It all depends on what you want your firewall to do.  Even if you are doing
site-to-site VPN, for the money you can't beat the D-Like DFL-700 or
DFL-1100.  The 700 will only set you back around $400 and will establish
site-to-site VPN tunnels with our existing remote PIX 506s.  Great web
interface and their phone support is decent enough, but nowhere near Cisco's
TAC.  Considering that you'd spend at least $1,100 to get a PIX 506
outfitted for firewall + VPN server and that still does not include any
support, the $400 for the D-link sounds like a good deal to me.  Plus, it
acts as an IPSec VPN server (for clients) with unlimited licenses.

The downside:  The PIX can push about 75 Mbit/s of VPN traffic through (with
the VPN Accelerator card installed), but the D-link can only muster 30
Mbit/s (in 3DES mode).  Although, the DFL-1100 can muster up to 250 Mbit/s
(in 3DES mode).

If you don't need the esoteric Cisco-only features (TACAS+ and ACS server
come to mind), then the D-link units are a good solution.  

Eric Fretz



-----Original Message-----
From: Paul Hutchings [mailto:[EMAIL PROTECTED] 
Sent: Thursday, July 01, 2004 10:16 AM
To: Exchange Discussions
Subject: RE: OT - firewalls


Here we just use a 501, it's cheap but easily copes with everything we do,
admittedly we don't do VPN or encryption or suchlike but it's a bloody good
piece of kit for the price IMHO.

Paul

> -----Original Message-----
> From: Kim Schotanus [mailto:[EMAIL PROTECTED]
> Sent: Thursday, July 01, 2004 2:45 PM
> To: Exchange Discussions
> Subject: OT - firewalls
> 
> 
> I need a new firewall, and analysis comes up with two options
> (main use
> is only mail and local internet surfing, no DMZ on this 
> connection), the
> watchguard firebox x1000 and Pix 515... any pro's and cons? I 
> personally
> like the GUI form watchguard. 
> 
> Kim
> 
> _________________________________________________________________
> List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> Web Interface:
> http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&t
> ext_mode=&lang=english
> To unsubscribe send a blank email to 
> %%email.unsub%%
> Exchange List admin:    [EMAIL PROTECTED]
> To unsubscribe via postal mail, please contact us at:
> Jupitermedia Corp.
> Attn: Discussion List Management
> 475 Park Avenue South
> New York, NY 10016
> 
> Please include the email address which you have been contacted with.
> 

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang
=english
To unsubscribe send a blank email to
%%email.unsub%%
Exchange List admin:    [EMAIL PROTECTED]
To unsubscribe via postal mail, please contact us at: Jupitermedia Corp.
Attn: Discussion List Management
475 Park Avenue South
New York, NY 10016

Please include the email address which you have been contacted with.

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english
To unsubscribe send a blank email to [EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]
To unsubscribe via postal mail, please contact us at:
Jupitermedia Corp.
Attn: Discussion List Management
475 Park Avenue South
New York, NY 10016

Please include the email address which you have been contacted with.

Reply via email to