pcdoc, one of the things I love about having my router (pfSense) and UTM (Untangle) on a VM, is how easy it is to stop one setup and start another. I did that a lot when I was first setting things up. Now I have pfSense as the router and Untangle after that as the UTM and pretty much leave it alone. Combined they work great. The only thing I pay for is the extra virus protection on Untangle. It comes with a light weight virus scanner, but I pay for the Kaspersky Virus Blocker to get better scanning at the router level. With two teenage boys (well almost 15 and 11), having virus protection at the router level makes me feel a little better.
I have both pfSense and Untangle running on a Xenserver and only use it for this purpose. I have considered beefing up the hardware and running some other VM's, but I like having these two guys all alone. They are both backed up to another server and before making any changes to them I always take a snapshot. Therefore, even when the harddrive in the system failed on me a couple of months ago, I was back up and running withing the hour (had a spare drive already) with the exact same setup.
Here is a screen shot I just took of my Untangle "rack" as they call it.
I hear Untangle is a good router, but I have not tried it that way and only use the filtering functions (virus, spam, phish, spyware, web, etc). For a router, I prefer pfSense. It has pretty good QOS settings, UPNP works great, reporting is pretty good and there are a number of add on packages to add more functionality. I use a Dashboard plugin, Country Block plugin (block all of Asia, Russia and several other locations) and a few others.
Here are a few screen shots of pfSense:
This is the initial screen you see when you log into pfSense. I am using the Dashboard package which makes the screen more useful.
Here is the traffic graph with the Rate package added so I can see which computer is using what bandwidth at the moment (no historical reporting however)
Here is the RRD graphs. Only two graphs are shown in this screen capture (the 4 and 16 hour graphs), but further down on that same page are the 2day, 1 month, 6 months and 1 year graphs. Also, that was just the quality graph, there is also a traffic graph and several others.
And while I have double virus scanners running on the Untangle box, I also use a pfSense package called Country Block, as shown below.
When I first set all this up I was a little worried about how much lag it would introduce, and I didn't want anything screwing up my Xbox360 Call of Duty games. Well, even with the wife on her computer, one of my sons on the other Xbox and the other one streaming video from the internet, the Call of Duty games are unaffected by any noticeable amount. Before I built my own router, under these same conditions, every router I tried had trouble (just a couple Netgear and Linksys routers). So I am very pleased with the setup.
Also, I have Untagle e-mail me a pdf report every day of what happened the day before. I was shocked when I was reading one of them and found it had blocked 14 virus from being downloaded. Me and my 15 year old had a good talk about him visiting hacking websites!!
Edited by geek-accountant, 05 February 2011 - 06:51 PM.