Hello,

I'm in the process of setting up a smart home and want to address privacy and security concerns using an Opnsense firewall. I'm considering creating VLANs to isolate my smart appliances (plugs, etc.) from the internet and another VLAN for my trusted devices. I also want to implement continuous malware detection.

I'm evaluating two hardware options and need some guidance:

1. Dell Optiplex 3060 Micro i5 8500T - 16GB RAM
2. Protectli (models V1410, FW4B, or FW4C)

Option A: Dell Optiplex 3060 Micro

• From my understanding, I would need to purchase a 2 or 4 port Intel gigabit network card.
• I can't replace the ISP router and would have to use the Dell via DMZ to manage all network traffic. (My current router supports DMZ).

Option B: Protectli (V1410 or FW4B or FW4C)

• I could completely replace the ISP router or use it only for the wireless network because the Protectli affordable line supports only 2.4GHz, not 5GHz, and I don't want to lose the 5GHz band.

My questions are as follows:

1. Are my assumptions in options A and B correct?
2. Which option is better and why? Is either option easier to set up?
3. Can the budget Protectli devices handle the workload of malware detection, or would it slow down my network speed?

Additionally, is my network design correct so far (isolating smart appliances from the internet and creating a VLAN for trusted devices)?

Thank you!

Hello,

I'm in the process of setting up a smart home and want to address privacy and security concerns using an Opnsense firewall. I'm considering creating VLANs to isolate my smart appliances (plugs, etc.) from the internet and another VLAN for my trusted devices. I also want to implement continuous malware detection.

I'm evaluating two hardware options and need some guidance:

1. Dell Optiplex 3060 Micro i5 8500T - 16GB RAM
2. Protectli (models V1410, FW4B, or FW4C)

Option A: Dell Optiplex 3060 Micro

• From my understanding, I would need to purchase a 2 or 4 port Intel gigabit network card.
• I can't replace the ISP router and would have to use the Dell via DMZ to manage all network traffic. (My current router supports DMZ).

Option B: Protectli (V1410 or FW4B or FW4C)

• I could completely replace the ISP router or use it only for the wireless network because the Protectli affordable line supports only 2.4GHz, not 5GHz, and I don't want to lose the 5GHz band.

My questions are as follows:

1. Are my assumptions in options A and B correct?
2. Which option is better and why? Is either option easier to set up?
3. Can the budget Protectli devices handle the workload of malware detection, or would it slow down my network speed?

Additionally, is my network design correct so far (isolating smart appliances from the internet and creating a VLAN for trusted devices)?

Thank you!