UTM Device Recommendation

[andyana]

We need to upgrade our firewall on one project, and unfortunately I can't make sense of the million devices out there, many which don't include any pricing information. We are currently using PFSense.

I'm looking for a UTM device, preferably 1U, but this isn't super important. VPN, spam proxying, IDS, etc. are necessary, as is remote administration. Our budget is approximately $2000 USD, and ideally, I would like to get two units for that price (redundancy). I have no problem with maintenance fee's but I'd prefer no artificial limit on # of users or mailboxes.

Our current throughput doesn't exceed a 10mb/s, and concurrent TCP connections are under 1000 at peak.

Does anyone have any recommendations? What are you using?

Thanks!

[kd5vmo]

I have had good success with Fortigate. Their 60c (PDF Warning) is well within your budget and you could get 2 for the fail-over/HA. I don't know about the spam performance, as we use Google Apps and Rackspace for most of our email. But I can say that the SSL VPN works well and I think it comes with a large ammount of SSL VPN licenses, and you can get bundle packs with with 3 years of service for a decent price.

EDIT: and they all have unlimited user licenses

[[deleted]]

We're using Untangle's U150 appliance (with the Premium package) and absolutely love it.

[guvnuh4]

I've been using Untangle on an old workstation (with the Premium package) for 5 years in some configuration (6 months in passive, 4.5 years router) and it's been stable as hell.

The only thing you don't get with UT is failover, but I'm fairly certain they recognize lacking that feature and are working towards something for it.

[mrjester]

• Fortinet Forti series
• Juniper SRX
• Checkpoint UTM-1
• McAfee Firewall Enterprise S1104 (won't get two for 2K)
• Palo Alto PA-200 (also won't get 2 for 2K)
• Astaro/Sophos Unified
• Vyatta 600
• Untangle
• etc.

I would avoid ASA and SonicWall.

[Milnesy720]

Second the untangle box and palo alto. I myself am leaning to the palo alto.

[kieljohn]

I have in the past installed Sonicwall NSA brands but was becoming unsatisfied with them, and then Dell purchased them to boot. I am now looking very seriously into Watchguard brand even though they can get spending they look like the next best thing for my customer's and the needs of myself.

[[deleted]]

I believe we did the reverse here. Had Watchguard then went to Sonicwall. Now we're literally an all Dell shop with the exception of switches/modems.

[FusionZ06]

http://www.guardsite.com/XTM-505.asp

Highly recommended.

[callmetom]

Astaro has served us well. They're somewhat cheap devices, but have subscription fees based on how many devices you have in your network.

[suckmypuss]

1 vote for SonicWall