Digen is absolutely right.
A dedicated firewall is typically used in large corporates, cost something like a kidney or two put together
, support a huge number of users, give VPN support, et cetera. Examples would the the Cisco PIX series, although I kind of tend to favor the Symantec like the Symantec Gateway Security 5400 series featured here (no specific reason for this though)
*enterprisesecurity.symantec.com/products/products.cfm?productid=133
Also, there these gadgets called router cum firewalls (SPI and NAT or both). These are
not pure hardware firewalls (using the above description), but in a way they are hardware based rather than depending on the PC environment (which I would rather term as Software Personal firewall -examples being XP's inbuilt firewall, Sygate Personal/Pro, etc.). Please note that these routers cum firewalls (
hardware-based firewalls if you would prefer calling them) do their job fine for the SOHO user and may cost you around Rs 3000/-
NVidia have actually implemented the same technology (hardware-based firewalls) in the nforce3 250gb and nforce ultra series of chipsets bring huge value to these desktop products.
What Pradeep described, I am not sure if I could call it a hardware solution, but I guess he is right. I am not much of a Linux person.
Personally, I have found it very nifty in a small business environment. First, I don't need to keep the PC connected to the Internet/running the proxy servers on (save electricity bills), especially when no one is working on that PC. Secondly if the router-cum-hardware-based firewall has good filtering features and provides DMZ for my own personal rig (selfish me) , I don't need to spend extra money on a good Internet sharing software (that does not come free)
Guys, do correct me if I am wrong on any counts.
DH.
Addendum
The routers-cum-firewalls (or
hardware-based firewalls if you prefer) I have used from SMC and Linksys have a lot of nifty features:
* SPI
* NAT
* Access Control
* MAC Filter (so that only PCs/notebooks whose MAC's are entered can access the network)
* URL Blocking (by site, keywords)
* DMZ
* Intrusion Detections (Detections are automatically emailed to my email address)
I would say pretty neat for the price I paid for them.
DH