Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Does anyone have experience or could recommend an open source Unified Threat Management (UTM) package that we could install on our network using hardware we already own? Looking for something that will filter viruses and malware at the perimeter of our network in addition to the normal firewall tasks.

I have found several solutions but before installing all of them to try them out, I wanted to see what the experts at ServerFault have experienced with regard to this. Is it unrealistic to look for an open source solution since there is significant work behind the scenes in keeping malware/virus databases up to date?

We have about 20 ip addresses to protect on our internal network, so we were looking at Open Source to keep costs down.

Here are some options the google came up with quickly:

share|improve this question
up vote 1 down vote accepted

I think untangle is a pretty big favorite.

share|improve this answer

PFSense is a BSD distribution firewall with a web GUI and has lots of packages. I can't find a comprenhesive list of packages right now but I remember at least snort, ntop, squid, spamd and clam-av.

There's a vmware image you can download and test.

A recent presentation of the product can be found in youtube.

We have this firewall in several mid-sized clients with success.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.