Hi,
We use the Qube and RaQ extensively for providing an email server to
clients who don't have a fulltime admin but want SMTP delivery: because
it's Linux we can get into it remotely if there are problems which suits
all parties.
All the 'features' in each box can be administered through the webfront
end, although in some cases it is not that easy to use: I personally find
the ipfiltering input box quite irritating as it is is v.small.
The 'firewall' capability is Linux's packet filtering so it's nothing major
but is probably fine for an SME with no major attack profile. So as long
as you purchase it with that in mind you should be OK. In general I will
tend to suggest using Cisco's access lists etc as these are pretty well
understood by most ISP's/integraters: that is your chances of finding
someone who knows what they are doing as well as saying that they know what
they are doing is higher ;-)
It sounds to me as if you are seeking to firewall your website/s. One
thing I would say to you is that the firewalling of websites is the least
of your worries. In general the majority of website cracks is via the
webserver or via interactive scripts which run under the webserver. Since
you will have to allow access to the website, that being the point
afterall, you will not be securing the area most likely to be attacked. If
your sites are doing anything which if cracked would effect your companies
profile, ie loss of revenue or reputation, I'd strongly suggest that you
get someone who does webserving fulltime to carry the load: at least it
gives you someone to shout at if it gets cracked! :-)
Finally in reference to the Cobalt products one thing I have found is that
you should decide whether you will login to the box and treat it as a Linux
machine or whether you will only use it through the web front end. The
reason being that often if you edit something on the command line you can
fsck up the web front end. In general we now only do work through the web
front end and this has been successful.
HTH,
Steve
At 02:35 PM 5/3/00 -0500, Miss Yvette Seifert Hirth, CCP, CDP wrote:
>Hi everybody!
>
>Does anyone have any experience with Cobalt products, such as the Qube2
>and/or RaQ series of appliances?
>
>I've come to the conclusion that we can't afford a full-time Unix person,
>and while the consulting firms have been helpful, they're expensive. The
>Qube2 claims to have full-screen interfaces all set up that get one started,
>at least. This is attractive to me, and the price is not outrageous. Yes,
>I'm certain I could get Linux/Unix hardware and software for much less, but
>... it's the "cost of talent" that makes the Cobalt products attractive.
>
>The Qube2 has a built-in firewall *of some form*, but it only allows one
>website per Qube2. There's finagling that can be done per their Faq's, but
>then we get out of the "supported" realm. The RaQ allows for multiple site
>hosting, but has no firewall. <sigh>
>
>If anyone knows anything bout these products, I'd really appreciate an
>email. If you want to pan them and not do it in front of the list, send me
>in private (below).
>
>Tanks in advance!
>Yvette
>-----------------------------------------------------------------------
>Miss Yvette Seifert Hirth, CCP, CDP Voice: (847) 263 6800
>The DBT Group, Inc. Fax: (847) 263 6801
>176 Ambrogio Drive Email: [EMAIL PROTECTED]
>Gurnee, IL 60031 WWW: http://www.dbtgroup.com
>
>NOTE: Please remove all occurrances of "nospam." from my address before
>sending me email!
>
>"The problem with the gene pool is that there's no lifeguard."
>--Anonymous
>
>
>Attachment Converted: "c:\Eudora\Attach\Hirth, Yvette Seifert.vcf"
>
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
