Can anybpody suggest a good Firewall/VPN

[rasindia]

Hi,
We are going to implement new security standards and thought of going for a new Firewall.

Is Checkpoint is better?

Requirements:
1]We need DMZ to isolate web/Ftp and mail servers
2]Need of best VPN
3]Supporting less than 100 users
4]No systems outside firewall
5]Backup from internal and DMZ
6]A fourth port for our training centr LAN which can indirectly work as 2nd DMZ and scure from main LAN.

Is checkpoint software is the better solution? Or an appliance with Checkpoint?

Is there any other good products can give all this support and a cheap price?

Please help..

We have a mixed environment and main servers are on Windows 2000.

Thanks

 

[richgill]

Do you already have a firewall/vpn in place? Checkpoint is very good but can be expensive (hardware, OS, CP software, CP support...etc). You may be better off with a hardware solution that is easy to set up and maintain. Companies like Netscreen have 4-port Firewall, VPN, Traffic Shaping devices.

 

[angelo990]

Depending on your security needs, checkpoint can be expensive but rather good in many elements. It can run on NT, solaris, Linux or a hardware appliance. Consider the security policies as well as importance of security at your company and if budget is not issue, go with a flexible-scalable solution.

If you know linux pretty good, that's by far the cheapest firewall you can configure yourself, although not sure how flexible it is.

 

[espIKEkid]

I have to say from an engineers point of view and watching customers struggle with firewalls, i would have to recommend the PIX from cisco.

It is easier to configure and has less problems than the checkpoint solution. I am certified in both by the way.

Both have a GUI to configure them but do you really know what is going on under the bonnet of a checkpoint? it is sitting on top of another os.. pix while based on unix(ish) and literly a plug and plag device.

anyhoo only my point of view..

 

[kevinchen129]

Which firewall is pretty good on x86 solaris or Linux?