BTW 90% of UTM is multithreaded but the IPS is not. Snort is single threaded so if you want to stuff that 100 megabit pipe with the core security foundation on(http proxy with dual a/v, applicaiton control, IPS, and ATP) you will at a minimum need the beefiest core I-3 you can get.
thanks for the input guys. It still leaves me wondering what Sophos is thinking selling those boxes 'underpowered' then.
One big reason to favour the Atoms/Celerons is that I can actually find ITX boards with two or more NICs. I have a hard time finding any small boards with >=2 NICs that is more powerful than the Atoms. I wasn't planning on building a desktop (size-wise). Small and low on power-consumption is also one of my goals. hmm..
wouldn't this mean, that even a slower octa core would outperform an i3....
edit: ah, the new i3's at least have 4 threads (HT).
Owner: Emmanuel Technology Consulting
Former Sophos SG(Astaro) advocate/researcher/Silver Partner
PfSense w/Suricata, ntopng,
Other addons to follow
no slower octa would limit your megabit due to the single threaded nature of snort. if you want to stuff your 100 meg pipe with as few users as you have then get the smallest amount of the fastest(higher ipc) cores you can get..in your situation that's an I-3 3.0 ghz.