[132047] in North American Network Operators' Group
Re: Low end, cool CPE.
daemon@ATHENA.MIT.EDU (Matthew Kaufman)
Thu Nov 11 21:01:27 2010
Date: Thu, 11 Nov 2010 18:00:26 -0800
From: Matthew Kaufman <matthew@matthew.at>
To: nanog@nanog.org
In-Reply-To: <4CDC9EBE.3030802@matthew.at>
Reply-To: matthew@matthew.at
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On 11/11/2010 5:56 PM, Matthew Kaufman wrote:
> Last time I looked into this, the small Fortinet boxes and the Juniper
> NetScreen-5 or -25 were in this class. Juniper now has the SSG to
> replace the small NetScreen devices.
>
> I'm using a Fortinet box to do many of the things on your list,
> including IPv6 support, at home.
And I forgot to mention an even more relevant operational note... quite
a few of these boxes can support quite a few more security zones (or
profiles or whatever they call them) than they have ports. Consider
VLAN-trunking one of these into a low-end VLAN-capable switch as a port
expander.
Matthew Kaufman
