Edit: Decided to go with the Ubiquiti Dream Machine Pro. Thank you for all the suggestions and advice!

Hey Tildenauts,

I'm planning to help a local nonprofit replace their aging hardware firewall pro bono. I have a fair amount of experience with networking and security, especially where web servers are concerned, but I haven't setup a hardware firewall recently enough to know off the top of my head which are the best options here.

The organization is fairly small but on its way to medium sized, around 30 employees at the moment but will likely expand to 50+ in coming years. So I'm looking for a solution that will comfortably scale up to 100 employees. There is remote work, accessing their local server via VPN, so something that comes bundled with a user friendly VPN client would be ideal. I haven't seen their physical setup yet but I know their server gets a lot of use. Not all employees use it remotely on a regular basis but many do.

From past experience I know that Cisco, Sophos and SonicWall are potential options. Cisco seems to be pushing their Meraki platform pretty hard but I don't think this organization needs a subscription based solution.

Anyone have recommendations for hardware firewalls I should consider? Any potential footguns I should know about?

Thanks in advance!

Looking ahead, the commodification and degradation of the Internet is continuing to take away digital resources that we have come to depend upon over the last 20 years. Whether it’s email or Amazon or YouTube, the decline of all our favorites has been well documented.

But we don’t want to live without these sites and services. Tildes itself is an attempt to preserve one such resource but in a better and more stable way. What other parts of the Internet deserve similar treatment?

Whether it’s open source eBay or community banking or nonprofit versions of Facebook… what would you choose and how would you go about preserving its character and making it workable in the long-term?