Do I really need a dedicated Firewall 1

[seaport]

My office network contains about 10 workstations, 1 file server and 1 SQL Server. The network is behind a LinkSys router, which also serves as the firewall. Now I plan to add a web server and expect small traffic (less than 200 visits a day). The web application on the web serer is not mission-critical and all money transactions will be handled using Paypal.

My questions is: do I need a Firewall server or I can just keep using the existing router? Someone recommended me adding a switch with a lot cache for better performance.

What should I do? Actually the real question is, what are key factors determining using a dedicated firewall rather than a router?

Thanks in advance.

 

[ISPKing]

Really if it's a business i would not recommend anything less then an ASA5505, but if you don't want to fork out 400$ for awesome security you little linksys should be ok. Just know that there are tons of undocumented vulnerabilities on them. And if any serious sustained traffic starts coming through (3+mbps) you will see some performance degradation.

Also this makes no sense:
"Someone recommended me adding a switch with a lot cache for better performance."

A switch switches. The types of caches contained in one do not apply here and are not being referenced correctly. I would not take advice from that person.


CCNP

 

[seaport]

Thanks for the reply.

I am OK for a security device under $1k. The quotes I got for a firewall server were above 5k.

Another question: do I need something like ASA5505 if there is no web server involved? In that situation, all I need to do is to make sure all ports are closed, tested using

http://www.grc.com.

The router becomes a dumb box just for Internet access.

In other words, is the Web server a determining factor for getting a security device?

 

[ISPKing]

The asa receives a perfect stealth right out of the box from grc.com-<< but that's irrelevant.

The ASA is good device to have no matter what you choose.
But you might need to hire someone to set it up.

CCNP

 

[seaport]

I probably will be the person to set it up. What kind of knowledge or credential I need to set up an ASA box? Could you give me some resource links?

Thanks again.