Need a better router

[ldulitz]

I used to have a Netopia R910, and then i decided ooh let me ktry one of these new all in ones, so i bought the linksys Wireless G router, and now i really miss my netopia. I am looking at either the Cisco 806, Sonicwall 700s, or the old faithful r9100. My friend has a sonicwall he can lend me for a while, but he'll want it back. any suggestions - pros/cons as to the above routers? I am on TW rr cable.

Thanks!

[YeOldeStonecat]

Used to have an R910 myself.....man what a powerful unit. Best router I've had (I change routers like every 6 months).

Sonicwall's I'm just getting into, after hearing such great things about them by others on this forum (TWW, Cyberskye). Incredible performance on those babys...if you can afford them. I'm currently working on a project with several Sonicwall SOHO3's, tying together a WAN with them.

Also just picked up a couple of Netopia/Cayman 3546 Gateways...very nice rigs, I've worked with them before. Built in 4 port 10/100 switch, one box has modem/router. Nice robust web admin also on it, plus several advanced firewall features. Will probably be my fave router for a while.

Curretly also like Nexland/Symantec routers.

[twwabw]

Yeah- you like the SonicWalls more and more as you use them- incredible.

Wait 'til you see the brand new SOHO-TZW; Wireless access point / router / firewall. Wireless runs through VPN tunnel. I'm digging into them deep now, ready to quote 14 for a rollout. Exciting technology. None of the inherent weakness of WEP, and totally secure wireless communication. Only bad part I see right now is they're 802.11b only- I'm checking to see if there is a G upgrade in the future, but wow! Std. unit is 25 user, with 50 user option, as well as unlimited option. Same awesome performance as the SOHO3 series-

- 133MHz Toshiba TX3927 with security ASIC
- Concurrent Connections: 6,000
- Firewall Performance: 75 Mbps (bi-directional)
- 3DES (168-Bit): 20 Mbps

[TeddyTed]

YOSC/Twwabw

What do you fellas think about this router?
I just got it for a small job i'm working on.
Some of my partners tell me i should go with DLink instead.

It's a small office of about 6 users.
SDSL, static IP

What's most important for me on this project now is to set up a VPN connection for the owner of the company so she can work form home.

I thought this was a good pick, but i've gotten a bit of negative feed back (form my friends) on using Linksys.




http://linksys.com/products/product.asp?grid=34&scid=29&prid=433 (http://http://linksys.com/products/product.asp?grid=34&scid=29&prid=433)


Let me know what you guys think.

Thanks,

TB.

[twwabw]

Link doesn't work. What model Linksys is it?

Linksys routers are fine- nothing wrong with them as entry level home routers. But, they are not firewalls. Their only security is NAT. Linksys does now make a router (BEFSX-41) with rudementary firewall features, but they are limited at best.

My biggest concern is your need for a reliable VPN. I tried a few of the linksys VP routers when they first came out, and they have been a disaster. These and other home based VPN solutions are just not up to the task yet of supplying reliable, consistent, and secure VPN tunnels. If it's for a business, and they want the convenience of VPN access, you have to spend the money for a more robust solution. Any business that squawks over $100 vs. $500 isn't much of a business, and they have their priorities skewed.

[TeddyTed]

Actually that is the router.
The Linksys BEFSX41 !

So your'e saying that this device won't provide a reliable secure VPN for a small office?

[YeOldeStonecat]

I've setup VPN's between the BEFSX41 routers before. I have about a dozen of those models out there in the field. Easy to setup the VPN, Linksys has a step by step guide with pics on their support page.

And I've seen the VPN tunnel a pair of Sonicwall SOHO3's can make...and the performance with those routers. TWW helped me set on up recently, after Sonicwall support said what I was trying to do wouldn't work (think I caught a newbie support kid his first week on the job....TWW proved him wrong...heh).

They both work. The difference? Well, as with all things...you get what you pay for. The Linksys routers will do a VPN tunnel. They cost about 75 bucks or less. But now and then the tunnel will drop, and it can be pokey (slow). The Sonicwalls are much more robust, have a much better processor...much more powerful, much higher throughput, more stable...rock solid. The VPN tunnel between them is blazingly fast compared to the Linksys. But you're paying over 600 bucks a pop for them. Their support is also better (I just had a bummer on my first time calling them, but from other things I've seen, when you buy their support package...which you should, they are strong in their support).

They'll both work for you....just depends on your budget, what you want from it, and what you expect. If you're trying this out to see if it will work, and working now and then with some lightweight application, and budget is tight..then the Linksys will work. If it's something you're going to rely on all the time, and will be doing a lot of work via VPN....they you may wish to spend more on a more robust solution like the Sonicwalls.

