UTMs Recommendations
Hi Skunks, So I have been looking at UTM devices/options for the last three days. I have come across this document - http://goo.gl/8TojIt, but I still have to ask you to chip in with your practical experience. The only luxury I've had is that Cyberoam have web-based simulators for their products and so I was able to practically play with some of them. Actually, looks like they have just three products in the UTM category - albeit with different network throughput. The primary requirement I have for now is to be able to control where users (yes, I need to create user accounts and authenticate them) can go to the Internet, and possibly limit this with Time/Bandwidth (allocate data bundles) ACLs. Of course the other 'Ts' in the UTM still hold. Cyberoam appears to do this. What I lack is the comparison with other products - Cisco, Astaro, etc Essentially, whatever product I need should meet the above requirement besides being a UTM, and should be able to work in bridge mode with a Cisco router. The network layout is JTL Fiber <----(bridge)-- Cisco <--- LAN. The UTM device should plugin behind the Cisco and function transparently. Cost is a factor. The equivalent Cyberoam unit for this purpose costs USD 1,100 with an annual subscription for updates costing about USD 500-600 per year ... I know I could build my own UTM, but I do not want to do it for now so please don't suggest that path:-) I am open to suggestions/ideas/experiences. You could simply tell me what device you use, what it costs, and whether it meets the above requirements. -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254733744121/+254722743223 "I can't hear you -- I'm using the scrambler."
I have worked with Checkpoint, it has an identity management module that allows you to authenticate via LDAP/AD, Filter URLS using policies, Manage Bandwidth across website categories categories/user groups. The only hiccup might be costs, its a bit higher. But if interested, that's available from their partners. On Tue, Dec 10, 2013 at 3:30 PM, Odhiambo Washington <odhiambo@gmail.com>wrote:
Hi Skunks,
So I have been looking at UTM devices/options for the last three days. I have come across this document - http://goo.gl/8TojIt, but I still have to ask you to chip in with your practical experience.
The only luxury I've had is that Cyberoam have web-based simulators for their products and so I was able to practically play with some of them. Actually, looks like they have just three products in the UTM category - albeit with different network throughput.
The primary requirement I have for now is to be able to control where users (yes, I need to create user accounts and authenticate them) can go to the Internet, and possibly limit this with Time/Bandwidth (allocate data bundles) ACLs. Of course the other 'Ts' in the UTM still hold.
Cyberoam appears to do this. What I lack is the comparison with other products - Cisco, Astaro, etc
Essentially, whatever product I need should meet the above requirement besides being a UTM, and should be able to work in bridge mode with a Cisco router. The network layout is JTL Fiber <----(bridge)-- Cisco <--- LAN. The UTM device should plugin behind the Cisco and function transparently.
Cost is a factor. The equivalent Cyberoam unit for this purpose costs USD 1,100 with an annual subscription for updates costing about USD 500-600 per year ...
I know I could build my own UTM, but I do not want to do it for now so please don't suggest that path:-)
I am open to suggestions/ideas/experiences. You could simply tell me what device you use, what it costs, and whether it meets the above requirements.
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254733744121/+254722743223 "I can't hear you -- I'm using the scrambler."
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- *......................................................... No pressure.....No diamonds!!!*
Hi Wash, checkout Meraki MX (now part of cisco.) https://meraki.cisco.com Sent from my iPad
On Dec 10, 2013, at 6:01 PM, Dan Wanjohi <nadwanjohi@gmail.com> wrote:
I have worked with Checkpoint, it has an identity management module that allows you to authenticate via LDAP/AD, Filter URLS using policies, Manage Bandwidth across website categories categories/user groups.
The only hiccup might be costs, its a bit higher. But if interested, that's available from their partners.
On Tue, Dec 10, 2013 at 3:30 PM, Odhiambo Washington <odhiambo@gmail.com> wrote: Hi Skunks,
So I have been looking at UTM devices/options for the last three days. I have come across this document - http://goo.gl/8TojIt, but I still have to ask you to chip in with your practical experience.
The only luxury I've had is that Cyberoam have web-based simulators for their products and so I was able to practically play with some of them. Actually, looks like they have just three products in the UTM category - albeit with different network throughput.
The primary requirement I have for now is to be able to control where users (yes, I need to create user accounts and authenticate them) can go to the Internet, and possibly limit this with Time/Bandwidth (allocate data bundles) ACLs. Of course the other 'Ts' in the UTM still hold.
