SDSL Router wanted

[[GSV]Trig]

Havent had the fun of SDSL before but as were going to be moving to 4Mb SDSL as of next week I figured I'd ask what kinda box some of you guys use.

I'd like:
Rack mountable
VPN
Firewall
AntiVirus
AntiSpam
Monitoring (Be nice if we could track who goes where/when without having to install something on peoples machines and then filter with the below)
URL/Content Filtering

Now I'm not expecting to get an all in 1 solution but as were going to be hosting our own FTP/Email servers etc in the near future then I want as close to all in 1 as possible..

No set budget as long as I can justify the spend.

[[GSV]Trig]

2x2Mb lines btw...

[Moby-Dick]

Monitoring (Be nice if we could track who goes where/when without having to install something on peoples machines and then filter with the below)

aint going to happen - unless your router is AD aware , which I doubt it will be, it'll only see IP addresses.

get any router thats reliable , ignore the feature set as long as it routes traffic , then set up a proper DMZ and us something like ISA 2006 to publish all the services you require.

you can get all the content filtering / AV etc addins you want then.

[TiG]

The Vigor 3100 series does most of that.

Wallwatcher linked to the Syslog port supports logging what people get up to.

Rack mountable - Yes
VPN - Yes (very good full setup with IPSEC - 3des/des/aes options)
Firewall - Yes
AntiVirus - No - not the job of a router
AntiSpam - No - not the job of a router
Monitoring (Be nice if we could track who goes where/when without having to install something on peoples machines and then filter with the below) - Yes as discussed above
URL/Content Filtering - Yes on the router.

£150~ approx

TiG

[Jay]

you should look into Squid Proxy and setup the proxy setting in AD. This will track where people go, when, what they download etc etc. You can even does this in VM and becuase it Linux its "free"

as for the router, I am sure draytek will do what you are looking for but don't bother with AV / spam filtering on a router, even if it does do it it won't be the best job.

*EDIT*

TiG beat me to it... git

[[GSV]Trig]

Ok, so, time to start lookin at the 3100 series the and then possibly getting a seperate box for proxy stuff

[Jay]

yes

If you use Ubuntu, webmin, squid and SARG you have a very very easy way to see exactly what people are doing. If you use Dansguardian with that you can protect yourself by blocking downloads of .exe and stop people visiting porn sites.

[[GSV]Trig]

Mmm, sounds like a cheaper option, not that its my money or I see any of what I save the company but hey

[Jay]

You do have to pay for Dansguardian but its very very good value.

[[GSV]Trig]

Erm, is it just me or does the Draytek only have 1 port on it, were having 2x2Mb lines so will have to skip the Draytek on this one by the looks of it.

ZyXEL Prestige 793H anyone?

[TiG]

Trig, you are correct its only got 1 SDSL Connection, I missed the 2*2. How are they going to be configured?, 1 active one failover or you going to try and use them bonded?.

TiG

[[GSV]Trig]

Were having 2x2Mb bonded, does that actually mean we have 2 cables this end and the router links the 2 or will there be a box on the wall that sticks them together in 1 cable and then we only need one WAN port?

[dave87]

Are you having a wires only connection installed?

[Lourdes]

Were having 2x2Mb bonded, does that actually mean we have 2 cables this end and the router links the 2 or will there be a box on the wall that sticks them together in 1 cable and then we only need one WAN port?

2 WAN ports, the bonding is ISP side.

ZyXEL P-793H or Cisco kit.

[[GSV]Trig]

Were supplying our own hardware.
Thats if we get anything at all, word of warning to all, never ever ever ever ever ever ever ever ever deal with a company called Wish Solutions, the Wish part is what the customers do, the Solutions is the piss they take...

[Jay]

Noted.