Firewall router recommendations

Can anyone recommend a good firewall router for a small wired LAN? I tried to find one from CISCO but all I can find are VPN routers (pic related). I already have VPN service via TunnelBear. Is "VPN router" just a standard moniker for routers with security functionality? Basically I just need something with a configurable security policy, port forwarding, and packet filtering capabilities to prevent people from hacking into the servers I plan to build.

Attached: shopping-for-a-router.png (1203x834, 195K)

Other urls found in this thread:

amazon.com/SafeStream-TL-R600VPN-Broadband-throughput-Concurrent/dp/B007B60SCG/ref=sr_1_9?keywords=firewall&qid=1564348095&s=gateway&sr=8-9
turris.cz/en/omnia/).
twitter.com/NSFWRedditVideo

build your own. pfsense for x86 and openwrt on small devices. goodluck.

the thing is: why?

I want a hardware firewall. More secure that way.

that makes no sense. You know these things run software right? Software which is usually dodgy as fuck and has hardcoded/global default passwords.
Setup your own box with OpenBSD if you want security.

I want a choke point on my network that will drop any packets that violate the security policy. Are you saying any device that provides this functionality is going to be backdoored?

>CISSHIT
>more secure

*unzips CVE list*

Unironically pfsense like the other user

T. CCNA

To be fair, CISCO probably has the most known exploits because it's the most popular business networking platform.

Well, I think I found something that fits my needs pretty well and is fairly inexpensive.

amazon.com/SafeStream-TL-R600VPN-Broadband-throughput-Concurrent/dp/B007B60SCG/ref=sr_1_9?keywords=firewall&qid=1564348095&s=gateway&sr=8-9

Has port forwarding, an SPI firewall, DoS protection, and pretty high bandwidth for something this cheap. What do you guys think?

vm a pfsense

680M wan2lan

you honestly deserve it for even considering it

Wtf are you talking about
>hardware firewall
They all use softwares and are in themselves, computers.

user just put all your shit in the DMZ.
“The demilitarized Zone” means no attacks can occur there!

To the cucks recommending PFsense, what the fuck are you talking about? Does the back of your computer have a coaxial cable receiver or fiber input? How does your "VM" actually send data out to the rest of the world?

Attached: 1563011523749.jpg (500x375, 33K)

>being this much of a brainlet

The summer is in full effect today

Attached: f58908fbc9096bb4bb995de242433bf5.jpg (400x225, 22K)

MikroTik

>Does the back of your computer have a coaxial cable receiver or fiber input?

You install the firewall behind the modem/ONT. You literally only need two Ethernet ports, for in/out.

>How does your "VM" actually send data out to the rest of the world?

Your VM has a virtual adapter that connects to your host OS and can use the host's internet connection.

Bait

To be fair, most of those are exposed backdoors.

kek

I am not worried about my pc, it's my little junky devices that need protection.

Any advantages of using pfsense over say just standard IP tables with graphical front end?

>cucks
Get out. Now.

this. I'm a poorfag I use MikroTik

you actually need only one if you have a managed switch

Either mikrotik or turris (turris.cz/en/omnia/).

Opnsense on t620 plus with a pcie network card.

There are no "hardware firewalls".

>TunnelBear
why would you willingly use a VPN owned by McAfee

>There are no "hardware firewalls".
the level of Jow Forums holy shit

Attached: 1321745220654.jpg (408x365, 145K)

Get a load of this retard.

>no no guise there's no such thing as hardware firewalls
>guise srsly believe me I once installed linux for my mom
>no really there's no such industry
>guise trust me those companies worth millions don't exist!!!

Attached: 1317276467703.jpg (400x402, 80K)

I bet this guy thinks networking is just Cisco.

>I don't know any other vendors so I'll just assume that's true about everyone else
>ah shit I'm too dumb to even use a search engine to check
>hahaha guise cisco amirite xDDD

Attached: 1335298495152.jpg (214x314, 16K)

> I don't have an argument, so I'll name call and project
Name a "hardware firewall".

This guy apparently thinks a general purpose processor running specialised software is a "hardware firewall".

>fuck I'm still too dumb to use a serach engine
>but now I have him!
>I'll make _him_ explain it to me!
shit, your devilish ploys have worked!
I simply cannot possibly wait for some retarded argument about how the firewalling functionality of all of these is actually in software, so then they aren't """"really"""" hardware firewalls
aaaah shit too late! we're still too retarded to know how dedicated hardware works!

Attached: 33xueiw.jpg (366x380, 19K)

So, you can't name one.

who the fuck said there's no hardware firewall you dump shit? even firewall books. called them hardware firewall and software firewall.

if you think hardware firewall is more secure, I say you're clearly wrong. I can even say pfsense is more secure for home user because you don't need to buy support to get update. You understand right? After you bought them you need to pay to update? that's the way hardware firewall get money.

I can lad
I literally am working with 3 vendors of such devices
it's just disappointing that this can't be achieved by your own devices, and it will be a pointless argument to make due to retards like who haven't touched something in the industry in their

No you can't. You would have if you could.

see

you didn't even read it, did you

you didn't even read it, did you?

Except they're not?
Companies use hardware firewalls because they're really fucking fast, not because they're more secure.
A pfsense box with custom tailored rules is going to be the most secure.