What program would you recommend for raising a firewall on a local network with a server running Windows 7 Pro?

Question

System administration

By coincidence, in the organization where I work as a system administrator, it was necessary to install a second Internet line, without buying a separate license for a server Windows Server. I assembled a computer, installed Windows 7 Pro on the corp. key, then shared the WAN-card to the LAN-card (classic situation), So everything works, but it is desirable to block unnecessary ports, sites, protocols. On the main server (WIndows Server 2008 R2 Standart), UserGate with a license is installed for this. It would seem that you need to buy another one and put it here too, on a new server, but no, there is no money. So now I'm thinking, for this smaller network (there will be about 20 computers spinning in the network, while on the main server - about 50) how to filter and control traffic? I found RusRoute, but here you can only use it for a fleet of up to 15 cars, but I have more.

Answer 1

By coincidence, in the organization where I work as a system administrator, it was necessary to install a second Internet line, without buying a separate license for a server Windows Server

Are you joking?
For the sake of it to lift the server on a desktop?
In general, they buy a router for this. Distributing the Internet from a desktop server, and even running Windows, is something unimaginable.
For a small network - Internet distribution, channel reservation, firewall, traffic filtering, and for an inexpensive ideal solution - Mikrotik .
Well, as a last resort, if everything is really bad and do it on a desktop, then don’t install winosws, but the same Mikrotik (license 2 thousand rubles) or a free network router, for example pFsense

Answer 2

correct answer :) put an old computer with Linux-Fervol.

Answer 3

Why don't you like free Linux? You can set up a great server with all the built-in tools you need. Look towards Zentyal and similar solutions. It's definitely easier and cheaper than tinkering with desktop Windows.

Answer 4

Why don't you like the built-in firewall? Only the rules need to be configured correctly.
But in general, I agree with Artem - an iron router or pfSense or something like that (there are enough such assemblies).

Answer 5

you take a cheap mikrotik or virtual machine / hardware with RouterOS and voila ..
otherwise these are crutches-bicycles

Answer 6

Traffic Inspector
Lan2Net