new pc for home edition

Hi,

In general, wireless chips are not supported.

The Celeron n3150 is a Braswell Silvermont chip, which is the new 'Atom' architecture... generally it is designed for very low power rather than performance.
I don't know if it'll run well at 100mbps. Maybe. (I do know that a fast i3 will work great.)

Note the IPS is typically the bottleneck for the CPU. Tuning the rulesets and using the ruleset aging can help a bit.

Barry

thanks for reply Barry, i'm searching a little fanless box because mini itx it seems to much big and more expensive (is it true?) i tryied to contact italian sellers for sophos xg appliance but they don't sell private only businness :(..

if anyone knows alternatives of this box (or similar for dimensions and price) i apprecciate tips

thanks for your time

You don't want Sophos hardware for this project unless cost is not important.  BarryG's been in these forums for many years - I would take his recommendation about the i3.

Cheers - Bob

Unless you're implementing child filtering, there's no point to having web filtering enabled.  Web Filtering's purpose is to filter web pages to enforce access restrictions, which is necessary in a business, or a home with children that are old enough to use the internet.  If neither of those situations apply, there's no reason for web filtering.

• It doesn't matter how fast the processor, how much RAM you install, or whether you utilize an SSD... web filtering will always limit bandwidth to ~30mbps due to the process itself.  Web filtering must decrypt packets, scan the packets against the filtering rules, re-encrypt the packets with the Proxy CA, and finally push those packets to the client.  

• In regards to an SSD, I would recommend one that's 100/120/128GB in size, providing ample space for logging.  While 64GB may do, it's too small for an SSD boot disk since at least 10% of the drive must always remain free, and on a 64GB drive, that's just under 6GB (59GB formatted), which isn't sufficient (I recommend at least 10GB or 10%, whichever is greater) After about a year, I have ~50GB of storage used on my 128GB Samsung 850 Pro, with ~250MB weekly in logs being added.

Also, with IPS, certain hosts on the local network should be ignored altogether with an exceptions rule. Hosts such as:

• gaming systems
• set top (cable/sat) boxes
• home theater receivers.

• For example, I have an IPS ignore rule setup to ignore all traffic coming from the internal LAN OR going to game systems, set top boxes, and home theater receivers.
• I also have an ignore rule configured for the external DNS servers I use, set to ignore Anti-DoS/Flooding UDP / Anti-DoS/Flooding ICMP traffic going to the external DNS servers.

I don't know of much with 2 good NICs in that price range.

As I said, the CPU might handle 100mbps, or close to it.

If you don't want to spend much more, and can't find an i3 in your budget, that system should be OK knowing that it might not hit the full 100mbps.

but 30gb SSD is too small. You want 50-60GB to have space for logs and updates. You don't need an SSD, an old laptop hard drive is fine.

Barry

guys, thanks very much for reply, i searched for i3 barebone but it is too much expensive, i will buy a zotac ci323 with n3150 if realtek chip is supported (i answered to know correct Ethernet chip, it seems rtl8111) because sophos xg is unsopported by apu1d4.

if i can, i will buy at least 60gb ssd (much more faster than hd 5200rpm), if i haven't choise i will use and laptop hd xD

for IPS and web filter i enable it as prpxy http and antivirus because internet is used by my parents and sister and they surfing is much Security XD

i hope zotac is the way

Realtek NICs normally work in the UTM; they're not great but they're usually usable.

I don't know about the XG.

hi guys, for who want to buy zotac zbox CI323 nano, zotac says that it has:

The CI323 has a Realtek (RTL8111) G/LAN chip, and an Intel Dual Band Wireless-AC 3160 (3160GW).

it seems to work from hw compatibility, probability not for wifi

regards

I have the 321 and it works great. I agree Web filtering is an expanse not needed unless kids are an issue and I do not use it. I also tuned IPS for best performance. I have a 60MB download speed and easly get that with about 30% CPU utilization. My Zotec 321 has 2 cores so this one with four cores is a great option

Thanks Mark, that's very helpful.

I'll also note that anyone wishing to use VLANs with the UTM should be aware that Realtek NICs have had issues; see

http://blog.metamatt.com/blog/2012/03/19/custom-built-linux-router-no-thanks-to-realtek/

for some info.

Looks like driver updates in recent Linux kernels may have resolved the problem.

Barry