So, I'm not familiar with Ubiquity much... they seem fairly new to the scene. I was just reading up on them and came across this:
https://en.wikipedia.org/wiki/Ubiquiti_Networks
"In 2013, it was discovered that there was a security issue in the version of the U-Boot boot loader shipped on Ubiquiti's devices. It was possible to extract the plaintext configuration from the device without leaving a trace using Trivial File Transfer Protocol (TFTP) and an Ethernet cable, revealing information such as passwords.[4]

While this issue is fixed in current versions of Ubiquiti hardware, despite many requests and acknowledging that they are using this GPL-protected application, Ubiquiti refuses to provide the source code for the GNU General Public License (GPL)-licensed U-Boot.[5][6] This made it impossible (in practical terms) for Ubiquiti's customers to fix the issue."

Did you run into this? Was it as bad as it sounds?

@scottalanmiller Thanks!

Interesting. I haven't had that experience, but I'm not particularly here to talk about my experiences so much as to hear other people's experiences. It sounds like you've had some rough run-ins with sonicwall, and that counts for something.

ASAs are highly over priced. What about some of the other lower cost ones? In particular, SonicWall. Like @Tim_G, I've had fairly good experiences with SonicWall, even if they are a bit... simplistic?

@scottalanmiller said in Firewalls, the good, the bad, and the ugly.:

With rare exception, the only firewall I recommend is Ubiquiti.

I haven't used Ubiquiti for firewalls before. Why such a high recommendation over the competition? What do you like about them?

We're looking at replacing firewalls at our office, both for production and office. We don't have a ton of traffic (less than 100mbps). Both security and high availability are important to us, but of course cost is always a consideration as well. What would you choose?

@scottalanmiller I saw on a different thread you advocating for pfSense. Do you feel like pfSense has any downsides? What about other more name brand solutions? I've personally used ASA's, SonicWalls, and PaloAlto's. I loved the PA's but they came at a hefty price. Layer 7 inspection seems to be the way the security industry is pushing, and would love to see that in open source products, but I don't yet see that anywhere.

Thanks in advance.

Edited: Tags added.