Comment on Anon witnesses excellent security
MehBlah@lemmy.world 1 day agoFor a small to medium sized business pfsense is the only solution that makes sense. The only requirement is that you have a actual sysadmin on staff and not a vendor jockey.
wer2@lemmy.zip 1 day ago
OPNsense is also a viable alternative.
MehBlah@lemmy.world 1 day ago
Sure, I’ve tried it but honestly there wasn’t much difference. I use pfsense because its what I started with. I imagine if you started with opnsense it would be the same thing. I use pfsense+ licensing for all the routers at work and that makes the higher ups happy that its has commercial support if needed.
shalafi@lemmy.world 1 day ago
Tried that for awhile at home, just didn’t seem as robust. Also, you can get Netgate hardware if the company doesn’t want a 10-yo Dell running the edge.
MehBlah@lemmy.world 1 day ago
Bought some of the higher end negate routers for work. 1u rack mount. Five locations all linked with fail over tunnels. I run our filter and monitoring on them as well . Pfblockng works great for general purpose filtering. When you filter porn you really need a lot of ram. The intel boards they have are a little finicky on the type of SFP you can install but other than that they work great.
shalafi@lemmy.world 1 day ago
Running a 1U work gave me! Haven’t messed with it much, just works.
nova_ad_vitum@lemmy.ca 1 day ago
I’ve had opnsense running for 7 years without a single issue. It might be the most reliable part of my whole setup.