Here are my three choices:
Right now I have a cisco ASA that I'm using for a firewall, vlan router, gateway, and ISP failover. There isn't enough control in the ASA for what I need and the license to do it gets very expensive. So upgrading that license is my least favorite option. My cisco also only has 100Mb interfaces, so file transfers between my two vlans would be really slow.
I am thinking about getting a dell poweredge R210 II to handle all of these tasks. Its dells lowest spec rack server. I would just add a 4 port gigabit nic. I would use that to setup routing between my two vlans, a firewall, and the ISP failover all using IPTables.
It's been suggested to me to just include this server into my virtual server which is one big 4u server with an identical physical backup, but it seems like a bad idea to have the domain controller and application servers on the same physical device as the firewall and the DMZ servers.
I would like to go with the second option because it separates out the connectivity server from the rest of my servers. It's also a lot cheaper and I would have full control with IPTables. We have about 200 devices in our network which seems easy to handle on such a low end server. Am I missing something to this or should I go ahead with the separate linux server with IPTables?