Firewall Hardware recommendations?

johnpoz

@VerticalTechnik said in Firewall Hardware recommendations?:

Netgate is no option

Out of curiosity why is that exactly? Are they not available in your area? Cost?

The little sg1100 could more than handle such a network of 100/50 bandwidth. Its less than 200 bucks.. Some little china box isn't going to be drastically cheaper than that..

Dobby_

@VerticalTechnik

I was wondering if anyone can recommend a good no-name Firewall
Hardware which supports pfSense?

What version of pfSense you want to run on that hardware pfSense+ or CE?

Use case:
Small business up to 20 workdesks
Network 100MBPs DL / 50MBPs UL
LAN, WAN, DMZ connected

Intel N100
Glovary Firewall Mini PC Quad Core N100, DDR5 16GB RAM 256GB NVMe SSD, 6 x 2.5GbE i226V LAN
325 € @ amazon.de

Pentium Gold 8505
HUNSN Intel Pentium Gold 8505, RJ24, AES-NI, 6 x 2.5GbE I226-V, HDMI, DP, USB3.2, Type-C, TF, 16G RAM, 256G SSD
383 € @ amazon.de

Pentium Gold 8505 w/ 10 GBit/s ports
ROUAFWIT Mini PC 10Gbe Firewall Pentium 8505, DDR5 16GB RAM M.2 NVMe 256GB SSD, 2 x 10 Gigabit Ethernet SFP Micro Router Lüfter Gerät Computer, 4 x i226V 2.5GbE LAN
485 € @ amazon.de

pfSense supported

pfSense+ and CE will run on them.

Netgate is no option, therefore I am searching for any other FW and looking for any experience feedback of other pfSense users running no-name Firewalls.

Why? If you run pfSense+ on it you may need to pay for a TAC on top!

johnpoz

@Dobby_ I doubt they need such connectivity, I highly doubt they actually have a 100 MByte, they prob meant Mbps.. If they actually meant MByte, then that is very odd connection plan.. I mean I guess they could have 800/400mbps but more likely just a typo.

Those boxes are pretty beefy for 20 users on a 100/50 mbps connection ;) 2.5ge connections, and and one with 2x10ge

VerticalTechnik

@Dobby_ THX for your answer, much appreciated.
I understand your question regarding "why no Netgate".
There is a older post regarding Netgate MX entry which points to Google.
Therefore we do not buy such devices. It is a company policy.
We try to avoid anything which has something to do with Meta and its third-parties.

johnpoz

@VerticalTechnik said in Firewall Hardware recommendations?:

Therefore we do not buy such devices. It is a company policy.

but you can use their software on some china box - that is ok <rolleyes>

VerticalTechnik

@johnpoz I will not question the policy of my boss, I am only the guy who has to find a solution.

johnpoz

@VerticalTechnik Makes no sense - hey we won't support company X because they host their email on google by buying their hardware.. But its ok to use their software??

Uglybrian

I have the older version of this board C2000 Series.

Blow would be my recommendation.

https://www.acmemicro.com/Product/16085/Supermicro-A2SDi-4C-HLN4F-MotherBoard-Intel-Atom-UP-C3558-4-Core-DDR4-SATA3-4x-1GbE-1x-PCI-E-M-2-Mini-ITX?pager_index=

VerticalTechnik

@johnpoz

Hypothetically speaking... if we would decide to buy for expl. Netgate 4200 and running pfSense.
Are there any yearly additional (licensing) costs to calculate?

stephenw10

Not on Netgate hardware, pfSense Plus is included.