Recommendation for a Hardware Firewall

By MJD
in Smart Home, Network & Security

 Share

Recommended Posts

Proficient

MJD

Posted
Posted

Looking for recommendations that for a hardware firewall that can auto-update a IP blacklist from subscription service like iblocklist.com.  Will also accept advice on how to possibly program an update list into a Ubiquiti Edge Router.  Although I would prefer to distribute the firewall tasks to a firewall specific device.  Thanks in advance!

Proficient

MJD

Posted
  • Author
Posted
10 minutes ago, theefool said:

Something like this?  https://community.ui.com/questions/Using-spamhaus-lists/4aa976c1-69eb-4970-85fe-57216c4aebe2

 

Yes, that is very helpful, thank you!  I still would prefer a stand alone firewall, but will implement this if it comes down to it.  Thanks again!

Grand Master

Mindovermaster Global Moderator

Posted
  • Global Moderator
Posted

If you are familiar with PfSense, you can put that on ANY hardware.

 

But, being a small business, you'd need to pay for it.

 

Isn't there some IT people in your business to help?

Grand Master

Jason S. Global Moderator

Posted
  • Global Moderator
Posted

i think an option from Barracuda or Forcepoint might be in your ballpark. Their lower end models should be sufficient. The real money is not in the hardware, but in the subscription services. You'll want to get their automatic update subs and support.

Grand Master

+BudMan MVC

Posted
  • MVC
Posted
On 16/02/2021 at 11:12, Mindovermaster said:

But, being a small business, you'd need to pay for it.

Huh?  This is not true.. You can run pfsense FREE be it you home user or largest of largest Corporations..

 

Even with the new pfsense+ which is geared more towards business.  There is no cost to this as of yet, and if you have a netgate appliance it is included. And they have stated they will at somepoint release this to non netgate hardware.  Free for home/lab use was mentioned.  But no cost structure has been released if you want to run pfsense+ on your own hardware, and are a business..  So not clear how that will work out.

 

But you can always run the FREE community version on any hardware you have or even their own appliances.  For FREE, be it you have 1 or 100 of them.. Be it a some little tiny old work station pc, or a monster of a box that cost you 10K to build..

 

If you do not want to replace your current firewall.. You could always run pfsense on whatever hardware you have around.  Or purchase one of the netgate appliances.  They start at like $180 for the sg1100 model, which may be enough for what your wanting to do?  Then they ramp up to a $3k device..

 

No matter what you run it on, even a VM for example.  The build in alias system allows you to pull a list of IPs from anywhere you want pretty much to use in your firewall rules.  Or you could use the pfblocker package to help manage lists of IPs or domains or even ASNs to block traffic..

 

I would highly recommend taking a look to pfsense for sure - it should be easy to handle what you have described.

 

Where pfsense currently gets money is from the sale of their appliances, and support contracts for enterprise users..  But there is nothing saying you have to get a support contract or pay for a license for software.  Other than their new TNSR software - which is geared to moving lots of packets.. This is for corps needing to do stuff at 10gig plus, etc..

 

edit: example, I currently use pfblocker for some IP based block lists pulling geoip info (maxmind db) and couple public available lists..

example.thumb.png.0181c8e56c9935c1854a8f51f61f13f3.png

 

pfblocker also has a lot of predefined lists you can pick and choose from if you want..

 

feeds.thumb.png.d9dac85174d7b2449fbfdb4078e492b6.png

 

That is just the very top of the list of feeds you can choose from... Listing them all would be a very long image ;)

 

Grand Master

Mindovermaster Global Moderator

Posted
  • Global Moderator
Posted (edited)
35 minutes ago, BudMan said:

Huh?  This is not true.. You can run pfsense FREE be it you home user or largest of largest Corporations..

 

Even with the new pfsense+ which is geared more towards business.  There is no cost to this as of yet, and if you have a netgate appliance it is included. And they have stated they will at somepoint release this to non netgate hardware.  Free for home/lab use was mentioned.  But no cost structure has been released if you want to run pfsense+ on your own hardware, and are a business..  So not clear how that will work out.

 

But you can always run the FREE community version on any hardware you have or even their own appliances.  For FREE, be it you have 1 or 100 of them.. Be it a some little tiny old work station pc, or a monster of a box that cost you 10K to build..

 

If you do not want to replace your current firewall.. You could always run pfsense on whatever hardware you have around.  Or purchase one of the netgate appliances.  They start at like $180 for the sg1100 model, which may be enough for what your wanting to do?  Then they ramp up to a $3k device..

 

No matter what you run it on, even a VM for example.  The build in alias system allows you to pull a list of IPs from anywhere you want pretty much to use in your firewall rules.  Or you could use the pfblocker package to help manage lists of IPs or domains or even ASNs to block traffic..

 

I would highly recommend taking a look to pfsense for sure - it should be easy to handle what you have described.

 

Where pfsense currently gets money is from the sale of their appliances, and support contracts for enterprise users..  But there is nothing saying you have to get a support contract or pay for a license for software.  Other than their new TNSR software - which is geared to moving lots of packets.. This is for corps needing to do stuff at 10gig plus, etc..

