Reply to thread

Message

<blockquote data-quote="kC77" data-source="post: 983141" data-attributes="member: 92796">Ive got the Ubiqiti UDM Pro which has a nice useful IDS built in, app control, Geoblocking, IDS etc, its good, certainly not enterprise class, but for home use their OK.I make lots of use of its vlans for separate isolated subnets (trusted lan/nixlan/wfhlan/iotlan/guestlan/cctvlan etc) keeping everything separated, or interlan allowed by specific firewall rules.The IDS built into it, is basically something free called &quot;surricata&quot;&nbsp; <a href="https://suricata.io/" target="_blank">Home - Suricata</a> so there is no yearly subscription costs etc.and while I didnt get the device for CCTV, it even has a unifi protect thing built in and the slot for a hard drive.The UDM is quite weak for VPN it only has L2TP or teleport (unifi only vpn) you can though hack other services in as its linux based&nbsp;never heard about firewalla, so cant commentyou could also take a look at crowdsec which is free IDS, could possibly run a pi (ive not really looked that much into it)Have you possibly thought about Sophos XG which is free (you just need a small/cheap pc with 2nic&#039;s) route your traffic through thatsomething to look out for (depends on your internet provider speed) is firewalls throughput when any IDS/DPI etc is enabled... and this was one of the selling points for me with the UDM was that with DPI/IDS on full it can still do 3.5GPS throughput (ive only got 1gb anyway but futureproofing!)Some older like the USG etc will have much lower throughput with IDS on (probably 85-300mb or so)</blockquote>

[QUOTE="kC77, post: 983141, member: 92796"] Ive got the Ubiqiti UDM Pro which has a nice useful IDS built in, app control, Geoblocking, IDS etc, its good, certainly not enterprise class, but for home use their OK. I make lots of use of its vlans for separate isolated subnets (trusted lan/nixlan/wfhlan/iotlan/guestlan/cctvlan etc) keeping everything separated, or interlan allowed by specific firewall rules. The IDS built into it, is basically something free called "surricata" [URL='https://suricata.io/']Home - Suricata[/URL] so there is no yearly subscription costs etc. and while I didnt get the device for CCTV, it even has a unifi protect thing built in and the slot for a hard drive. The UDM is quite weak for VPN it only has L2TP or teleport (unifi only vpn) you can though hack other services in as its linux based never heard about firewalla, so cant comment you could also take a look at crowdsec which is free IDS, could possibly run a pi (ive not really looked that much into it) Have you possibly thought about Sophos XG which is free (you just need a small/cheap pc with 2nic's) route your traffic through that something to look out for (depends on your internet provider speed) is firewalls throughput when any IDS/DPI etc is enabled... and this was one of the selling points for me with the UDM was that with DPI/IDS on full it can still do 3.5GPS throughput (ive only got 1gb anyway but futureproofing!) Some older like the USG etc will have much lower throughput with IDS on (probably 85-300mb or so) [/QUOTE]

Verification