Cloud based Firewall options

Forums › IT Pro and developers › Cloud based Firewall options

1101

3141 posts

Uber Geek
+1 received by user: 1143

#294031 1-Mar-2022 11:11

Hi

Im looking for recommendations for Cloud Firewall Service (incl VPN )
The ISP is offering this Service , but, with no support & will not do any setup for it

So Im looking at options for a Cloud Firewall Service , with VPN to main office . For 3 separate locations (same company)
WITH full support services : ie they can & will setup to suit.

Local on premises Hardware Firewall has been ruled out (not my decision, just how it is)

Any recommendations ?
Cheers

timmmay

20857 posts

Uber Geek
+1 received by user: 5349

Trusted

Lifetime subscriber

#2876791 1-Mar-2022 11:18

You could look at CloudFlare. I suspect it will achieve what you want to achieve, but not quite in the way you're thinking - in a more modern, better way.

SATTV

1670 posts

Uber Geek
+1 received by user: 657

ID Verified

#2876794 1-Mar-2022 11:20

I have done this in the past with Vodafone, it was a managed WAN and central firewall.

Kordia also so this.

This is not cheap to do but does work well.

John

I know enough to be dangerous

rb99

3505 posts

Uber Geek
+1 received by user: 1830

Lifetime subscriber

#2876796 1-Mar-2022 11:21

Was idly looking at this -

https://nextdns.io/?from=nvs9c6kk

the other day. Thats as far as I got though...

“The modern conservative is engaged in one of man's oldest exercises in moral philosophy; that is, the search for a superior moral justification for selfishness.” -John Kenneth Galbraith

rb99

billgates

4705 posts

Uber Geek
+1 received by user: 671

Trusted

#2876798 1-Mar-2022 11:22

The people that ruled out on-premises hardware firewall should be the one then selecting a cloud firewall service if they are part of the IT team. It sounds like they are not part of the IT team and if that is the case then it should not be their call to rule out on-premesis hardware firewall.

Something like Fortigate 60 series across 3 site's to use site to site VPN capability in the FortiOS and then using FortiVPN clients for providing remote access to clients

FortiGate FortiWiFi 60F Series Data Sheet (fortinet.com)

Do whatever you want to do man.

danfaulknor

974 posts

Ultimate Geek
+1 received by user: 533

Trusted

Prodigi

Subscriber

#2876803 1-Mar-2022 11:32

This is something we do, hosted out of Auckland. Preferably with internet/WAN tails from us but we can do VPNs to the offices if required.

they/them

Prodigi - Optimised IT Solutions
WebOps/DevOps, Managed IT, Hosting and Internet/WAN.

1101

3141 posts

Uber Geek
+1 received by user: 1143

#2876804 1-Mar-2022 11:46

- management ruled out a hardware firewall.
This may change when they see pricing :-)

- They have a Managed Wan across 3 sites , setup by the ISP & with their local routers .
Im sure this existing managed WAN could complicate any 3rd party Cloud Firewall (?)

Or is the current managed Wan a non issue for adding a 3rd party Cloud based firewall ?

Its a bit disappointing that one of NZ's largest ISP's offered this service with zero support . That ISP's Aus Branch do offer full
support for this . (I wont name the ISP , I wern't involved in the discussions)

So really : Cloud Firewall integrated into existing 3 office WAN .

Dell

Shop now for Dell laptops and other devices (affiliate link).

danfaulknor

974 posts

Ultimate Geek
+1 received by user: 533

Trusted

Prodigi

Subscriber

#2876808 1-Mar-2022 11:55

You're really going to struggle to do this without integrating with the existing WAN. The new firewall will need to be the gateway for internet traffic, which either means using the existing WAN provider or having cooperation with them, or having devices on site anyway to run a VPN which makes having a Cloud firewall a bit pointless.

You either need to replace the WAN or go with the existing WAN providers solution

they/them

Prodigi - Optimised IT Solutions
WebOps/DevOps, Managed IT, Hosting and Internet/WAN.

freitasm

BDFL - Memuneh
80646 posts

Uber Geek
+1 received by user: 41029

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#2876811 1-Mar-2022 12:05

Zero Trust Network Access | Cloudflare Zero Trust | Cloudflare

Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.