PC or Linux Firewall

Dedicated device or roll your own? It’s not difficult to build and configure a Linux server to act as a firewall.

You won’t get the cleverest of the filtering features for free, but you will get a machine that has enough ability to keep the secured side of the network suitably safe. Is a roll-your-own approach as good or better than paying for specialised devices?

Cost is the advantage most commonly quoted. If suitable hardware is already available, the effective cost of a hand-built Linux firewall is effectively zero. Having total control of the configuration at every level allows for a device ideally tailored for the network environment. But PC-based firewalls have specific problems too. They are always inherently more unreliable than hardware specifically designed for the task – old PSUs and hard disks don’t last forever!

But the biggest problem is the expense of managing PC-based firewalls. Updating and maintenance requires a higher level of skill: the people responsible need to be skilled in Linux setup and configuration, as well as firewall configuration. Planning and preparation for catastrophic events such as firewall failure must be done in-house and in advance – which means a stock of spare parts up to and including motherboards (especially if the hardware is elderly) and procedures for rolling out a replacement at speed if necessary.

It’s certainly worth considering Linux- based firewalls but the question to ask is “What could go wrong, and how easy is it to mitigate those situations?”

The answers may show that even though they are near-free, the hidden costs could outweigh the benefits.

 

 

Share |

Download


Subscribe and get the magazine in the post before it's online

Subscribe and get access to all of the back issues

To read a sample eMagazine - March 2010

 
FREE SUBSCRIPTION!
Banner

IT EXPERT TOP TIP

There are plenty of technical discussion sites on the Web, but if you're looking for a community where you have a chance to meet other experts and network in person, check out the list of UK technical user groups at http://www.ukusergroups.co.uk/. The new Active Directory User Group (http://adug.co.uk/) is kicking off with a meeting at Microsoft's London office in October, the Windows Server Team (http://winserverteam.org.uk/Default.aspx) is planning meetings in January and Vista Squad
(http://vistasquad.co.uk/), the Microsoft Messaging and Mobility Group (http://www.mmmug.co.uk) and Windows Management User Group (http://wmug.co.uk) are running regular meetings too. read more

TAKE THE POLL

Unified communications

Banner

The #1 Bestseller for Only 77p

RECENT COMMENTS