My office network contains about 10 workstations, 1 file server and 1 SQL Server. The network is behind a LinkSys router, which also serves as the firewall. Now I plan to add a web server and expect small traffic (less than 200 visits a day). The web application on the web serer is not mission-critical and all money transactions will be handled using Paypal.

My questions is: do I need a Firewall server or I can just keep using the existing router? Someone recommended me adding a switch with a lot cache for better performance.

What should I do? Actually the real question is, what are key factors determining using a dedicated firewall rather than a router?

Thanks in advance.

Really if it's a business i would not recommend anything less then an ASA5505, but if you don't want to fork out 400$ for awesome security you little linksys should be ok. Just know that there are tons of undocumented vulnerabilities on them. And if any serious sustained traffic starts coming through (3+mbps) you will see some performance degradation.

Also this makes no sense:
"Someone recommended me adding a switch with a lot cache for better performance."

A switch switches. The types of caches contained in one do not apply here and are not being referenced correctly. I would not take advice from that person.
 

CCNP

Thanks for the reply.

I am OK for a security device under $1k. The quotes I got for a firewall server were above 5k.

Another question: do I need something like ASA5505 if there is no web server involved? In that situation, all I need to do is to make sure all ports are closed, tested using www.grc.com. The router becomes a dumb box just for Internet access.

In other words, is the Web server a determining factor for getting a security device?

The asa receives a perfect stealth right out of the box from grc.com-<< but that's irrelevant.

The ASA is good device to have no matter what you choose.
But you might need to hire someone to set it up.

CCNP

I probably will be the person to set it up. What kind of knowledge or credential I need to set up an ASA box? Could you give me some resource links?

Thanks again.