Linux firewall vs appliance

[Hetz Ben Hamo]

Hi,

I was wondering about the following scenario:

I have 2 lines coming from 2 carriers, each line is 2 Gbit internet
connection. They go to a router, and then there should be a firewall..

Here I have 2 choices:

1. Take a Cisco/Fortigate/Juniper/Whatever box, throw it in, configure it,
and be done with it, while I need to pay some yearly license for updates.
2. Stick some serious Linux server that it will become the firewall.

My question: based on whats available for Linux today (iptables, APF, BFD,
you-name-it..) - could Linux be trusted as a very good firewall for data
center (as an example)? (I know that Checkpoint is using Linux, but they
wrote some additional closed source modules, and I haven't heard any
alternatives of those modules in open source version)

I have read articles with people swear that Linux box should suite it while
other highly recommended the appliances..

Whats your opinion?
Hetz
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.cs.huji.ac.il/pipermail/linux-il/attachments/20110124/f7c12e00/attachment-0001.html>