5.4 Firewall vendors: Picking the products that are right for you

ICSA conducts certification tests on firewalls to determine if they meet their Firewall Product Certification criteria. If a firewall product successfully completes the testing, it is posted on their web site.

ICSA tests firewall products on the following: required services security policy; logging; administration; functional testing; security tests; and documentation.

ICSA periodically retests the certified firewall products to make sure that the firewall vendor has continued to develop a secure product that meets their Firewall Product Certification criteria.

The following firewall vendors and their products have met ICSA's Firewall Product Certification criteria.

Vendor Name Certified	Product Names
3Com Corporation	OfficeConnect Internet Firewalls OfficeConnect NETBuilder
Alcatel Fort Knox Policy Router	OneStream Fort Knox
Axent Technologies	AltaVista Tru64 UNIX Raptor NT Raptor Solaris
BorderWare Technologies	BorderWare Firewall Server Check Point SoftwareFirewall-1 NT Firewall-1 Solaris
Cisco Systems PIX	Com21 Cable Modem ComPort 5000
Computer Associates GuardIT	Unicenter TNG Network Security Option
CyberGuard Corporation	CyberGuard NT CyberGuard Unixware
Elron Software Inc.	CommandView Firewall for NT
eSoft	Instagate
GenNet	WebGuard Solaris
Global Technology Associates, Inc.	GNAT Box
IBM	SecureWay AIX SecureWay NT
Intel	LANRover VPN Gateway
Internet Dynamics	Conclave
Lucent Technologies	Lucent Managed Firewall SecureConnect Firewalls
Marconi Communications	Firewall Switching Agent for ESX/Firewall1
NetGuard	Guardian Firewall
Netopia	Netopia S9500 Security Appliance
NetScreen Technologies	NetScreen Family Network-1 Security Solutions CyberWall PLUS-IP
Network Associates	Gauntlet NT
Nokia	Nokia IP Series Routers
Nortel Networks	BaySecure/Firewall-1 Shasta 5000 Broadband Service Node BSN
Novell BorderManager Enterprise Edition	Novell FireWALL for NT
Progressive Systems	Phoenix Adaptive Firewall
Secure Computing	Sidewinder SecureZone
SonicWALL, Inc.	SonicWALL Family
SLMSoft.com	SecureIT
Sun Microsystems	SunScreen EFS
Tiny Software	WinRoute Pro
WatchGuard Technologies	Firebox II

The following sections provide 3 different solutions to protect servers and services in a DMZ.