UTM Recommendation?

[JerryD]

What is a good UTM that will support 1 gigabyte without breaking the bank?
I have now a Sonicwall Nsa 2400 that will only download at 140 MB with most services turn o n. I had 1 Gigabyte install today and can only get 140 MB on Speedtest.net. So I am looking for a new unit to replace the old Nsa 2400. I have thought about the Sonicwall Tz 500 or 600 unit, but that will only give me 500 MB or with options turn on. I have looked at Sophia but don't like the ideal of no support unless you pay for it. (It is included in the sonicwall or at least it was before Dell sold them off). It need to support 8 ports with separate firewall rules for each port. Support Gateway Anti-Virus and malware, Ransomware, Filter Content. I know that everyone don't care for the sonicwall but I have been using one at home and work for about 7 to 10 years.
Any help would be welcome.
Thanks

 

[Deepcuts]

Build a custom x86 machine with two nics. Grab a gigabit switch.
Lots of topics in this forum about this.
Head to ipfire.org and enjoy.

 

[abailey]

Is this for home or work use?

 

[JerryD]

It would be for work but located at my home. Here is the why I have the Sonic Wall Nsa 2400 setup.
No communication between Vlans. Each port is isolated but allowed to pass to X1 Wan port out to internet.

X0 - internal Lan Vlan 1 & Vlan 4
1. X0 port to Procurve 2824 and this switch I have Access point, workstations (3) and 2 servers connected to collect all backup images. Guest wifi is on Vlan 4 on this switch which is X0:V4 and tagged on switch

X1 Wan
X2 not used
X3 x3 to hp procurve 2824 different switch different IP of 192.xxx.30.xx for all music devices...music server and wired clients
X4 x4 port to a diffenent 2824 switch and different IP range of 192.xxx.40.xx for Movie Server and 2 client for movie viewing and with 2 hopper whole home DVR.
X5 - x5 port to a different 2824 different IP range of 192.xxx.50.xx for a Test Lab and repair of computers.

Thanks Jerry

 

[MichaelCG]

Build a pfSense box...it will do what you are asking. You will be hard pressed to find a commercial system that can do what you are after for a "reasonable" price. Of course it really depends on what you define as "reasonable" from a price perspective. No need for multiple Gig ports to each switch unless you mandate physical isolation or require the dedicated bandwidth to each port. VLAN tag away and combine the switches into a single stack.

To note...a lot of the AV scanning features are become less and less critical/functional since more and more traffic is encrypted by default.

And there is nothing wrong with Sonicwall...when the case is correct for it.

 

[coxhaus]

It would be for work but located at my home. Here is the why I have the Sonic Wall Nsa 2400 setup.
No communication between Vlans. Each port is isolated but allowed to pass to X1 Wan port out to internet.

X0 - internal Lan Vlan 1 & Vlan 4
1. X0 port to Procurve 2824 and this switch I have Access point, workstations (3) and 2 servers connected to collect all backup images. Guest wifi is on Vlan 4 on this switch which is X0:V4 and tagged on switch

X1 Wan
X2 not used
X3 x3 to hp procurve 2824 different switch different IP of 192.xxx.30.xx for all music devices...music server and wired clients
X4 x4 port to a diffenent 2824 switch and different IP range of 192.xxx.40.xx for Movie Server and 2 client for movie viewing and with 2 hopper whole home DVR.
X5 - x5 port to a different 2824 different IP range of 192.xxx.50.xx for a Test Lab and repair of computers.

Thanks Jerry

Ports don't really mean anything when you are working at UTM levels. UTM devices are scanning at upper levels.

Untangle or pfsense would be the cheap choices for home. You also need to build a network structure to support your level of security you want.

 

[JerryD]

Thanks everyone for your ideals. I will check them out.
Thanks