Hardware Firewall Protection

[vader]

Hey guys, I have my normal job plus a side computer job over at a small insurance company taking care of the comps and network.  Lately
they have been getting nailed with virus and some dos attacks.  The owner would rather not have zonealarm running on each machine individually and would rather go with a hardware firewall.  Currently the are running a T1 and I believe about a 24 port switch.  I'm not
really understanding of that.  I'm guessing it is only a switch and
not a router because of the T1, I'm under the assumption you only
need a router when you run dsl or cable, but could be wrong.  They currently have about 20 machine networked and with internet access, what model firewall router would suit the needs.  Anything in the 300 or less range.

Thanks

Tim

[ChadTower]

I'm guessing it is only a switch and
not a router because of the T1, I'm under the assumption you only
need a router when you run dsl or cable, but could be wrong. 

Yes, you are very, very wrong.  Cisco is one of the largest companies in the world and their primary product has always been routers.  They don't even make, to my knowledge, a router for home use such as for cable or DSL.

[GGKoul]

I'm guessing it is only a switch and
not a router because of the T1, I'm under the assumption you only
need a router when you run dsl or cable, but could be wrong.

[vader]

Thanks for that clarification Chad.  Am I right in assuming that they probably have a swith (HUB ) there and not a router ?  I don't see
anything but ethernet plugs going into it, if that is the case what
type and which firewall would I need.

Thanks Again

Tim

[clanggedin]

Get a Linksys router. I have set up a number of them for small businesses and they are easy to setup and maintain.

You cang et a good firewall/router (for home/small business use) for under $300 if you go with a Linksys.

[vader]

update guys....it is this model

http://www.linksys.com/products/product.asp?grid=35&scid=39&prid=473

[ChadTower]

That is a switch, just like the product description says.  Switch != hub != router != firewall.

They coincide on the same piece of hardware sometimes, but they are separate devices and concepts.

[vader]

Pardon my ignorance here,  I just know how to map drives and basic stuff so I don't have the full understanding or the terminology of
routers and switches and such.  Which product do you recommend
I get or does this already have everything I need.

Thanks

Tim

[vader]

Would this work for what I need

http://www.dlink.com/products/?pid=354

Tim

[J_K_M_A_N]

So does the cable from the T1 modem go right into the switch? I thought you had to have some sort of router unless all computers are set with the external address.

We have something close to the same. We have a 24 port switch but we also have a firewall/router that is before the switch. We also have a wireless router that is just being used as a wireless access point.

If you wanted to know, the firewall we have is a Firebox SOHO 6 Watchguard. It seems to work pretty well. We have a few ports forewarded and everything seems to be working well.

J_K_M_A_N

[ChadTower]

It should, though you're going to have to disable some things like NAT to avoid network conflicts.

BTW, he doesn't have to have a router, he just needs to have some DHCP server running that communicates properly with the T1, handling NAT along the way.

[vader]

Thanks guys....I'll do some research into the things you pointed out

tim

[CCM]

Here's a quick read on the difference between hubs, switches, and routers...

http://www.practicallynetworked.com/networking/bridge_types.htm

[SOAPboy]

WOAH woah woah

YOur suggesting HOME ROUTERS as a FIREWALL SOLUTION for a BUISNESS?

how about no..

http://www.cisco.com/warp/public/cc/pd/fw/sqfw500/

Read up..

[ChadTower]

WOAH woah woah

YOur suggesting HOME ROUTERS as a FIREWALL SOLUTION for a BUISNESS?

how about no..

http://www.cisco.com/warp/public/cc/pd/fw/sqfw500/

Read up..

I worked for Cisco for quite a while.  I'm familiar with it.

He's the one who said he had a $300 limit.

[SOAPboy]

WOAH woah woah

YOur suggesting HOME ROUTERS as a FIREWALL SOLUTION for a BUISNESS?

how about no..

http://www.cisco.com/warp/public/cc/pd/fw/sqfw500/

Read up..

I worked for Cisco for quite a while.

[vader]

LOL....chill.....I can probably get it bumped up to around 400.00 or so, but I don't know how much higher they will go.  Hey either way, I don't care, if they don't spend the money and problems, it's just more work for me and at 40 a hour, I don't mind.  .  And it's a she so it cuts into her beauty fund I suppose.

Tim

[lucindrea]

if they really care about security you get a PIX plain and simple  ( http://www.nextag.com/Cisco_PIX_501_3DES~3696354z3znz300203zz1z300203zzmainz2-htm )

if you want to give them a "solution" ( although it's not 100% secure ) just grab a linksys BEFSR41 or something along that model line.

[SteveJ34]

I agree with the Cisco PIX solution suggestions.

That's what I have running in my offices, rock solid and full VPN support.

[SOAPboy]

if they really care about security you get a PIX plain and simple

[ChadTower]

With no offense intended to the original poster, if this is the type of tech staff they have at this company, they don't want VPN support.

[maraxle]

Cisco PIX firewalls are junk.  I'd recommend either a Symantec (http://www.symantec.com/smallbiz/gtw/) or Check Point (http://www.checkpoint.com/products/safe@office/safe@office100-200.html) appliance.  If Cisco can't protect their own company from having their code stolen, why would you trust their firewalls?