Want to buy a VPN Firewall for home/test lab

By fusi0n
in Smart Home, Network & Security

 Share

Recommended Posts

Grand Master

fusi0n

Posted
Posted

I have been looking at firewalls to purchase to mess around with. I had a monowall but that computer died. I don't want to spend a lot of money, but I want something that is going to let me VPN and open ports. I don't want to use a home router just simply because..

I have found a Fortinet 50B for around $150, these where made in 2007.. I am not sure if it would be a good idea to buy a firewall that doesn't get firmware updates anymore..

I am leaning more towards this one,

http://www.amazon.com/ZyXEL-Internet-Security-Firewall-Dual-WAN/dp/B0042WCFI2/ref=pd_cp_e_0

Not real sure with that brand but it has a lot of good reviews.. However, you have to buy the VPN client software to VPN in.

I have also looked a bunch of different Sonicwalls but I heard do not buy a used one because if it has been registered before on mysonicwall you won't be able to use it

I am also considering this one,

http://www.newegg.com/Product/Product.aspx?Item=N82E16833122380

If I had to buy one, I would go with the Fortinet but I don't know if it good to buy a older firewall..

Feel free to add any suggestions..

  • 5 months later...
Grand Master

+BudMan MVC

Posted
  • MVC
Posted

Running it as VM has loads of advantages, one less equipment - means less power consumption as well ;) Two since I run development code of pfsense, I just take a snapshot before I do an update if something doesn't work in the update or fails, click back to my stable setup. This advantage would be there if not running development as well for when you update, but I update every few days to a couple of weeks whenever I see a new snapshot from pfsense that makes sense to go too or its been a few weeks. Currently there is issue with renewing your IPv6 address, so been updating every few days hoping for a fix, etc. It is not renewing, so you have to turn it off and grab a new one - which changes the PD your getting, so annoying when your IP range keeps changing, etc.

Three - since its VM, I can swap out any firewall distro I want very quickly never having to touch a wire. And if I setup the same mac on the different VM, I don't even have to reboot my modem, and maintain my public IP as the same, etc. So I can try out smoothwall if I want, untangle, or m0nowall, etc. etc. Or drop back to stable 2.0.2 version of pfsense if need to test something for someone, etc.

Unless your setup required too much horse power at your router/gateway for VM to make sense I don't think I will ever go back to a dedicated box for my gateway.

Grand Master

fusi0n

Posted
  • Author
Posted

Running it as VM has loads of advantages, one less equipment - means less power consumption as well ;) Two since I run development code of pfsense, I just take a snapshot before I do an update if something doesn't work in the update or fails, click back to my stable setup. This advantage would be there if not running development as well for when you update, but I update every few days to a couple of weeks whenever I see a new snapshot from pfsense that makes sense to go too or its been a few weeks. Currently there is issue with renewing your IPv6 address, so been updating every few days hoping for a fix, etc. It is not renewing, so you have to turn it off and grab a new one - which changes the PD your getting, so annoying when your IP range keeps changing, etc.

Three - since its VM, I can swap out any firewall distro I want very quickly never having to touch a wire. And if I setup the same mac on the different VM, I don't even have to reboot my modem, and maintain my public IP as the same, etc. So I can try out smoothwall if I want, untangle, or m0nowall, etc. etc. Or drop back to stable 2.0.2 version of pfsense if need to test something for someone, etc.

Unless your setup required too much horse power at your router/gateway for VM to make sense I don't think I will ever go back to a dedicated box for my gateway.

yeah, I had it running on a VM and I loved it, but I had to get rid of my ESXi host for my house.. too Loud.. lol I need to get a rack and put it my basement

Grand Master

+BudMan MVC

Posted
  • MVC
Posted

My pfsense, my file server vm my linux play box this runs 24/7/365 and then all my other play vms when I need to play with something, 2k8 box, 2k12, centos, win7 boxes, win8 vm, ntop I can fire up if want to look at traffic, freebsd, etc. etc.. Couple different copies of pfsense.

Its got 8 gb of ram - which is enough to run a few vms at once. I found out later you can bump up to 16 even though specs list 8 as max - which I might do at some point, its got 4 nics in it currently. With 4 drives, the 250GB it came with as datastore for the vms, and then 3 other disks a 2TB and 2 x 750GB for my file server - which I gave raw access to the vm and get like 50 to 70MBps file transfer off of. More than enough to play my media off of etc..

I could add 2 more disk if need be, just not in the bays. And its got esata so could add a 7th, and then usb so you could add more drives that way if you needed too. I got it on sale for like $269, plus the extra memory and nics -- you just can not beat it for a home esxi setup.

post-14624-0-40520200-1366596360.jpg

Grand Master

+BudMan MVC

Posted
  • MVC
Posted

I think the new model is the N54L - same box really, I show it currently at newegg for $339

http://www.newegg.com/Product/Product.aspx?Item=N82E16859107921

Which is not a bad price..

This topic is now closed to further replies.
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.

