SMB firewall options
-
I like to filter by DNS. I use DYN's internet guide.
-
Then have the firewall only allow outgoing DNS queries from my DNS servers.
-
Used pfSense. A bit over a decade. Never failed, expect for some broken flash drive once.
Snort is available for pfSense.
-
@coliver said in SMB firewall options:
So... are you looking for a firewall or a UTM? If you're looking for a firewall take a look at the ER-Pro line from Ubiquiti. There are a lot of people that use them around here that love them.
I've only ever used their WAPs and routers. I'll have to check that out.
-
@brianlittlejohn said in SMB firewall options:
I like to filter by DNS. I use DYN's internet guide.
Filtering by DNS is good too. You could setup an internal proxy with something like Squid or Snort to block specific things.
-
Untangle.
-
Only things I use anymore...
- Ubiquit for nearly everything.
- Sophos if they demand UTM but don't have the resources for the good stuff.
- Palo Alto if they really need edge security.
-
@zuphzuph said in SMB firewall options:
Untangle.
You've gotten to mess with that more than I have. Have you checked out the content filtering and such? Does it have a VPN client? I couldn't remember if OpenVPN is available on that or if I'm thinking of pfSense...
-
@coliver said in SMB firewall options:
@brianlittlejohn said in SMB firewall options:
I like to filter by DNS. I use DYN's internet guide.
Filtering by DNS is good too. You could setup an internal proxy with something like Squid or Snort to block specific things.
For inbound filtering by country: https://doc.pfsense.org/index.php/Pfblocker
Reduces port scanning and such by a huge amount
-
When building our own, for the lab, we use VyOS on enterprise server hardware. Basically a massive EdgeRouter.
-
@BBigford said in SMB firewall options:
@zuphzuph said in SMB firewall options:
Untangle.
You've gotten to mess with that more than I have. Have you checked out the content filtering and such? Does it have a VPN client? I couldn't remember if OpenVPN is available on that or if I'm thinking of pfSense...
pfSense got both, client and server.
-
@BBigford said in SMB firewall options:
@zuphzuph said in SMB firewall options:
Untangle.
You've gotten to mess with that more than I have. Have you checked out the content filtering and such? Does it have a VPN client? I couldn't remember if OpenVPN is available on that or if I'm thinking of pfSense...
OpenVPN is on nearly everything.
-
@scottalanmiller said in SMB firewall options:
@BBigford said in SMB firewall options:
@zuphzuph said in SMB firewall options:
Untangle.
You've gotten to mess with that more than I have. Have you checked out the content filtering and such? Does it have a VPN client? I couldn't remember if OpenVPN is available on that or if I'm thinking of pfSense...
OpenVPN is on nearly everything.
Then maybe I'm thinking of both.
-
@BBigford said in SMB firewall options:
@scottalanmiller said in SMB firewall options:
@BBigford said in SMB firewall options:
@zuphzuph said in SMB firewall options:
Untangle.
You've gotten to mess with that more than I have. Have you checked out the content filtering and such? Does it have a VPN client? I couldn't remember if OpenVPN is available on that or if I'm thinking of pfSense...
OpenVPN is on nearly everything.
Then maybe I'm thinking of both.
EdgeOS and VyOS have it too.
-
@BBigford and FFS you still have not answer this quesiton.
@coliver said in SMB firewall options:
So... are you looking for a firewall or a UTM?
-
Because your title only says firewall. but you are talking about UTM stuff in your post.
-
@JaredBusch said in SMB firewall options:
Because your title only says firewall. but you are talking about UTM stuff in your post.
Fixed. I know it's kind of apples to oranges since one includes the other and drives up the price substantially.
-
@BBigford said in SMB firewall/UTM options:
@JaredBusch said in SMB firewall options:
Because your title only says firewall. but you are talking about UTM stuff in your post.
Fixed. I know it's kind of apples to oranges since one includes the other and drives up the price substantially.
And generally we don't recommend UTMs. High cost, low results.
-
@BBigford said in SMB firewall/UTM options:
@JaredBusch said in SMB firewall options:
Because your title only says firewall. but you are talking about UTM stuff in your post.
Fixed. I know it's kind of apples to oranges since one includes the other and drives up the price substantially.
More like apples to bushels. They aren't different things, one is a big thing made up of the other.
-
@scottalanmiller said in SMB firewall options:
@BBigford said in SMB firewall/UTM options:
@JaredBusch said in SMB firewall options:
Because your title only says firewall. but you are talking about UTM stuff in your post.
Fixed. I know it's kind of apples to oranges since one includes the other and drives up the price substantially.
And generally we don't recommend UTMs. High cost, low results.
Fixed again. I'll just leave UTM out of it. I was talking with someone today about breaking out services since most UTMs I've used try to do everything in each category the best within one device, but seem to end up being mediocre in every area. Instead of just breaking out the services and focusing on one thing, and doing that one thing really well.
Until we got up into the +$20k UTMs. Then they were okay.
