Security Know Now

 Took a computer (circa 2016), bought a multiport NIC and put the Sophos Home Firewall on it. Setup as the router with 6 VLANs, Webfiltering... the basics... Thats my network rack/lab with the Sophos FW PC up top.  The Mikrotik in the rack and the Ubiquity switch and aruba switch below it. After the quick Sophos Setup, running through the Aruba Switch, the speeds do not seem too bogged down.  

Quicky....   There is a lot more to this than simply this but it shows the mount of overhead in processing between firewalls.  This uses the same bridge split prior to 2 firewalls on a 5 port 1gbs switch.   Conducted the tests 5 times.   each one about the same. The first picture is a Mikrotik that is the DHCP server for one vlan and stock rules. The Second is a TP-Link (Dont make fun it is a little older but has deep packet and tons of rules).  It serves as the DHCP Server for 6 vlans.

 Did this little experiment where I set up a freePBX on on my ProxMox and put a Cribl agent on it.   the hope was to run it through Cribl stream and generate better reports... so far relatively unsuccessful in elevating the privileges of the cribl agent to access the asterik logs which seem to be on lockdown.