, that will work, but keep

RE: Firewall Q

2011-01-07 Thread David Lum
] Sent: Friday, January 07, 2011 7:29 AM To: NT System Admin Issues Subject: RE: Firewall Q Speaking of which - if the new server name is different or if you have static entries for the server in DHCP (I don't know why you would, but I digress), make sure you update those accordingly in DNS/WINS/DHCP

RE: Firewall Q

2011-01-07 Thread Raper, Jonathan - Eagle
:%20jra...@eaglemds.com www.eaglemds.comBLOCKED::http://www.eaglemds.com/ From: David Lum [mailto:david@nwea.org] Sent: Friday, January 07, 2011 10:57 AM To: NT System Admin Issues Subject: RE: Firewall Q Most of my servers have static entries in DHCP. The more

RE: Firewall Q

2011-01-07 Thread David Lum
as it could be easily overlooked if one isn't in the DHCP console often. Dave From: Raper, Jonathan - Eagle [mailto:jra...@eaglemds.com] Sent: Friday, January 07, 2011 8:02 AM To: NT System Admin Issues Subject: RE: Firewall Q So you'll obviously need to update the MAC address in DHCP. Can't believe I

Re: Firewall Q

2011-01-07 Thread James Rankin
, 2011 8:02 AM *To:* NT System Admin Issues *Subject:* RE: Firewall Q So you’ll obviously need to update the MAC address in DHCP. Can’t believe I thought of that AND that you are actually doing it. Wow. I should go play the lottery. J Jonathan L. Raper, A+, MCSA, MCSE Technology

RE: Firewall Q

2011-01-07 Thread David Lum
I do...for 50% of them. We have situations where we are served better by specific systems having DHCP reservations. From: James Rankin [mailto:kz2...@googlemail.com] Sent: Friday, January 07, 2011 8:15 AM To: NT System Admin Issues Subject: Re: Firewall Q Meh. Just give your servers dynamically

Re: Firewall Q

2011-01-07 Thread James Rankin
situations where we are served better by specific systems having DHCP reservations. *From:* James Rankin [mailto:kz2...@googlemail.com] *Sent:* Friday, January 07, 2011 8:15 AM *To:* NT System Admin Issues *Subject:* Re: Firewall Q Meh. Just give your servers dynamically-allocated

RE: Firewall hole - pardon the pun

2010-11-05 Thread Alan Davies
Can't offer any advice on the Firebox, but a decent proxy should block by category irrespective of Google caching. Ours certainly does (we use a cloud service for web filtering). a From: Paul Everett [mailto:evere...@leementalhealth.org] Sent: 04 November

Re: Firewall

2010-11-05 Thread Jim Majorowicz
was thinking more along the lines of a real time gui vs logging. *From:* Jeff Brown [mailto:2jbr...@gmail.com] *Sent:* Tuesday, November 02, 2010 11:43 AM *To:* NT System Admin Issues *Subject:* Re: Firewall We have fortinet firewalls with a fortianalyzer that I believe is capable

Re: Firewall hole - pardon the pun

2010-11-04 Thread Micheal Espinola Jr
For some sites, they intentionally let Google index and cache part of the site, and then via a robots file, stop them from doing it again - without instructing google to also *flush* the cached content. This is also accomplished with a mix of inappropriate sitemap use and what the website allows

Re: Firewall

2010-11-02 Thread Jeff Brown
We have fortinet firewalls with a fortianalyzer that I believe is capable of all that, but I am happy to say I am too damn busy to configure all that logging, let alone monitor anyone on that level. On Tue, Nov 2, 2010 at 10:29 AM, Paul Everett evere...@leementalhealth.orgwrote: I am looking

Re: Firewall

2010-11-02 Thread Andrew S. Baker
+1 for Fortinet +10 for appropriate protection and restriction without detailed monitoring. *ASB *(My XeeSM Profile) http://XeeSM.com/AndrewBaker *Exploiting Technology for Business Advantage...* * * On Tue, Nov 2, 2010 at 11:42 AM, Jeff Brown 2jbr...@gmail.com wrote: We have fortinet

Re: Firewall

2010-11-02 Thread Matthew W. Ross
Sounds like you want a Content filter. We use Lightspeed's Total Traffic Control, and have been very impressed with it. It's more education based, but it might fit your needs. I have a college who uses a filter called an iBoss, and he is a fan of that as well. --Matt Ross Ephrata School

