blocks|key|398718|text|首先，你的问题听起来像是“商业软件更好，但如果我去开源有多糟糕”。无论如何，我不认为使用开源防火墙有什么重大问题，只要：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|398719|1/它符合你的需要。|398720|2/你定期更新它们|398721|你知道你在做什么以及如何配置它|entityMap^0|0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|J|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|K|8|@]|9|@]|A|$]]|$1|F|3|G|5|6|7|L|8|@]|9|@]|A|$]]]|H|$]]

First your question sounds like "commercial softwares are better, but how bad is it if I go to open source". Anyway I don't think that there's any major issue for using open source firewall as long as : 

1/ it matches your needs

2/ you update them on a regular basis

3/ you know what you're doing and how to configure it

blocks|key|4136150|text|在任何情况下，只要您有必要的专业知识，就可以选择适合您需要的解决方案，并有效地实现解决方案。商业防火墙解决方案也是如此。区别在于，如果它有一个引人注目的特性(例如MS+ISA服务器中的Active+Directory集成)，您可能倾向于为此付费。或者不是。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4136151|与许多其他应用程序一样，开放源码防火墙在任何时候都更容易安装、配置和维护。Smoothwall是一个很好的例子，但它已经存在多年了--我第一次使用Coyote作为IPTables+(实际上是IPChains+)防火墙前端；它从软盘引导，易于配置，在66+MHz奔腾上运行得很好。|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|E|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|F|8|@]|9|@]|A|$]]]|D|$]]

It would be considered ok under any circumstances in which you had the expertise necessary to choose a solution that suits your needs and to implement it effectively. This is true of commercial firewall solutions as well. The difference is that if it has a compelling feature (such as Active Directory integration in MS ISA server) you may be inclined to pay for it... or not. 

Open source firewalls, like many other applications, get easier to install, configure, and maintin all the time. Smoothwall is a good example, but easy to use ones have been around for years -- my first Linux experience was using Coyote Linux as an IPTables (actually IPChains initially) firewall frontend; it booted from a floppy disk, was easy to configure, and ran great on a 66 MHz Pentium.

blocks|key|398842|text|我使用一对ipcop+boxen来保护一个小型企业(~80台机器)网络的安全。他们在防火墙、为我们的邮件服务器(以及其他几台外部访问的机器)运行DMZ、为外部工作人员和站点间VPN运行VPN方面做得非常出色。设置/维护所需的linux专业知识并不多，因为所有这些都是通过优秀的web界面完成的(这也有您所有的安全日志和流量图表等)。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|398843|HTH|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|E|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|F|8|@]|9|@]|A|$]]]|D|$]]

I use a pair of ipcop boxen to secure a small business (~80 machines) network. They do an excellent job of firewalling, running a DMZ for our mail server (and a couple of other externally accessed machines) and VPN for external workers and site-to-site VPN. Not much linux expertise required to set-up/maintain as all is done through the excellent web interface (which also has all your security logs and traffic graphs etc.)

HTH

blocks|key|398880|text|当我建立我的公司时，我选择购买一个小盒子并下载Smoothwall。它很好地保护了我们的第一个well服务器近三年(直到硬盘故障需要重建的盒子)。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|398881|我们现在使用两个商业防火墙，部分原因是价格低得多，硬件比1/2机架服务器要小得多，使用的功率更少，我们知道它们的容量以及供应商提供的支持。|398882|这基本上取决于商业决策。你的预算是多少，你需要什么功能，你的专业知识/技能基础是什么？|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|G|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|H|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|I|8|@]|9|@]|A|$]]]|F|$]]

When I setup my company I opted to buy a small box and download Smoothwall. It worked very well protecting our first webserver for nearly three years (until a hard disk failure required the box to be rebuilt).

We use two commercial firewalls now, partly because the prices are so much lower, the hardware is physically smaller than a 1/2 rack server, uses less power, we know their capacity and the support is available from the supplier.

