Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Please tell me an Enterprise UTM/Firewall list from where I can choose which firewall to buy...

I'm currently trying Cyberoam and Kerio Winroute among the commercial ones.

I've tried ISA server and popular opensource distro's.

You can include both opensource distro's and commercial names..



locked by HopelessN00b Dec 5 '14 at 7:15

This question exists because it has historical significance, but it is not considered a good, on-topic question for this site, so please do not use it as evidence that you can ask similar questions here. This question and its answers are frozen and cannot be changed. More info: help center.

closed as too localized by Mark Henderson Jan 14 '12 at 3:33

This question is unlikely to help any future visitors; it is only relevant to a small geographic area, a specific moment in time, or an extraordinarily narrow situation that is not generally applicable to the worldwide audience of the internet. For help making this question more broadly applicable, visit the help center.If this question can be reworded to fit the rules in the help center, please edit the question.

I ended up using Cyberoam UTM 50ia – Josh Jul 22 '09 at 9:40

12 Answers 12

up vote 5 down vote accepted

Here are two options you may want to check out:

IP Cop is a Linux distro that I have heard some good things about. This solution was implemented over a year ago at a local non-profit and has been running solid ever since.

Watchguard is a commercial appliance that we ran at one of my last job sites and that I was really impressed with. Not only will it handle threat mitigation, but it can also provide VPN for your network and some of the models come with built in wireless capabilities.

Watchguard systems are nice, I've used a Firebox and the logging features were somewhat to be desired however, it lacked simple things such as filters. – Adam Gibbins May 6 '09 at 14:12
The only Watchguard system I dealt with (an older one) had limited support for semi-complex routing rules (that I knew the underlying Linux kernel could handle). – Harper Shelby May 6 '09 at 14:30
I demoed a Watchguard Firebox unit a couple of months ago. It didn't do anything more than the other firewalls out there. It just cost less. One thing that turned me off was that for some of the extra features (web filtering for example), a Windows box was required to host the database. So much for "all in one". In the end, OpenBSD + pf was the winner. – David Jun 28 '09 at 1:55
Just like David I also used a Linux for some time but it did not meet my expectations. In the end I settled for pfSense which uses FreeBSD + pf, along with a great web interface for easy management. – Luis Ventura Aug 11 '09 at 3:09

We recently switched from an aging Watchguard to a Juniper SSG and have been really impressed. The SSGs come in a number of models depending on performance and feature requirements. We don't use many of the UTM features so I can't speak specifically to those, but you should definitely put Juniper on your list.

Love the Juniper (Netscreen) models. We have an SSG 140 that's great for us. – Clint Miller Jun 26 '09 at 22:48

Try out this. One of our client is already using and its doing wonderful job.

Fortinets products work very well, we Deploy them regularly. Very reliable and with the subscription the anti-virus at the firewall save the network from many viruses. – Grishanko Jul 6 '09 at 16:37

Take a look at Astaro. They sell ready UTM devices with their software installed (do a 30-day trial to see if it does what you need). If you have a spare computer with 2 ethernet cards, you can download Astaro for free and install it to make a dedicated router. They even have VMWare appliances available.

Another option is m0n0wall, which is completely free. It's based on FreeBSD. Like the free version of Astaro, you install it on a computer to turn it into a dedicated UTM device.

There's also Smoothwall, which is Linux based and installed like Astaro or m0n0wall.

All of these are excellent products and should do what you need.

Having used both Smoothwall and M0n0wall I would use m0n0wall ... it is really a great product especially for the price. also check out pfsense a monowall derivative – trent May 6 '09 at 14:59

Have you looked at Checkpoint?

We were loaned a Checkpoint to get us through a DOS. One plus was it worked in bridged mode. The downside was it required major hardware to get it to perform acceptably. – David Jun 28 '09 at 1:53

SonicWall has a great line of appliance hardware and subscription based services. You can check them out here

If you're looking for something cheaper there is a good list at the wikipedia


Check out pfsense. FreeBSD+pf based. The web based interface is easy to use. The download CD is both a live and an install image, so you can try it with out having to install it. A VMWare appliance is also available for testing if you don't have a spare box laying round. pfsense also comes with a selection of add-on packages that install with the click of the mouse. Check them out too as they may add a feature your looking for (or wanted but didn't know it yet).


If anyone interested an open souce firewall you can look into Untangle UTM or endian UTM. Very impressive UTM consist of firewall , openVPN , Web filtering , IDS and more.


I recommend you try Ideco Gateway (

excellent firewall/vpn/router/shaper and more

you'll need to download an iso image from the site and burn it to a cd and install from there

Although it's commercial prices are really good, times better than ISA or Kerio and more secure because it's based on Linux


I would recommend that it is also worth looking at SmoothWall's UTM and commercial firewall offerings. I won't comment on the quality of the kit - as I am irretrievably biased (I work @ SmoothWall).


Gartner has a June 2009 report out for Small/Midsize business devices, top contenders were from:

Watchguard Fortinet SonicWall

All do weeny little appliances for your remote offices right up to mega sized highly-redundant multi-WAN boxes for your Headquarters.

If you need more 'Enterprise' sized boxes then you'd be looking at something from Cisco or Juniper Networks probably.

Watchguard have recently released their XTM (version 11) software which gives all their products a good overhaul. They also do some agressive trade-in pricing if swapping over from other manufacturers.


You cant beat a DEC SEAL firewall !


Not the answer you're looking for? Browse other questions tagged or ask your own question.