Prepurchase - Does a sg 2220 with 60GB SSD enough ooommppph to run Snort?



  • If I want to use pfSense as a home firewall (15-20 devices in our house) and run Snort for Intrusion Detection? We've got a decent home internet connection 15 down, 10 up. We might eventually upgrade to 50 down, 10 up.

    Currently we only have one IoT device a Roku. Eventually there might be more.

    My primary goals are:

    • to make sure that our devices are secure at home
    • detect when devices that travel: phones, laptops etc have been infected

    Thoughts on the capacity of the SG 2220 for this task?

    Cheers
    Mark



  • @mlevison:

    If I want to use pfSense as a home firewall (15-20 devices in our house) and run Snort for Intrusion Detection? We've got a decent home internet connection 15 down, 10 up. We might eventually upgrade to 50 down, 10 up.

    Currently we only have one IoT device a Roku. Eventually there might be more.

    My primary goals are:

    • to make sure that our devices are secure at home
    • detect when devices that travel: phones, laptops etc have been infected

    Thoughts on the capacity of the SG 2220 for this task?

    Cheers
    Mark

    The pfsense install, snort, squid, pfBlockerNG, openvpn-client-export combined will take up around 2% of your 60GB SSD.  Then just use whatever size you from the remaining space for your squid cache.

    With regards to the  SG-2220 it seems to be on par with the N3150N which is good enough.



  • SOUK - thanks for the reply. I'm not thinking about the install size - its about snorts use of capacity: does the box have enough CPU to keep Snort happy (I think you implied yes) and is the SSD large enough for the logs that snort generates/needs (again I think you imply yes).

    Cheers
    Mark



  • That should handle 50Mbps just fine.  We've done 100 Mbps on an APU1D and it worked just fine.  You'll just be looking at longer boot times but once it's loaded you shouldn't have any issues with it.


Log in to reply