{"id":1155,"date":"2022-10-12T17:38:02","date_gmt":"2022-10-12T21:38:02","guid":{"rendered":"https:\/\/tekhattan.com\/?p=1155"},"modified":"2022-10-12T17:39:44","modified_gmt":"2022-10-12T21:39:44","slug":"small-business-firewalls","status":"publish","type":"post","link":"https:\/\/tekie.com\/blog\/hardware\/small-business-firewalls\/","title":{"rendered":"Small Business Firewalls"},"content":{"rendered":"

What is a firewall and why you should have one<\/span><\/b>\u00a0<\/span><\/h2>\n

In our line of work, we are often asked if a firewall is needed. Having a good firewall is a <\/span>top consideration that needs to be made for any company opening a new office<\/span><\/a>. The Internet is open by design, and all devices connected to the Internet are vulnerable.\u202f So yes, if you are in business, you should have a firewall.<\/span>\u00a0<\/span><\/p>\n

\u00a0<\/span><\/p>\n

The Internet\u2019s popularity exploded due to the ease with which information could be accessed. A firewall can help shield your connection from the outside world by blocking specific ports and creating other strict access rules.\u00a0<\/span>\u00a0<\/span><\/p>\n

\u00a0<\/span><\/p>\n

Some businesses need firewalls, and others <\/span>should <\/span><\/i>have firewalls. You need a firewall if your business is in the medical, legal, financial, or retail fields. These industries are heavily regulated, and failure to properly secure your network can result in massive fines and penalties.<\/span>\u00a0<\/span><\/p>\n

Even if not legally required, every business that handles customer data should have a firewall. Imagine the fallout if you had a security breach.<\/span>\u00a0<\/span><\/p>\n

\u00a0<\/span><\/p>\n

Spending money on a firewall when you have a router may seem pointless. You may not realize that a standard router does nothing to secure your connection. When securing your network, adding as many barriers as possible between your company and the outside world is imperative. One mistake by an employee could cause your company to ruin without a firewall.<\/span>\u00a0<\/span><\/p>\n

\u00a0<\/span><\/p>\n

A firewall reduces the threat of the web, putting a barrier between your computers and the Internet. <\/span>Botnets<\/span><\/a> constantly scan IP addresses looking for vulnerabilities. A professionally installed firewall will block external scans and close loopholes to prevent intrusions. Further, a firewall will protect against user error. There is always somebody at the office who accidentally turned off the Windows firewall and left the front door open for hackers. A solid <\/span>Managed Service Provider<\/span><\/a> can help ensure user errors are reduced.<\/span>\u00a0<\/span><\/p>\n

\u00a0<\/span><\/p>\n

Difference between a router and a small business firewall<\/span><\/b>\u00a0<\/span><\/h2>\n

Routers are responsible for passing traffic between the Internet and your internal network. Routers contain no safeguards in place to prevent malicious traffic. Using a router for your Internet connection could allow a malicious actor to use a <\/span>port scan<\/span><\/a>, the first step in a cyber attack, to penetrate your internal network.\u00a0<\/span>\u00a0<\/span><\/p>\n

\u00a0<\/span><\/p>\n

An enterprise-grade firewall can block all unused ports on your network. A capable small business firewall will also monitor the traffic passing in and out of your network to sniff out suspicious packets. The firewall can stop a cyber-attack in its tracks if appropriately configured. The firewall logs all suspicious network events for review by an organization’s IT staff.\u00a0<\/span>\u00a0<\/span><\/p>\n

\u00a0<\/span><\/p>\n

Best Firewalls for Small Business, Ranked<\/span><\/b>\u00a0<\/span><\/h2>\n

Cisco Meraki MX67 Firewall for Small Business<\/span><\/h3>\n

Cisco Meraki offers top-tier networking equipment with a top-tier price tag. Tekie considers the MX67 to be the best small business firewall<\/strong>. The Cisco Meraki Ecosystem allows you to manage the traffic and devices on your network fully. Therefore accomplishing what you want, how you want, on a flashy, well-defined web-based GUI. <\/span>\u00a0<\/span><\/p>\n

You can set up a network and have it up and running in under an hour. <\/span><\/p>\n

The Cisco Meraki MX67 is an entry-level firewall that has a much lower throughput than other models. The Cisco Meraki MX67 can only handle up to 600Mbps stateful throughput for your internet connection without Advanced Security Settings Enabled.<\/span>\u00a0<\/span><\/p>\n

Some Considerations of using the Cisco Meraki Ecosystem:<\/span>
\n– All Cisco Meraki Equipment requires an enterprise license to operate otherwise the hardware will not function. This can be a major deciding factor in any enterprise where costs are a top concern. With a One, Three-, Five-, Seven- and Ten-year license terms available the overall cost could be much more than a competitor, but the hardware is solid, the support is solid, and the single pane of glass makes managing one or many networks much easier.<\/span>\u00a0<\/span><\/p>\n

– You need to ensure the feature set of the firewall you are purchasing will meet your future growth. Cisco Meraki Security appliances are limited by the processing speed and total user count. You should double your current user count when considering which Security Appliance to purchase.<\/span>\u00a0<\/span><\/p>\n

There are several versions of Enterprise Licenses you can purchase for a Cisco Meraki Security Appliance including: <\/span>\u00a0<\/span><\/h4>\n

– Enterprise License \u2013 No Advanced Security: Includes basic security features and Secure Connectivity<\/span>
\n– Enterprise License \u2013 Advanced Security: Includes All Enterprise Features and Fully Features Unified Threat Management (IPS, ID, Malware, Virus, Secure DNS..etc)<\/span>
\n– Enterprise License \u2013 Secure SD-Wan Plus: All Enterprise Features from the previous two licenses as well as SD-Wan feature set.\u00a0<\/span>\u00a0<\/span><\/p>\n

A License must be purchased from an Authorized Cisco Meraki Dealer or Reseller.<\/span>\u00a0<\/span><\/p>\n

You do get the following with your enterprise license for the entire term:<\/span><\/h4>\n

– Next Day Replacement on Failed Equipment<\/span>
\n– 24\/7 Customer Support<\/span>
\n– Online Web Gui to easily manage your network of devices<\/span>
\n– Continuous Firmware, Software and Security Patches<\/span>\u00a0<\/span><\/p>\n

Fortinet 60F<\/span> Small Business Firewall<\/h3>\n

Fortinet\u2019s Fortigate Security Appliance has been designed more for individuals who know what they are doing and are comfortable completing the setup required to secure their network. In other words, you need to know advanced Network Security Settings to get this Security Appliance set up. <\/span><\/p>\n

As with Cisco Meraki, Fortinet provides a complete Eco-system of switches and access points. They have been designed to work seamlessly with each other to ensure a smooth network experience.<\/span>\u00a0<\/span><\/p>\n

The Fortinet Fortigate 60F is an Entry Small Business Firewall that allows your business to operate without limitations. The Fortinet Fortigate 60F is capable of up to 10Gbps of stateful throughput for your internet connection. This speed drastically reduces to 700Mbps of stateful throughput with Advanced Security Settings enabled.<\/span><\/p>\n

Some Considerations:<\/span>
\nThe Fortinet licenses are called \u201cFortiGuard Bundles\u201d and can be very confusing to decipher which is best for your business, so we suggest purchasing at least a FortiCare UTM License Bundle, which includes ATP, AMP (Advanced Malware Protection) (See below), and your choice of Business Hours Support or 24×7 Support(FortiCare).<\/span><\/p>\n

Different licenses sorted by number of feature:<\/span>\u00a0<\/span><\/p>\n