 

edit: example, I currently use pfblocker for some IP based block lists pulling geoip info (maxmind db) and couple public available lists..

 

pfblocker also has a lot of predefined lists you can pick and choose from if you want..

 

That is just the very top of the list of feeds you can choose from... Listing them all would be a very long image ;)

 

I thought it was free for home use, but wasn't for small-to-large business use. Guess I was wrong.

 

Anyway, follow what he says. ^

Grand Master

+BudMan MVC

Posted
  • MVC
Posted

^ many a company running pfsense.. All free - unless they get a support contract.  We run a few of their 3100's and a older 2440 in some branch locations.. Other than the cost of the box - there is no other cost.

Grand Master

Mindovermaster Global Moderator

Posted
  • Global Moderator
Posted
1 hour ago, BudMan said:

^ many a company running pfsense.. All free - unless they get a support contract.  We run a few of their 3100's and a older 2440 in some branch locations.. Other than the cost of the box - there is no other cost.

Oh, OK. Support only, got it.

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.

  • Posts

    • The Trump administration doesn't want you to use OpenAI's GPT-5.6 without its approval

      By David Uzondu · Posted

      The Trump administration doesn't want you to use OpenAI's GPT-5.6 without its approval by David Uzondu Image via @realDonalTrump (X) As OpenAI prepares the release of its next model, GPT 5.6, the White House has instructed the company to limit the distribution of the software to a small group of government-approved partners instead of the general public, as it has done with previous releases. According to The Information, OpenAI Chief Executive Officer Sam Altman sent an internal memo to staff on Thursday explaining that the federal government will approve access "customer by customer" during an initial preview phase. Altman noted in the communication that this restrictive rollout is "not [their] long-term model" for software deployment, and the company plans to work toward a "more sustainable" distribution method later. CNN said that both OpenAI and the Trump administration view the capabilities of GPT 5.6 on the same level as Anthropic's Mythos and that government officials intend to "collaborate with frontier AI labs to develop shared approaches for addressing the challenges of scaling this technology." The latest restriction comes just weeks after the US Commerce Department decided to restrict Fable, a version of Mythos with extra safety "guardrails" to prevent users from exploiting software vulnerabilities. Not long after the release, though, researchers at Amazon found a way to bypass these restrictions, prompting an aggressive response from federal authorities. The government ordered Anthropic to cut off access for non-US citizens located outside the US, non-US citizens living inside the US, and incredibly, even Anthropic's own foreign-born employees. Anthropic now appears to be building a workaround to resolve this compliance block with an update to its Privacy Policy that introduces a category called "Verification Data" to handle KYC and Digital IDs. This setup could mandate digital identity checks to filter users by nationality, requiring a government-issued ID and facial biometric data. Who knows? Maybe in the future, you would have to scan your US Passport or State ID to prove your citizenship before you are allowed to chat with Fable 5 (or any other model).
    • PowerToys is getting a new window management utility

      By matthiew · Posted

      When Windows 7 was released I created an AutoHotkey script that uses Alt+` as a keyboard shortcut to move a window across monitors. I have been using that script for over 15 years and this is the first time I have come across another app that uses the same shortcut!
    • Politically funny images of the World

      By +Edouard · Posted

    • Windows 10 quietly gets one more year of support and updates

      By matthiew · Posted

      I called it last year that they wouldn't end support when they said there would. There are too many people still on Windows 10 waiting for something better to upgrade to and 11 ain't it! The recent promises of fixing Windows 11's many problems is nice, but unless they deliver on those promises in a big way then I expect customers will still want to stick with 10.
    • Microsoft raises Xbox console prices by up to $150, discontinues 2TB version

      By qbrick · Posted

      Full ACK. I went too far adressing your post specifically. And as you said, it up to us customers as participant of the market dynamic as it happens to decide whether we spend our money on a product or not. The responsibility is to the company. In case of this price hike one could assume that MS is expecting or even starting to see a new interest in XBox hardware so they want to avoid losses per unit sold. I find it fair enough that they granted a period in which everyone interested could grab a unit for the current price (Amazon.de has a reliable stock of XBox Series X digital, which I bought last December after having sold my day one Series X a year ago). It is not that they cash up their customers starting on Monday. Cheers and let's cling to our perfectly fine hardware as long as we deem it worthy in relation to purchasing something new!

  • Recent Achievements

    • Week One Done
      xvvxcvv earned a badge
      Week One Done
    • One Month Later
      xvvxcvv earned a badge
      One Month Later
    • Enthusiast
      Xonos went up a rank
      Enthusiast
    • Conversation Starter
      Admir earned a badge
      Conversation Starter
    • First Post
      The_Focal_Point earned a badge
      First Post

  • Popular Contributors

    1. 1
      +primortal
      412
    2. 2
      +Edouard
      170
    3. 3
      PsYcHoKiLLa
      129
    4. 4
      neufuse
      69
    5. 5
      Xenon
      68
    Show More

  • Tell a friend

    Love Neowin? Tell a friend!