Among your list I have experience with Firewalla. An advantage is that today the IDS/IPS cost is in the capital for the box, not ongoing. That is not guaranteed to continue. Firewallas are also easy to configure though their configuration model (rule scopes) is different from that of ROS and open source products. If you want an easy, manageable IDS/IPS then so far, so good, though I agree with mada3k's caveat.
Disadvantages include that it is terribly verbose, and repeatedly boasts of things it has blocked that are not meaningful threats in my context. Perhaps personal considerations are that I object to anything that demands that it phone home to function. Updates are pushed, not under your control.
I have switched to crowdsec for some protection beyond careful firewall configuration. The Firewalla box has been reinstalled with FreeBSD, just another device running inside my network.
Disadvantages include that it is terribly verbose, and repeatedly boasts of things it has blocked that are not meaningful threats in my context. Perhaps personal considerations are that I object to anything that demands that it phone home to function. Updates are pushed, not under your control.
I have switched to crowdsec for some protection beyond careful firewall configuration. The Firewalla box has been reinstalled with FreeBSD, just another device running inside my network.
Statistics: Posted by phascogale — Sat Jan 27, 2024 11:06 pm