Reply to thread

Message

<blockquote data-quote="kC77" data-source="post: 983168" data-attributes="member: 92796">The UDM is a great device, secure, cheap, probably the fastest firewall with IDS/DPI in that pricerange (if you have a fast line above 1GBPS and want ids/dpi you need to look into the firewalls rated throughput with inspections on) the udm is rated 3.5GPS with full DPI/IPS On which is better than some of the enterprise gear our customers use.you could get an old USG turn on all the advanced IDS/DPI and your throughput limited to 85mbps...&nbsp; So thats a really important factor when looking into a gateway security device, make sure it can handle the speed of your internet provider!The interface is simple, well laid out has bags of features, something that really lets it down is the firewall logging, but you can get these by ssh&#039;ing into it...There is also more advanced stuff you can do via ssh, and install extra things.... you could even install a pihole onto the UDM or other linux apps if you so required, or wireguard VPN support etc (mines vanilla, and i have separete pi&#039;s for pihole etc)by default its simple, but it can be semi hacked for more advanced stuff to.Will have a read about firewalla later!Pfsense gets lots of praise for being about the best firewall people use, not sure if youve looked into that either?</blockquote>

[QUOTE="kC77, post: 983168, member: 92796"] The UDM is a great device, secure, cheap, probably the fastest firewall with IDS/DPI in that pricerange (if you have a fast line above 1GBPS and want ids/dpi you need to look into the firewalls rated throughput with inspections on) the udm is rated 3.5GPS with full DPI/IPS On which is better than some of the enterprise gear our customers use. you could get an old USG turn on all the advanced IDS/DPI and your throughput limited to 85mbps... So thats a really important factor when looking into a gateway security device, make sure it can handle the speed of your internet provider! The interface is simple, well laid out has bags of features, something that really lets it down is the firewall logging, but you can get these by ssh'ing into it... There is also more advanced stuff you can do via ssh, and install extra things.... you could even install a pihole onto the UDM or other linux apps if you so required, or wireguard VPN support etc (mines vanilla, and i have separete pi's for pihole etc) by default its simple, but it can be semi hacked for more advanced stuff to. Will have a read about firewalla later! Pfsense gets lots of praise for being about the best firewall people use, not sure if youve looked into that either? [/QUOTE]

Verification