It is an excellent piece of hardware. I have installed it in a University. There are about 300 users. I have configured it on ethernet ports (No SFP). I have configured SQUID, SQUID Guard Proxy Filter, SQUID Light, RADIUS Authentication using MS Windows 2008 Server Active Directory users database, Darkstat, NTOPNG Traffic monitoring, SNORT for IDS/IPS. Internet Speed was 160Mbps. During test phase the users downloaded 1.3 TB in one day and 2 hours consuming 160 Mbps all the time. After that traffic shaping was applied using Queues and Traffic Shaper. Every thing works fine. There is a need for volume based restriction per user (free package) and Snort block time should be decided by admin (min 15 mts).