It basically comes down to a business decision. What's the budget, what features do you need, what's your expertise/skill base?

blocks|key|398753|text|在所有情况下，os防火墙(我怀疑您指的是包过滤器)完成了它们的工作:过滤数据包。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|398754|附带注意:操作系统软件并不意味着它不能是商业化的(包括商业支持)|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|E|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|F|8|@]|9|@]|A|$]]]|D|$]]

in all the cases the os firewalls (i suspect you mean a packet filter) do their job: filtering packets.

side note: os software doesnt mean it can't be commercial (including commercial support)

blocks|key|4136269|text|问题不应是“何时可以”，而应是“何时相关”。区分开放源码防火墙和“商业”防火墙的主要领域是：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4136270|4136271|支持。你是否需要在遇到麻烦时打电话给某人，以帮助你或修复潜在的bug？对于开放源码软件提供了一些支持，但仍然不普遍，特别是对于开放源码防火墙。|unordered-list-item|4136272|4136273|整合。你要自己安排吗？更确切地说，您希望自己对硬件进行调整，或者在真正配置防火墙之前安装和配置所需的所有底层服务？你有足够的技术做这一切吗？一些完全集成的开源解决方案可以帮助您，但您仍然需要根据您的需要购买硬件并对其进行大小调整(这通常意味着不需要专门的硬件，从PC体系结构中获得最大的网络性能并不像看起来那么容易)。|4136274|4136275|预算。开源软件大多是免费的(如啤酒)。这不需要，但通常是这样的。然而，你在购买价格上节省下来的东西，你可能需要投入人力。|4136276|4136277|性能。不管你喜不喜欢，如果你有很大的性能要求，开源防火墙仍然远远落后于专有设备。作为一个非常极端的例子，看看Juniper。在戴尔(+Dell+)上，pfSense的性能永远不会达到同样的水平。但是，如果您的需求较小(作为一个非常愚蠢和保守的经验规则，在需要过滤的1+1Gbps可持续通信量下，不需要使用VPN之类的复杂内容)，那么开放源代码是可行的。|4136278|希望能帮上忙。|entityMap^0|0|0|0|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|R|8|@]|9|@]|A|$]]|$1|B|3|-4|5|6|7|S|8|@]|9|@]|A|$]]|$1|C|3|D|5|E|7|T|8|@]|9|@]|A|$]]|$1|F|3|-4|5|6|7|U|8|@]|9|@]|A|$]]|$1|G|3|H|5|E|7|V|8|@]|9|@]|A|$]]|$1|I|3|-4|5|6|7|W|8|@]|9|@]|A|$]]|$1|J|3|K|5|E|7|X|8|@]|9|@]|A|$]]|$1|L|3|-4|5|6|7|Y|8|@]|9|@]|A|$]]|$1|M|3|N|5|E|7|Z|8|@]|9|@]|A|$]]|$1|O|3|P|5|6|7|10|8|@]|9|@]|A|$]]]|Q|$]]

The question should not be "when is it ok" but "when is it relevant". The main areas distinguishing open source firewalls from "commercial" ones are :
 - Support. Do you need to be able to call someone in case of trouble to help you or to fix potential bugs ? There is some support offered for open source software but is still not widespread especially for open source firewalls
 - Integration. Are you going to set it up all by yourself ? More precisely to you want to size the hardware yourself or to have to install and configure every underlying services needed before starting to really configure the firewall ? Are you even skilled enough to do all this ? Some fully integrated open source solutions can help you but you would still have to buy the hardware and size it according to your needs (it also usually means not specialized hardware and getting the most network performance from a PC architecture is not as easy as it may look like).
 - Budget. Open source software is mostly free (as in beer). It needs not be but it usually the case. However what you save in purchase price you may have to put on manpower.
 - Performance. Like it or not, if you have big performance requirements, open source firewalls are still far behind proprietary appliances. As a very extreme example, take a look at a Juniper SRX. You're never going to get the same amount of performance with pfSense on a Dell. However if your requirements are smaller (as a very dumb and conservative rule of thumb, under 1Gbps of sustained traffic to be filtered, without tricky stuff like VPN), open source is the way to go.

