 |
Rich, fatty cream rises to the top of its milk host, making it possible to segregate the two dairy products. If only distinguishing stellar products from average performers were that simple. But with industry hype obscuring the field, it's tough to know what works well and what doesn't. Fortunately, we do quite a bit of the legwork for you - having tested 169 products by October's end.
Here we've compiled the best of the best.
Most of the products profiled here have won a Blue Ribbon or a World Class Award. We give Blue Ribbons to the highest-scoring product in a comparative review, as long as that product earns at least a 7.5 out of 10. The loftier World Class Award goes to products that score a 9.0 or higher. And we've created a new designation - Best of the Tests, for products falling within the top 10%, by score, of all tested this year.
Exceptional servers
Dell took home World Class Awards for a workgroup and a department server, both of which combine great performance and design. Loaded with four 500-MHz Pentium III Xeon processors, the PowerEdge 6350 outpaced all the enterprise-class servers we've tested. [See reviewer's comments and score] It narrowly beat its closest competitors in the CPU and network-performance tests, but secured a comfortably wide lead in the file tests. Dell's second World Class recipient is the PowerEdge 4300, a midrange server designed for shops that plan to start small and grow. [See reviewer's comments and score]
Among the other servers we tested, Compaq's ProLiant 6500 earned an impressive 8.9 score. It supports four 450-MHz Pentium II Xeon processors and tore through our CPU performance tests. Also noteworthy is IBM's four-processor Netfinity 5500 M20. Its 8.7 score was buoyed by perfect 10s for manageability and serviceability. [See reviewer's comments and score for the ProLiant 6500 and the Netfinity 5500]
Security savvy
Network security is at the top of every net manager's worry list. But it's tough to differentiate security vendors and their wares. We know that better than anyone - we've published seven comparative reviews evaluating 43 security products so far this year.
Competition is particularly stiff in the virtual private network (VPN) market. In the spring, we tested 15 site-to-site VPNs used to connect LANs over an insecure network. All were Layer 3 products based on the IETF's IP Security (IPSec) standard. We tested the merits of standardized IPSec VPNs to see if mixing and matching vendors is really possible. Many products couldn't interoperate, but Radguard's cIPro System led the field with top-notch interoperability and top-tier speeds. We tested cIPro System 3.30; Version 4.0 is shipping now. [See review]
The firewall market continues to evolve as vendors add virus and content-scanning features and devise defensive maneuvers to protect against denial-of-service attacks. In our annual comparative review, one of the old-timers took home the Blue Ribbon: Axent Technologies' Raptor Firewall (previously known as Raptor Systems' Eagle). A well-rounded enterprise firewall, Raptor stays competitive with comprehensive security features and easy configuration. Even implementing dual Domain Name System (DNS) servers was simple in our tests. [See reviewer's comments and score]
Easier, more error-proof configuration is also a strong selling point of firewall appliances, one of the latest trends for securing branch-office environments. The appliances combine firewall security with VPN features, require a minimum of adjustments and often include Internet-based services such as mail and Web browsing.
Check Point Software's VPN-1 Appliance won the Blue Ribbon in our comparative review of all-in-one security appliances. VPN-1 Appliance lets you define a single integrated security policy that can be distributed across multiple firewall gateways from a central location. It's the only appliance product we tested that lets you verify your policy set to find inconsistencies or overlapping rules. We reviewed Version 4.0; a new version is due out before year-end. [See reviewer's comments and score]
If you're interested in the added comfort of token-based security, consider Vasco Data Security's Vacman/Server. Interoperability keeps Vacman/Server easy to integrate and manage in your network; the product's Proxy Manager lets it interoperate with almost any firewall and VPN. Vasco's feature-rich Digipass 300 - the server's hardware token counterpart - was the only token we tested that supports the Triple-Data Encryption Standard and optical data entry. We tested Version 3.0, Vasco is currently shipping Vacman Radius Server 4.5 and the Vacman Programmer 1.0 token initialization product. [See review]
As e-commerce takes off, Web site security has become more important than ever. We tested four Web authorization servers designed to lock down your site. Among the access controls these servers provide are single sign-on to multiple networked resources and authenticated access to an e-commerce database. Securant Technologies' ClearTrust emerged as the best in its class, earning a World Class Award for its manageability and extensive authentication options. Netegrity's SiteMinder also scored a World Class Award, thanks to a great user interface and solid authentication protection. [See reviewer's comments and score]
Yet having all the hardware and software in place to protect your network from unauthorized access still doesn't mean you can sleep nights without worry. What if a breach occurs?
Security monitoring and scanning software can provide the backup assurance you need by identifying server vulnerabilities and suspicious user activities, and suggesting corrective actions. The best we tested is BindView Development's Network Security Suite, which won World Class designation. It comprises HackerShield for network scanning and, for server security, NOSadmin for Windows NT. [See reviewer's comments and score]
HackerShield continuously scans for security violations. In our tests, it caught an unauthorized access to a payroll database and told us what ports and protocols were used to get to the host. The RapidFire module updates HackerShield through BindView's Web site as new security threats are discovered and fixes are implemented.
