Small Business Router/Firewall

[KuJaX]

Requirements:

~15 to 25 users that are all PC's (few linux boxes)

This is for a business so high quality (avoid downtime!)

VPN - remote client workers should be able to VPN to gain access to network and network services.

Potentially site-to-site VPN for remote home officer worker(s)

Firewall capabilities

No dedicated IT staff - So should be an initial setup and forget it. Cisco CLI isn't too scary but initial setup can be a pain in the rear.

* We were thinking Cisco ASA 5505 or Sonicwall 190/200/210 series but looking at other options with features that we would use and price. Not super familiar with this small business equipment so looking for some guidance. Thanks!

 

[cubby1223]

I've used Cisco's RV120w many times, it's cheap and gets the job done. IPSec vpn for site-2-site, pptp for remote users. I've placed 6 of them and haven't needed to reboot one yet. Then there is the RV180w which does gigabit and more simultaneous vpn connections. Most reviews on these routers are from old firmwares or people trying to use $500 switches and $500 access points with a $120 router, of course the $120 router doesn't have all the capabilities of a $500 router, but if you don't need it you don't need it. Simplified web interface compared to more complex routers.

Not knowledged much about their built-in firewalls, though.


I don't know, I was just at a business today that had a Zyxel USG 100 that wasn't working properly, there is a big advantage to having a router that is not overly complex if you don't need it, it's easier to troubleshoot or even reset & reconfigure without needing to be an expert in the particular device's interface. I spent 3 hours figuring everything out all the while the internet connection was down in the middle of a business day.

 

[KuJaX]

any other comments (thanks cubby1223 i'll checkout RV120w)

 

[talion83]

Sonicwall devices work well - I've used the TZ and NSA series before, they have some oddities with how they are setup but once you get it they are pretty quick/easy to configure.

You can do Site-to-Site VPN's as well as standard IPSEC, the newer models also support a SSL VPN.

 

[AFurryReptile]

My vote is for Sonicwall. The TZ-205 class should suffice, and it'll run you about $400.

There's no reason to put yourself through the pain of setting up a Cisco device (I don't know if it's gotten any easier though, tbh.) I've been running Sonicwalls at a half dozen locations for about two years, and they're totally solid. More-so than the Watchguard's I've used.

Plus Dell is behind Sonicwall now, so you'll get some longevity there. The unified interface across all devices is pretty nice, too.

Things I'm doing with my Sonicwalls:

- Hub-and-spoke style site-to-site VPN
- SSLVPN web portal, authenticating to Active Directory with LDAP
- WAN failover
- Intrusion prevention
- Specific NAT policies, pinholes for certain IP addresses
- Scheduled reporting, configuration backups