[TeddyTed]

YOSC,

I'm happy to hear that you've been using these routers too - makes me fell a bit better.
I guess i should be okay because she is only going to be doing light work (using Peachtree etc) about three or four times per week from home.

I'm a bit concern about the level of security that this device offers.

Twwabw mentioned that the security on this router wasn't that great.

What do you think?
What steps wouuld you recomend that i take??

Thaks,

- TB

[twwabw]

Originally posted by TeddyTed
I'm a bit concern about the level of security that this device offers.

Twwabw mentioned that the security on this router wasn't that great.

What do you think?
What steps wouuld you recomend that i take??

Thaks,

- TB

Security and VPN issues are 2 different things. As far as the VPN, if it is going to be for occasional use, and can be activated / de-activated only when used, it will be OK. If you need to maintain a 24/7 tunnel, they're not. Also, be aware that running an app like accounting software, where the database resides on opposite ends of the tunnel, may be a nightmare to use over any VPN. Acctg apps like QuikBooks are almost impossible over the relatively small upload pipe broadband offers. The app is constantly sending info back and forth to recreate indexes, queries, etc., and this size pipe is just too small. You really won;t know until you try it. And, if the company / database is large, and hasn't been purged at year end (which so many accountants like to recommend, because it makes their life easier) then it's going to be painful.

As far as security- that's a decision they / you need to make. NAT is not a suitable security solution for a business network, IMHO. It is suitable and appropriate for home use, but is inadequate (and possibly illegal in some cases, depending on the level of confidentiality of the business) . For true security, you NEED an ICSA certified firewall to protect your network and data. Yes, I like SonicWalls, but they're not the only ones out there. You'll find most hardware based forewalls utilize SPI (stateful packet inspection) to analyze and redirect / reject all packets, both inbound and outbound from your network. Although linksys claims to have implemented SPI, it has virtually no configuration settings or rule sets to modify or view. The SX41 does allow rudementary port blocking and ip blocking, but if that's their idea of SPI, they're off base.

No- you don't need a $700 SonicWall- the other vendors listed also provide ICSA certified firewalls. But they too will be in the hundreds of dollars. The VPN tunnel on the Linksys is secure- that is not what I was inferring. It's the network that I'm worried about.

I think I'd consider spending the higher dollar for the network device, and then maybe skimp for the remote user unit. Perhaps a Linky would be adequate for them, if they only connected the tunnel when using it. Remember, when a remote client connects to an internal network via VPN, they are now a physical segment of that network, and can risk compromising the corporate network through the tunnel, if the security is poor or lax on the remote end. Again, business requirements should dictate different standards, unless your business has no important data, and its integrity is not an issue.

[TeddyTed]

Gee...

I'm starting to become more and more worried.
Maybe i'm taking on more than i can handle...Oh well, it's all a learning process.
She has a Home Health Aide business, so she has a lot of confidential client/employee information.
I can tell you now that the database is quite small, so i'm hopeful we won't have issues with the bandwith.

Now that you're making these points, i'm also thinking about security on the machine at home.
She will be using a Laptop @ home which is protected with Zone Alarm Pro. Is this enough protection?
She want's me to pickup a wireless router for her to move arround the bedroom.
What do you recomend?

I've got a wireless Linky in my house works fine, but i'm open to suggestions.

The plan is that the client machine (her Laptop) will connect using VPN software to connect to the router.

Would you guys consider this a bad practice ?


Thanks,

- TB

[YeOldeStonecat]

Originally posted by TeddyTed
YOSC,

I'm happy to hear that you've been using these routers too - makes me fell a bit better.
I guess i should be okay because she is only going to be doing light work (using Peachtree etc) about three or four times per week from home.

I'm a bit concern about the level of security that this device offers.

Twwabw mentioned that the security on this router wasn't that great.

What do you think?
What steps wouuld you recomend that i take??

Thaks,

- TB

I do want to caution you...Peachtree isn't "light work"...think it runs on the BTrieve engine...tough to run that software over the skinny straw that a VPN provides. The newer versions of Peachtree love lots of RAM, and a 100 meg connection, a bit pokey over a 10 meg connection...I'd hate to try it through a skinny VPN. I'd recommend looking at remote control software instead, such as PcAnywhere...and ditch the "running it over VPN approach".

[TeddyTed]

Thanks YOSC !


Hmmm.... looks like i've got to think this over.


Thanks again fellas...


TB.

[Ghosthunter]

Yep I agree with YOSC,

we have a $20,000 VPN Gateway to support our users, granted we have only about 200 users using VPN, but not neccesarilly all at once, but we spent the money for performance.

For one user it might be faster and cheaper just to use PCanwyhere