FIREWALL COMPARISON GUIDE

Vendor URL Product Name Product Type Product Description Price (Add-ons and licenses may cost extra; call for accurate quote.) Where to Buy Comments

Check Point

Checkpoint.com

Connectra Web Security Gateway 1250

Security Appliance

Web Security Gateway provides both SSL VPN and integrated Web security as a single, unified solution. By combining both connectivity and security in a single solution, Connectra allows organizations to deploy SSL VPNs safely and securely.

$18,203

http://www.bestbuybusiness.com/

Provides remote users with secure access to Web and client/server applications through a Web browser. Integrated Server Security protects servers from attacks with Application Intelligence and Web Intelligence. Adaptive Endpoint Security inspects remote endpoints for spyware and grants access rights based on security and trust of endpoint devices. One-Click SSL Extranet enables quick and easy extranet setup without requiring complex server or network configuration. Firewall protection, VPN, Stateful Packet Inspection (SPI), manageable These purpose-built appliances provide multiple integrated security and networking services, advanced application-aware firewall services, VoIP and multimedia security, site-to-site and remoteaccess IPSec VPN connectivity, intelligent networking services and flexible management solutions. Stateful inspection firewall, Easy VPN Server, site-to-site VPN, intrusion protection, AAA support; unrestricted 6-port FE bundle, unrestricted software, 6 10/100 ports, 128MB RAM

Cisco

Cisco.com

PIX515E

Security Appliance

This market-leading security appliance delivers enterprise-class security for smallto-medium business and enterprise networks, in a modular, purpose-built appliance. User and application policy enforcement, multivector attack protection, and secure connectivity services are supported.

$5,199

http://www.cdw.com

Citrix

Cirtrix

Citrix Application Firewall Enterprise Edition

Citrix Application Firewall offers protection against dangerous Web application threats. It delivers high-performance security for both Web and XML Web services applications, and full protection against the theft of Security Software; Also sensitive enterprise and customer data. The available bundled with Enterprise Edition adds advanced learning security appliance. capabilities to protect against more sophisticated application attacks, provides protection against attacks that target specific user sessions, and provides more granular control over application security policies. Market-leading Internet security appliance claims to consolidate all major security functions in one system including embedded anti-virus, anti-spam, Web filtering, traffic anomaly detection, IDS/IPS, and a host of other critical protective features. High performance security platform can be deployed as a combination firewall and routing device. Ideally suited for regional/branch offices, medium businesses and service providers that want a security platform to protect their WAN and high speed internal networks.

Contact Citrix

Contact Citrix

Citrix Application Firewall is based on a positive security model that ensures correct application behavior. Application behavior deviating from the model is treated as potentially malicious and is blocked. Deep stream inspection technology performs bi-directional analysis of all application traffic, complete header and payload inspection, full application parsing, semantic extraction of relevant application objects, and traffic sessionization.

Secure Computing

SecureComputing.com

Sidewinder G2 510D

Security Appliance

$11,900

http://www.esecuritytogo.com/

600-700 users; Secure OS; application layer firewall (50+ protocols); proxy-based defenses; intrusion prevention system and automated response; Gateway anti-virus, anti-spyware, anti-spam, anti-fraud solution; Web content/URL filtering, blocking, and reporting; instant messaging & P2P blocking

Juniper Networks

Juniper.net

Netscreen SSG550 1GB

Security Appliance

$7,875

http://www.techdefenders.com

Unified Threat Management (UTM) security features including Stateful firewall, IPS, Antivirus (Anti-Spyware, Anti-Phishing, Anti-Adware), Anti-Spam, and Web Filtering to protect the network from attack.

Microsoft

Microsoft.com

ISA Server 2006

Security Appliance

standard edition With a hybrid proxy-firewall architecture, $1499 per processor; deep content inspection, granular policies, enterprise edition and comprehensive alerting and monitoring $5999 per processor; capabilities, ISA Server 2006 makes it easier enterprise edition 25to manage and protect your network. processor pack $75,000 Combines multiple network and security functions including a deep packet inspection firewall, IPSec VPN, layered anti-virus, antispyware, intrusion prevention and Web content filtering into a single integrated appliance that is easy to manage and deploy. Optimized for advanced networking and ultra reliable operation, they are designed for mission-critical data and network communication deployments.

http://www.cdw.com/

Runs on a variety of hardware platforms, including HP's ProLiant DL320 Security Server

SonicWall

Sonicwall.com

SonicWALL PRO 3060

Security Appliance

$3,036

SonicOS provides policy-based firewall management over complex deployments and enables complete control over network traffic and application usage. Features include: fast, secure VPN access, highly http://www.californiacomputer.com/ reliable network connectivity, powerful performance, deep packet inspection engine, real-time gateway anti-virus, anti-spyware, antispam and intrusion prevention, comprehensive application control and flexible, scalable configurability.

Symantec

Symantec.com

Client Security 3.1

Security Appliance

Proactively protects your business from viruses, spyware and hackers. The antivirus and client firewall operate together to eliminate malicious code and block online intrusions. Integrated graphical reporting, centralized management, and automatic downloads of protection updates make it easy to defend your desktops, laptops, and file servers against known and emerging threats.

$70 per user

http://www.shop.com

Integrated security technologiesincluding antivirus, antispyware, client firewall, and intrusion prevention. Generic exploit blocking enhances client intrusion prevention capabilities against unknown threats. Default client firewall configurations minimize implementation efforts while stopping the majority of threats. Integrated Web-based graphical reporting and centralized management from one single console.

WatchGuard

Watchguard.com

Firebox X 1250e UTM Bundle

Security Appliance

Ideal for medium or distributed enterprises requiring the utmost protection and remote connectivity. X Core Unified Threat Management (UTM) solutions integrate stateful packet firewall, VPN, true Zero Day attack prevention, anti-spyware, anti-spam, anti-virus, intrusion prevention, and URL filtering on a single appliancesignificantly increasing protection from blended network attacks.

$5,831

http://www.buy.com

Stateful packet firewall, deep application inspection firewall, application proxies, HTTP, SMTP, FTP, DNS, TCP, DoS and DDoS prevention, progressive DDoS prevention, protocol anomaly detection, behavioral analysis, pattern matching, fragmented packet reassembly protection, malformed packet protection, static blocked sources list, dynamic blocked sources list, time-based rules.

Copyright 2007 - ITSecurity.com