@wojtos What are you trying to achieve and what ACLs do you have set up?

@effenn L2TP wont work for remote sites that need omada management as it NATs the IP addresses , remote sites can only be managed over SD-WAN or IPsec

16 Groups is far too low - Users have to get very creative to work around this by supernetting for ACL rules, which can lead to the loss of granularity that some users need. The other thing that...

@Tournas Its fine.

@Pakal ACLs to control inter-vlan communiocation, URL filtering, IDS / IPS, VPNs, switch ports that dont automatically put someone plugging something into a port on the management vlan......lots of...

@Pakal For that much traffic hitting a portal, definitely go with a hardware controller (which also doesnt need device licenses) - in your case i would suggest OC300. It isnt too expensive Controller...