which is better software firewall or hardware firewall?

[mbvales]

---

anybody can help me? im planning to install linux firewall on our network..but the owner wants hardware firewall like cisco..how can i convince him that the software firewall is better than the hardware.tnx

[Tamblot]

The reliability of protection offered by Software firewalls would primarily depend on the expertise of the person who will customize the Linux OS. For large enterprise, the big investment would be on the server (RAID, processors, memory, LAN interfaces, etc.). Not to forget the level of redundancy that you want to implement. Do note that Linux is just an operating system and its performance would depend on the hardwares that you provide.

For hardware firewalls such as Cisco, the box still has an IOS. One of the advantages of hardware firewalls is the ASIC modules. These modules perform tasks such as VPN and IPS and relieves the box's main processor from performing such functions. Cisco has a new product for security. It's the Adaptive Security Appliance (ASA).

Heard also of Cisco Self-Defending Network? Its a total network security as far as ive known. The firewall, router and switches play a role in implementing the network security.

If you need assistance in implementing network security, just pm me.

[mbvales]

Thank you very much for that great information. Basically, I have managed 9 servers as of now and i am using supermicro 4U rack type servers with the following specs: 3GB RAM each server, 120GB SATA HDD raid1, 2.8Ghz Xeon Dual Processor. I have firewall already on my ISA server at the same time my proxy server but still im planning to install a separate lightweight server for my linux firewall. Have you heard about monowall? one of the product from FreeBSD this is the software that im going to install on my firewall though there is also smoothwall which im planning to test.I have never try any cisco hardware firewall yet though I have cisco hardware switch w/ VLAN configuration for security between my servers, WiFi, WAN & my private LAN.

[Tamblot]

Ok. It seems you feel more at home with the software firewalls. Go for it bro!

Though they say that there is no secured network for a determined hacker, my answer to that is even a determined hacker can get nothing from a paranoid security administrator. :mrgreen:

[r0mm3L]

kanus.a mana gi launch ang ASA

if its a new cisco product derfore it hasnt been tested by evil comp savvys

[Tamblot]

ASA was just available late last year. Maybe this february, we can get hold one of that and have it tested.

[r0mm3L]

it has to be software and hardware thou, software cannot exist without hardware
i think firewall hardwares are computers concentrating on security as their main task. just like routers they are just like a computer, with cpu and memory ect. concentrate lang cla sa routing.
you can use desktop computers but they have some other tasks to perform.

i think

[mbvales]

please visit this site http://www.smallbusinesscomputing.co...le.php/3103431

about Firewall Debate: Hardware vs. Software