Rack mount VPN/Firewall/Router

[Jake72]

I'm looking for a Rack mount Router with VPN an was wondering if anyone had any suggestions.

[Lurick]

A rackmount server with pfSense would do the trick.

[wojtepanik]

get palo alto, if you can afford one

[beersykins]

What kind of VPN are we talking?  What kind of performance do you need?

 

If it's IPsec then you could roll a mikrotik or edgerouter or something.  If you want high OpenVPN performance you pretty much need x86 like a standard server.

 

You could also rack in a 1u shelf and put any desktop style device you wanted.

[brwainer]

I recommend a Mikrotik Routerboard (look for one with builtin hardware encryption accceleration - see details for each model at https://mikrotik.com/products), or something to run PFSense - either the official Netgate appliances or search your favorite etailer locations (amazon, newegg, ebay) for whitebox “firewall appliance” servers which are just basic x86 servers with more than two ethernet ports, these are designed with PFSense and simialr operating systems in mind. There is also options from ubiquiti including edgerouter and the unifi USG-Pro but I don’t have experience with them and can’t recommend for or against.

 

if by “firewall” you mean something that really does packet inspection and a whole suite of attack prevention beyond basic ACLs and IP and port based filtering, then the above options will work but will require manual setup in oder to create IDS/IPS features (you have to add packages in the case of PFSense or run a separate server on another machine or VM in the case of Mikrotik). If you want a turnkey firewall in the style of the Cisco ASA series then I recommend a WatchGuard FireBox. They are much easier to use than any other high security firewall I’ve seen.

[Scheer]

Like, site to site VPN, or...?

 

https://www.ubnt.com/unifi-routing/unifi-security-gateway-pro-4/

 

Does it need to be rack mounted just because you happen to have a rack? If so,