  • Posts

    • Game I've been Working On

      By Circaflex · Posted

      This looks awesome, I will request access via Steam later this afternoon!
    • How do you future-proof a home or small office network?

      By Circaflex · Posted

      Personally, I’ve found that it’s usually worth investing in the infrastructure you don’t want to replace later, especially cabling. Running Cat6A (or better, depending on your needs) during an upgrade is relatively inexpensive compared to having to re-cable a few years down the road. For switches I try to balance current specs with realistic growth. If my budget allows it Ill choose switches with higher uplink speeds which leaves room for expanding later on, but I don’t necessarily overspend on access ports if the endpoints won’t benefit from them anytime soon. One lesson I’ve learned is that planning for scalability pays off. It’s much easier to add devices, VLANs, or higher-bandwidth workloads when your network infrastructure already supports it than to replace hardware later.  What is your budget like?
    • How do you future-proof a home or small office network?

      By Nick H. · Posted

      I hate the term, "future-proof." We saw it back in the 90's / 2000's, if not before. You cannot future-proof anything, since there is no definition of how far into the future you plan on prepping for. Best idea is to tell us what you currently have and what its use is at the moment, and we can then offer ideas about some areas that might need an upgrade and other areas that can be left alone.
    • Celebrating Windows XP's 25th anniversary this year

      By Nick H. · Posted

      I can agree that it is being used in a small capacity. I worked for a company where their engineers still used XP, and when asked why it was because their sensor software wasn't compatible with newer operating systems and the software was discontinued so they couldn't upgrade the software. Given that the sensors were still in use by companies, they had to continue using XP to support the sensor, otherwise the price to the company would have gone into the millions or billions. Our response was simple: Ok, you can keep the XP machine. But we're removing it from the network. "But then it can't access the Internet or folder shares!" Yup, kinda the point. If someone wants to continue using an unsecure OS they can do, I have no problem with that. But it should be isolated. Simple. I had a fight with a guy in the engineering department for weeks before he finally relented. But we digress.   What do I plan on doing to commemorate the anniversary? Nothing. I have fond memories of the OS, but at the end of the day it's just an OS. If I had some time I might see if I could install it on my Raspberry Pi for a laugh. But my reflex memory with today's OS ideas would probably get me frustrated and I'd uninstall it after 5 mins.
    • Shutter Encoder 20.2

      By Copernic · Posted

      Shutter Encoder 20.2 by Razvan Serea Shutter Encoder is one of the best video converter software and image, audio available today. It has been designed by video editors in order to be as accessible and efficient as possible. It is one of the few free professional tools. Based on FFmpeg, it has the largest codec library available. You can thus convert your files into many different formats. Complete settings for the most advanced Shutter Encoder has a panel containing a large number of settings, in order to define your own choices based on your files and perfect your video or audio output. Well-thought-out settings, with parameters predefined to create files quickly and easily. List of functions Without conversion: Cut without re-encoding, Replace audio, Rewrap, Conform, Merge, Extract, Subtitling, Video inserts Sound conversions: WAV, AIFF, FLAC, MP3, AAC, AC3, OPUS, OGG Editing codecs: DNxHD, DNxHR, Apple ProRes, QT Animation, GoPro CineForm, Uncompressed YUV Output codecs: H.264, H.265, VP9, AV1, OGV Broadcast codecs XDCAM HD422, AVC-Intra 100, XAVC, HAP....and much more. Shutter Encoder 20.2 changelog: Added "Intel Quick Sync" hardware acceleration for Linux Added 'Identify speakers' option for "Audio transcription" function Improved installer package Improved video player performance Improved timecode display with drop-frame videos Improved naming convention for surround audio files Fixed splash screen freeze Fixed bug with file hanging Fixed bugs with presets loading Fixed bugs with video player's buffer Fixed bug with 'Total length of file' option Fixed bugs with 'Record screen/device' option Fixed bug with "XAVC" & "XAVC Long GOP" functions Rollback to XPDF tool for PDF conversion Removed unused binary architecture for Mac Various corrections Various improvements Download: Shutter Encoder 20.2 | 166.0 MB (Open Source) Download: Shutter Encoder Portable | 185.0 MB Links: Shutter Encoder Home Page | FAQ / Tips | macOS | Screenshot Get alerted to all of our Software updates on Twitter at @NeowinSoftware

  • Recent Achievements

    • Reacting Well
      NovaEdgeX earned a badge
      Reacting Well
    • Week One Done
      NovaEdgeX earned a badge
      Week One Done
    • One Year In
      BA the Curmudgeon earned a badge
      One Year In
    • Conversation Starter
      rosiecharles earned a badge
      Conversation Starter
    • First Post
      KMilenkoski1202 earned a badge
      First Post

  • Popular Contributors

    1. 1
      +primortal
      534
    2. 2
      +Edouard
      265
    3. 3
      PsYcHoKiLLa
      152
    4. 4
      Steven P.
      99
    5. 5
      macoman
      66
    Show More

  • Tell a friend

    Love Neowin? Tell a friend!