[lug] Firewall Appliance Recommendation?

[Quentin Hartman]

I used Sonicwall devices more recently than you, but it was still awhile
ago. They were generally OK, but really expensive to use. Keeping their
support current was pretty critical, and it was not cheap. At that employer
I ended up switching to Imagestream Envoys, and they worked great, costing
a fraction of what the Sonicwall (or Cisco) devices cost. I don't recall
anything negative about them, and would use them again in a heartbeat if
the need arose:

http://www.imagestream.com/

I've also good luck rolling my own based on kit from Routerboard.com, but
that doesn't sound like what you're after. Just in case though:

http://routerboard.com/

QH


On Tue, Jan 7, 2014 at 3:25 PM, Maxwell Spangler <
maxlists at maxwellspangler.com> wrote:

>  As part of meeting PCI DSS security requirements, I need to wall off a
> single PC from the rest of its network with a firewall in order to control
> inbound and outbound traffic to/from it.  I'd also like to enable logging
> to some (yet undefined) extent so I can monitor things.
>
> Over a decade ago I used Sonicwall appliances and I think something like
> their current TZ 2xx series might work well.  I'd love to hear your
> experiences with them or similar.
>
> I don't want to use a PC running Linux or OpenBSD for this: the form
> factor, noise and power requirements are overkill even if the solution
> would be low cost and high quality.
>
> I've thought about rigging up a Linksys router with DD-WRT, but I'd like
> to know if Sonicwall offers features and ease of use which make it worth
> its price.
>
> Any comments would be appreciated!
>
>   --
> Maxwell Spangler
> ========================================================================
> Linux & Open Source Systems Engineer
> Fort Collins, Colorado, USA
> http://www.maxwellspangler.com/
>
> _______________________________________________
> Web Page:  http://lug.boulder.co.us
> Mailing List: http://lists.lug.boulder.co.us/mailman/listinfo/lug
> Join us on IRC: irc.hackingsociety.org port=6667 channel=#hackingsociety
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.lug.boulder.co.us/pipermail/lug/attachments/20140107/b27d23f8/attachment.html>