Cyberoam appears to do this. What I lack is the comparison with other products - Cisco, Astaro, etc
Essentially, whatever product I need should meet the above requirement besides being a UTM, and should be able to work in bridge mode with a Cisco router. The network layout is JTL Fiber <----(bridge)-- Cisco <--- LAN. The UTM device should plugin behind the Cisco and function transparently.
Cost is a factor. The equivalent Cyberoam unit for this purpose costs USD 1,100 with an annual subscription for updates costing about USD 500-600 per year ...
I know I could build my own UTM, but I do not want to do it for now so please don't suggest that path:-)
I am open to suggestions/ideas/experiences. You could simply tell me what device you use, what it costs, and whether it meets the above requirements.
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254733744121/+254722743223 "I can't hear you -- I'm using the scrambler."
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- ......................................................... No pressure.....No diamonds!!! _______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
@Wash I would recommend Checkpoint. Nowadays they have for small businesses and office which are pocket friendly. See http://www.checkpoint.com/smb/600-appliance.html You can contact Catherine on congoro@checkpoint.com Thanks and regards, Peter Mugoh On Tue, Dec 10, 2013 at 6:57 PM, John Doe <fivepings@gmail.com> wrote:
Hi Wash, checkout Meraki MX (now part of cisco.)
Sent from my iPad
On Dec 10, 2013, at 6:01 PM, Dan Wanjohi <nadwanjohi@gmail.com> wrote:
I have worked with Checkpoint, it has an identity management module that allows you to authenticate via LDAP/AD, Filter URLS using policies, Manage Bandwidth across website categories categories/user groups.
The only hiccup might be costs, its a bit higher. But if interested, that's available from their partners.
On Tue, Dec 10, 2013 at 3:30 PM, Odhiambo Washington <odhiambo@gmail.com>wrote:
Hi Skunks,
So I have been looking at UTM devices/options for the last three days. I have come across this document - http://goo.gl/8TojIt, but I still have to ask you to chip in with your practical experience.
The only luxury I've had is that Cyberoam have web-based simulators for their products and so I was able to practically play with some of them. Actually, looks like they have just three products in the UTM category - albeit with different network throughput.
The primary requirement I have for now is to be able to control where users (yes, I need to create user accounts and authenticate them) can go to the Internet, and possibly limit this with Time/Bandwidth (allocate data bundles) ACLs. Of course the other 'Ts' in the UTM still hold.
Cyberoam appears to do this. What I lack is the comparison with other products - Cisco, Astaro, etc
Essentially, whatever product I need should meet the above requirement besides being a UTM, and should be able to work in bridge mode with a Cisco router. The network layout is JTL Fiber <----(bridge)-- Cisco <--- LAN. The UTM device should plugin behind the Cisco and function transparently.
Cost is a factor. The equivalent Cyberoam unit for this purpose costs USD 1,100 with an annual subscription for updates costing about USD 500-600 per year ...
I know I could build my own UTM, but I do not want to do it for now so please don't suggest that path:-)
I am open to suggestions/ideas/experiences. You could simply tell me what device you use, what it costs, and whether it meets the above requirements.
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254733744121/+254722743223 "I can't hear you -- I'm using the scrambler."
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
--
*......................................................... No pressure.....No diamonds!!!*
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
Wash....d-link have some fantastic utm's .... you can check them out and we can talk....their support office Ian in Kenya too On Dec 11, 2013 2:29 PM, "Peter Mugoh" <pkmugoh@gmail.com> wrote:
@Wash
I would recommend Checkpoint. Nowadays they have for small businesses and office which are pocket friendly.
See http://www.checkpoint.com/smb/600-appliance.html
You can contact Catherine on congoro@checkpoint.com
Thanks and regards,
Peter Mugoh
On Tue, Dec 10, 2013 at 6:57 PM, John Doe <fivepings@gmail.com> wrote:
Hi Wash, checkout Meraki MX (now part of cisco.)
Sent from my iPad
On Dec 10, 2013, at 6:01 PM, Dan Wanjohi <nadwanjohi@gmail.com> wrote:
I have worked with Checkpoint, it has an identity management module that allows you to authenticate via LDAP/AD, Filter URLS using policies, Manage Bandwidth across website categories categories/user groups.
The only hiccup might be costs, its a bit higher. But if interested, that's available from their partners.
On Tue, Dec 10, 2013 at 3:30 PM, Odhiambo Washington <odhiambo@gmail.com>wrote:
Hi Skunks,
So I have been looking at UTM devices/options for the last three days. I have come across this document - http://goo.gl/8TojIt, but I still have to ask you to chip in with your practical experience.
