Which hardware firewall to choose?

Question

Computer networks

Advise what kind of firewall hardware, used to work only with software, now I decided to try to install one. Of the functionality, traffic accounting, traffic limiting (traffic shaper), content filtering are still of interest.

Answer 1

No. You will get too many hemorrhoids for yourself. Regardless of what you choose. In order to get traffic accounting and logging, you will have to deploy full-fledged billing, with RADIUS, NetFlow, traffic inspection and other troubles that will not add performance to the device, by the way. To filter urls based on categories, you will have to install an external server, and not rarely, and pay for a subscription to these same databases (this is if we, for example, are talking about Cisco). In addition, there is also a lot of manual work for parsing logs.
Iron solutions "all-in-one" I have not seen.
Here it is worth specifying the task. Why a hardware solution. But in any case, it seems to me that it is not worth it, unless of course there is some kind of mega-argument.

Answer 2

What about certification? - if you need it, then already look from this list. Not all devices are possible here *( docsystem.ru/ru/node/100

Answer 3

We use solutions from Zyxel Zywall at work. Basically it is USG 100 and now bought USG 1000
Together with Vantage Report software (free license for 1 unit only) you can meet most of your needs.
Quite a good knowledge base on the home site and adequate support.
Filtering can also be configured, but unfortunately they still cannot add filtering by https. There are also all sorts of bluecoat and commotoach subscriptions. But I did it simply, hacked all the traffic and made an exit only to trusted ones.