Want to buy a VPN Firewall for home/test lab

By fusi0n
in Smart Home, Network & Security

 Share

Recommended Posts

Grand Master

fusi0n

Posted
Posted

I have been looking at firewalls to purchase to mess around with. I had a monowall but that computer died. I don't want to spend a lot of money, but I want something that is going to let me VPN and open ports. I don't want to use a home router just simply because..

I have found a Fortinet 50B for around $150, these where made in 2007.. I am not sure if it would be a good idea to buy a firewall that doesn't get firmware updates anymore..

I am leaning more towards this one,

http://www.amazon.com/ZyXEL-Internet-Security-Firewall-Dual-WAN/dp/B0042WCFI2/ref=pd_cp_e_0

Not real sure with that brand but it has a lot of good reviews.. However, you have to buy the VPN client software to VPN in.

I have also looked a bunch of different Sonicwalls but I heard do not buy a used one because if it has been registered before on mysonicwall you won't be able to use it

I am also considering this one,

http://www.newegg.com/Product/Product.aspx?Item=N82E16833122380

If I had to buy one, I would go with the Fortinet but I don't know if it good to buy a older firewall..

Feel free to add any suggestions..

  • 5 months later...
Grand Master

+BudMan MVC

Posted
  • MVC
Posted

Running it as VM has loads of advantages, one less equipment - means less power consumption as well ;) Two since I run development code of pfsense, I just take a snapshot before I do an update if something doesn't work in the update or fails, click back to my stable setup. This advantage would be there if not running development as well for when you update, but I update every few days to a couple of weeks whenever I see a new snapshot from pfsense that makes sense to go too or its been a few weeks. Currently there is issue with renewing your IPv6 address, so been updating every few days hoping for a fix, etc. It is not renewing, so you have to turn it off and grab a new one - which changes the PD your getting, so annoying when your IP range keeps changing, etc.

Three - since its VM, I can swap out any firewall distro I want very quickly never having to touch a wire. And if I setup the same mac on the different VM, I don't even have to reboot my modem, and maintain my public IP as the same, etc. So I can try out smoothwall if I want, untangle, or m0nowall, etc. etc. Or drop back to stable 2.0.2 version of pfsense if need to test something for someone, etc.

Unless your setup required too much horse power at your router/gateway for VM to make sense I don't think I will ever go back to a dedicated box for my gateway.

Grand Master

fusi0n

Posted
  • Author
Posted

Running it as VM has loads of advantages, one less equipment - means less power consumption as well ;) Two since I run development code of pfsense, I just take a snapshot before I do an update if something doesn't work in the update or fails, click back to my stable setup. This advantage would be there if not running development as well for when you update, but I update every few days to a couple of weeks whenever I see a new snapshot from pfsense that makes sense to go too or its been a few weeks. Currently there is issue with renewing your IPv6 address, so been updating every few days hoping for a fix, etc. It is not renewing, so you have to turn it off and grab a new one - which changes the PD your getting, so annoying when your IP range keeps changing, etc.

Three - since its VM, I can swap out any firewall distro I want very quickly never having to touch a wire. And if I setup the same mac on the different VM, I don't even have to reboot my modem, and maintain my public IP as the same, etc. So I can try out smoothwall if I want, untangle, or m0nowall, etc. etc. Or drop back to stable 2.0.2 version of pfsense if need to test something for someone, etc.

Unless your setup required too much horse power at your router/gateway for VM to make sense I don't think I will ever go back to a dedicated box for my gateway.

yeah, I had it running on a VM and I loved it, but I had to get rid of my ESXi host for my house.. too Loud.. lol I need to get a rack and put it my basement

Grand Master

+BudMan MVC

Posted
  • MVC
Posted

My pfsense, my file server vm my linux play box this runs 24/7/365 and then all my other play vms when I need to play with something, 2k8 box, 2k12, centos, win7 boxes, win8 vm, ntop I can fire up if want to look at traffic, freebsd, etc. etc.. Couple different copies of pfsense.

