Switching over to OPNSense...

[Dngrsone]

I am limping along with Smoothwall Express running on a second-generation Athlon (939 socket) in a two NIC gaming board from more than a decade ago.

The software is buggy and at the least needs reinstallation, but my needs are slightly different from back when I built this thing I have a bigger pipe in my new home, so I am considering an upgrade.

Currently, I have 100mbps through Spectrum, and while I have a relatively light load now-- four computers plus an NAS, a couple printers, two televisions, a couple media players, some tablets on occasion--what I want to do is anti-spyware scanning from the firewall, which I know is processor-intensive.

Smoothwall does a pretty decent job of blocking intrusion attempts, but the Squid add-on is broken and so I don't have that right now, and my old ISP provided me with only 23mbps at best.

Is OPNSense up to the task? I'm thinking yes, but I have to ask the question.

What kind of hardware do I need? What if I decide to VPN in the future?

What additional modules or steps are required for the malware scanning? Is that what is called SPI?

Sorry, it's been some years since I did any of this firewall stuff...

Sent from my SM-G935V using Tapatalk

[bartjsmit]

There are quite a few threads in the hardware and performance section that can enlighten you about purchase choices: https://forum.opnsense.org/index.php?board=21.0

Malware scanning comes in two flavours. You can have Suricata monitor (and block) unusual behaviour or traffic, or you can scan all downloaded files with an AV engine. The former is built-in under Services, Intrusion Detection and the latter comes as a plugin (System, Firmware, Plugins) called os-c-icap which augments Squid.

Bart...

[Dngrsone]

Thanks, Bart.

I think the rest of my questions are going to be hardware related, so I'll post over there.

Sent from my SM-G935V using Tapatalk