Looking for a Firewall for a Small Business

A cheap D-Link DFL-700 can do that and still provide you with a real LAN and real DMZ network.

The DFL-700 can block all web access (or any other) and then permit you to white-list by domain name, IP, or even partial names like

*.microsoft.com/* and the white-list will override the black-list.

It also supports more than 1 public IP, can work in routed mode or NAT mode, has DHCP services for the LAN and DMZ that allow for different networks even...

formatting link
We use this at a small doctors office where they are only permitted (nurses and administration) to access a couple approved sites. We also setup a DHCP reservation for the two doctors and then setup a different HTTP rule to allow those two IP addresses full (unblocked) web access.

It's a nice unit for a small shop.

Oh, and it can block downloads from the web too - based on file extension.

Reply to
Leythos
Loading thread data ...

Hi Bryan,

AmiWall

Reduce employee personal Internet usage during the working day.

Increase respect of your corporate Internet usage policy, provide open and honest feedback such as WebMail use during work hours.

Plugs into an existing proxy or firewall such as Squid.

formatting link
Sincerely,

Brad Reese Cisco Tools

formatting link

Reply to
www.BradReese.Com

Did you see the check point solution? Today they have a firewall for small business, safe@. this firewall have a webfiltering service with categories...I have this firewall installed at some customers and it's work very well. If want more information you can access this url:

formatting link

Daniel

Bryan wrote:

Reply to
Daniel

Daniel,

I looked into this and it looks very promising. Since the firewall has antivirus and antispam capabilities, is it safe to not have antivirus software on the machines behind it? Do the web filtering services support white listing (block all sites, only allowing ones on a list)?

Thanks!

url:

formatting link

quoted text -

Reply to
Bryan

That would very foolish with users that will stick a CD or diskette into a drive that can have a virus, with it spreading to the machines on the network. The FW and its AV that's protecting from Internet access will most likely be nowhere to be found in a LAN situation.

Reply to
Mr. Arnold

Cabling-Design.com Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.