Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We've been using a SonicWall TZ170 for several years, it's been working fine with occasional glitches.

Now we switched to a 100Mpbs broadband, and the firewall has become the bottleneck for internet access because its max throughput is around 20-30Mpbs.

Any ideas for a replacement? Brand/Model?

share|improve this question

closed as off-topic by TheCleaner, Falcon Momot, Tom O'Connor Aug 29 '13 at 22:51

This question appears to be off-topic. The users who voted to close gave this specific reason:

  • "Questions seeking product, service, or learning material recommendations are off-topic because they tend to become obsolete quickly. Instead, describe your situation and the specific problem you're trying to solve." – TheCleaner, Falcon Momot, Tom O'Connor
If this question can be reworded to fit the rules in the help center, please edit the question.

I would recommend the Cisco ASA 5510. It has a maximum throughput of 300Mbps which is enough for you. It can also Active/Passive clustering in case you want to go down the high availability road.

In case you need to evolve, it can do content filtering (CSC-SSM), Intrusion Prevention (SSM-AIP) and IPsec/SSL VPN.

share|improve this answer
Same here, been using a Cisco PIX (now ASA) 515E for ages without any large problems. ASDM is both powerful and quite simple once you get the hang of it. – pauska Apr 14 '10 at 9:32
+1 for Cisco 5510. I've got a couple of these in my network, they're fantastic devices. – Tom O'Connor Apr 14 '10 at 9:41

I'm a Juniper fan so I'd suggest an SRX100, or SRX210 if you want more features.

Other options would be a Cisco 890 or 1941 routers.

There's also products like the Astaro gateways for really crazy features.

share|improve this answer

You could even go with a dedicated PC with a package like m0n0wall or PfSense. From my experience, an old P4 2.6 gHz with 256 MB RAM comfortably routes at 100/100 with PfSense.

The interface is quite intuitive and of course, there is the option to SSH in and get a commandline.

Also, from what I read, load-balancing or failover is quite easy to set up, so reliability (because of old or non-server-grade hardware) might not be as much of an issue as it would seem. You can also backup the configuration quite easily so if you have some identical boxes, replacement shouldn't be a problem at all.

share|improve this answer
+1 for pfsense, it's great. – The Unix Janitor Apr 16 '10 at 15:45

Not the answer you're looking for? Browse other questions tagged or ask your own question.