I will give CIPAFilter praise when it comes to the properties and features below I have personally dealt with. Features we are actively using: + Port Forwarding + Web proxy /internet filter. + Multi-homed with two external connections and automatic route selection and + Multi-Gateway Routing. , anti-spam, and anti-virus + Full DHCP serving along with static reservations. + Web proxy /internet filter. + Port Forwarding. + Context filtering for many different sites as well as specific content on the site. + Download blocking. + Automatic updates for current and new sites that have containing new content we don’t want to expose the student population to. + Event notifications of various sorts via SNMP. + Support for a fairly large amount of simultaneous connections. + Daily reports + Quick and easy to understand installation. The software in the CIPAFilter is already secure against Heartbleed. So no worries about that issue. The CIPAFilter appliance and software really has lived up to the promise of less management, and all-inclusive maintenance while still retaining excellent performance and ease of use by both the admins, and the teachers who need on-demand access to specific web sites. Tech support by the team has also been timely and expedient. For your info we are using the CF-250.02 appliance. The CIPAFilter not a perfect device. What all-in-one device is perfect? However, I recommend CIPAFilter for any educational or commercial who has needs to provide dynamic protection for their people, while also meeting constraints on administrative manpower and network budgets. For it’s target market CIPAFilter is a perfect fit so they get 5 stars from me.