Yesterday I completed the installation of a pair of
Astaro ASG320s Sophos UTM320s in active-passive configuration for a customer. The 320s are great machines, and v8 of the software is very slick.
This pair replaced an iptables firewall server and another Linux routing box. In doing so, we reduced the ruleset from about 250 iptables rules (in 8 chains) to a nice simple 45 rules, all configured with drag ‘n drop!
We also configured an SSL VPN solution and attached a (white) RED device for a branch office that will replace a VPN server!