Firewall is very general, but be not everything needed is ready. Respecting safety refines an analysis, the firewall that is based on gateway is best, after close therewith is condition detects firewall, but condition detects the safe processing function that firewall provides is the weakest. manageable nevertheless sex, order is apropos and contrary: Condition detects firewall has ” of sex of first-rate “ Plug and Play, applied representative firewall is the weakest. So how do you decide the firewall of which kinds of type suits your network? Which kind of can be optimal balance achieved between safe, function, cost and manageable sex? 　

Want to solve afore-mentioned problems, might as well the analysis applies an environment below 3 kinds: Small-sized office, demand is general large and medium-sized the office, and the large office with complex demand. 　

Small-sized office. The user that small-sized office should run and machine are compared apparently little. They make punching bag not quite easily normally. And the Internet that needs to visit thimbleful only serves: Email, Web and need sometimes shed media. Below this kind of case, almost any firewall can be competent. Because say commonly, office scope is less, user number is less, the risk that face is lower also. 　

Accordingly, small-sized office, simple data bag filters firewall is enough, for example a lot of DSL or wire cable road by implement those firewall that take oneself randomly. The broadband route that includes the company such as D-Link, 3Com, Netgear and Linksys to manufacture among them by implement. Additional, the firewall such as the GNAT of company of science and technology of the Firewall 100 of the Firebox SOHO of WatchGuard, Symantec, Global, NetScreen and SonicWall SOHO applies to this kind of environment completely also. Check Point and Cisco offer the FireWall-1 of small-sized office version and PIX respectively, nevertheless the price wants a bit more expensive. 　

Demand is general large and medium-sized the office. “ general ” is to point to basic or standard Internet serves. Of course, the definition of “ general ” can change as time, do not pass with respect to current and actual application word, it includes following service: Web, email, media drifting type and a few the file is transmitted and terminal is visited. 　

Almost any functions not confine filters at simple static state firewall can satisfy this kind of requirement. Applied representative firewall also can be competent this task, the dinkum now application firewall that is based on gateway is very few nevertheless. The firewall of a lot of main brands is to mix model, be like CyberGuard, Firebox, PIX, NetScreen, Sidewinder, Raptor and FireWall-1, below some circumstances, allowing an user to choose representative, condition to detect still is trends filters. If be configured,let serve use safety more to act as agent as far as possible, afore-mentioned an any firewall are very appropriate. Email ought to use a representative from beginning to end, firewall ought to allow the email server that email pass in and out appoints only. To all Web of Internet from interior the visit should execute a representative. If commonly used service does not have a representative, use trends namely condition filters also tweak of can yet be regarded as. 　
Previous12 Next