The only luxury I've had is that Cyberoam have web-based simulators for their products and so I was able to practically play with some of them. Actually, looks like they have just three products in the UTM category - albeit with different network throughput.
The primary requirement I have for now is to be able to control where users (yes, I need to create user accounts and authenticate them) can go to the Internet, and possibly limit this with Time/Bandwidth (allocate data bundles) ACLs. Of course the other 'Ts' in the UTM still hold.
Cyberoam appears to do this. What I lack is the comparison with other products - Cisco, Astaro, etc
Essentially, whatever product I need should meet the above requirement besides being a UTM, and should be able to work in bridge mode with a Cisco router. The network layout is JTL Fiber <----(bridge)-- Cisco <--- LAN. The UTM device should plugin behind the Cisco and function transparently.
Cost is a factor. The equivalent Cyberoam unit for this purpose costs USD 1,100 with an annual subscription for updates costing about USD 500-600 per year ...
I know I could build my own UTM, but I do not want to do it for now so please don't suggest that path:-)
I am open to suggestions/ideas/experiences. You could simply tell me what device you use, what it costs, and whether it meets the above requirements.
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254733744121/+254722743223 "I can't hear you -- I'm using the scrambler."
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
--
*......................................................... No pressure.....No diamonds!!!*
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
You could always try Sophos UTM home edition if you are on a budget as its free. http://www.sophos.com/en-us/products/free-tools/sophos-utm-home-edition.aspx Vincent Wayodi Email: wayodi@gmail.com Linkedin: *www.linkedin.com/in/wayodi <http://www.linkedin.com/in/wayodi>* On Thu, Dec 12, 2013 at 12:40 AM, Benson Maina <bensonmaina@gmail.com>wrote:
Wash....d-link have some fantastic utm's .... you can check them out and we can talk....their support office Ian in Kenya too On Dec 11, 2013 2:29 PM, "Peter Mugoh" <pkmugoh@gmail.com> wrote:
@Wash
I would recommend Checkpoint. Nowadays they have for small businesses and office which are pocket friendly.
See http://www.checkpoint.com/smb/600-appliance.html
You can contact Catherine on congoro@checkpoint.com
Thanks and regards,
Peter Mugoh
On Tue, Dec 10, 2013 at 6:57 PM, John Doe <fivepings@gmail.com> wrote:
Hi Wash, checkout Meraki MX (now part of cisco.)
Sent from my iPad
On Dec 10, 2013, at 6:01 PM, Dan Wanjohi <nadwanjohi@gmail.com> wrote:
I have worked with Checkpoint, it has an identity management module that allows you to authenticate via LDAP/AD, Filter URLS using policies, Manage Bandwidth across website categories categories/user groups.
The only hiccup might be costs, its a bit higher. But if interested, that's available from their partners.
On Tue, Dec 10, 2013 at 3:30 PM, Odhiambo Washington <odhiambo@gmail.com
wrote:
Hi Skunks,
So I have been looking at UTM devices/options for the last three days. I have come across this document - http://goo.gl/8TojIt, but I still have to ask you to chip in with your practical experience.
The only luxury I've had is that Cyberoam have web-based simulators for their products and so I was able to practically play with some of them. Actually, looks like they have just three products in the UTM category - albeit with different network throughput.
The primary requirement I have for now is to be able to control where users (yes, I need to create user accounts and authenticate them) can go to the Internet, and possibly limit this with Time/Bandwidth (allocate data bundles) ACLs. Of course the other 'Ts' in the UTM still hold.
Cyberoam appears to do this. What I lack is the comparison with other products - Cisco, Astaro, etc
Essentially, whatever product I need should meet the above requirement besides being a UTM, and should be able to work in bridge mode with a Cisco router. The network layout is JTL Fiber <----(bridge)-- Cisco <--- LAN. The UTM device should plugin behind the Cisco and function transparently.
Cost is a factor. The equivalent Cyberoam unit for this purpose costs USD 1,100 with an annual subscription for updates costing about USD 500-600 per year ...
I know I could build my own UTM, but I do not want to do it for now so please don't suggest that path:-)
I am open to suggestions/ideas/experiences. You could simply tell me what device you use, what it costs, and whether it meets the above requirements.
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254733744121/+254722743223 "I can't hear you -- I'm using the scrambler."
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
--
*......................................................... No pressure.....No diamonds!!!*
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
participants (6)
-
Benson Maina -
Dan Wanjohi -
John Doe -
Odhiambo Washington -
Peter Mugoh -
Vincent Wayodi