Re: Firewall

2010-11-02 Thread Stephan Barr
+1 Fortinet. Devices are robust and the subscriptions costs are reasonable. On Tue, Nov 2, 2010 at 10:50 AM, Andrew S. Baker asbz...@gmail.com wrote: +1 for Fortinet +10 for appropriate protection and restriction without detailed monitoring. *ASB *(My XeeSM Profile)

RE: Firewall

2010-11-02 Thread Paul Everett
I was thinking more along the lines of a real time gui vs logging. From: Jeff Brown [mailto:2jbr...@gmail.com] Sent: Tuesday, November 02, 2010 11:43 AM To: NT System Admin Issues Subject: Re: Firewall We have fortinet firewalls with a fortianalyzer that I believe is capable of all

RE: Firewall

2010-11-02 Thread Matthew W. Ross
: Paul Everett [mailto:evere...@leementalhealth.org] To: NT System Admin Issues [mailto:ntsysad...@lyris.sunbelt-software.com] Sent: Tue, 02 Nov 2010 10:20:25 -0700 Subject: RE: Firewall I was thinking more along the lines of a real time gui vs logging. From: Jeff Brown [mailto:2jbr

Re: Firewall recommendations

2010-05-30 Thread Jonathan Kadoo
*** *IT Consultant* *Systems, Networks, Security * ' Security is an ongoing process, not a one time event ! ' *From:* Andrew S. Baker [mailto:asbz...@gmail.com] *Sent:* Friday, May 28, 2010 7:25 AM *To:* NT System Admin Issues *Subject:* Re: Firewall recommendations +1 They have

Re: Firewall recommendations

2010-05-28 Thread Andrew S. Baker
+1 They have a range of products that will handle both small and mid-sized clients with ease. -ASB: http://XeeSM.com/AndrewBaker On Thu, May 27, 2010 at 7:09 PM, Tom Miller tmil...@hnncsb.org wrote: So easy. I have a 300A for HQ here and a number of 30 and 50 units for smaller sites. You

Re: Firewall recommendations

2010-05-28 Thread Tom Miller
Fortinet also has some very large clients from what I'm told. A number of Universities use those products, at least my sales rep tells me so (and we all believe everything our sales reps tell us, don't we) Of course my last firewall was BorderManager before I moved us away from the stone

RE: Firewall recommendations

2010-05-28 Thread Erik Goldoff
. Baker [mailto:asbz...@gmail.com] Sent: Friday, May 28, 2010 7:25 AM To: NT System Admin Issues Subject: Re: Firewall recommendations +1 They have a range of products that will handle both small and mid-sized clients with ease. -ASB: http://XeeSM.com/AndrewBaker On Thu, May 27, 2010

Re: Firewall for small biz

2010-05-26 Thread Andrew S. Baker
(download is something like 2Mbps, upload is paltry 512K or something). Their web server is in-house and not hosted elsewhere. Dave -Original Message- From: Ben Scott [mailto:mailvor...@gmail.com] Sent: Friday, May 21, 2010 3:21 PM To: NT System Admin Issues Subject: Re: Firewall

RE: Firewall for small biz

2010-05-25 Thread Jay Dale
Sonicwall TZ210 Jay Dale I.T. Manager, 3GiG Mobile: 713.299.2541 Email: jay.d...@3-gig.commailto:jay.d...@3-gig.com Confidentiality Notice: This e-mail, including any attached files, may contain confidential and/or privileged information for the sole use of the intended recipient. If you are

RE: Firewall for small biz

2010-05-25 Thread David Lum
: Ben Scott [mailto:mailvor...@gmail.com] Sent: Friday, May 21, 2010 3:21 PM To: NT System Admin Issues Subject: Re: Firewall for small biz On Thu, May 20, 2010 at 1:43 PM, David Lum david@nwea.org wrote: I have a 17-user client (one SBS server, same one discussed with the PE840) with a 5+yr

Re: Firewall for small biz

2010-05-22 Thread justino garcia
PFsense (FreeBSD based), I like it simple to use, and stable (use a supermicro case 1u, with more then one ethernet jack), and 512mb of ram or more and you should be fine. On Fri, May 21, 2010 at 6:21 PM, Ben Scott mailvor...@gmail.com wrote: On Thu, May 20, 2010 at 1:43 PM, David Lum

RE: Firewall for small biz

2010-05-21 Thread Andy Shook
+1 on Fortigate. I've got hundreds of these throughout the data centers... Shook From: Rob Bonfiglio [mailto:robbonfig...@gmail.com] Sent: Thursday, May 20, 2010 4:56 PM To: NT System Admin Issues Subject: Re: Firewall for small biz I was going to suggest looking at Fortigate as well. On Thu

