A technical comparison of assembling UTM functionality from individual open-source components (Squid, ClamAV, ModSecurity, StrongSwan, iptables) versus deploying an integrated appliance OS — configuration surface, update complexity, and failure modes.