[olug] Security Appliance Suggestions?

[Curtis LaMasters]

On Wed, Jan 19, 2011 at 11:18 AM, Jeff Hinrichs <jeffh at delasco.com> wrote:
> While not an appliance in the off-the-shelf sense, nor a UTM, pfSense
> http://www.pfsense.org/ and a box with two or more nics and you are darn
> close. (vpn, firewall, and more)
> No a/v, no mail scanning, but running that all on one box is a gigantic
> choke point, both engineering wise and business.    Most UTM, imho, are buzz
> word compliant hacks.
>
> Your desktop a/v (there is no such thing anymore -- they all include f/w and
> scanning, web/mail) already provide most of the other services.  Beyond
> that, staying patched and knowing your patched across the enterprise is more
> important than another layer of email/web scanning.
>
> Situation always dictates and there are lots of variables in the equation
> but for us, any UTM that would handle our needs had astronomical upfront and
> on-going costs.  So we pieced together our own.
>
> -Jeff

2nd vote for pfSense.  If not pf, then Cisco ASA.

Curtis LaMasters
http://www.curtis-lamasters.com
http://www.builtnetworks.com