When in doubt just...

find / -name iptables.conf -print

If you are uncertain, http://urlquery.net can be helpful.

It will report on what happens when you go to a particular URL.
It can even give you a preview (sometimes) of the page.

@thanksajdotcom Ok

So, @JaredBusch... what did you end up doing?

@scottalanmiller said:

What issue did you have with XP? I've never heard of an issue with the XP firewall.

The only issues I ever recall hearing about where that some where unhappy that XP didn't block outbound by default. And even today it's easy to setup. But then again I don't want normal users to do that to themselves anyhow.

@thecreativeone91 said:

Untangle is a major resource hog from what I remember.

It is. It isn't routing or switching software, it's just Linux as a full OS with tons of apps running on it. So unlike, say, Vyatta which powers the Ubiquiti which is based on Linux but is extremely light and fast because it is a custom kernel with a custom network stack just for routing, Untangle is the full blow OS with nothing special. So you need tons of horsepower to handle normal routing tasks effectively.

@Bill-Kindle said:

@Mike-Ralston It's a router / firewall that you can install on pretty much any old computer with two NIC's.

The one thing you have to worry about for hardware requirements is the supported network cards. It will RUN on anything but you may not be able to use it if your network cards are not supported.

Check out: https://www.pfsense.org/hardware/index.html#compatibility

@Chamele0n said:

@Bill-Kindle said:

@Dashrender Asus routers are by far the easiest I have ever setup. Almost pull out of box and plug in easy.

I love the newer ASUS line, it has DD-WRT by default for firmware. It has added features compared to most manufacturer firmware. But it's not too hard to configure. Should be fairly easy for non-techies to understand. I probably won't go back to Linksys since Cisco no longer owns it.

I don't think Cisco owning Linksys added any value. Hurt it actually.

The Asua line with DD-WRT was a brilliant move on Asus' part. If you want DD-WRT which a lot of people do, why go anywhere else? I need to get one for testing soon. Probably the best way to go for home routers.

@JaredBusch said:

@NetworkNerd said:

Thanks to all who responded here. We're going to roll with PSX's idea.

I will also tell you I posted this somewhere else and did not receive as many responses as I did here.

What other device you going to use? If you buy the right thing you can shitcan the entire ASA

I already had a Cisco RV180 lying around and used it for the camera traffic. The only thing I do not have setup right now is static routes.

@scottalanmiller said in Firewall Options for the NTG Lab:

@travisdh1 said in Firewall Options for the NTG Lab:

@scottalanmiller said in Firewall Options for the NTG Lab:

Never followed up on this, whoops. We ended up using VyOS for a few years. But the hardware died on us and was too complex to service. It made no sense as it was cheaper to replace with new Ubiquiti hardware than it was to maintain what we already had. So we ended up going with a UBNT ERL and it has been great.

Out of curiosity, is it the one running the NTG lab?

I'm just assuming that you only have it doing routing and that it can do the basics at full line speed.

Yes, that is what is currently running there. We don't do QoS filtering in the lab, so it handles the speeds just fine.

ERL can do near line speed as long as you don’t do something to hit the CPU.