I have to agree about the Watchguard. The X core series look great on
paper and setup and management are as simple as advertised, but it can't
run any of the add-in applications or even it's own proxies without
running out of memory. It also gives itself a DOS if you have more than
about 300 connections open. One person running a web broadcast can kill
it, requiring someone go into the computer room to do a hard reboot.
I'm in the process of building a ipcop firewall which has handled all
the traffic I could send through it in testing, gracefully, and without
ever requiring a hard reboot. I don't have enough experience with ipcop
or smoothwall yet to recommend them, but my testing has shown them to be
very robust and I would recommend they be added to your testing list.
-Mike
joekim13@... wrote:
> Stay away from Watchguard, nothing but a box with nice blinky lights in the front.
>
> If you want something easy and rock solid i would for the the Netscreen 5gt or SSG5 (replacement of 5gt).
>
> Easy enough to configure via web and plenty of features if you need additional services such as anti-virus via kaspersky, anti-spam via brightmail, or url filtering via surf control or external websense.
>
> Joe
>
>
>
