I usually do SBS setups with single NIC..behind a router/NAT.  Lately I've been leaning more towards UTM appliances...Unified Threat Management.  They do more than just NAT....they add deep SPI, intrusion detection, antivirus scanning, SPAM filtering, protocol control, application firewall, etc etc.

 

A few years ago I started using Endian at some clients...

http://www.endian.com/en/

 

I've been using Untangle lately...much more impressed with that package...VERY robust....

http://www.untangle.com/

 

In addition....I use a smart host for their e-mail..so I setup ACLs so that port 25 is only accepting connections from the range of mail servers at their mail host...instead of wide open to the world.

Going back to the initial request I recommned to go woth CheckPoint Safe@office 500 or FortiGate 100A hardware box. Both these products are supporting AV, SPAM, web filtering, IPS/IDS at the gateway level. We’ve deplyed those devices in SMB market as well as mid enterprise companies.

http://www.fortinet.com/products/telesoho.html

 

http://www.checkpoint.com/products/safe@office/index.html

 

The above links will give an idea about the boxes and it’t features.

 

Kieran.

Hi, yeah I've just recieved the Firebox Edge but half thinking of returning it as many people are saying it causes issues with the 2wire router. The router already has a built-in firewall albeit not as "feature-full" as the Firebox but i'm sure it can protect against DDOS, DOS, Port Scan etc. without the antivirus, antispam UTM stuff. Plus it saves me over $1500.

 

Thanks for the information,

 

Kieran.