I haven't seen anyone mention ISA server.
I use ISA 2K6 in my office and at the branch site, and we use an ISA 2K cluster at work. I am very pleased with the performance and capabilities, but - as the original request was for "low budget" - I didn't think it was a fit. It does really lock down the machine it runs on, and has some really good features, like integration into AD, allowing/denying access on a per-user basis, and stateful packet inspection of all (including encrypted) traffic. Another huge benefit is the real-time monitoring/logging, which is invaluable for troubleshooting.
Glenn
_________________________
Actually I
am a Rocket Scientist!
