Network World
Tuesday, May 13, 2008
DNSstuff.com
Get information about your IP
IP Information
50+ On-demand DNS and network tools
  |  

Best Products: Security infrastructure finalists

< Back to the Security Infrastructure winner

F5 Networks' FirePass 4100 and Nokia's Secure Access System 500s earned finalist spots for their performances in our SSL VPN test. The FirePass got high marks for providing easy, secure remote access to users, Snyder said. The product is a perfect fit for many environments, such as in cases of employee remote access where users are fully or partially trusted, he added. The Nokia SSL VPN impressed Snyder with its fine-grained access control. "If you're a security and control freak, Nokia's strategy should hit your comfort level," Snyder wrote. The SSL VPN should be especially interesting to enterprises that have settled on Nokia firewalls, with commonality to configuration and ongoing management parameters. Unlike most SSL VPN vendors, Nokia offers a heavy suite of services on the underlying appliance, such as IPSec, clustering and dynamic routing.

Check Point's VPN-1 Edge W touts wireless access support, better performance and a new print server. Ties to Check Point's wider VPN product line also was a plus for this product. We tested VPN-1 Edge W with a Check Point NG firewall and were able to bring up a tunnel within a few seconds. An elegant feature of Check Point's overall VPN architecture is the dynamic pushing of network configuration, meaning that the Edge W doesn't have to be configured to know anything about the central VPN server besides its IP address and how to authenticate.

SonicWall's Pro 1260 Enhanced earned finalist status for appropriately combining the brains of SonicWall's popular TZ-series firewalls with the body of a 25-port managed 10/100Mbps switch, Snyder said. Snyder also liked the revamped SonicOS software, which lets each firewall port be configured with its own security zone. You can set up an individual firewall for every system in a demilitarized zone, preserving the DMZ zone even if any one system sitting behind the firewall is cracked.

< Previous story: Juniper's Secure Access SSL VPN appliance

Next story: Symantec's DeepSight Alert Services >

React: Give us your thoughts on the issues here.
Start a public discussion with other Network World users on this article (scroll up to send this article to a colleague).
Log In | Register for an account (Why you should)

Note: Register to have your user name appear; otherwise your comment will show up as "Anonymous."

*Anonymous comments will only appear once they are approved by the moderator.

Copyright 2008 Network World Inc.

Related links

F5 Networks to tackle file-sharing WAN optimization
02/22/06

Review: Test shows VoIP call quality can improve with SSL VPN links
02/20/06

Quality concern delays Nokia launch with NTT DoCoMo
02/22/06

SonicWall buys MailFrontier for $31 million
02/08/06