Untangle is the free & open source alternative to Sonicwall. In addition to the basics (Firewall, VPN, IPS & routing), Untangle makes it easier to block spam, spyware, viruses, phishing, porn, gambling, MySpace, Facebook, IM, peer-2-peer & much, much more. Untangle has been named the "Best Security Solution" – LinuxWorld 2007

Untangle runs at the gateway… and requires no client to install as the complete protection is provided at the perimiter of the network.

The Intuitive GUI, logging, reporting & automatic signature updates makes Untangle very easy to use and administer.

The basic requires an Intel/AMD based system with reasonable processor speed and memory. More details here.

Installation is fairly straight forward. The software can be downloaded as an ISO image and burnt to CD or ordered for free. Boot with the CD and the Installation is wizard based. There is a nice installation documentation here.

There are also preinstalled appliance for out of the box experience.

The Untangle Network Gateway is free and has 12 applications that comes alone. There are also commercial addons to the software which basically has support for Active Directory integration, Advanced Policy Management, Config Backup, Remote Acces portal and Live support for the solution.

In addition to the basic Firewall, VPN, Intrusion Prevention and Routing functionalities, the following additional applications can run on the same device:

• Spam Blocker
• Web Filter
• Protocol Control like P2P and Online Games
• Virus Blocker with Dual Virus Blocker options
• Spyware Blocker
• Phishing Blocker
• Intrusion Prevention
• Attack Blocker

The pricing options for the commercial addons are very cheap to be honest for any basic levels.

For more information, please click here

OpenVPN is a full-featured SSL VPN solution which can accomodate a wide range of configurations, including VPN client remote access, site-to-site VPN, WiFi security, and enterprise-scale remote access solutions with load balancing, failover, and fine-grained access-controls.

OpenVPN is a SSL VPN solution and does not support IPSec, LPTP and PPTP. OpenVPN is incompatible with IKE and although it uses SSL/TLS for security, it does not use the browser and hence needs OpenVPN installed on the server and the client.

OpenVPN implements OSI layer 2 or 3 secure network extension using the industry standard SSL/TLS protocol, supports flexible client authentication methods based on certificates, smart cards, and/or 2-factor authentication, and allows user or group-specific access control policies using firewall rules applied to the VPN virtual interface. OpenVPN is not a web application proxy and does not operate through a web browser.

OpenVPN Platforms 

OpenVPN runs on Linux, Windows 2000, Windows XP and higher, OpenBSD, FreeBSD, NetBSD, Mac OS X, and Solaris. An OpenVPN PocketPC port is under development.

OpenVPN can easily be built from source for Linux and BSD variants. Building OpenVPN for Windows is more complex, therefore a pre-built installer is available for Windows on the OpenVPN download site.

OpenVPN can be built with

• both the OpenSSL Crypto and SSL libraries (version 0.9.6 or higher required), offering certificate-based authentication, public key encryption, and TLS-based dynamic key exchange,
• only the OpenSSL Crypto library, offering static-key based conventional encryption and authentication
• standalone, with support for unencrypted UDP tunnels.

Primary features of OpenVPN are

• Tunnel any IP subnetwork or virtual ethernet adapter over a single UDP or TCP port
• Configure a scalable, load-balanced VPN server farm using one or more machines which can handle thousands of dynamic connections from incoming VPN clients
• Use all of the encryption, authentication, and certification features of the OpenSSL library to protect your private network traffic as it transits the internet
• Use any cipher, key size, or HMAC digest (for datagram integrity checking) supported by the OpenSSL library
• Choose between static-key based conventional encryption or certificate-based public key encryption
• Use static, pre-shared keys or TLS-based dynamic key exchange
• Use real-time adaptive link compression and traffic-shaping to manage link bandwidth utilization
• Tunnel networks whose public endpoints are dynamic such as DHCP or dial-in clients
• Tunnel networks through connection-oriented stateful firewalls without having to use explicit firewall rules
• Tunnel networks over NAT
• Create secure ethernet bridges using virtual tap devices
• Control OpenVPN using a GUI on Windows or Mac OS X.

OpenVPN is an Open Source project and is licensed under the GPL. Commercial licenses are also available for firms who would like to redistribute OpenVPN with their own proprietary applications. Contact info@openvpn.net for more information.

For more information, examples, HowTos, articles and downloads visit OpenVPN here