Good Windows 2003 server firewall

I'm looking to add a firewall for a Windows 2003 web server that's running
IIS, FTP, and SQL Server.

I've looked at Kerio Server Firewall and I like their intrusion prevention
and application hardening features. However the price tag looks to be a
little high, at $600 + subscription fees.

Are there good alternatives that you guys can recommend? Free would be even
better of course. Note that this is a server, not a personal computer, so
no recommendations on desktop firewall/antivirus software. Thanks.

On Fri, 4 Feb 2005 02:38:51 -0800, "Shabam"
<(E-Mail Removed)> wrote:

>I'm looking to add a firewall for a Windows 2003 web server that's running
>IIS, FTP, and SQL Server.
>
>I've looked at Kerio Server Firewall and I like their intrusion prevention
>and application hardening features. However the price tag looks to be a
>little high, at $600 + subscription fees.
>
>Are there good alternatives that you guys can recommend? Free would be even
>better of course. Note that this is a server, not a personal computer, so
>no recommendations on desktop firewall/antivirus software. Thanks.

Free puts you in the IPCop range, assuming you have an extra box
around. Personally I like the SonicWalls, depending on your needs a
SOHO model might be perfectly fine for you.

Jeff

I second Jeff's recommendation. The Sonicwall TZ170 can do a lot depending
on your needs or even a used SOHO3 on Ebay. Then you have a device blocking
all the garbage before it gets to your server. --- Steve

http://www.sonicwall.com/products/tz170.html --- starts around $350.

"Shabam" <(E-Mail Removed)> wrote in message
news:JvmdnUAo8PH50p7fRVn-(E-Mail Removed)...
> I'm looking to add a firewall for a Windows 2003 web server that's running
> IIS, FTP, and SQL Server.
>
> I've looked at Kerio Server Firewall and I like their intrusion prevention
> and application hardening features. However the price tag looks to be a
> little high, at $600 + subscription fees.
>
> Are there good alternatives that you guys can recommend? Free would be
> even
> better of course. Note that this is a server, not a personal computer, so
> no recommendations on desktop firewall/antivirus software. Thanks.
>
>

"Free" usually means a software firewall, and i would recommend a hardware
firewall (or a linux box with firewall software installed might work too).

Other than that i do not have any specific product to recommend. I usually
like D-LINK products.


--
Regards,
Kristofer Gafvert
www.gafvert.info - My Articles and help
www.ilopia.com


Shabam wrote:

> I'm looking to add a firewall for a Windows 2003 web server that's
running
> IIS, FTP, and SQL Server.
>
> I've looked at Kerio Server Firewall and I like their intrusion
prevention
> and application hardening features. However the price tag looks to be a
> little high, at $600 + subscription fees.
>
> Are there good alternatives that you guys can recommend? Free would be
even
> better of course. Note that this is a server, not a personal computer,
so
> no recommendations on desktop firewall/antivirus software. Thanks.

Shabam wrote:
> I'm looking to add a firewall for a Windows 2003 web server that's
> running IIS, FTP, and SQL Server.
>
> I've looked at Kerio Server Firewall and I like their intrusion
> prevention and application hardening features. However the price tag
> looks to be a little high, at $600 + subscription fees.
>
> Are there good alternatives that you guys can recommend? Free would
> be even better of course. Note that this is a server, not a personal
> computer, so no recommendations on desktop firewall/antivirus
> software. Thanks.

Agreed - on a network, protect it at the perimeter, even if you also want to
lock down each server/workstation with a software firewall app. I also like
Sonicwalls. However, to protect a server such as you're talking about, I
don't think $600 sounds like much at all - and even with a sonicwall, you
really should keep your maintenance/support contract current, annually. How
much would it cost you if this server got trashed? Don't skimp on security
products or backups...they will cost you less in the long run than going
cheap & cheerful.