![]() ![]() Only when we blocked all of LinkedIn, for example, did the firewall behave properly.įortinet’s FortiGate fit somewhere between SonicWall and Check Point on the management interface front. For example, we could easily create policies that blocked particular parts of Facebook or LinkedIn, but those policies didn’t actually work. However, the engine underlying that interface doesn’t work as well as SonicWall. The Check Point Security Gateway has a fantastic management interface for application identification and control that is much easier to use than the other products we tested. SonicWall would have had a higher score if its application identification GUI wasn’t so poorly designed. It was possible to block Facebook completely, but you can do that with a URL filter - you don’t need a next-generation firewall. SonicWall has so many sub-divisions of every application, none of which were documented or made any sense to us, that we gave it a failing score when we tried to allow end users to see Facebook, but not post to it - one of vendor marketing’s favorite examples of why a next-generation firewall is a good idea. On the other hand, Check Point couldn’t block Skype and none of the products blocked Google’s Gmail, which slipped through when we hit the “click here for basic HTML if your browser is not showing you your email” button. For example, in our quest for recent episodes of “The Big Bang Theory” (porn for geeks), Check Point and SonicWall blocked our BitTorrent client from reaching out and touching Sheldon, while Barracuda and Fortinet didn’t. In our testing, some apps caused more problems than others. ![]()
0 Comments
Leave a Reply. |
Details
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |