Network Security appliances

40 pts.
Tags:
Cisco switches
Network security
Network security appliances
Security
What are the key things to consider when choosing a network security appliance for 130 user network? I am confused with the plethora of appliances Cisco has on offer. 
Network is laid across three floors, with all the switches connecting back to a wiring closet. 


Software/Hardware used:
Network Security

Answer Wiki

Thanks. We'll let you know when a new response is added.

many appliances provide multiple interfaces that you can configure for monitoring. Are you interested in protection at the edge? Across multiple VLANs? Consider whether you are interested in control from outside in or both directions. Also remember a single appliance is also a single point of failure. Most have the ability to fail open so as to not close down your network. I employ both a separate appliance that monitors traffic on all my edge entry points as well as an integral module in my ASA.

Discuss This Question: 5  Replies

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
  • batye
    easy to use, simple interface, integration, support number of user/connections - future upgrades/adaptability, price vs quality...
    3,080 pointsBadges:
    report
  • Bha77a
    thanks for coming back to me. in distribution layer, I have got two layer 3 switches and they connect directly to WAN routers.. ideally I want security on the edge to monitor all incoming traffic. I agree single appliance would be a single point failure. What other ways are around it, can router manage the security of network while the appliance is down or is not recommended? I am confused because i have security modules on routers and firewall appliance on the edge, Why would you have integral module?
    40 pointsBadges:
    report
  • Bha77a
    thanks for coming back to me. in distribution layer, I have got two layer 3 switches and they connect directly to WAN routers.. ideally I want security on the edge to monitor all incoming traffic. I agree single appliance would be a single point failure. What other ways are around it, can router manage the security of network while the appliance is down or is not recommended? I am confused because i have security modules on routers and firewall appliance on the edge, Why would you have integral module?
    40 pointsBadges:
    report
  • Joshuaa
    The network security appliance should provide security from comprehensive array of attacks, reliability, functionality and productivity. It must be faster and protect the system from various web threats like spyware, viruses, malware, hackers and many more.
    10 pointsBadges:
    report
  • Sixball
    We use a dual-FW system, then still have IP/IPv6 ACL's / Route-maps on the routers to be both redundant and secure. A little bit of both edge and Core-level filtering never hurts..
    8,515 pointsBadges:
    report

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Thanks! We'll email you when relevant content is added and updated.

Following