CISCO 5505

[Pankaj Bhartia]

 Hi,

Would it make sense to buy a CISCO ASA 5505 for a small sized business
with 40 users.
Since we can't afford the licenses for anti spam and others, we will
have to purchase the base model.

For a little extra we get Fortigate 60, which has anti virus and IDS.

which would be a better buy for gateway level security. We have a
Trend Client Server Messaging Suite. We need protection against
hacking and spammers, apart from trojans, malwares etc.

thanks
pankaj

[daniel.cabezas.molina]

Greetings,

For a fraction of the price for a Cisco solution you have bot securepoint (http://www.securepoint.cc/) and Astaro firewall appliances (http://www.astaro.com) . They come with Firewall, Antivirus, Spam filter and VPN integrated.  Look for them, they may be a better investment for a little company.

Regards,

----------------------------------------------------------------------------
Daniel Cabezas Molina
CISSP
PricewaterhouseCoopers
Edifici Caja de Madrid - Avda. Diagonal, 640, 7ª
08017 - Barcelona
Tel. [phone]
Fax. [phone]
mailto:daniel.cabezas.molina@...
http://www.pwc.com/es
----------------------------------------------------------------------------

"Pankaj Bhartia" <bhartiap@...>
Sent by: listbounce@...

29/05/2007 14:42

To	firewalls@...
cc
Subject	CISCO 5505

 Hi,

Would it make sense to buy a CISCO ASA 5505 for a small sized business
with 40 users.
Since we can't afford the licenses for anti spam and others, we will
have to purchase the base model.

For a little extra we get Fortigate 60, which has anti virus and IDS.

which would be a better buy for gateway level security. We have a
Trend Client Server Messaging Suite. We need protection against
hacking and spammers, apart from trojans, malwares etc.

thanks
pankaj


_________________________________________________________________
The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete the material from any computer.

[raimarm]

Not certain about the prices, but you should take a look at the
Juniper-SSG 5/SSG 20. They have a great performance and provide UTM
(IPSec VPN, IPS, Antivirus (includes Anti-Spyware, Anti-Adware,
Anti-Phishing), Anti-Spam, and Web Filter).

good luck !

http://www.juniper.net/products_and_services/firewall_slash_ipsec_vpn/index.html

Pankaj Bhartia schrieb:

> Hi,
>
> Would it make sense to buy a CISCO ASA 5505 for a small sized business
> with 40 users.
> Since we can't afford the licenses for anti spam and others, we will
> have to purchase the base model.
>
> For a little extra we get Fortigate 60, which has anti virus and IDS.
>
> which would be a better buy for gateway level security. We have a
> Trend Client Server Messaging Suite. We need protection against
> hacking and spammers, apart from trojans, malwares etc.
>
> thanks
> pankaj
>

[Luis Lopez Sanchez]

...But is as expensive as Cisco. Juniper and Cisco are in the same segment price.

NetASQ[4] have cheap solutions 'all include' for UTM and ad-hoc products for small business. IMHO, Fortinet is a very good solution too.

If you have people for this project that know some unix flavor, I'd like recommend open-source and free solutions based on FreeBSD: Such as IPFilter[1] for firewall, clamasmtp e-mail virus filter[1] and other security ports[3] for FreeBSD such as fwlogwatch, atispam milter ...

Seriously, The firewall (or UTM plattform) choice depends on it response to your security expectations, risk level beared, theats, value of assets protected, legal requirements ... Focus the solution for the screened or perimeter network *ONLY* thinking about the price is not good... Assure yourself following risk assesment methodology and pen-test if were necessary.  

[1]
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/firewalls-ipf.html
[2]
http://memberwebs.com/stef/software/clamsmtp/
[3]
http://www.freebsd.org/ports/security.html

[4]
http://www.netasq.com/en/index.php
http://en.wikipedia.org/wiki/Netasq

Regards,

--
Luislo

Key fingerprint = 550F 3545 C847 F61E 821C 3D8C 1A12 2C19  8A68 8104

"These are the thoughts and opinions of Luis Lopez, and does not represent Atos Origin company policy."

"Estos son los pensamientos y las opiniones de Luis Lopez, y no representan la política de compañía de Atos Origin."


-----Original Message-----
From: listbounce@... [mailto:listbounce@...] On Behalf Of raimarm
Sent: martes, 29 de mayo de 2007 21:41
To: Pankaj Bhartia
Cc: firewalls@...
Subject: Re: CISCO 5505

Not certain about the prices, but you should take a look at the Juniper-SSG 5/SSG 20. They have a great performance and provide UTM (IPSec VPN, IPS, Antivirus (includes Anti-Spyware, Anti-Adware, Anti-Phishing), Anti-Spam, and Web Filter).

good luck !

http://www.juniper.net/products_and_services/firewall_slash_ipsec_vpn/index.html

Pankaj Bhartia schrieb:

> Hi,
>
> Would it make sense to buy a CISCO ASA 5505 for a small sized business
> with 40 users.
> Since we can't afford the licenses for anti spam and others, we will
> have to purchase the base model.
>
> For a little extra we get Fortigate 60, which has anti virus and IDS.
>
> which would be a better buy for gateway level security. We have a
> Trend Client Server Messaging Suite. We need protection against
> hacking and spammers, apart from trojans, malwares etc.
>
> thanks
> pankaj
>

------------------------------------------------------------------
This e-mail and the documents attached are confidential and intended solely
for the addressee; it may also be privileged. If you receive this e-mail
in error, please notify the sender immediately and destroy it.
As its integrity cannot be secured on the Internet, the Atos Origin group
liability cannot be triggered for the message content. Although the
sender endeavours to maintain a computer virus-free network, the sender does
not warrant that this transmission is virus-free and will not be liable for
any damages resulting from any virus transmitted.

Este mensaje y los ficheros adjuntos pueden contener informacion
confidencial destinada solamente a la(s) persona(s) mencionadas
anteriormente. Pueden estar protegidos por secreto profesional Si usted
recibe este correo electronico por error, gracias de informar inmediatamente
al remitente y destruir el mensaje.
Al no estar asegurada la integridad de este mensaje sobre la red, Atos
Origin no se hace responsable por su contenido. Su contenido no constituye
ningun compromiso para el grupo Atos Origin, salvo ratificacion escrita por
ambas partes.
Aunque se esfuerza al maximo por mantener su red libre de virus, el emisor
no puede garantizar nada al respecto y no sera responsable de cualesquiera
danos que puedan resultar de una transmision de virus
------------------------------------------------------------------