Re: Firewall for small biz

2010-05-21 Thread Ben Scott
On Thu, May 20, 2010 at 1:43 PM, David Lum david@nwea.org wrote: I have a 17-user client (one SBS server, same one discussed with the PE840) with a 5+yr old SonicWALL SOHO firewall and I believe it’s time to upgrade them to something more current. They used to VPN but have found SBS remote

Re: Firewall for small biz

2010-05-20 Thread Erik Goldoff
I would still look at the low end Cisco ASA 5505 and the Juniper SSG ( replaced the Netscreen 5GT ) On Thu, May 20, 2010 at 1:43 PM, David Lum david@nwea.org wrote: I have a 17-user client (one SBS server, same one discussed with the PE840) with a 5+yr old SonicWALL SOHO firewall and I

Re: Firewall for small biz

2010-05-20 Thread Angus Scott-Fleming
On 20 May 2010 at 10:43, David Lum wrote: I have a 17-user client (one SBS server, same one discussed with the PE840) with a 5+yr old SonicWALL SOHO firewall and I believe it´s time to upgrade them to something more current. They used to VPN but have found SBS remote access much faster.

Re: Firewall for small biz

2010-05-20 Thread Andrew S. Baker
Look at the Fortigate 50 firewall from Fortinet. Lots of features in the price range you're looking for, and easy configuration. -ASB: http://XeeSM.com/AndrewBaker On Thu, May 20, 2010 at 1:43 PM, David Lum david@nwea.org wrote: I have a 17-user client (one SBS server, same one

Re: Firewall for small biz

2010-05-20 Thread Steve Ens
Sonicwall TZ-210/190 - easy to manage, fast and reliable. I have ten of them all across Canada and they've been excellent. On Thu, May 20, 2010 at 12:43 PM, David Lum david@nwea.org wrote: I have a 17-user client (one SBS server, same one discussed with the PE840) with a 5+yr old

Re: Firewall for small biz

2010-05-20 Thread Rob Bonfiglio
I was going to suggest looking at Fortigate as well. On Thu, May 20, 2010 at 3:04 PM, Andrew S. Baker asbz...@gmail.com wrote: Look at the Fortigate 50 firewall from Fortinet. Lots of features in the price range you're looking for, and easy configuration. -ASB: http://XeeSM.com/AndrewBaker

RE: Firewall recommendation

2010-03-22 Thread John Aldrich
We are using an ASA appliance here and at one of our other locations. At the third we still have a Pix. Mainly we needed to be able to have a VPN between all three locations and allow users to VPN into our main location and since we had the Pixes, we just upgraded the two locations to ASAs when

RE: Firewall recommendation

2010-03-22 Thread Bill Lambert
I use a Netscreen 25 and it has given me good reliable service. However it is old and I'm looking myself. I've heard really good things about Sidewinder that is now owned by McAfee. Bill Lambert Concuity Phone 847-941-9206 The information contained in this e-mail message, including

RE: Firewall recommendation

2010-03-22 Thread Jay Dale
Currently using a Sonicwall TZ210, will be upgrading to a UTM this month or next, but very satisfied with its performance and support. Jay Dale I.T. Manager, 3GiG Mobile: 713.299.2541 Email: jay.d...@3-gig.commailto:kandy.luk...@3-gig.com Confidentiality Notice: This e-mail, including any

RE: Firewall recommendation

2010-03-22 Thread Jacob
I been using Netscreen/Juniper since 2000. No issues and bulletproof just about. From: Jonathan Kadoo [mailto:jka...@gmail.com] Sent: Monday, March 22, 2010 8:00 AM To: NT System Admin Issues Subject: OT: Firewall recommendation Hello everyone, I am looking for a recommendation. I am

Re: Firewall recommendation

2010-03-22 Thread Jon Harris
No recommendation but why switch from what you know to something you don't know? Jon On Mon, Mar 22, 2010 at 11:14 AM, Jacob ja...@excaliburfilms.com wrote: I been using Netscreen/Juniper since 2000. No issues and bulletproof just about. *From:* Jonathan Kadoo [mailto:jka...@gmail.com]

Re: Firewall Question (Different than Johnathan's question but similar. Might help us both out. )

2010-03-22 Thread Kurt Buff
On Mon, Mar 22, 2010 at 11:28, Matt Plahtinsky cbusitl...@gmail.com wrote: I was reading though Jonathan's Firewall Recommendation thread and it got me thinking.  I have a non profit client that their Firewall is on its way to Firewall heaven (actually firewall hell but we will not go

RE: Firewall Question (Different than Johnathan's question but similar. Might help us both out. )

