Comparisons between Hardware and software firewalls

[1Drisnil]

Could someone explains the pros and cons between Hardware & Software firewalls?

In designing a DMZ, would a product like ISA 2000 (Tri-homed) be "better" than a Cisco 515E Bundle PIX device? The 515E Pix has 3 FE ports.

Any thoughts on this?


Social engineering, coupled with greed, is the easiest way to subvert any security!

 

[sleipnir214]

The PIX box will be more secure. It's purpose-designed for being a firewall. ISA 2000 might be a good product, but it will be running on a general-purpose OS.



Want the best answers? Ask the best questions!

TANSTAAFL!!

 

[bpatters55]

Just as a general remark, I hope this is not too basic, but with a software based firewall, a hacker actually gets to your PC. Conversely, with a hardware based firewall (router), the hacker must get through the router before he\she can get to your computer.

I am a home user but I have Norton Firewall and a Netgear router. The Netgear proetects me from inbound threats and the Norton protects me from Trojan Horse type threats.

 

[sleipnir214]

There is a lot to be said for a "belt and suspenders" approach to securing your systems.



Want the best answers? Ask the best questions!

TANSTAAFL!!