Its got 8 gb of ram - which is enough to run a few vms at once. I found out later you can bump up to 16 even though specs list 8 as max - which I might do at some point, its got 4 nics in it currently. With 4 drives, the 250GB it came with as datastore for the vms, and then 3 other disks a 2TB and 2 x 750GB for my file server - which I gave raw access to the vm and get like 50 to 70MBps file transfer off of. More than enough to play my media off of etc..

I could add 2 more disk if need be, just not in the bays. And its got esata so could add a 7th, and then usb so you could add more drives that way if you needed too. I got it on sale for like $269, plus the extra memory and nics -- you just can not beat it for a home esxi setup.

post-14624-0-40520200-1366596360.jpg

Grand Master

+BudMan MVC

Posted
  • MVC
Posted

I think the new model is the N54L - same box really, I show it currently at newegg for $339

http://www.newegg.com/Product/Product.aspx?Item=N82E16859107921

Which is not a bad price..

This topic is now closed to further replies.
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.

  • Posts

    • The official Funny Pictures thread

      By Steven P. · Posted

    • Celebrating Windows XP's 25th anniversary this year

      By carols23 · Posted

      If I could, I would commemorate it the best way possible: Replacing old machines that are still running Windows XP with something more modern, stable and better.     Noone and nothing should be running Windows XP in 2026.
    • Google's new hand-wave reCAPTCHA can be bypassed with a stock photo

      By Ivan Jenic · Posted

      Google's new hand-wave reCAPTCHA can be bypassed with a stock photo by Ivan Jenic Image: Screenshot Google is testing a new reCAPTCHA method that asks you to wave at your camera to prove you're human. So, besides solving puzzles and reading distorted text, you can now use your computer’s camera to pass the verification test. When the hand gesture verification is triggered, your browser asks for camera access and prompts you to perform a simple gesture, like a wave or an open palm. Google says it records a short video of the movement and uses AI to extract 21 hand-knuckle coordinates to complete the verification process. The video is then immediately deleted, and Google swears it doesn't keep it. The process alone can be uncomfortable for people who wouldn’t want their biometric data, which hand scans technically qualify as, recorded. But it gets even more nuanced, as early testers discovered that the new hand-waving reCAPTCHA can be passed with a simple stock image. A user on X tested the new challenge using a stock image of a hand fed through OBS Virtual Camera, and it passed. I wanted to verify it, so I tried the same thing. It took me a few tries and a few stock images, but in the end, I was also able to pass the test. I simply had to readjust the stock image of a generic person waving inside OBS, and Google’s mechanism registered it as a legitimate hand gesture. Once again, it didn’t even have to be a video or an AI-generated hand animation. Given the simplicity of the process, the entire action can be automated in minutes. All it takes is a simple Python script to render the new reCAPTCHA method obsolete. And it doesn’t even have to be an AI bot, which is usually used for solving puzzles and other verification methods. The new reCAPTCHA method is still in its early phase, and Google will, hopefully, update its AI to at least reject still images. However, this incident, combined with users’ initial skepticism about Google’s practices regarding user data, likely won’t make too many people wave at the camera anytime soon.
    • Why it's almost impossible to produce a smartphone in the United States

      By monterxz · Posted

      🤣🤣🤣🤣🤣 "to fund healthcare and tuition" 🤣🤣🤣🤣 Who do you think you are talking about, some COMMUNIST? We are better than them, doG bless Murica!!! p.s. I'm from a country where government does exactly that, i.e. not form US.
    • Microsoft Edge gets tons of security features, including AI model that can see your screen

      By ad47uk · Posted

      Apparently not. I know it is on Edge for business at the moment, but how long will it be before it become on the home version of Edge?

  • Recent Achievements

    • First Post
      carols23 earned a badge
      First Post
    • One Month Later
      Tom Willson earned a badge
      One Month Later
    • Apprentice
      Asgardi went up a rank
      Apprentice
    • One Month Later
      sunrisea2milk earned a badge
      One Month Later
    • Week One Done
      sunrisea2milk earned a badge
      Week One Done

  • Popular Contributors

    1. 1
      +primortal
      494
    2. 2
      +Edouard
      255
    3. 3
      PsYcHoKiLLa
      151
    4. 4
      Steven P.
      90
    5. 5
      macoman
      66
    Show More

  • Tell a friend

    Love Neowin? Tell a friend!