Recommendation for small office hardware firewall

[askic]

Dear experts,

I'd like to ask you for a recommendation of small office firewall.
I have office LAN consisting of about 10 computers (192.168.1.xxx) and they are currently connected to the one network interface card of the server. Server has another NIC and is connected to the other network.
On this server is installed web server and application that performs some kind of data processing, and all office LAN machines through web browser connect to the 192.168.1.100:8080 and server presents its data to the clients. So, all LAN machines (192.168.1.xxx) are web clients. Since server is connected to two networks (it has two NICs) 192.168.1.xxx and 172.xxx.xxx.xxx I want to install hardware firewall that will pass through only http request from the client web browser through port 8080 to the server. I want to allow connection form clients browsers only to http://192.168.1.100:8080. All other type of connections should be blocked. Principle connections are shown in the attached file.
I understand it is the best to use HW and SW firewall for such purpose.
Can you recommend some relatively simple to configure firewall for such purpose?


Thank you.

 

[iko22]

Hello askic, does this article answer your question:
Guidelines for blocking specific firewall ports to prevent SMB traffic from leaving the corporate environment | Microsoft Support ?

 

[askic]

Hello iko22,

this is for sure helpful. I was hoping to read a recommendation for a hardware firewall device such as Fortigate or similar, that is suitable for a small office use.

Thank you very much, this advice will increase security for sure.

 

[samuria]

As the lan uses NAT it cant be accessed from the internet unless you open ports or something on the network opens a port