New UTM *nix distro, Simplewall

[rjbbrooks]

http://www.simplewallsoftware.com/

I'm not sure how long it's been out, I can't find much about it via Google....but a member of another tech forum I hang at put a post up about it a week ago.

Yesterday I downloaded it and installed on a Lenovo ThinkCentre mini desktop with a Core 2 Duo. I like the modern look of the GUI, and it has some interesting features.

They have a free version, and a pay for version...at 95 bucks/year. Quite inexpensive.

Pretty easy setup/install routine. Easy dashboard and web management.

Another option for those that like to build their own UTM routers that have more security features than some off the shelf Stinksys or Nutgear or DStink basic router.

Have been running Simplewall in unlicensed ("safe") mode for a month on Lenovo ThinkServer TS200v, without any issues. Just installed license yesterday. Simplewall support had to make a change so the license would apply correctly. This morning nobody could connect to the internet. Oops! I had to turn safe mode back on and reboot. Waiting for a response for support.

 

[rjbbrooks]

Have been running Simplewall in unlicensed ("safe") mode for a month on Lenovo ThinkServer TS200v, without any issues. Just installed license yesterday. Simplewall support had to make a change so the license would apply correctly. This morning nobody could connect to the internet. Oops! I had to turn safe mode back on and reboot. Waiting for a response for support.

For what it's worth, they got back to me in 10 minutes.

 

[Nnyan]

I plan to build my own using a small form dual nic PC. The j1800 appears to be common in newer models. Is it powerful enough for home use - small demand. (A few active devices at any time, 50 to 100 Mbs Comcast, active security processes -, otherwise no point in a UTM, OpenVPN for outside internet access) Any other low end processors capable? want to avoid i3 and up due to cost. I think my a6-1450 laptop would be too low powered.

This would cost under $300 to build, but would a J1800 do the job?

This question really depends on what you are going to do with it. A basic setup with minimal rules/modules running will run fine on low end hardware. Plenty of Atom based hardware out there. When you start throwing in things like AV, Spam/Malware and especially VPN then it will eat into your performance. Lately I've been sticking with 1037U based solutions as they give the best bang for the buck for low end CPU that is readily available. For a decent ATOM with a low overhead Firewall you can typically keep a handful of users happy up to a 50Mbit circuit with minimal extras.

I've deployed a number of Barracuda Webfilter 210/310/410's and HP Thinclients that I repurposed as a UTM appliance (pfsense, Untangle, Sophos, etc...) and most of these were able to saturate a 100Mbit network card. Pfsense is more than picky on these boxes I could not get it to install 2 out of 3 tries, but Sophos installed just fine.