Placing just behind BindView's suite was Computer Associates' eTrust Intrusion Protection (known as SessionWall-3 when it was sold by Platinum Technologies and AbirNet). ETrust's analysis features exceeded all others; the product can actually capture packets and present them in their original formats so net managers can read e-mail or Web pages accessed by users.
Intrusion-detection products pick up where security monitoring and alerting tools leave off. They identify a network breach, stop the attack and even track down the offender. In our tests of four intrusion-detection products, the BlackICE and ICEcap duo from Network ICE earned a World Class Award. Using a pool of agents, BlackICE locates the intruders; ICEcap is the management module that gathers and analyzes information collected by agents to spot wide-scale attacks. [See reviewer's comments and score]
Axent's Intruder Alert also earned a spot among the top scoring products for its sophisticated policy management and extensive protection capabilities.
Performance enhancers
Who wouldn't like to squeeze a few hundred more packets across an existing infrastructure? Network monitoring and design tools can help you improve network performance and predict the effect new applications will have on performance.
For day-to-day monitoring, we tested software that watches the health and availability of networked devices, alerts you to any malfunction and, in some cases, solves problems. Of the six programs we tested, MediaHouse Software's Enterprise Monitor has the strongest monitoring features, and its notification options are plentiful. It can send outage alerts by pager, e-mail and pop-up boxes, and it can produce reports that help establish baselines and identify trends. Corrective features include the ability to reboot a machine running Windows NT. [See review]
You can get more sophisticated network performance analysis with Ganymede Software's Chariot, a software tool for stress-testing network hardware and modeling the behavior of new applications prior to deployment. With World Class accuracy, Chariot zeroes in on the source of a problem using Network Performance Endpoints (NPE) installed on each machine. While we tested Version 2.2, Ganymede is now shipping Version 3.1, which includes support for measuring jitter and an API. The next new version is due out in the first quarter of 2000. [See reviewer's comments and score]
A World Class Award winner and our top scorer for the year, IT DecisionGuru from MIL 3 specializes in network simulation. [See reviewer's comments and score]
With IT DecisionGuru, you can build a model of your network devices and protocols, and test-drive network designs. Flexible drawing tools let you modify the attributes of MIL 3's node and link models to construct your network model accurately. Then IT DecisionGuru predicts network activity and application performance using a combination of packet-by-packet traffic analysis and mathematical equations, making it easier to allocate bandwidth and avoid potential overloads.
Another useful tool for network architects is diagramming and autodiscovery software.
Visio's Visio Enterprise 5.0 can scan your network, determine its topology and depict it graphically. Comprehensive drawing features, an enormous device library, and excellent import and export capabilities secured Visio Enterprise 5.0 a Blue Ribbon. [See review]
In the field, quality of service (QoS) is a performance-enhancing technique built into many of today's switches. AppSwitch 2500 from Top Layer Networks is one of the newest switches equipped with QoS, and this particular 10/100M bit/sec Ethernet switch earned our respect with wire-speed performance, Layer 7 QoS and application-specific firewall features. Though it didn't earn an award, AppSwitch 2500's score of 8.7 makes it a best of the tests. [See review]
Web site maintenance
If your business depends on a functional, user-friendly Web site, make sure you've got the best tools in place to administer your site, manage peak traffic, conduct secure exchanges and keep track of who's visiting.
We tested eight Web servers early this year, and iPlanet Web Server from the Sun-Netscape Alliance (previously Netscape's Enterprise Server) came out on top for its easy installation, simple administration and basic reporting features. A beta version of Lotus' Domino server placed a close second and, when we tested the full version that shipped this spring, it earned a solid 8.7. [See reviewer's comments and score]
When high traffic threatens Web server's performance, load balancers distribute visitor requests to multiple Web servers based on traffic volume and server availability. Resonate's Central Dispatch topped eight other load balancers, providing the strongest performance of the lot, easy installation and good management features. [See review]
If you're ambitious enough to build your own Internet store, you'll need an e-commerce application that can deliver fast, secure transactions. In our tests of five e-commerce products, Microsoft's Site Server Commerce Edition took home the Blue Ribbon for its ease of use, comprehensive features and strong third-party support. It's a complex product, but it gets the job done. [See review]
Another Blue Ribbon winner in the general Web category is WebTrends' WebTrends Log Analyzer, which generates site usage statistics culled from Web server log files. The powerful Log Analyzer is simple to use and doesn't require much attention. Schedulers retrieve log files, analyze data, and prepare and distribute reports. [See reviewer's comments and score]
E-mail assistance
Bogged down by e-mail? Three award-winning products can take some of the pressure off your network and your co-workers.
