ZyXEL ZyWALL USG20 Internet Security Firewall with 4 Gigabit LAN/DMZ Ports, 2 IPSec VPN, SSL VPN, and 3G WAN Support Review

Average Reviews:

(More customer reviews)While ZyXEL may not be that well known in the consumer network gear market, they make some good enterprise level gear. The USG line from ZyXEL is middle ground between simple consumer products and highly configurable enterprise products.
I have used the ZyXEL ZyWALL 2 PLUS Internet Security Firewall, 4 Port 10/100 Fast Ethernet Switch, w/ 5 IPSec VPN Tunnelsand the (discontinued) 1P for several years without issue; primarily for maintaining an IPSEC VPN tunnel. While the 2 Plus and 1P were more consumer grade, the USG20 is a step beyond. It has a plethora of configuration options available, and wringing out optimal performance from the device is not for the faint of heart. Having a background in network configuration will make the job easier, otherwise, plan to spend some time with the instruction manual.
ZyXEL's online resources, customer support and forum support are very good; they strive to make sure your problems get solved. They offer timely firmware updates to correct problems.
The ZyWALL USG20 not only has basic packet inspection firewall and traffic anomaly detection functionality, but has a significant number of features at this price point:
* Flexible Security Zones
* IPSEC and SSL VPN
* VLANs
* Bandwidth Management
* Content filtering/ Anti-SPAM
* Reporting
The UI is somewhat straightforward, however, the concept of Objects may confuse some. Objects are used to define re-used elements throughout the configuration. For example, an IP address range may be defined and named IP_RANGE_1. This name is then used throughout the configuration screens when setting up features that use that same address range.
There isn't much you can't do with this, that you could with a device costing several times as much.
Pros:
* Price vs Features ratio
* Highly configurable
* USB 3G support
* Configuration wizards for some set-up
* SSL VPN support
* 4 Gig ports
* Runs cool
Cons:
* No PPTP/L2TP VPN
* Object oriented configuration can be confusing
* SSL VPN limited to few applications and hard to get working.
* So configurable that it takes a while to fully set-up.
* Manual recommends unit SHOULD NOT be wall mounted. (Why?)


Click Here to see more reviews about: ZyXEL ZyWALL USG20 Internet Security Firewall with 4 Gigabit LAN/DMZ Ports, 2 IPSec VPN, SSL VPN, and 3G WAN Support

The ZyWALL USG 20 is a Unified Security Gateway, integrated with complete, enterprise-level and advanced security solutions designed for Small/Medium Business (SMB) recommended for up to 5 PC users. Its flexible configuration helps network administrators set up the network and enforce security policies more efficiently. With certified by ICSA SPI Firewall and IPSec VPN, the ZyWALL USG 20\'s security features also include IPSec VPN, SSL VPN, Firewall and Content Filter. It also provides bandwidth management, for QoS of VoIP or mission critical applications. Moreover, IPSec VPN and SSL VPN design for telecommuters and home workers can access data more easily and safely at home. Remote access with SSL VPN requires only a standard web browser. ZyWALL USG 20\'s excellent throughput is the key to implement features of an enterprise level to provide a full-time, non-stop and secure service.

Get 28% OFF

Click here for more information about ZyXEL ZyWALL USG20 Internet Security Firewall with 4 Gigabit LAN/DMZ Ports, 2 IPSec VPN, SSL VPN, and 3G WAN Support

Read More...

Cisco Small Business RV042 Dual WAN VPN Router - Router - 4-port switch - desktop Review

Average Reviews:

(More customer reviews)I have purchased five Linksys/Cisco VPN routers in the last five years. Two "RV042"s, Two "BEFSX41"s, and one RVL200. (Yes, I have (maybe now "had") a preference for the Linksys/Cisco brand.) But out of these five VPN routers, both of the RV042s have failed (blinking diag light) within about 16 months from the date of purchase.
When not in failure mode, the RV042 is a cost effective router and I have paired them together or have mixed and matched with the BEFSX41, RVL200 and a Sonicwall VPN router (don't know the model since I was connecting to a third-party administered site) with good results. It also has a large feature set for the price (DHCP w/ MAC mapping, 5 IPsec VPNs, VLAN support, etc...) and since the last firmware upgrade, it has not been buggy (unlike in 2006, which was two firmware upgrade versions earlier). It is, however, prone to early failure based on my experience and other user comments/reviews. One reviewer here has stated the Blinking Diag Light of Death ("BDLOD") may be due to a firmware problem although I recall during my first failure, another reviewer (you might need to google this issue) stated that these BDLODs may be due to bad capacitors. This person posted a DIY capacitor replacement guide on the web.
For now, I might just spend the $180.00 for another RV042 so I can easily load my configuration backups. My full-time profession (Patents) is not IT so there's a need to get my End Point VPNs, VoIP PBX w/ SIP phones connected using a Wireless 802.11 bridge, Real-time offsite file backups and remote desktop functionality (for all fifteen PCs and Laptops) up and running with minimal disruption. When configured correctly, having VPN end-points enables dependable offsite computing, greatly increasing my productivity. I'll then research and implement a transition plan on my own schedule to avoid unintended surprises. Note I have a 9 year old D-Link non-VPN wireless router and it is still in use!
Overall, the RV042 has a large feature set and is relatively stable. If you do purchase it, you might not be disapointed but it might be a good idea to backup your configuration settings and have a spare RV042 backup available to minimize downtime.
Cheers and Good Luck
P.S. I found the BEFSX41 to be a the "little engine that could" of VPN routers. It's fast, very inexpensive and reliable. It does have a somewhat limited feature set, e.g., it does not support MAC address DHCP mapping. The RVL200 is also an interesting product - I find the SSL VPN functionality convenient. I have used remote desktop to read my email and pull files while away via SSL VPN - easy, Web-browser (active-x only?) compatible and a no-brainer to use. Every once in while, - it has a "system busy" problem during logon but this does not occur frequently enough for me to regret my purchase.

