I used to work with Sonicwall products also, and I wasn’t pleased with them either. I think you would do well to look into IPCop and its various plugins, especially ‘BlockOutTraffic’ and ‘Net-Traffic’. IPCop is a fork from the Smoothwall project, which runs on Linux and is 100% free and open-source. There’s also m0n0wall, a BSD-based firewall distro which is also excellent and extremely reliable. With either choice, you have SMP-capable, free, open-source software which is both community and commercially supported and has an excellent security track record when configured properly.
For reference, I even run IPCop on my home firewall which consists of a K6-2 ~300MHz, 128mb PC-100, and a few $5 RealTek NICs. With only my measly AT-architecture PC as an IPCop firewall, I am able to handle up to 12mb sustained throughput with packet filtering, QoS, IDS, NTP, multiple VPNs, DNS proxy, DMZ, and more enabled simultaneously… just imagine what a couple of Xeons could do.
[QUOTE=sabashuali]
Sorry if I am asking a really stupid question but, are you running windows?
[/QUOTE]
That point is moot, a Sonicwall is a hardware firewall. He is talking about a firewall for an ISP. What I was suggesting was that since they were unhappy with their Sonicwall, and since they seemed interested in a firewall product which would run on commodity hardware, they should look into running either IPCop or m0n0wall to keep both their admins and their customers happy and save a lot of money too.
To anybody following this thread, Astaro is a Linux-based proprietary security gateway product. For smaller shops or others who do not find commercial support attractive, there is a free version in compliance with the GPL.
[QUOTE=ItalianStallion]
I personally use Zone Alamrm, any feedback?
[/QUOTE]
You’re way off topic, we’re talking about heavy-duty firewalls suitable for use in an ISP, not a software firewall which runs on your home Windows machine.