The first is Mirapoint's M1000 messaging server, designed for large shops that need a single e-mail workhorse to receive and route Internet and interoffice e-mail. We were impressed with its fault tolerance, security and features, including a filter that lets you reject messages from blacklisted domains. [See review]
If the volume of incoming mail is more than your customer service representatives can handle, an e-mail automation product can assume some of the load. Mustang Software's Internet Message Center topped two competitors in our tests. It routes and tracks messages sent to a general corporate address, such as info@yourcompany.com, and replies to common questions. To ensure timely attention to customer queries, IMC can pull back a message if it sits in an agent's message queue too long, and it lets you designate message priorities so important messages receive the fastest service. [See review]
When you're ready to take e-mail automation to the next level, check out Delano Technology's Delano e-Business Interaction Suite, a World Class product. Intended for sites that have complex automated messaging requirements, Delano's server lets you build an e-mail application into an e-commerce site using software components you select. [See reviewer's comments and score]
The customized e-mail application you put together is triggered by specific customer actions and responds with a variety of actions, including parsing the message text, running an external program, saving the customer's data to a file or database, or sending an e-mail. The product's greatest strengths are its flexibility and the ease with which it integrates with e-mail, Web server, directory server and database systems.
Client maintenance
There's no way to avoid the drudgery of software inventory, license metering and software distribution, but using one of our four Blue Ribbon Award winners could make it easier and less time-consuming.
When we tested inventory and asset-management programs, Veritas Software's Veritas WinLAND emerged the leader. Equipped with a huge software database, WinLAND had no trouble identifying even obscure applications. It also provided plenty of hardware details. WinLAND's unbeatable selection of reports and options for exporting those reports kept the process running smoothly. [See review]
For license metering, we were most impressed with Sassafras Software's KeyServer, a sophisticated program in a small package. To help you stay legal, KeyServer tracks user applications, ensures that each copy has a valid license and stops people from running inappropriate or unlicensed software. It's a breeze to install, and its light server requirements are a welcome bonus. [See review]
LANovation's PictureTaker Enterprise Edition emerged the best in our tests of four software distribution products. It delivers superior control over captured files and can work with existing network directory services. Any Windows 95 or 98 station can act as a console. You can install a program from a Web page. [See review]
For mobile users, it's a different story. Sterling Commerce's Connect:Manage specializes in software distribution and asset management for remote systems. Its strengths are support for browsers and proprietary clients, an intuitive channel architecture, and use of native NT groups for authentication. [See review]
Operating systems and more
In the spring, we pitted Microsoft's Windows NT Server 4.0 against Caldera Systems' OpenLinux 2.2, evaluating performance, manageability, connectivity, scalability and security. Microsoft came out on top, thanks to NT's strong user interface, sophisticated Web services and broad Intel-based hardware support. [See review]
But don't get too comfortable with NT 4.0 because when Windows 2000 and its brand new Active Directory arrive this winter, you may find yourself in need of an NT management suite to help migrate your existing domains. We tested three products that promise to purge existing NT 4.0 domains of expired and redundant user names and accounts, consolidate multiple NT 4.0 domains into one, and handle the Windows 2000 migration. For a clean migration with extensive undo options, our vote goes to Aelita Software Group's Aelita Enterprise Suite. [See reviewer's comments and score]
Another frequent cause of operating system headaches is the multitude of NT hot fixes and Service Packs. Keeping up with them can drive you nuts, or you can seek relief with Service Pack Manager from Gravity Storm Software. Service Pack Manager displays a current list of available Service Packs and associated hot fixes, and lets you select the ones you need, download them from Microsoft's Web site and distribute them across your network in just a few simple steps.
Access, access, access
Access to the network. Access to company resources and data files. Access to the Internet. Users want it all.
For providing dial-up access to the network, the product we liked best is Lucent's Max 6000 remote access concentrator. Top-rated throughput, a strong feature set and small form factor put the Max 6000 on top of six other competitors in our review. [See review]
Even after you've made it possible for remote employees to connect to the network, it's not always easy to keep them in the loop. FirstClass Intranet Server from MC2 Learning Systems (which acquired SoftArc in June) delivers a full range of collaboration features - including Internet e-mail, telnet access, discussion groups, real-time chat service and newsgroups - in an easy-to-manage package. FirstClass Intranet Server Gold was released last month. [See review]
When users need to share data files between Windows and Unix platforms, Network File System (NFS) is the typical solution. And Hummingbird Communications' NFS Maestro Gateway won a Blue Ribbon in our tests. It is well integrated with Network Integration Service, a distributed database that lists available resources within NFS, and it's the only product we tested that supports the WebNFS protocol for Web-based resource access and sharing. [See review]
IP address management keeps your local clients connected to the outside world. In our test of five DNS and Dynamic Host Configuration Protocol (DHCP) servers, we looked for products that work well together, translating domain names into IP addresses and assigning users temporary IP addresses as they log on to a network. Shadow IPserver from Network Telesystems worked best. We tested Version 3.023; Network Telesystems is completing work on Version 4.0, which will include additional policy management features, Lightweight Directory Access Protocol support and stronger security. [See review]
Related links
Sullivan, formerly Network World reviews editor, is now a freelance writer in Chicago.
Reviews and buyer's guides
Links to all our reviews and buyer's guides for the past year.
|
 |
| More info on the topics in this article. Click! |
| Ask the experts on the best ways to manage your career. Click! |
We've told you the best, now you tell us the worst.
Click!
The best ideas in networking, ever. Can you match the technology with its inventors. Click!
|
