Best Firewall product for hosting/housing environment?

Solution 1:

I think you would have several options, your requirements arent that high. What serious firewall doesn't support VLAN?

We use a HA-setup of Clavister SG32xx, They support grouping of rules, VPN, VLAN and comes in different version depending on licensing (which defines the throughput). The performance ranges from 350Mbit to 1.5Gbit I think.

Their lower range also offers HA but doesn't sync connection-tracking IIRC. It's the SG5x series, with throughput up to 200Mbit. The feature support is technically the same.

You also have products from Checkpoint, Cisco (ASA-series) that might be of interest to you, however we choose Clavister mainly because of the ease of administration aswell as the impression we got from the company that demonstrated the product to us (and supply us with support).

Solution 2:

Have a look at pfsense. It's supports all the features you just listed, is free, opensource, well documented, and commercial support is available if you need that. It also supports clustering for seemless failover including all active sessions. And runs on any x86 hardware so you can size the hardware to your needs easily.