Jump to content



Photo

pfsense, smoothwall, untagle or other firewall

pfsense smoothwall untagle firewall opensource

  • Please log in to reply
17 replies to this topic

#1 Praetor

Praetor

    ASCii / ANSi Designer

  • Tech Issues Solved: 7
  • Joined: 05-June 02
  • Location: Lisbon
  • OS: Windows Eight dot One dot One 1!one

Posted 16 September 2013 - 01:03

So in like a couple of weeks I'm gonna start studying/practicing in my home lab these (and if there are others they are welcomed) firewalls / UTM.

 

What i really want to know is how they behave (as in performance), the kind of features they have (if they support VPNs and how many, ease of publishing rules, the amount of updates released by the vendor, etc.), your experience of this products versus commercial ones (like Cisco, Juniper, SonicWall, Fortinet, etc.). I'm a ISA / TMG guy but i must learn other alternatives since TMG isn't available right now (and it's phased out) and the recommended ones by Microsoft are way too much expensive ones for the clients i have (small/middle sized business).

 

oh also very important: most of the clients i have they publish OWA (exchange) via ISA / TMG, so this firewall must support this as well.




#2 sc302

sc302

    Neowinian Senior

  • Tech Issues Solved: 35
  • Joined: 12-July 05
  • Location: NJ, USA

Posted 16 September 2013 - 01:38

Well you won't necessarily be publishing it like you do with tmg or isa, you will be sending the port over to that server either through one to one nat or simply forward the port over.  All of these support this, even still none support publishing like tmg does all firewalls either forward ports or support one to one nat.



#3 MidnightDevil

MidnightDevil

    Resident Evil

  • Joined: 30-June 04
  • Location: Hell!

Posted 16 September 2013 - 08:24

You forgot IpCop which if I'm not mistaken does everything you mentioned and has a shitload of plugins which you can add according to your needs.

The other ones probably too.  Why not Dragon as IDS while you're at it? :b



#4 Fahim S.

Fahim S.

    Neowinian Senior

  • Tech Issues Solved: 2
  • Joined: 15-April 02
  • OS: Windows 8.1 Update 1 / Chrome OS 37
  • Phone: Google Nexus 4

Posted 16 September 2013 - 09:30

SphireWall seems to be another interesting one... although I can't ascertain with development is continuing or is dead.

 

Big fan of pfSense myself.



#5 MidnightDevil

MidnightDevil

    Resident Evil

  • Joined: 30-June 04
  • Location: Hell!

Posted 16 September 2013 - 10:25

SphireWall seems to be another interesting one... although I can't ascertain with development is continuing or is dead.

 

Big fan of pfSense myself.

 

 

Sphirewall is still under development! :) 



#6 +RedReddington

RedReddington

    member_id=28229

  • Joined: 14-May 03

Posted 16 September 2013 - 10:35

Never heard of SphireWall. But it does look good. I am going to give this a try.



#7 Fahim S.

Fahim S.

    Neowinian Senior

  • Tech Issues Solved: 2
  • Joined: 15-April 02
  • OS: Windows 8.1 Update 1 / Chrome OS 37
  • Phone: Google Nexus 4

Posted 16 September 2013 - 11:25

Sphirewall is still under development! :)

 

How do you know?



#8 +RedReddington

RedReddington

    member_id=28229

  • Joined: 14-May 03

Posted 16 September 2013 - 11:30

Do a quick search and their last release was in July 2013 ;)



#9 ndoggfromhell

ndoggfromhell

    Master of the 6th Speed

  • Joined: 20-March 02

Posted 16 September 2013 - 11:42

Sophos UTM (formerly astaro) is a pretty decent free for home use product.  The reporting is decent and the features are pretty nice.  I like it over Untangle.



#10 Fahim S.

Fahim S.

    Neowinian Senior

  • Tech Issues Solved: 2
  • Joined: 15-April 02
  • OS: Windows 8.1 Update 1 / Chrome OS 37
  • Phone: Google Nexus 4

Posted 16 September 2013 - 11:56

Do a quick search and their last release was in July 2013 ;)

 

No news on progress since does make me wonder.



#11 OP Praetor

Praetor

    ASCii / ANSi Designer

  • Tech Issues Solved: 7
  • Joined: 05-June 02
  • Location: Lisbon
  • OS: Windows Eight dot One dot One 1!one

Posted 16 September 2013 - 12:48

hum...my main concern is:

- easiness of deployment (install, configure and maintain).

- cost.

- support.

 

I my opinion, ISA / TMG had a huge advantage as the cost was low for the amount of features it had; now i have to find a similar product for enterprise environments (small/middle sized) with cost, feature wise and support as my #1 priorities. Cisco / Juniper / Fortinet have good produts but the cost is prohibitive for some of the clients i have.



#12 sc302

sc302

    Neowinian Senior

  • Tech Issues Solved: 35
  • Joined: 12-July 05
  • Location: NJ, USA

Posted 16 September 2013 - 12:51

A Cisco 5505 is an entry level appliance and will do that of the firewalls you are looking at

#13 +RedReddington

RedReddington

    member_id=28229

  • Joined: 14-May 03

Posted 16 September 2013 - 13:26

Sophos UTM (formerly astaro) is a pretty decent free for home use product.  The reporting is decent and the features are pretty nice.  I like it over Untangle.

 

Very interesting! I tried to download it but all I get is ...

 

Il s'est produit une erreur inattendue.

 

Can anyone else download it?



#14 ndoggfromhell

ndoggfromhell

    Master of the 6th Speed

  • Joined: 20-March 02

Posted 20 September 2013 - 13:05

I just downloaded it, but I have the FTP site saved.  http://download.asta..._appliance/iso/



#15 MidnightDevil

MidnightDevil

    Resident Evil

  • Joined: 30-June 04
  • Location: Hell!

Posted 20 September 2013 - 15:52

How do you know?

 

Because according to their website:


July 31, 2013

Sphirewall 0.9.9.6 Released Today

Today we have pushed out another Sphirewall release. This release was spent working on stability and performance, ironing out a whole heap of issues. Users can expect a new level of stability and performance with both the management interfaces and core system. We have also reintroduced some of the functionality that was removed with the wmi migration to python flask such as logging, and validation.

For the full release notes click here or head over to our website for downloads and more information, http://sphirewall.net