[146338] in North American Network Operators' Group
RE: Firewalls - Ease of Use and Maintenance?
daemon@ATHENA.MIT.EDU (Nathan Eisenberg)
Wed Nov 9 13:11:27 2011
From: Nathan Eisenberg <nathan@atlasnetworks.us>
To: "nanog@nanog.org" <nanog@nanog.org>
Date: Wed, 9 Nov 2011 18:10:19 +0000
In-Reply-To: <4EBA72ED.2010909@gmail.com>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
> An important feature lacking for now as far as I know is content/web
> filtering especially for corporates wishing to block inappropriate/time
> wasting content like facebook. Addition of this would place it a par
> with the best like Sonicwall and Fortinet.
=20
At a previous employer, we utilized a Fortigate 200B to replace multiple bo=
xen (two firewalls, barracuda, etc). I found it utterly underpowered for t=
he featureset (even with much of it disabled), and its ability to utilize m=
ultiple WAN connections was extremely limited. I realize this is only a lo=
w-to-midline example of their lineup, but I was consistently surprised by h=
ow easy it was to overwhelm the device, especially given the price-point. =
The only thing I remember liking was the SSL-VPN functionality, but we coul=
dn't use it because there was no Vista support at the time, so that was dis=
abled too.
Now, perhaps they've made progress, or their higher end devices perform bet=
ter - just sharing my experience with the 200B.
Nathan