Перейти к содержимому. | Перейти к навигации

Персональные инструменты
Вход Регистрация
Вы здесь: Главная РУБРИКАТОР Защита сетевого периметра Сравнительный тест UTM-устройств уровня Enterprise
Protectiva Compliance Manager
Навигация
 

Сравнительный тест UTM-устройств уровня Enterprise

Операции с документом
Джойел Снайдер (NetworkWorld) протестировал 13 наиболее популярных универсальных программно-аппаратных комплексов для защиты периметра сети (UTM) уровня Enterprise по критериям производительности, управляемости, энергопотреблению, функциональности и т.п.

Протокол результатов тестирования

CategoryWeightJuniper ISG-1000IBM System x3650*Nokia IP290*Crossbeam C25*Check Point UTM-1 2050*Juniper SSG-520MCisco ASA5540SonicWall Pro 5060Secure Computing Sidewinder 2150DIBM/ISS MX5010WatchGuard Firebox Peak X8500eFortinet FortiGate 3600AAstaro ASG 425a
Management20%4.253.753.753.753.754.2543.53.2523.533
Performance15%4.54.53333.53.253.54.54.75343
Intrusion prevention capabilities15%4.53.253.253.253.251.52.751.52.54.52.512
VPN features15%44.74.74.74.744.54333.33.33.2
High availability 10%5545553433432
Hardware architecture10%4.554.5544.754.5454454
Routing support5%53533544432.544
IPv6 support5%3.53.543.53.53.53222232
Power consumption5%41534444.522.553.54
Antivirus catch capabilities0%NSNS3.1333.8NS4.43.63.33.43.93.2
Total score 4.383.993.943.873.823.803.683.383.353.313.303.172.93
* Denotes that product is running Check Point firewall software. NS = Not supported
Scoring key: 5: Exceptional; 4: Very good; 3: Average; 2: Below average; 1: Subpar or not available.

Конечные результаты тестирования

VendorProductPrice as tested*ProsConsScore
AstaroASG 425a$20,000 for hardware; $10,600 for software.Clean packaging of many open source tools; easy high- availability setup; includes SSL VPN for remote access.Management is confusing and fragmented; IPS configuration and alerting is weak; bugs in high-availability testing raise concerns.2.93
Check Point Software UTM-1 2050$31,000 for hardware; $19,800 for software.Full-featured firewall and management software in a small package; flexible high-availability options; outstanding site-to-site and remote-access VPN.Secure Platform operating system limited in network and management functionality for enterprise-sized customers; UTM configuration generally weak or overly complex.3.82
CiscoASA5540 with SSM-20 IPS module$25,000 for hardware; $15,000 for management.Cisco Security Manager management strong; very flexible network-address-translation options; multiple layers of intrusion prevention offered.Missing Cisco-quality network features, such as dynamic routing; some management functions awkward; IPS coverage lower than expected.3.68
Crossbeam Systems C25 running Check Point Secure Platform$48,000 for hardware; $45,000 for software; $6,000 for management.High performance in firewall mode; high port density.Secure Platform limited for enterprise deployments; poor antivirus throughput.3.87
Fortinet FortiGate 3600A$122,000 for hardware, software and management bundle.Blazing fast antivirus performance; good antivirus catch rate; nice hardware packaging.Advanced features require command-line interface; weak documentation for enterprise; weak overall IPS.3.17
IBMSystem x3650 running Check Point Secure Platform$13,700 for hardware; $49,500 for software; $6,000 for management.Blazing fast firewall performance; easy installation with Secure Platform.Secure Platform limited for enterprise deployments; system hot and heavy.3.99
IBM/Internet Security Systems Proventia MX5010$24,000 for hardware; $12,500 for software; $23,500 for management.Outstanding intrusion-prevention system catch rate and performance.Very weak firewall features; central management not suited to enterprise firewalls.3.3
Juniper NetworksISG-1000$60,000 for hardware, software and management bundle.Great IPS catch rate and performance; good high availability and routing feature set; expandable chassis.Central management not well matched to high-port-count firewalls.4.38
Juniper NetworksSSG-520M$20,000 for hardware and software bundle; $4,600 for management.Very flexible chassis; good high availability and routing features; easy management options.Central management not well matched to high-port-count firewalls; IPS features weak in enterprise setting.3.8
NokiaIP290 running Nokia IPSO
$8,000 for hardware; $42,000 for software; $6,000 for management.Great hardware design and "green" construction; IPSO operating system very full-featured for enterprise network features, such as routing, management and IPv6.Limitations in NAT and antivirus handling should be fixed; UTM configuration weak and complex.3.94
Secure ComputingSidewinder 2150D with IPS acceleration$80,600 for hardware and software bundle; $6900 for management.Great performance with proxies enabled; strong security model for high-concern applications.Central management not ready or complete; UTM integration and capabilities behind those of other products; system hot and heavy.3.35
SonicWallPro 5060$22,000 for hardware and software bundle; $2,000 for management.Great antivirus support and catch rate; deep UTM feature set.IPS features weak in enterprise setting.3.38
WatchGuard Technologies Firebox Peak X8500e$15,000 for hardware; $5,600 for software and management bundle.Good hardware design and "green" construction; strong monitoring capabilities; very deep UTM feature set.Poor antivirus coverage; enterprise features, such as dynamic routing, lacking.3.30
*All hardware prices stated include two hardware instances required for high-availability testing.

Источник: http://www.networkworld.com/reviews/2007/111207-utm-firewall-test.html

Comments (0)

Как стать участником |  Что может участник  |  Как работать с порталом  |  Реклама |  Авторские права  |  Контакты  |  Конкурсы  |  RSS  |  Форум
©2003 - 2019 GlobalTrust
Рейтинг@Mail.ru Rambler's Top100 Yandex