SW is a pretty good product.  iMail shouldn't be a problem with it.  My
biggest complaint at the basic firewall level is no support for port level
redirects.

The VPN functionality is pretty good, and hopefully will be getting better
since the Redcreek purchase.  The VPN client is currently an OEM'd version of
the SafeNet Soft-PK Client.  It has it's quirks, but is used by other
manufacturers as well, and seems fairly solid.  Rumor has it they will replace
the Safenet client with one based on the Redcreek stuff, which makes sense.

The worst thing to be aware of is that VPN users on DSL/Cable links may have
to lower their MTU to 1300 or so.  I've only noticed it being a problem with
VPN links using the client software.  VPN links with other SWs and other
manufacturers firewalls have not exhibited problems in my experience.  SW
claims it's a known problem, they're working on it, etc...  but it's been
around for a while.

One of the biggest reasons for using SWs for my purposes was free firmware
updates for life. For deploying 50+ units it makes more since to keep an extra
on the shelf and forego the maintenance contracts.  However with the new
models they have gone to 90 days of updates/support with a support contract
required thereafter.  I will certainly look closer at NetScreen, Watchguard
and Cisco for any new multi-unit deployments where I need an appliance type
solution.

My advice for whatever you decide on, get an eval unit first and put it
through it's paces.

Jerry

----- Original Message -----
From: "Leroy Buller" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, January 08, 2002 12:43 PM
Subject: [IMail Forum] SonicWall Info???


>
> Ok, don't laugh....
>
> Is anyone out there using SonicWall firewall boxes?  I would like
> to talk with someone off the list concerning issues with NAT, VPN,
> and the like.  How does it work with IMail or if there are any
> pitfalls.
>
> I am looking at this firewall solution because we need the VPN
> part of the box....  We are currently using BorderManager which
> has a lot of headroom in the firewall and the VPN is rather tough
> to work with.
>
> What headaches am I getting myself into here?
>
> Lee Buller
> IS Manager
> Newton Medical Center
>
>
>
>
>
>
>
>
> Please visit http://www.ipswitch.com/support/mailing-lists.html
> to be removed from this list.
>
> An Archive of this list is available at:
> http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
>



Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/

Reply via email to