WatchGuardFirebox T20 Security Appliance with 3-yr Basic Security Suite (WGT20033-WW)

Well-thought-out UI. Even if you're new to WatchGuard, it's pretty intuitive. I'm still getting used to the firewall configuration but it's coming pretty fast. Overall I can recommend.-----Update: probably not for EVERY home user but perfect for me, a guy who just retired from a 40mumble year career in networking. This is the first firewall appliance I've owned that indeed works completely all the way through. The firewall policy UI is pretty intuitive and does what you think it should. Zero regrets!

Once you have the right features activated the interface is quite user friendly to manage.

Have had this product for 1 year and it worked OK but nothing exceptional, when it came to renewing the support only one company in the UK was listed and they only deal with companies NOT individuals. The cost of renewing support is more than the original price. BUT the catch is that the box will not allow ANY data through it with out a support license. Would strongly suggest if you live in the UK do not buy this brand.

The configuration was complicate (took a few hours), working fine now. was replacing another firewall box that was defective . Hope that it will be more robust than the old one because its a very important part of the protection chain.

I used to run CISCO ASA5505 at home, but it caps out at 100Mbps. So I switched to ASUS router which is fast, sure, but it was flakey, random reboots, didn't remember port forwarding settings between reboot, etc. SO — I decided I needed a proper firewall in front while ASUS can just be the wireless router without all fanfare.Since I have SONIC Gigabit Fiber I wanted a firewall that did eat my bandwidth because of a cheap CPU or sub-par processing power.So far I am very happy with it. I have setup all four LAN port as different groups with different firewall rules. One port, for instance, has a cable hooked up that runs all the way down the the garage and creates a WiFi network down there that's not as well protected as my main. It was so easy to setup firewal rules between the groups/LAN ports and outside.The only thing that was less than obvious is port forwarding. I have a plex server, and I needed to forward 32400 to the one particular IP on the inside. I was able to find how to do it eventually, but it's a two-step process: 1st you need to setup SNAP for what you are forwarding, and 2) you must add a Firewall Policy from Any-External to your hardcoded IP.Overall, the box is quiet, fast, and I love the orange LED lights :)