I do that by having the firewall's management ports open on the WAN, **BUT** only from my home office and laptop FQDNs (using DynDNS). ![]() For example, I love WatchGuard firewalls because of how well they protect, and if I need to "cloud manage" them, I can do that from my desktop at home or from my laptop. Without knowing WHY you want cloud management, I recommend finding the most secure firewall you can for your budget, then using either a VPN or a WAN-accessible port for management. the security protections available in a given firewall? Is there a reason why cloud-managed seems to be your priority vs. I do know that their lesser products like the USG suffer a big throughput penalty if you turn on intrusion prevention, packet inspection, etc., which is significantly lesser than the speeds of my ISP, and it introduces jitter/lag, which made it impossible to play FPS games on PS4 when sitting behind the firewall with that stuff enabled, which means probably the same problem if you rely on video conferencing unless you plan it out well. I don't know how good UniFi really is for firewall security. I have had zero luck getting remote access VPN to work, and firewall management is not like managing a Cisco ASA. I have only used UniFi at home with lesser firewalls and switching, like the USG and 8-port PoE switches, so I don't know how good they are for larger sites. Look into the support so you know what you have available to you. Ubiquity UniFi is pretty good on the cheap. ![]() ![]() Not sure how good discounts can be for SMB, but many products like these have a pretty good markup with wiggle room on pricing. Make sure you are working with a vendor and get yourself discount pricing. ![]() If you can somehow get away with not licensing, it would not be a great idea for the firewall devices. You are going to need to maintain licensing with Meraki.
0 Comments
Leave a Reply. |