Help me pick a firewall for my work

[r6ashih]

My boss wants me to pick out a firewall. I've had some experience with sonicwall's at my other job, but want to see what else is out there.

It does not need to do any DHCP, just firewalling.
I also want to spend less than $500.
This is for ~20 connections behind a domain controller/dhcp server.

How does this one sound? Cisco PIX Firewall 501 (PIX-501-BUN-K9)

thanks,
Ashih

 

[HKSturboKID]

Cisco Pix is good or the Nokia Soho firewall is good also.

 

[r6ashih]

How can i tell how many users it is. Sometimes they dont say on the websites.

 

[Garion]

Generally, network hardware isn't about number of users. It's usually about rated throughput. LICENSES, however, are often about user count - Just a way to squeeze more cash out of you. Assume a PIX 501 will easily handle most DSL lines (other than the big 7Mb/s monsters, that'd take a PIX 506 at minimum). You'll usually find user count details when you get into the pricing.

- G

 

[r6ashih]

so if i get a 10 user license.. will only 10 people be able to go online?

 

[spidey07]

Originally posted by: r6ashih
so if i get a 10 user license.. will only 10 people be able to go online?

that is correct

 

[Boscoh]

The PIX-501-BUN-K9 is the 10-user license.

PIX-501-50-BUN-K9 is the 50 user license, and PIX-501-UL-BUN-K9 is an unlimited user license.

Anything besides the 10 user license and you might as well fork out the extra money for the 506e. More powerful hardware, no user limit, and not much more extra money.

If that is too much money for you, consider another brand such as Netscreen, Fortigate, Servgate, or Snapgear. They're all pretty good from what I hear (and I've used Netscreen).

I, however, am partial to the PIX series. So that's my recommendation.

 

[r6ashih]

Yeah i dont know if i can spend 800 on a firewall. What if i get a 50 user 501 from ebay? any problems with that?

i'm looking at this one: ebay link

 

[Boscoh]

You could do that. You just wont be able to legally obtain updates to the software, and you're not going to want to be without PIX OS 7.0 from what I hear.

Have you checked out the other brands? I've heard of people absolutely loving the Fortigate series, and they're supposed to be pretty affordable.

Dont get me wrong here, the PIX is a damn good firewall...but it IS on the expensive side.

EDIT: After some checking...it seems the fortigate units are pretty similar in pricing to the PIX series.