UTM

Security as a network function, not such a good idea

Cisco Subnet — Mon, 17 Nov 2008 13:34:51 -0500

A researcher says product tests indicate that adding security functions into your Cisco network can kill network performance. NSS Labs will publish its findings about firewalls, IPS and UTM early next year, but NSS Labs CEO Vik Phatak says there are clearly performance drawbacks to using the Cisco security functions in routers and switches.

Read more

Cyberoam - UTM Firewall

Fri, 10 Oct 2008 06:12:28 -0400

If you have a small company and need an all in one solution that I would look at something like unified threat managment also known as a UTM.Cyberoam firewall is the only UTM firewall that embeds user identity in firewall rule matching criteria, enabling enterprises to configure policies and identify users directly by the username rather than through IP addresses. Cyberoam’s powerful hardware firewall provides stateful and deep packet inspection, access control, user authentication, network and application-level protection.

Read more

Guardium is the best

xmachine — Wed, 26 Mar 2008 02:06:17 -0400

Guardium is the best when it comes to DB monitoring. I've worked on my self recently. It could be deployed as inline-Fw to actively protect against unwanted DB queries. Or sniffing mode, which will monitor and report. I agree with you that Guardium is not cheap, but give these guys the task to protect your financial data and see the results. Also contains PCI compliancy templatee. http://extremesecurity.blogspot.com

Firewall obsolescence

stiennon — Wed, 19 Mar 2008 08:29:13 -0400

For too long I have been gagged by my position as head of marketing for a vendor*. My fellow bloggers had a tendency to call “marketing foul!” when I used my blog to propound my beliefs. Now that I am once more a free agent there is some ground to be covered.

Let me reminisce for a minute on the history of the firewall industry through the eyes of well, me.

Read more

O2 Security

Sat, 15 Mar 2008 02:47:53 -0400

Great article, I came across a new UTM manufacturer that offers the best of both worlds. All applications are included in the hardware cost and their are zero ongoing subscriptions as they utilize snort, clam and spam assassin in combination with their own technologies. I bought mine on a "try and buy" and found the spam to be superior to my email gateway. O2 Security is the company, I purchased their U100. www.o2security.com

RE: How we tested UTM firewalls

Tue, 11 Dec 2007 14:51:17 -0500

I've combed thru the content and can't seem to find how many interfaces Joel used to max out the test bed for the IBM and Juniper numbers...2.8 over four as opposed to 2.8 over six or eight is a big deal...

RE: Check Point VPN-1 UTM Gateway

meatpieandtatters — Mon, 03 Dec 2007 22:54:12 -0500

Big freaking deal! Checkpoint introduces another over-priced and over-complicated piece of technology and we're supposed to be excited? There are at least a dozen other solution providers offering a comparable product and a much better price point. And more importantly, every other vendor offer better support than Checkpoint. They're holier-than-thou haughty attitude may have gotten them to their past prominence, but now it only hastens their fall from grace.

RE: UTMs require routing for flexibility's sake

Thu, 15 Nov 2007 13:43:53 -0500

what was missing in cisco utm for routing support?

UTM (Unfied Threat Management)

Inbox — Tue, 25 Sep 2007 16:39:15 -0400

UTM brings together three main ideas: multiple threat mitigation features, integrated on top of a mature firewall, deployed in an appliance form-factor. In 2004, International Data Corp. research analyst Charles Kolodgy first described a UTM appliance as any single device comprising firewall, VPN, IDS or IPS, and antivirus services. UTM appliances resonated strongly with managers commanding small and medium-sized business (SMB) networks, where UTM firewalls -- called such because the firewall is the undisputed lynchpin of the UTM product -- have quickly become a standard offering from every vendor.

Read more

Adaptive Security Appliance key to Cisco turnaround success in firewall market

Brad Reese — Sun, 11 Mar 2007 04:57:35 -0400

By the end of 2005, Cisco was getting its butt kicked in the firewall market, even though the Cisco PIX firewall had long been a familiar name. According to The NPD Group/Distributor Track, which monitors the U.S. dollar volume sales of high-tech products through certain major distributors, Symantec held a 55.6 percent share of the firewall segment at the end of 2005, compared with Cisco's 17.8 percent. Dark Reading Risky Business reports that solution providers point to two key events as the impetus for what amounted to a dramatic turnaround in 2006. First, in June 2006 Symantec said it would decrease its investment in security appliances, including the Symantec Gateway Security appliance line, which includes firewall capabilities. Second, in July 2006 Cisco added two new models to its Adaptive Security Appliance unified threat management series, which also includes a firewall. In the wake of these events, Cisco's U.S. dollar volume share for firewalls leapt nearly 20 percentage points in 2006 to 37.7 percent, overtaking Symantec's results, which slipped 21 percentages points to 34.6 percent, the NPD data shows. Check Point Software Technologies is the third best-seller with a 15.2 percent share. "Cisco's SMARTnet support is another reason behind Cisco's recent firewall market gains because customers like having an entire organization that works with them to support complex solutions," said Gary Berzack, CTO of Cisco partner eTribeca, New York. Steve Pettit, president of Blue Spruce Technologies, Greenland, N.H., is seeing "a lot of customers" upgrading from Cisco's PIX firewall to the ASA, and he thinks the ASA series is also taking market share away from Cisco competitors including Symantec and Check Point. Migration Guide from Cisco PIX 500 to Cisco ASA 5500 Series "A big reason for Cisco's firewall market leadership is the trend toward companies looking to consolidate multiple functions within a single appliance, which has helped fuel sales of the ASA line," said Steven Reese, security practice manager at Nexus Integration Services, a Valencia, Calif., solution provider.

Firewalls
Top 3 Best-Sellers*

	2006 MARKET SHARE	MARKET-SHARE CHANGE OVER 2005
Cisco Systems	37.7%	+19.9
Symantec	34.6%	-21
Check Point	15.2%	+5.7

* RANKING BASED ON 2006 REVENUE SHARE; HIGHLIGHTED VENDOR GAINED GREATEST SHARE FROM 2005 TO 2006
SOURCE: THE NPD GROUP/DISTRIBUTOR TRACK (INCLUDES GTDC DATA)

You may find of interest the Miercom Lab Test comparing the Cisco ASA 5520 Adaptive Security Appliance against the following Unified Threat Management (UTM) security appliance competitors: Check Point VPN-1 Pro, Fortinet FortiGate 1000 and Juniper Networks NetScreen-208. Do you have an interesting story about how the Cisco ASA has had a dramatic impact on Cisco's fortunes in the firewall market? http://www.BradReese.Com

Read more