@scottalanmiller I'm planning to retire an old spinning drive. That's all

@scottalanmiller said in pfSense vs OPNSense - Fanboy fued or real differences?:

@scotth said in pfSense vs OPNSense - Fanboy fued or real differences?:

@Dashrender said in pfSense vs OPNSense - Fanboy fued or real differences?:

@black3dynamite said in pfSense vs OPNSense - Fanboy fued or real differences?:

@Dashrender said in pfSense vs OPNSense - Fanboy fued or real differences?:

@scotth said in pfSense vs OPNSense - Fanboy fued or real differences?:

@Emad-R said in pfSense vs OPNSense - Fanboy fued or real differences?:

@scotth

They are both great, but when you want to scale you want them on hardware and not VM that will handicap your hypervisor.

When you think about hardware and low power, there are alot of alterantives better than those 2 and cheaper, netgate provides PFsense but for 200$ ad the idea of desktop machine acting as router and using alot of power does not make sense to me.

However pi3 or better makes perfect sense, but guess what neither PFsense or OPN runs on ARM

https://store.netgate.com/MBT-2220-system.aspx

After my lab, I'm planning to load it up on an HP Elite 8300 SFF i5 quad core with 8 GB RAM and an addin dual Intel NIC. It's what I'm running Sophos on now. I don't experience any issues with this setup.
I picked it up for $100 during a desktop refresh.
EDIT: I'm also planning retire my spinning drive.

For home use - a desktop class machine is totally fine.
Not sure an SSD will make any difference in the performance of the firewall though.

SSD will help squid proxy cache.

how useful is that in a home network?

I'm hoping that it'll impede momma and kid from being blatantly foolish in their cruising activities.

<<yes, I have attempted to share information about foolish behavior on the internet>>

A cache cannot do that.

Sorry, proxy

@coliver said in Non-IT News Thread:

@RojoLoco said in Non-IT News Thread:

@BRRABill said in Non-IT News Thread:

@RojoLoco said in Non-IT News Thread:

@coliver Why on earth would they have been sober in New Orleans on new year's eve?

Maybe they are devout Christians.

That doesn't necessarily make them sober. Unless they are so devout that they had to dry hump on live TV.

They felt the power.

They needed the healing power of hump

@Dashrender said in pfSense vs OPNSense - Fanboy fued or real differences?:

@black3dynamite said in pfSense vs OPNSense - Fanboy fued or real differences?:

@Dashrender said in pfSense vs OPNSense - Fanboy fued or real differences?:

@scotth said in pfSense vs OPNSense - Fanboy fued or real differences?:

@Emad-R said in pfSense vs OPNSense - Fanboy fued or real differences?:

@scotth

They are both great, but when you want to scale you want them on hardware and not VM that will handicap your hypervisor.

When you think about hardware and low power, there are alot of alterantives better than those 2 and cheaper, netgate provides PFsense but for 200$ ad the idea of desktop machine acting as router and using alot of power does not make sense to me.

However pi3 or better makes perfect sense, but guess what neither PFsense or OPN runs on ARM

https://store.netgate.com/MBT-2220-system.aspx

After my lab, I'm planning to load it up on an HP Elite 8300 SFF i5 quad core with 8 GB RAM and an addin dual Intel NIC. It's what I'm running Sophos on now. I don't experience any issues with this setup.
I picked it up for $100 during a desktop refresh.
EDIT: I'm also planning retire my spinning drive.

For home use - a desktop class machine is totally fine.
Not sure an SSD will make any difference in the performance of the firewall though.

SSD will help squid proxy cache.

how useful is that in a home network?

I'm hoping that it'll impede momma and kid from being blatantly foolish in their cruising activities.

<<yes, I have attempted to share information about foolish behavior on the internet>>

@Emad-R said in pfSense vs OPNSense - Fanboy fued or real differences?:

@scotth

They are both great, but when you want to scale you want them on hardware and not VM that will handicap your hypervisor.

When you think about hardware and low power, there are alot of alterantives better than those 2 and cheaper, netgate provides PFsense but for 200$ ad the idea of desktop machine acting as router and using alot of power does not make sense to me.

However pi3 or better makes perfect sense, but guess what neither PFsense or OPN runs on ARM

https://store.netgate.com/MBT-2220-system.aspx

After my lab, I'm planning to load it up on an HP Elite 8300 SFF i5 quad core with 8 GB RAM and an addin dual Intel NIC. It's what I'm running Sophos on now. I don't experience any issues with this setup.
I picked it up for $100 during a desktop refresh.
EDIT: I'm also planning retire my spinning drive.

@coliver said in pfSense vs OPNSense - Fanboy fued or real differences?:

@scotth said in pfSense vs OPNSense - Fanboy fued or real differences?:

@Dashrender said in pfSense vs OPNSense - Fanboy fued or real differences?:

@scotth said in pfSense vs OPNSense - Fanboy fued or real differences?:

@Dashrender The VPN started out as a support convenience. Now, my brother and I are thinking of using it to store our backups to each other's server(s). Other than that, I really like the way Mesh Central looks and am going to pop that in as well. I'm actually considering that for our locations here.

OK a static VPN could work for your backup solution... super easy to do with a pair of ER-Ls.

OK, I'll bite....ER-Ls?

EdgeRouter Lite https://www.ubnt.com/edgemax/edgerouter-lite/

Ah.

@Dashrender said in pfSense vs OPNSense - Fanboy fued or real differences?:

@scotth said in pfSense vs OPNSense - Fanboy fued or real differences?:

@Dashrender The VPN started out as a support convenience. Now, my brother and I are thinking of using it to store our backups to each other's server(s). Other than that, I really like the way Mesh Central looks and am going to pop that in as well. I'm actually considering that for our locations here.