Click Here to see more reviews about: Cisco Small Business RV042 Dual WAN VPN Router - Router - 4-port switch - desktop

Router - 4 x 10/100Base-TX LAN, 1 x 10/100Base-TX WAN, 1 x 10/100Base-TX DMZ

Click here for more information about Cisco Small Business RV042 Dual WAN VPN Router - Router - 4-port switch - desktop

Read More...

NETGEAR FVS318 ProSafe VPN Firewall 8 with 8-Port 10/100 Switch Review

Average Reviews:

(More customer reviews)I have been using the Netgear FVS318 router firewall for over a month now with not one glitch. For the money, this is an amazing bargain considering it is a true SPI firewall and a certified ipsec VPN endpoint for eight tunnels included with a eight port switch! The quality of Netgear products are also commendable.
We had it up and running in less than fifteen minutes. My son configured two ipsec vpn tunnels with his friends networks using Linksys VPN routers in short order and I have one configured to my Windows 2000 computer at work that is behind a nat router using Windows 2000 built in ipsec capabilities. All three of our ipsec tunnels have proven to be reliable. I also have no problems using remote desktop through port 3389 or going to my pptp Windows 2000 vpn server through port 1723 behind the FVS318.
We have not experienced any of the problems that other reviewers have, but we have experience configuring these kinds of devices. The FVS318 has fairly extensive built in logging though it does not store much information itself but it can be configured to transfer log information to another computer and can even send you an email alert if certain attacks are detected. It has configurable services based on ports and protocols that are used to create port forwarding to inbound services and block outbound services. However you are limited to 16 services. It can control outbound traffic which is very important to defend against undetected trojans or users [and kids] running things like file swapping or other unapproved applications that access the internet. Internet access can be even controlled by a day/time schedule. If your network is fairly simple, a default block all rule could be created [which must be at the end of the list] and then you can specify what outbound services are allowed. It is also possible to deny a computer or address range of computers from having internet access while allowing others full access. Though the block services is a great addition to this device, it is somewhat limited if you have more than a few variations of configurations compared to a more sophisticated [and much more expensive] soho firewall, and the services can not be configured to use certain ip address/subnet destinations for outbound control which should not be a big deal for most home/small office users. However inbound services/port mapping can be configure to come from specific ip address/subnet. That is an important security feature. For instance if you open an internal computer for remote managment, you can configure the FVS318 to accept connections from only one ip address, which will keep everyone else on the internet from trying to connect and guess your password!
I am very impressed with the Netgear FVS318. Being a true SPI firewall and ipsec VPN endpoint with all the other feaures it has in a quality package, I can highly recommend it to anyone that wants a bargain priced internet device that is a big step up from the consumer grade nat routers.

Click Here to see more reviews about: NETGEAR FVS318 ProSafe VPN Firewall 8 with 8-Port 10/100 Switch

The NETGEAR FVS318 ProSafe VPN Firewall 8 with 8-Port 10/100 Switch offers the small office a space-saving design combining wired connectivity, a NAT router, VPN appliance, SPI firewall, and an eight-port 10/100 Mbps Ethernet switch.
Wired and Wireless Connectivity The FVS318 has a built-in switch, with eight 10/100 Mbps auto-sensing, Auto Uplink ports. With Network Address Translation (NAT) routing, up to 253 users can simultaneously access your connection.
High-class Security For businesses that require more than just a simple NAT router, the FVS318 offers significantly more protection. It provides: a Stateful Packet Inspection (SPI) firewall to prevent Denial of Service attacks, an Intrusion Detection System (IDS), the ability to block Java/URL/ActiveX based on extension, and FTP/SMTP/RPC program filtering.
The FVS318 has eight dedicated VPN tunnels to protect links between remote locations, encrypting the data between them. IPSec-based encryption up to 256 bit is also supported. This lets you easily create secure connections to branch offices or mobile workforces.
Easy Setup Even with all the functionality the FVS318 provides, NETGEAR makes setup a breeze with the intuitive Smart Wizard that connects you to your ISP quickly. The web-based configuration screen is easy-to-use and requires no additional software. DHCP and PPPoE support makes widespread deployment simple.
The NETGEAR FVS318 ProSafe VPN Firewall 8 with 8-Port 10/100 Switch is backed by a 3-year warranty.
What's in the Box FVS318 ProSafe VPN Firewall, power adapter, category 5 ethernet cable, installation guide, resource CD, warranty/support information card.

Click here for more information about NETGEAR FVS318 ProSafe VPN Firewall 8 with 8-Port 10/100 Switch

Read More...