Re: Firewall recommendations

["Consolvo, Corbett D" <cc72 () TXSTATE EDU>]

We are an ASA shop.  I would rate them as ok.  To me they are pretty speedy but not as full-featured/manageable as 
others.  We are looking at some internal firewalling and are considering Astaro.  I have also heard pretty positive 
reviews of Juniper Netscreen from a couple of other educational institutions.  We are implementing their SSL VPN 
product and it has great functionality and logging.  While I have not tried the X-series from Tipping Point we do use 
their IPS and that has been pretty positive as well.  Feel free to contact me directly with any questions.

Thanks,
Corbett Consolvo
Information Security Analyst
Texas State University

From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Jeff 
Holden
Sent: Friday, February 29, 2008 4:41 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Firewall recommendations


We are looking at upgrading our campus's firewall.  We are currently using a pair of end of life PIX 515s.  We have 
been looking at the Cisco ASA and Juniper Netscreen products.  We are very early in our evaluation and haven't talked 
with any venders yet.  We are wondering if any other campus has been through this process recently and can offer any 
suggestions.  We are looking at the bandwidth they can handle, price, added features such as VPN, IDS/IPS 
functionality, likes and dislikes and any other helpful advise.    Currently we are a mixed Cisco and HP shop, but are 
open to any and all vendors solutions.

Thanks,
Jeff Holden, CISSP, RHCE
Manager, Network & Data Security
Mt. San Antonio College
(909) 594-5611 X5017