Hope it helps.

blocks|key|4136372|text|这将取决于您公司的开源方法。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4136373|OpenBSD和Linux中的防火墙都是一流的.支持更好，补丁、升级都是免费的。例如，OpenBSD的默认安装中只有两个远程漏洞。我怀疑任何商业操作系统都不能更好地做到这一点。|4136374|但思科也做了很好的防火墙。|4136375|(如果钱不是目标，而且决定由我来决定，我还是会选择OpenBSD。)|4136376|但是，如果您的公司只运行Windows服务器和开放源码，让您的经理感到紧张，那么Cisco提供了一个好的但昂贵的解决方案。|entityMap^0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|K|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|L|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|M|8|@]|9|@]|A|$]]|$1|F|3|G|5|6|7|N|8|@]|9|@]|A|$]]|$1|H|3|I|5|6|7|O|8|@]|9|@]|A|$]]]|J|$]]

It would depend on your company's approach to open source.

The firewall in OpenBSD and in Linux are first-class. Support is better, and patches, upgrades are free. OpenBSD, for example, has had only 2 remote holes in their default install. I doubt any commercial OS can better that.

But Cisco also make good firewalls. 

(If money was no object, and the decision was up to me, I'd still go with OpenBSD.)

But if your company runs only Windows servers and open source makes your managers nervous, then Cisco makes a good but expensive solution.

blocks|key|398961|text|如果你对这件事不太了解，而且不想花几个月的时间把它做好--我会从光滑的墙壁开始。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|entityMap^0^^$0|@$1|2|3|4|5|6|7|C|8|@]|9|@]|A|$]]]|B|$]]

If you don't know too much about it, and don't want to spend months getting it right - I'd start with smoothwall.

In what cases would it be considered OK to use open-source firewalls to protect/secure/filter a company network?

There seems to be many open source firewall alternatives (pfSense, smoothwall, m0n0wall) for a small business, that will save the company money by lowering the initial cost.

Open source firewall or commercial firewall

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

教程

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云智能顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋

腾讯云AI代码助手

云原生构建

TAPD 敏捷项目管理

Cloud Studio

SDK中心

API中心

命令行工具

功能1上新10个字符

功能2描述100个字符功能2描述100个字符功能2描述100个字符功能2描述100个字符功能2描述100个字符功能2描述100个字符功能2描述100个字符功能2描述100个字符功能2描述100个字符。

功能2上新100个字符功能2上新100个字符功能2上新100个字符功能2上新100个字符功能2上新100个字符功能2上新100个字符功能2上新100个字符功能2上新100个字符功能2上新100个字符。

功能5描述100个字符功能5描述100个字符功能5描述100个字符功能5描述100个字符功能5描述100个字符功能5描述100个字符

功能5上新100个字符功能5上新100个字符功能5上新100个字符功能5上新100个字符功能5上新100个字符功能5上新100个字符功能5上新100个字符功能5上新100个字符功能5上新100个字符功能5上新100个字符

功能4上新

文章&问答评论现已支持表情

全新交互，全新视觉，新增快捷键、悬浮工具栏、高亮块等功能并同时优化现有功能，全面提升创作效率和体验

社区富文本编辑器全新改版！诚邀体验～ 

精选全网热门MCP server，让你的AI更好用 🚀

💥开发者 MCP广场重磅上线！

涵盖代码开发、场景应用、自动测试全流程，助你从零构建专属AI助手

一站式MCP教程库，解锁AI应用新玩法

聚焦“写作效率、视觉美观与运行性能”三方面进行全面升级，为您提供更高效、稳定的创作环境

社区富文本&Markdown编辑器全新改版上线，欢迎大家体验!

诚挚邀请您参与本次调研，分享您的真实使用感受与建议。您的反馈至关重要，感谢您的支持与参与！

社区新版编辑器体验调研

在什么情况下，使用开源防火墙来保护/保护/过滤公司网络是可以的？对于小型企业来说，似乎有许多开源防火墙的替代方案(pfSense、smoothwall、m0n0wall)，这将通过降低初始成本来节省公司的资金。

问开源防火墙或商业防火墙
EN

回答 8

Server Fault用户

Server Fault用户

Server Fault用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问开源防火墙或商业防火墙EN

回答 8

Server Fault用户

Server Fault用户

Server Fault用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问开源防火墙或商业防火墙
EN