Big firewall for small offices

To configure the server, simply supply the IP addresses for the network cards as needed (one for the internal network and one for the external network) or instruct your machine to use DHCP (Dynamic Host Configuration Protocol). If you happen to be using a popular dynamic DNS to provide a static domain name to your dynamic DHCP-driven IP address, SME Server can automatically update the dynamic DNS every time your IP address changes, a very nice feature indeed.

If your office does not have a permanent, high-speed connection to the Internet, the server can automatically dial up your ISP as needed. It can even optimize the connection to reduce off-hook time or minimize wait time. Again, those preferences can be set in seconds.

Similarly, administering SME Server requires almost no heavy lifting. The system administration Web interface is appealingly simple, obviating the need to edit command files or master arcane Unix-style commands. The system can run as a strongly configured firewall and gateway right out of the box, and if you ever need to modify settings, the Web interface enables you make to adjustments simply and easily.

Finally, new software, in the form of "blades" offered periodically by Mitel Networks, can be reviewed, downloaded, and activated with just a few mouse clicks, making security upgrades a breeze.

Mitel's blades boast functionality ranging from security upgrades to MP3 jukeboxes -- just the ticket for companies that want to stay on top of the latest security developments but can't afford the expense of a full-time security expert.

Granted, a seasoned security administrator could do an even more thorough job of locking down a firewall. For example, the /usr directory tree could be moved to a read-only partition, which would give crackers less of an opportunity to do damage if they should find holes in your network. Then again, doing so would also increase the complexity of performing security updates.

And that's the trade-off. SME Server probably isn't the best solution for large companies because it doesn't offer the most robust functionality on the market, and because trained security personnel probably don't want menus insulating them from the nitty-gritty details of security administration. On the other hand, SME Server can be rolled out quickly and it won't ask you for constant baby-sitting when it's active. That makes it tough to beat for satellite offices or smaller businesses.