WatchGuard Firebox T20 Security Appliance with 3-yr Basic Security Suite (WGT20033-WW)

Well-thought-out UI. Even if you're new to WatchGuard, it's pretty intuitive. I'm still getting used to the firewall configuration but it's coming pretty fast. Overall I can recommend.-----Update: probably not for EVERY home user but perfect for me, a guy who just retired from a 40mumble year career in networking. This is the first firewall appliance I've owned that indeed works completely all the way through. The firewall policy UI is pretty intuitive and does what you think it should. Zero regrets!

Once you have the right features activated the interface is quite user friendly to manage.

The configuration was complicate (took a few hours), working fine now. was replacing another firewall box that was defective . Hope that it will be more robust than the old one because its a very important part of the protection chain.

I used to run CISCO ASA5505 at home, but it caps out at 100Mbps. So I switched to ASUS router which is fast, sure, but it was flakey, random reboots, didn't remember port forwarding settings between reboot, etc. SO — I decided I needed a proper firewall in front while ASUS can just be the wireless router without all fanfare.Since I have SONIC Gigabit Fiber I wanted a firewall that did eat my bandwidth because of a cheap CPU or sub-par processing power.So far I am very happy with it. I have setup all four LAN port as different groups with different firewall rules. One port, for instance, has a cable hooked up that runs all the way down the the garage and creates a WiFi network down there that's not as well protected as my main. It was so easy to setup firewal rules between the groups/LAN ports and outside.The only thing that was less than obvious is port forwarding. I have a plex server, and I needed to forward 32400 to the one particular IP on the inside. I was able to find how to do it eventually, but it's a two-step process: 1st you need to setup SNAP for what you are forwarding, and 2) you must add a Firewall Policy from Any-External to your hardcoded IP.Overall, the box is quiet, fast, and I love the orange LED lights :)

The device is very easy to install and configure; even a 10-year-old could figure out how to connect it properly (pictured). Support is responsive in case you have issues finding where your required settings are.We moved our office (20 people, ~50 devices) to a colocation space and we managed to isolate the networks within hours. It is also blocking a lot of access we did not know about (like one person allowing a third party company to do attended remote access to her PC). Now we feel more secured and protected.