Replacing an old Zyxel router?

Hi,

I got a task to replace an old Zyxel USG110 (https://www.zyxel.com/us/en-us/products/next-gen-firewall/unified-security-gateway-usg110-210-310/comparison) router with something more recent Mikrotik product.

It has 150000 max TCP concurrent sessions, however recently its DNS cache was overflowed so we had to reboot it (as a temporary solution).

It manages around 400 ends (PCs, printers, etc), although these are quite good separated with switches. But today’s requirement is that these endpoints tend to directly communicate with WAN over this Zyxel (to be replaced) much more often than with their direct neighbours over their switches.

Assuming these, which Tik can be a great replacement for this Zyxel USG110?

Thank you!

Probably something in the CCR2 series.
But take into account that MikroTik provides only plain routing- and firewalling, not those specialized inspections for threats or viruses (DPI).

Thanks a lot. They don’t use any of those fancy features, all their licenses are expired years ago. So I recommended them some more separated solution for viruses and routing/firewalling.

So you can add some endpoint/XDR solution.

Anyway would be great that MikroTik offers some solution to this.

Regards.