|
Posted by Steven L Umbach on June 20, 2006, 4:13 pm
Please log in for more thread options
I would not necessarily thing that having intrusion detection is such a big
thing in a small network. The security logs on the domain computers can be
monitored for unauthorized access attempts and strong passwords and other
best practice security procedures should be implemented, if not already, to
minimize risk of a compromise. The firewall logs can also be checked
periodically to see what is going on.
I would not worry too much about the whole stealth/closed issue as long as
unauthorized access is not possible on protected ports. More important to me
would be to have a firewall that can manage both inbound and outbound access
and being able to have a default block all for outbound access and then the
needed exceptions defined. I am not familiar with the yamaha RT57i. I have
read and heard some good things about the fairly affordable line of
firewalls from SonicWall such as the TZ170. These firewalls can also be
linked to subsciption based malware and content filtering services. ---
Steve
http://www.sonicwall.com/products/tz170.html --- TZ170
http://www.sonicwallsales.com/products.htm?category=tz_series&gclid=CPWz6Y_Y1YUCFRYESQodNw3cLQ
> Small company that runs a TS server, DB and Web server concurrent users
> around 20. Looking for a FW software based solution for the entire
> network. Only condition is must support VPN as there are several remote
> office that also connect to the HQ.
>
> Existing FW is HW based but does not support intrusion
> detection/notification. Am thinking of keeping this piece of hardware as
> it includes VOIP/VPN (yamaha RT57i).
>
> But current problem is the company must have several ports open
> (ftp,pop,smtp,db, and several others) In a port scan these are showed as
> closed but not stealth thus am getting a little worried. Not sure if it
> is my config or not but difficult to access due to language of UI.
>
> Typical HW FW are very expensive and prob an overkill for these needs of
> a small firm but also the needs are greater than having Zonealarm on
> each PC.
>
> Any suggestions or sites with good reviews for the small enterprise??
>
> Thanks
| 
XML Sitemap