I also recommend Juniper products. Our college has been running a high-availability (active-passive) firewall configuration using Juniper (Netscreen) products for over 4 years now.
--
Stephen Bogdanski
Network Support
College of Veterinary Medicine
Michigan State University
>>> On 3/5/2008 at 9:27 AM, <[log in to unmask]> wrote:
> I highly recommend firewall products from Juniper. They are rock-solid
> devices designed from the ground up to be firewalls, and have a great
> track-record. I don't like using Linux/Unix as my firewall because (a)
> software based firewalls are SLOW (b) unless your full time job is to
> keep up with security on this box, there is a good chance that you will
> be broken in.
>
> ACNS is deploying Juniper devices for the campus IPS, as well as for
> department firewalls. I have nothing but good things to say about the
> ACNS Security Group with regards to running our department's firewall.
>
> -Nick Kwiatkowski
> MSU Telecom Systems
>
> -----Original Message-----
> From: MSU Network Administrators Group [mailto:[log in to unmask]] On
> Behalf Of Eric Weston
> Sent: Wednesday, March 05, 2008 8:43 AM
> To: [log in to unmask]
> Subject: [MSUNAG] firewall hardware
>
> I'm collecting opinions regarding hardware to use for a firewall. If you
> are interested in weighing in on this subject, I'm interested to hear
> your ideas.
>
> The hypothetical firewall is a purpose built OpenBSD box running OpenBSD
> Packet Filter (pf), on a box that bridges the outside world to a
> protected network of approximately 1000 nodes. The box needs to have a
> network interface for administrative access via ssh, and two
> high-throughput network interfaces to provide the "bridge" from the
> protected network to the internet.
>
> Given this general scenario, what sort of box might you purchase and/or
> assemble for this purpose? What elements would you consider critical?
> (architecture, interfaces, harddrive or alternative, CPU, etc..)
>
>
> Thanks,
> Eric Weston, Libraries
|
