RE: [FW1] Sonicwall VPN FYI - Sweet Cheap little VPN

[Geoffrey Moon <gmoon@FW1-NOSPAMalliedna.com>]

Been using the original Tele, and now the Tele2, for some time and you're
right, it's a great, cheap solution. Sonicwall firmware gets better and
better with each release (all free, BTW), and the boxes have been solid as a
rock. If you've been following BugTraq you'll see that there have been some
successful DoS attacks against version 5.0 firmware (via the web browser
interface). Haven't had a chance to see if 5.1.1 (the latest) is vulnerable,
but if Sonicwall's firmware upgrade history is any indication, they'll fix
the problem quickly. Side note: If you're doing VPN management of the box
and have rules set properly, then you can't even get to the web interface,
so the vulnerability is really an internal threat more than an external one.

Like you, I'm incredibly impressed with "the little blue box", and highly
recommend them, especially the version 2 (Tele2, SOHO2) series if you're
doing VPN.

And no, I don't work for Sonicwall, don't sell them, and don't even own
their stock. I just buy and use the products, successfully.

Geoff

-----Original Message-----
From: Dan Hitchcock [mailto:danh@xylo.com]
Sent: Wednesday, December 06, 2000 3:38 PM
To: FW-1 Mailing List (E-mail)
Subject: [FW1] Sonicwall VPN FYI - Sweet Cheap little VPN



Just wanted to share a piece of information for anyone looking for a really
low cost 3DES small branch office solution:

I picked up a SonicWall TELE/2 (retails for about $550) - has a nice Web
GUI, does NAT and DHCP, has remote secure management, etc. - AND it works
like a charm with FW1 4.1SP2.  I just worked through SonicWall's config doc
and our site-to-site VPN was up and running.

If anyone has any comments on SonicWall's long term reliability, support,
etc., I'd love to hear from you, as I just brought this connection up.
Looks like a very sweet little VPN solution, and even cheaper than
Checkpoint's SmallOffice solutions (although SmallOffice gives nice features
like FW1 GUI management, much more granular policies, etc.)

Dan Hitchcock
CCNA, MCSE
Network Engineer
Xylo, Inc.The work/life solution for corporate thought leaders



============================================================================
====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
============================================================================
====


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================