Hello,
I am looking at firewall options to support an SMB with 50 employees and approximately 100 devices. The ISP provides 1 Gbps service, however, I do not have data regarding specific VPN requirements, concurrent connections, etc.
Untangle, pfSense, Cisco, and Palo Alto are currently being looked at, with hardware and virtualized solutions being considered.
Thank you.
pfSense is open source just buy a device or download an image & install it on any old device have all features.
Go with the FortiGate 80F.
FortiGate 80F is rated for 50-100 users and offers a balance between performance and affordability, making it a suitable choice for SMBs.
It offers firewall throughput of up to 10 Gbps and 950 Mbps VPN throughput, 1.5 million concurrent sessions, which should be sufficient for your 1 Gbps ISP service. It also provides essential security features for network protection.
I use pfSense (Netgate) all in one product. Lots of community support.
Hello,
I have been using Kerio Control for many years.
You can download this as an ISO image, an image for Hyper-V, VMWare, and also buy it as a HW box.
I am using pfSense, Check Point, and Sonicwall. If you have a low budget and good technical skills then deploy pfSense, it's an excellent product. If you don't know much about firewalls, then go for Sonicwall. That's very good support. If you need the best product with no budget constraints, then move to Check Point.
I would go with either FortiGate 100F or a Sophos XGS 2100. Both Fortinet and Sophos offer endpoint protection that integrates with their firewall and both firewalls can serve as wireless controllers for their respective access points. Both solutions also can be centrally managed from a cloud based console and include an IPSec and an SSL VPN client in their endpoint protection client as well as a full selection of services to protect the laptop or Macbook while on the road. Definitely a great pair of solutions for a busy SMB.
Hi,
Your requirement is very basic. My opinion you need not see the best performance of the box which can give you 10G throughput or multiple functionalities. Your setup is an SMB setup so you need a provider who can provide you with quick support whenever you need it.
SOPHOS XGS 87 or XGS 126 with extreme protection bundle will be enough for you. You can choose Fortinet 80F also but the Fortinet support response is late.
Security functions are almost similar and more than enough for SMB setup.
All the best
Jay, Peter below is taking you to the best product. Fortinet (I am a user at home with an FG40) is the only appliance with hardware acceleration that can really handle the loads. It is not only a "firewall" as such but Intrusion Prevention, Virus, Web filtering, SPAM for mail servers (meaning the connections are dropped there and then within the Helo or Ehelo command rather than spam in the server hard drive), and much more. In order to sustain throughput in VPN or full SSL inspection, software products normally choke. Virtual environments, I would not even think about it. Latency on multi tenancy cloud lies (data center, a new IP telephone exchange analogy) even worse. If you need multiple protection you need real hardware that can tackle all those functions, the rest is just not good enough. Fortinet is king.
Firwall de nueva geeracion con SD-WAN Cisco Meraki MX84, MX85
If budget is not a constraint, you can go for Palo Alto PA-415 or Cisco FPR 1120. But if budget is a constraint, the FortiGate NG 80F firewall will also suit your needs. These models meet your needs and support up to 1 Gbps VPN throughput. Consider higher models for higher throughput.
Go for Sonicwal Firewall like TZ400/Sophos XG135 or higher
We just bought a FortiGate 70F for 30 people and 100 devices. So far it seems very good. But it is quite a steep learning curve, and it makes more sense if you already have Fortinet devices in your network.
If you want a simple setup and cloud managed try Meraki, the license includes support which can be very helpful. Sophos XG is also good, and also cloud-managed.
Fortinet 60F is also a good choice, easy to configure and also a reliable product..
Go with Palo Alto PA440. It is easy to configure and will do whatever you need in the future.