Firewall Fun, Routers etc.

firewalls and routers, what do I need to setup a network.

[robbielockie]

Hello.

I have recently moved in to a new office and its part of a shared building.

My office has several network points which are connected to my own switch down stairs, which is then connected to what I assume is a (ADSL)router with a built in firewall, this firewall protects the entire building from suspicious activity.

However, I do need a firewall between my switch and and the buildings network.

Is this something I could use?

<edited>

or do I need a dedicated firewall box?

Or perhaps a software firewall will do on our windows 2003 server?

ANy advice and recommendations would be greatly apprecaited.

[edited by: rogerd at 10:36 am (utc) on Sep. 28, 2004]
[edit reason] No URLs please... [/edit]

[robbielockie]

A second thought, that I might get lectured for posting in the webmaster hardware forum just sprang to mind.

I did think, though that most webmasters are quite knowledgeable when it comes to network hardware ;)

[coopster]

Welcome to WebmasterWorld, robbielockie.

I guess it all depends on who is in/on your building's network and whether or not they are trusted. Perhaps you want to use a router/firewall rather than just a switch? Then, however, you have the whole physical security layer in that if you have access to the "lower-level" then who else in your building does?

You know, another option may be to use a single connection upstairs in your office for internet access and at that point install a wireless router/firewall. This may help overcome some of the physical security issues.

[ogletree]

The problem inside of a building is that they can just come into your office at night from the drop celling normaly and connect a network cable directly into your switch behind your firewall. Or they can just break in and steel your computers. It all depends on your level of paranoia. Just get a noraml direwall. I don't know where you live but you can get a Wireless Router Firewall and a wireless adapter for $65 at SAMS that way you can have wireless in the future if you like. Also you can get lots of cheap firewalls on that big autction site. There is not reason to get a big fancy firewall. The only reason you would need one of those is if you had a lot of traffic and you needed it to handle that much. They also offer VPN. Because you are probably already using NAT there is very little you can do with a big firewall. If you can get a real IP you can do more stuff with a firewall. The best way to find out is to get on the internet and go to [whatismyip.com...] and if your current IP matches what that site says then you have a real IP.

Some of us are ex network guys.

[robbielockie]

Thank you so much for yoru replies guys!

We are in a serviced offce space, which bascially means we are sharing with loads of other companies.

We are connected via UNIX server which has a built in firewall, which in-turn is connected to the switch in the server room.

This switch is then connected to the primary firewall and the ADSL/DSL router and then the INTERNET.

Our problem is that we do not have the technical knowledge to maintain the server, so we are going to get a windows server... this then makes the software firewall redundant.

We need some bit of kit to go between our computers and the rest of the building?

Make sense?

[ogletree]

Like I said just get a cheap wireless router.(it has a firewall) That way you can use wireless in the future if you want to. They are actualy cheaper than just a router/firewall. Linksys makes both and they are pretty good.