I'm trying to decide between one of these and a Juniper Netscreen 5GT (which I have familiarity with from work).

One of the things I want to do is setup a DMZ to put my Linux webserver in. Currently I use port forwarding with a Linksys router, but this is far from secure for both the webserver and the rest of the network.

Can this be done with this box? If there is no standard physical "DMZ Port," are the rules granular enough to forward ports from untrust and a one-way Trust to DMZ relationship (so if the webserver is compromised the network stays secure)?

Ideally it would be a different subnet too.

Also, between my home and work computers and servers (some dual nic), Virtual Machines, game consoles, other routers acting as extenders, Media Extenders and printers, I'm quickly approaching 15 IPs... any plans in the future to bump that up or do we have to buy the Checkpoint product or daisy chain other NAT routers?

(EDIT:) Still no ideas? It looks like there is no physical DMZ port (guess I would have to move up to the Safe@Office, but licensing is expensive for the subscriptions)... but could this be accomplished based on IP or MAC?

This message has been edited. Last edited by: NDLbox,