Published: 01 Jul 2007
UNIFIED THREAT MANAGEMENT
Sidewinder 2150 v7
REVIEWED BY DAVID STROM
Price: Varies; as tested, $35,900
In its June issue, Information Security tested six Unified Threat Management (UTM) boxes; this month we review Secure Computing Sidewinder UTM, specifically the large-enterprise 2150 appliance. The new Sidewinder release was too late for the comparative evaluation, but would stack up in the middle of the pack.
Sidewinder doesn't allow multiple concurrent administrators to save configurations, although they can view configuration and monitor operations. It also comes with dual power supplies, which is handy if one fails. It also has two available add-in slots in the model we tested.
|Authentication & Security||B|
|Feature Module Integration||B|
Although Sidewinder was able to easily block Skype with its default settings, it doesn't have explicit protection rules for other IM/P2P protocols. It does extensive port scanning, including ports used for VOIP, IM, P2P, SQL server and Citrix applications. It also protects against common Web server attacks, such as SQL injection and cross-site scripting.
Testing methodology: We connected the Sidewinder box on a test network with Windows XP, Vista and Apple Macintosh clients and a Windows 2003 Enterprise Server, and ran tests using Skype, AOL and Google Talk IM clients, and various security penetration techniques.