What is the Best Fire Wall For ISP's

Can some one tell me what is the best Firewall for an ISP?

We have installed a sonicwall pro 20/40 but it fall over now and again.

Do any body know the Astaro Firewall

or the

AstroFlowGuard

Please help we are in South Africa and do not have a lot of Internet security comapanys.

 

Astaro actually is excellent, Jazzie, a member here swears by it and its well worth its reputation.

 

Hi all!

Yes Astaro is a great multi-purpose firewall that has tons of features for the SOHO/Corp enviornment! It beat Checkpoint, Cisco and IBM in testing! I have it running with a Proxy (meaning everything, Web, DNS, SMTP and POP3 proxy) and Content filter/Av engines and it works all too well. Here is a link to my write up on it! It is free for up to 10 users /home use!!!!

http://www.fluxgfx.com/ssc/showthread.php?t=138

Forgot to mention the hardware requirements:
-------------------------------

Product Version: 6.000 or later

Summary:
The minimum hardware requirements for Astaro Security Linux are:

CPU: Intel Pentium II > 900MHz
RAM: 256MB (512MB/1GB recommended)
CDROM: IDE or SCSI (see HCL for supported SCSI controller)
Harddisk: > 9 GB hard disk drive and above (see HCL for supported SCSI controller)
NIC: at least 2 PCI NICs (see HCL for support chipsets)
Further Information:

For versions 5.000 or later:

CPU: PII > 400MHz
RAM: 128 MB (256 recommended)
CDROM: IDE or SCSI (see HCL for supported SCSI controller)
Harddisk: > 5GB IDE or SCSI (see HCL for supported SCSI controller)
NIC: at least 2 PCI NICs (see HCL for support chipsets)
-------------------------------

Both versions work great!




regards
Jazzie

 

Thanks
We investigated Astro and went for the Astro Firewall and man can this firewall stand it man and fighting anything read more at http://www.astaro.com/

 

You won't find a better solution, glad you like it,nothing else comes close to it.

 

I've implemented the Astaro on our company network since since two - three years. Since then upgraded from 4.x to 5.x and planning to upgrade to 6.x and never let me down. We're using the KAV engine to scan http, ftp and smtp for malware, which makes our server and desktop AV jobless.

We're using the antispam which support RBL, PASV and BATV. The last two are not implemented because we are in the middle of consolidating our corporate networks after two mergers.

The only problem I encountered in all the years is that some 'programmers' are using integrated windows authentication through a proxy. According to Microsoft it doesn't work through a proxy, but they still implemented a workaround it in their ISA2004 product.

 

I have been using a Fortigate 60 hardware firewall/AV/IPS for a few months now and I am very happy with it. You can find them on ebay for around 300-400.