UTM for small business

[SAG]

When I was playing with Endian, I found it easy...I'd say it's easier to dig into the settings than Untangle.

For myself, I'd agree.
But I get just the opposite feeling from people when showing them EFW.

 

[Nexgenappliances]

I saw this thread pop up in our SEO report and couldn't resist commenting.

The pocket port 2 the op mentioned will work too. The modem gets plugged into the usb end of the device, and the ethernet end gets plugged into the appliance wan or multi-wan port. The pocket port passes the IP addressing it gets from the modem through to the ethernet port, so to the operating system, the port is just another ethernet connected WAN.

Making the pocketport device work as a failover wan in Untangle, endian, pfsense, or vyatta is trivial. There is no special setup that needs to be done. However, users should be aware that LTE connections are only good for outgoing connections only. Most carriers block inbound access to LTE connected IP addresses. ATT and sprint will remove that block for business customers, but verizon will not. Tmobile's policy is unknown.

The device is made by proxicast and can be purchased cheaper from them directly. We offer it as a value add to our appliance customers, and have it on our site to make people aware the tech exists and is less expensive than a cradlepoint device.

 

[angry_geek]

Clearos. I just upgraded ours. Core 2 duo, 4 gb ram, Intel server nic, plus the on-board broadcom. The on-board handles the incoming cable connection that we use for our primary internet, one of the Intel ports handles one of our fiber connections, the other port is our lan. The lan has several vlans on it and a couple of virtual nics. The fiber connection has several virtual nics for different wan ip addresses. I gave the cable connection a weight of 10, fiber 1. This means the cable connection will handle internet traffic until it goes down, then put everything out the fiber. I have the cache server setup with 400 gb. This means Windows updates and most other downloads only have to come down once. Other machines will receive cached copies from the machine. Ad blocking, content filtering, intrusion prevention, virus blocking all handled by the utm.

All of these are free modules. You can see the advantage, I'm sure.

 

[angry_geek]

Forgot to add, I recently took everyone's recommendations and installed a ubiquiti. The unifi long range. I'm loving it, and I'm shooting wifi about a half mile. Crazy!

 

[Nexgenappliances]

Unifi ap's are the best. Quality is amazing and performance is top notch, not to mention the pricing is fantastic. The only thing you really have to watch for is if you have an older airvision software installed. You can brick the AP's if an old version of airvision tries to install firmware that is older than the firmware the device shipped. I speak from experience.

 

[MobileTechie]

Forgot to add, I recently took everyone's recommendations and installed a ubiquiti. The unifi long range. I'm loving it, and I'm shooting wifi about a half mile. Crazy!

Is that because of antenna or power? I'm wondering because obviously one can have a very powerful AP and it show up on a laptop from a good distance but be no good since the laptop's wireless isn't similarly powerful.

 

[angry_geek]

Is that because of antenna or power? I'm wondering because obviously one can have a very powerful AP and it show up on a laptop from a good distance but be no good since the laptop's wireless isn't similarly powerful.

I have no idea. I replaced a good netgear ap with this. Now I can pick it up and browse from my phone clear down the road.

 

[YeOldeStonecat]

I saw this thread pop up in our SEO report and couldn't resist commenting.

Hey Jim...what's happening?

 

[YeOldeStonecat]

Forgot to add, I recently took everyone's recommendations and installed a ubiquiti. The unifi long range. I'm loving it, and I'm shooting wifi about a half mile. Crazy!

They're sweet...picture 4 or 6 of 'em spread out around an office building, managed from that java/web based controller. (although I get the non-LR models when doing denser quantity in office buildings)

Wanna see REALLY high power/range? Snag a PICO station 5. Highest output you'll find unless you step up to carrier grade.

 

[angry_geek]

I'm getting ready to install 36 of them in a new fitness center. Should be interesting. Researching poe switches now. I think the unifis have a non-standard power requirement.

 

[Nexgenappliances]

Hey Jim...what's happening?

Not much, just trying to find a new home to hang out. Untangle's forums are dead, and they have changed as a company in ways that I don't like. So I have stopped contributing there.

Otherwise, just trying to find new cool ways to use our toys. How have you been?

 

[Nexgenappliances]

I'm getting ready to install 36 of them in a new fitness center. Should be interesting. Researching poe switches now. I think the unifis have a non-standard power requirement.

Found this:
Use the Tycon power switch. This is what we use with UNIFI.

tyconpower.com/products/files/TP-SW8_POE_Switch_Spec_Sheet.pdf

buy the 150 watt 24 volt power supply for it.

http://community.ubnt.com/t5/UniFi/User-POE-Switch-with-UNIFI/td-p/140000

 

[YeOldeStonecat]

Otherwise, just trying to find new cool ways to use our toys. How have you been?

haven't been hanging at Untangles forums much over the past 2 or so years either.

We're jammin' slammin' busy....server 'n workstation replacements are really cranking up with the sunset of XP/2K3/E2k3.

Not many new Untangle sales lately....so we haven't had many NG orders for ya. Sorta peaked on our Untangle sales with our existing clients.

Datto BDR sales are still doing well....and bigger wireless projects. Our office has quite a few boxes of Ubiquiti stuff waiting to get out to clients and be setup. See you're starting to do a few Ubiquiti stuff on your site too?

 

[Nerm]

I'm getting ready to install 36 of them in a new fitness center. Should be interesting. Researching poe switches now. I think the unifis have a non-standard power requirement.

The Pro versions are 802.3af compliant.

 

[angry_geek]

The Pro versions are 802.3af compliant.

Yeah, but expensive. 3 packs of the non-pro are running around 180 to 200 dollars.

 

[Nexgenappliances]

Yeah as value add for our customers. Unifi stuff is great.

We are trying to get away from Untangle as our main stay and recently started offering Vyatta core, Mikrotik, Endian, and pfsense appliances too. We're doing quite well with Vyatta. After Untangle used us to prove that appliances sell well and then cut us out in favor of their own upstream odm, we decided to expand our horizons.

Also starting to form a network hypervisor concept so people can start deploying multiple network related tech using some of our larger appliances. Its a work in progress.

 

[SAG]

Yeah, but expensive. 3 packs of the non-pro are running around 180 to 200 dollars.

I have a few sites running Uby stuff now - fell in love with them.

On new installs, I just quote it out with the Ubiquity Tough Switch to make things easier.

For existing POE switches I get these
http://www.ubnt.com/8023af

The run inline to step the power down.
Work like a charm.

 

[Frick]

Ubiquiti has inline poe converters so you can use a standard poe switch if needed. I believe they run about $12 each. I have used them where a injector didn't make sense and the client already had a poe capable switch.

*doh, my phone didn't refresh, so my post is a bit late providing info SAG already gave...