Hardware firewall

[zodiac0001]

Does anyone have a specific model they can recommend for a hardware firewall. That has the ability to use a whitelist? It will be for a company with 25+/- employees. It seems most I have checked have the ability to block specific sites but not the opposite.

Why do some firewall have yearly fees?

I just need to be able to set 20 website that are allowed to pass through and block everything else.

No I cant use software per computer it will take too long to update every computer if a change is made.
No I cant set something like endpoint There is no server (one is not needed).

It seems a hardware firewall is the simplest method.

BTW I have a cisco dual wan switch that that only has a black list and just found a zyxel usg 100
I think this can kill 2 birds with one stone. anyone ever use this? or the 50?

Thanks for any help

 

[Cooky]

What you described is definitely doable (permit only certain websites, block rest).
Many enterprise grade appliances support that. Cisco's ASA CX, or WSA (real Cisco, not Linksys crap), BlueCoat's ProxySG, or McAfee's Web Gateway.

I'm sorry that this is not really helping your case, but I'm not sure what in the small-medium biz market would achieve what you want to do.

Perhaps OpenDNS? That's a cloud based solution, which can be centrally managed, but you can only define categories, and not specific URL's...at least not the free version that I've tried.

 

[lif_andi]

Can't go wrong with Cisco ASA, although it might be a bit more than you need. Zyxel I don't know.

 

[Mushkins]

Any of the entry-level Dell Sonicwall devices can do this, but you'd need the yearly subscription to content filtering services.