Shulou(Shulou.com)06/01 Report--

Routing system, also known as RouterOS, is already a very open source technology. Whether on the LINUX system or on the windows system, there are many such open source projects with simple technology and very simple structure. With the development of the times, xxx and basic packet filtering firewalls were added in the later stage, which are also open source mature projects. Most manufacturers also modify and modify these projects, packaging and packaging into a commercial product to sell to users. Of course, there is no comparison between the commercial value and technical value of the product.

But in the past decade, with the rapid development of online behavior management requirements, from web filtering to protocol filtering, as well as the need for intranet security. Simple routing system can no longer meet the needs of users, many router gateways begin to have Internet behavior management and firewall modules, the concept of the second generation firewall (Next Generation Firewall) also arises at the historic moment. However, there are not many manufacturers who really achieve the second-generation firewall, and many routing manufacturers also enter indiscriminately, but what is the effect?

Today, we introduce several free Internet behavior management systems, firewalls and routing systems at home and abroad. Mainly free, because it is free, so there are some defects, either the function, or the number of licenses. Let me tell you slowly.

1. PFsense

An old opensource firewall system, the official website address everyone to find, the software is free, hardware charges.

The system is characterized by powerful routing and firewall functions, and integrates modules such as * detection and vulnerability scanning. Of course, the basic functions such as routing and speed limit are appropriate. The disadvantage is that the function of online behavior management is relatively weak and can not be filtered by application and URL library. As we all know, the interface of foreign software is very complex. According to foreigners, without a degree, they are embarrassed to configure it.

In addition, PFsense also has paid training and services, and you can also buy their hardware directly at a moderate price. The product is also open source, and the source code is public. (the language seems to have a Chinese version, but I'm not sure, my information comes from their website.) conscience products survive on services and hardware, with no License restrictions and no functional restrictions.

2. Routeros

The vanguard of the routing system, claimed to be the first in the share of the routing system. It comes from a small country in Eastern Europe, so the price is very low, and the market is full of cracked editions. In fact, the genuine price is already very low (it can be ignored).

It's just that it's not our country's local products, and the service may not keep up. The ROS system has almost no upgrade and maintenance work, the system is very stable, as long as there is no revolutionary change in the way of surfing the Internet, it can always be used.

The routing function of ROS is probably the most thoroughly studied in the world, but the disadvantage is that the interface is so complex that it can be configured to take a course in a university. It is very popular in the West and Southeast Asia, and various technical discussion forums are also very popular. It's just that the configuration is complicated and a little bullshit.

Generally speaking, it is a good product, and it is good for Internet cafes and residential broadband networks. The disadvantage is that there is no web filtering, application filtering, such as online behavior management functions, only the basic firewall module. It can also limit the speed, and the routing function and × × are very stable. Once the network management is mastered, it is also a sharp weapon.

3. Sophos

This is a global product, big manufacturer, big brand. The home version is free and supports 50 users. Routing, × ×, firewall module, especially the defense function, gateway antivirus this is done very well, there are also protocol filtering module and URL library filtering. Both software and hardware are available. The advantage still lies in antivirus and firewall. Europe's old safety manufacturers, the price does not need to think, not in the sky is also in the clouds.

4. Untangle

It's more than ten years old. The focus is on online behavior management and firewall, antivirus functions. Home version $50 a year, 75 users. Don't expect the home version to be used in the enterprise, they claim to be able to detect what environment is in use, will stop if there is a violation, and estimate what detection tools are in the software. Both software and hardware are available.

But the price is very expensive even for local users in the United States. Hardware sales are the price of hardware plus the price of software, the price of software is sky-high, and the service is general.

Solid products, a variety of protocol management, network security, routing patterns, firewall modules, antivirus. In addition to the price (100 users of the software License, nearly $2000 a year), for enterprises to choose a full range of professional Internet behavior management gateway and next-generation firewall, is really a good choice.

5. WFilter-NGF

Is also more than ten years of old products, local research and development, take the international route, the domestic market promotion ability is not strong, most of the users are abroad. Specializes in network monitoring and protocol analysis. Focus on the online behavior management function, and do a solid job in the online behavior management, such as Web filtering and protocol filtering. The interface of the product is somewhat similar to the untangle above. The disadvantage is that there is no gateway antivirus and active defense function. The service is good, you can answer every question, and you can also assist in configuration remotely. Both software and hardware solutions are available. Their company names are very interesting, and it is worth mentioning that WFilter also has windows's bypass behavior management software. If you don't want to add hardware, it's an option for online behavior management. The price is medium, and the ratio of performance to price is high. The full function of 50 users is free, and for small businesses with less than 50 people, I think it is the best choice.

5. Love fast routing system

Local products, software is all free, by selling hardware to make money. There are all kinds of rumors about the free version, so we won't list them one by one. There are all the basic routing functions, but the online behavior management is more chicken. The fast-loving system personally thinks that it is more inclined to do the LAN wireless deployment scheme. There is nothing wrong with business management. But fortunately, the system is free, and this is more popular.

6. In China, there are Victoria League, Sea Spiders, and Aikuai are more or less the same, and there is a pandbit, which focuses on flow control routing system, which will not be introduced one by one.

To sum up, it is divided into two series: "routing system" and "Internet behavior management / firewall system". If you just want to do routing, then ROS is a really good choice in terms of performance and stability. If the enterprise uses online behavior management and next-generation firewalls; if there is nothing wrong with the language, you can take a look at the Chinese version of untangle, sophos and WFilter-NGF;, then WFilter-NGF must be the best choice.

There is one more point to say: routing systems, such as ROS, are almost disposable software that you buy and use directly, with little need for upgrades and updates. However, the "agreement filtering" and "web site library filtering" of online behavior management both need to upgrade their services, which is why many online behavior management software charge annual fees. Domestic big brands of online behavior management equipment also charge annual service fees. If you choose online behavior management products, be sure to consider the quality and cost of follow-up services.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.