OK a static VPN could work for your backup solution... super easy to do with a pair of ER-Ls.

OK, I'll bite....ER-Ls?

@Dashrender The VPN started out as a support convenience. Now, my brother and I are thinking of using it to store our backups to each other's server(s). Other than that, I really like the way Mesh Central looks and am going to pop that in as well. I'm actually considering that for our locations here.

@scottalanmiller said in pfSense vs OPNSense - Fanboy fued or real differences?:

@scotth said in pfSense vs OPNSense - Fanboy fued or real differences?:

@scottalanmiller said in pfSense vs OPNSense - Fanboy fued or real differences?:

@scotth said in pfSense vs OPNSense - Fanboy fued or real differences?:

@black3dynamite said in pfSense vs OPNSense - Fanboy fued or real differences?:

pfSense and OPNsense webui is pretty good when it comes to management. What other services were you using with Sophos?

IPS, Spam filtering, https proxy, antivirus. That's about it.

For home?

Yes

Put AV on the desktops, no reason to have it on the network layer.

SPAM filtering should be on the server, not on the IMAP link.

I'm taking notes

@scottalanmiller said in pfSense vs OPNSense - Fanboy fued or real differences?:

@scotth said in pfSense vs OPNSense - Fanboy fued or real differences?:

@black3dynamite said in pfSense vs OPNSense - Fanboy fued or real differences?:

pfSense and OPNsense webui is pretty good when it comes to management. What other services were you using with Sophos?

IPS, Spam filtering, https proxy, antivirus. That's about it.

For home?

Yes

Hardware is just a used PC with Intel NICs EDIT: 2 were free, one was $100

OOPs. Forgot about the formatting

@Dashrender said in pfSense vs OPNSense - Fanboy fued or real differences?:

@scotth said in pfSense vs OPNSense - Fanboy fued or real differences?:

@black3dynamite said in pfSense vs OPNSense - Fanboy fued or real differences?:

pfSense and OPNsense webui is pretty good when it comes to management. What other services were you using with Sophos?

IPS, Spam filtering, https proxy, antivirus. That's about it.

But do you need those things at home?

     The wife and kid have clicked stupid many times.  The firewall did catch it or at least reported that it did.

Are you running Sophos at all of those other family members homes as well? i.e. already have hardware there running it?

    I have it running at 1 of my brothers house and at my parents.  We setup a mesh VPN for support.  Also, my brother uses the VPN to connect to his cameras at his house when he's out.

I thought I'd test out pihole as well

@black3dynamite said in pfSense vs OPNSense - Fanboy fued or real differences?:

pfSense and OPNsense webui is pretty good when it comes to management. What other services were you using with Sophos?

IPS, Spam filtering, https proxy, antivirus. That's about it.

@scottalanmiller said in pfSense vs OPNSense - Fanboy fued or real differences?:

@NashBrydges said in pfSense vs OPNSense - Fanboy fued or real differences?:

@scottalanmiller said in pfSense vs OPNSense - Fanboy fued or real differences?:

@bnrstnr said in pfSense vs OPNSense - Fanboy fued or real differences?:

@scotth said in pfSense vs OPNSense - Fanboy fued or real differences?:

dumping Sophos UTM free

I don't have any input for the question, but I'm curious why you want to drop Sophos for one of those two?

Cost in the form of technical debt. Dropping Sophos has lots of benefits (it's a decent product, but it is costly.)

What cost are you referring to? The 50 IP limit suggest he's using the Sophos Home UTM which is free to use.

He is labbing at home. Maybe I incorrectly read into this that this was prepping for his office?

Not my office or our locations. My house, brothers', parents', kiddies'....

@NashBrydges I'll keep that in mind. What I'll eventually be doing is to connect several locations for my family VPN. I'd like to feel at least somewhat secure.

@coliver said in pfSense vs OPNSense - Fanboy fued or real differences?:

@scottalanmiller said in pfSense vs OPNSense - Fanboy fued or real differences?:

@scotth said in pfSense vs OPNSense - Fanboy fued or real differences?:

@bnrstnr said in pfSense vs OPNSense - Fanboy fued or real differences?:

@scotth said in pfSense vs OPNSense - Fanboy fued or real differences?:

dumping Sophos UTM free

I don't have any input for the question, but I'm curious why you want to drop Sophos for one of those two?

50 IP limit, learn something new, I like open source.... Nothing truly negative as far as Sophos goes

Why not move to Ubiquiti?

I was going to recommend this but wasn't sure if this was virtual lab or not. If it is a virtual lab look at VyOS.

I'll check it out. Never really paid attention when I saw it mentioned.

@scottalanmiller said in pfSense vs OPNSense - Fanboy fued or real differences?:

@scotth said in pfSense vs OPNSense - Fanboy fued or real differences?:

@bnrstnr said in pfSense vs OPNSense - Fanboy fued or real differences?:

@scotth said in pfSense vs OPNSense - Fanboy fued or real differences?:

dumping Sophos UTM free

I don't have any input for the question, but I'm curious why you want to drop Sophos for one of those two?

50 IP limit, learn something new, I like open source.... Nothing truly negative as far as Sophos goes

Why not move to Ubiquiti?

I have room on my server to experiment. Kinda 'whynot'? I have an Ubiquity AP. Works nice. Rock steady.

@bnrstnr said in pfSense vs OPNSense - Fanboy fued or real differences?:

@scotth said in pfSense vs OPNSense - Fanboy fued or real differences?:

dumping Sophos UTM free

I don't have any input for the question, but I'm curious why you want to drop Sophos for one of those two?

50 IP limit, learn something new, I like open source.... Nothing truly negative as far as Sophos goes