2010-03-22 Thread Jay Dale
We used to use Smoothwall for our smaller clients' firewalls. We would buy a VERY low-end PC, put another NIC in it, then install Smoothwall and it worked very well. Jay Dale I.T. Manager, 3GiG Mobile: 713.299.2541 Email: jay.d...@3-gig.commailto:kandy.luk...@3-gig.com Confidentiality Notice:

RE: Firewall Question (Different than Johnathan's question but similar. Might help us both out. )

2010-03-22 Thread Ralph Smith
I've used IPcop with good success. Also since you mention they are a non-profit, have you checked to see if they are eligible for Cisco donations through techsoup. You can get an ASA 505 for something like $150, and a 5510 for about $350 - depends on their annual budget and not being a political

Re: Firewall Question (Different than Johnathan's question but similar. Might help us both out. )

2010-03-22 Thread Richard Stovall
Or a school. I hate that techsoup restriction... On Mon, Mar 22, 2010 at 2:53 PM, Ralph Smith m...@gatewayindustries.org wrote: I’ve used IPcop with good success.  Also since you mention they are a non-profit, have you checked to see if they are eligible for Cisco donations through techsoup. 

Re: Firewall Question (Different than Johnathan's question but similar. Might help us both out. )

2010-03-22 Thread Matthew W. Ross
My current recommendation for Free/Cheap open source firewalls is Endian Firewall (Community Edition) 2.3. It's quite capable out of the box, and I won't list all the features here... but I will link to their page: http://www.endian.com/en/community/feature-comparison/ We used to use

Re: Firewall Question (Different than Johnathan's question but similar. Might help us both out. )

2010-03-22 Thread Matt Plahtinsky
Cool. Looks like I have a bunch of shinny new firewall toys to test out this week. Thanks guys. Matt On Mon, Mar 22, 2010 at 3:15 PM, Matthew W. Ross mr...@ephrataschools.orgwrote: My current recommendation for Free/Cheap open source firewalls is Endian Firewall (Community Edition) 2.3.

RE: Firewall Question (Different than Johnathan's question but similar. Might help us both out. )

2010-03-22 Thread Stringham, Steven
+1 -Original Message- From: Matthew W. Ross [mailto:mr...@ephrataschools.org] Sent: Monday, March 22, 2010 12:16 PM To: NT System Admin Issues Subject: Re: Firewall Question (Different than Johnathan's question but similar. Might help us both out. ) My current recommendation for Free

RE: Firewall Question (Different than Johnathan's question but similar. Might help us both out. )

2010-03-22 Thread Ralph Smith
I forgot about schools. But I think the restrictions are set by the Cisco, Microsoft etc., not techsoup. -Original Message- From: Richard Stovall [mailto:rich...@gmail.com] Sent: Monday, March 22, 2010 3:00 PM To: NT System Admin Issues Subject: Re: Firewall Question (Different than

Re: Firewall Question (Different than Johnathan's question but similar. Might help us both out. )

2010-03-22 Thread Richard Stovall
...@gatewayindustries.org wrote: I forgot about schools.  But I think the restrictions are set by the Cisco, Microsoft etc., not techsoup. -Original Message- From: Richard Stovall [mailto:rich...@gmail.com] Sent: Monday, March 22, 2010 3:00 PM To: NT System Admin Issues Subject: Re: Firewall

Re: Firewall Question (Different than Johnathan's question but similar. Might help us both out. )

2010-03-22 Thread Angus Scott-Fleming
On 22 Mar 2010 at 14:53, Ralph Smith wrote: I´ve used IPcop with good success. Also since you mention they are a non-profit, have you checked to see if they are eligible for Cisco donations through techsoup. You can get an ASA 505 for something like $150, and a 5510 for about $350 -

RE: Firewall Question (Different than Johnathan's question but similar. Might help us both out. )

2010-03-22 Thread greg.sweers
: Richard Stovall [mailto:rich...@gmail.com] Sent: Monday, March 22, 2010 5:30 PM To: NT System Admin Issues Subject: Re: Firewall Question (Different than Johnathan's question but similar. Might help us both out. ) I think you're right. It's just frustrating b/c I support a non-profit, secular, K

RE: Firewall Recommendations

2009-03-10 Thread John Aldrich
I would recommend a small Cisco ASA device. You might need to get someone to set it up for you, but once it's set up, it's got a nice JAVA-based GUI for management, and it's pretty intuitive. John-AldrichTile-Tools From: Sam Cayze [mailto:sam.ca...@rollouts.com] Sent: Monday, March 09,

