Security Management Strategies for the CIO
GOLD | Check Point VPN-1 UTM
Check Point Software Technologies
Price: Starts at $7,500
Readers gave Check Point's VPN-1 UTM, formerly known as Express CL, high marks for the depth of security
Requires Free Membership to View
SearchSecurity.com members gain immediate and unlimited access to breaking industry news, virus alerts, new hacker threats, highly focused security newsletters, and more -- all at no cost. Join me on SearchSecurity.com today!
Michael S. Mimoso, Editorial Director
it provides and its form factor. But there's plenty to be said for the company's stability
as a security vendor.
VPN-1 UTM offers firewall, intrusion prevention, anti-virus, antispyware, Web application firewall, and both IPsec and SSL VPN, within a single integrated platform. All these functions can be centrally controlled and updated in real time.
Geiger Brothers, the largest privately held promotional products company in the country, has used Check Point for more than eight years. "We have looked at other products and there are some cheaper solutions," says Rob Herman, IT operations manager with Geiger Brothers. "But Check Point is centrally managed so it cuts down on administration and overhead."
Geiger Brothers uses Check Point primarily to secure its 20 field offices across the country with its headquarters in Lewiston, Maine. "We really like Check Point because it's very secure and seamless to manage," says Herman. "It's also very stable. I've been here for five-and-a-half years and we've had very few problems with downtime."
Herman also notes that Check Point, while relatively small, sells to enterprise-sized companies. "They've got some big clients so obviously they're doing something right," he says.
Check Point's ease of use may have something to do with its target market of midsized offices and branches. "They have to conform to internal auditing requirements and they need options in terms of monitoring and reporting to management," says Dave Burton, director of product marketing with Check Point. "They want something that's easy to install and get up and going, and Check Point offers all of that."
Check Point also has a VPN-1 UTM Edge product specifically for companies with branch offices. "We've seen a trend toward appliances increasing in branch-sized offices," says Burton. "These branch offices don't have a security expert on-site and they want multiple security applications in one device. UTM Edge does just that."
Many UTM providers don't offer SSL and IPsec VPN as part of their solution; Check Point does. Although they come installed, users must purchase separate licenses to use them.
SILVER | Cisco Systems' ASA 5500 Series Adaptive Security Appliance
Cisco Systems
Price: $19,995
Readers were sold on Cisco's ASA 5500 UTM product, especially for its breadth of functions, such as firewall, IPS, VPN and antimalware. Service and support also rated well. "We like it because of its ability to recognize unusual behaviors," says Carl Goodman, IS manager with Premier Valley Bank in Fresno, Calif. "Other vendors just work with signature files. I liked that proactive approach." Goodman has used ASA 5500 for six months to secure his employer's internal network, and was high on Cisco support. "Cisco was the leader in new technologies, and because they're a large company they have a lot of staff if I have a question," he says.
BRONZE | SonicWALL PRO
SonicWALL
Price: $15,490
SonicWALL PRO's ability to provide deep-packet inspection of network traffic earned high marks from readers. They also noted its form factor and ROI, while indicating SonicWALL still has some work to do with installation, configuration and management of the platform. SonicWALL Pro includes enterprise-class networking, routing, firewall, secure wireless and IPsec VPN in one appliance. Melissa Young, information technologies manager with the Portland State University Bookstore, says SonicWALL PRO protected her employer's network from a virus that struck the Oregon university's network. "What I find useful about SonicWALL PRO is that it can take care of itself," says Young. "When I started here six years ago I had never set up a firewall before. For a novice to get it up and running for six years without any problems is great."
This was first published in April 2007
Join the conversationComment
Share
Comments
Results
Contribute to the conversation