Hi (After a really really long time)...

Just finished watching GoT Season 7, which in my opinion is one of the most poorly written and directed season of GoT. I just hope this show, does not end like the way Dexter (not the animated series) did....bad...bad...

Watching reruns of Modern Family, Top Gear (The original ones) on Kodi

Watching (and following) talks by Prof. Richard Wolff (Democracy @ Work), on Youtube

Various speakers on TED/TEDx

Also, starting following this really outrageous, weird Comedy reality show, since Jan 2017... It's called the Trump Administration... However, I hear rumours, that it may just get canceled...

@scottalanmiller said in SMB firewall options:

@Veet said in SMB firewall options:

For 20 users or so, I'd stick with an all-in-one box (UTM) ... Sophos, Sonicwall, pfsense ... all would work, just as well

We've had bad luck with SonicWall. Unrealible, breaks things, hard to manage. If you are considering SonicWall, get Sophos instead.

Over here, Sophos technical support sucks bigtime ... same issue with WatchGuard ...

Infact,years back, we pushed a lot of Watchguard UTMs .. When Watchguard started-off, the support was pretty decent .. Over time, it just went to the dogs , which is when we shifted to Sonicwall (this was before Sophos made an entry) ...We've faced very few issues with Sonicwall, and whenever we did, the tech support was always great ...

We deployed quite a Sophos appliances (SG series mostly), in the recent past, and we did face quite a few issues , but thats okay ... What is NOT okay, is the lackluster support ... Terrible !! One of the worst support, I've seen in recent times .. It's rather unfortunate, when a good product is marred by poor support ...

@Jason said in SMB firewall options:

@wrx7m said in SMB firewall options:

I understand that there are many pieces to a UTM. That is why I am asking what, specifically, SAM considers the good stuff? The good stuff could mean brand, technology type or both.

Juniper, WatchGuard, Checkpoint are usually considered the top contenders in UTM market...

but be prepared say a Junpier SRX5600 base model starts at $30,000.

Some of the check point models start at $150,000.

Watchguard is on the lowerend and I think their most expensive unit is only $50,000.

I've used/deployed quite a few(This was years ago) Whatchguard appliances, and I really hated the interface and more so, the support .. Wouldn't rate them as "Top Contender" ... Checkpoint & Juniper - Yes ...But, these are for Enterprise level ...

For 20 users or so, I'd stick with an all-in-one box (UTM) ... Sophos, Sonicwall, pfsense ... all would work, just as well

Say, anyone heard of worked with Crossbeam, in the past ... ? I don't think the brand/company exists anymore ... but just wondering ..

I think, for ~20 users, most of what you've listed would work (Although, I'm not a big fan of Cisco, and Watchguard)

Apart from DNS services, I haven't used any Cloud based security service...

@scottalanmiller said in Iran Creates Domestic Internet:

And, thus far, I've not heard that they are removing the old Internet, just offering a new one.

I'm guessing, that would be eventual goal (??) ...

@scottalanmiller said in Iran Creates Domestic Internet:

@zuphzuph said in Iran Creates Domestic Internet:

Where control is key this fits like a glove...

Exactly. And it's not just control over what people can access, it's also protecting them from outside bad actors, knowing where attacks come from, etc. There are lots of good points to it, not just questionable ones. And, thus far, I've not heard that they are removing the old Internet, just offering a new one.

Yep, there's a lot of crap, out there on the internet, and if you want to keep that away, then it's a good option .. But ofcourse, there's a flip-side to this, as pointed above

If you have between 5-9 years of experience in IT security, then look into CISA/CISM, CISSP, or even SANS GIAC .. The SANS certification path does not come to mind, when we talk of InfoSec /IT Sec certification, but they are highly underrated, and is more hands-on ...

This seems uber useful ... Many Thanks SAM .

How do you recommend installing it, for production use ? As a VM, to remote into other VMSs or end-points ?

Interesting ...

I say to Microsoft "Release Microsoft Office for Linux, and then talk away all you want"