RE: Firewall Recommendations

2009-03-10 Thread Kelsey, John
, March 09, 2009 19:32 To: NT System Admin Issues Subject: RE: Firewall Recommendations ok ... when I think FULL BLOWN ROUTER, I think Cisco with WIC slots, etc Cisco ASA would work well for you, as would Fortigate, Juniper ... a few

RE: Firewall Recommendations

2009-03-10 Thread Alan Monaghan
*E-mail . al...@gardnerweb.com *URL http://Bullwinkle.GardnerWeb.Com/ -Original Message- From: Kelsey, John [mailto:jckel...@drmc.org] Sent: Tuesday, March 10, 2009 8:34 AM To: NT System Admin Issues Subject: RE: Firewall Recommendations +1

RE: Firewall Recommendations

2009-03-10 Thread Tom Miller
Subject: RE: Firewall Recommendations +1 *** John C. Kelsey DuBois Regional Medical Center (: 814.375.3073 *: jckel...@drmc.org mailto:jckel...@drmc.org *** -Original Message- From: Erik Goldoff [mailto:egold

RE: Firewall Recommendations

2009-03-10 Thread Joe Heaton
Watchguard has some very nice field office type firewalls. Their Edge products. Take a look at them, along with whatever you look at. Joe Heaton Employment Training Panel From: Sam Cayze [mailto:sam.ca...@rollouts.com] Sent: Monday, March 09, 2009 2:05 PM To: NT System Admin Issues

RE: Firewall Recommendations

2009-03-09 Thread Cameron Cooper
You can give this a try - http://www.clarkconnect.com/info/ we have this setup in two of our offices and will be setting up the Multi-WAN this week. ---___ Cameron Cooper IT Director - CompTIA A+ Certified Aurico Reports, Inc Phone: 847-890-4021Fax:

Re: Firewall Recommendations

2009-03-09 Thread Don Kuhlman
Just my .02 from my own experience - my client has 3 sites plus mine. I use the Checkpoint Sofaware boxes - they were about $300 each back then. Probably around $500 now plus some software costs and annual support about $100 I think. They do VPN tunnels and VPN client - I run these to create the

RE: Firewall Recommendations

2009-03-09 Thread Edward Flipsen
try the FortiGate 100 A or the 200 A Ed Flipsen Manager OnionLake Network Services edw...@onionlake.ca 306 344 5283Network Services 306 344 5287Fax 780 847 2200Band Office The views and opinions of this author are not to be misconstrued, used

RE: Firewall Recommendations

2009-03-09 Thread Sam Cayze
I was looking at the 60B somebody else recommended. How does it compare? Thanks everyone, Sam From: Edward Flipsen [mailto:edw...@onionlake.ca] Sent: Monday, March 09, 2009 4:24 PM To: NT System Admin Issues Subject: RE: Firewall Recommendations try

Re: Firewall Recommendations

2009-03-09 Thread Matthew W. Ross
There are so many to choose from! Most anything that's stable will work for what you're asking for. Even some consumer grade routers can do the VPN, but those are usually underpowered. What kind of VPN are you going to try to do? Clientless SSL Tunneling? IPSec? OpenVPN? I usually fall back

RE: Firewall Recommendations

2009-03-09 Thread Sam Cayze
To: NT System Admin Issues Subject: Re: Firewall Recommendations There are so many to choose from! Most anything that's stable will work for what you're asking for. Even some consumer grade routers can do the VPN, but those are usually underpowered. What kind of VPN are you going to try to do

RE: Firewall Recommendations

2009-03-09 Thread Matthew W. Ross
You're quite welcome. --Matt Ross Ephrata School District - Original Message - From: Sam Cayze [mailto:sam.ca...@rollouts.com] To: NT System Admin Issues [mailto:ntsysad...@lyris.sunbelt-software.com] Sent: Mon, 09 Mar 2009 15:30:44 -0700 Subject: RE: Firewall Recommendations Thanks

RE: Firewall Recommendations

2009-03-09 Thread Erik Goldoff
How will you connect to the internet ? Will your ISP provide you with ethernet ( or PPPoE ) or will you need a T1 WIC for T1/Frame Relay ? When you say full blown Router you need to specify the type of WAN circuit you'll be using to get accurate advice Erik Goldoff IT Consultant

RE: Firewall Recommendations

2009-03-09 Thread Sam Cayze
via Ethernet drop. No DSu/CSU's or anything needed. From: Erik Goldoff [mailto:egold...@gmail.com] Sent: Monday, March 09, 2009 6:02 PM To: NT System Admin Issues Subject: RE: Firewall Recommendations How will you connect to the internet ? Will your ISP

  1   2   >