I primarily install and test the solution. I'm not an expert in the solution; I mainly put them in place.
Information Technology at a transportation company with 51-200 employees
Reasonably priced and easy to understand with a straightforward setup
Pros and Cons
- "Some of the terminologies were more familiar to me than it was when I first encountered Cisco."
- "It's just not listed as FIPS compliant for where we're at now in government, which is an issue."
What is our primary use case?
What is most valuable?
The pricing is good.
I have a good understanding of the underlying firewall which I find to be easy to use and comprehend. Some of the terminologies were more familiar to me than they were when I first encountered Cisco.
The initial setup is pretty easy.
The solution has been stable.
From what I can tell, the solution can scale.
What needs improvement?
I can't speak to if there are missing features. I'm not that familiar with it.
The critical issue there for us was the lack of FIPs compliance, however, I don't know if that's something that they would consider adjusting for.
What do I think about the stability of the solution?
The product is stable. There are no issues with bugs and glitches. It doesn't crash or freeze. It's reliable.
Buyer's Guide
Netgate pfSense
November 2024
Learn what your peers think about Netgate pfSense. Get advice and tips from experienced pros sharing their opinions. Updated: November 2024.
816,406 professionals have used our research since 2012.
What do I think about the scalability of the solution?
While it's my understanding that scaling wouldn't be a problem, I myself have never actually tried to do so. Therefore, I can't speak from personal experience.
How are customer service and support?
I've never dealt with technical support before. I can't speak to how helpful or responsive they are in terms of answering support-related queries.
Which solution did I use previously and why did I switch?
I also have an understanding Cisco, which is a bit harder to understand. This product is more straightforward.
How was the initial setup?
In terms of the initial setup, pfSense seems pretty easy. I'd say it's been a few years since we played with it and I don't really remember too much about it other than using it and thinking it was okay. It's just not listed as FIPS compliant for where we're at now in government, which is an issue.
What's my experience with pricing, setup cost, and licensing?
The solution doesn't come at a high cost. That makes it a very attractive option.
What other advice do I have?
I'd rate the solution at an eight out of ten. I've been pretty satisfied with the product overall.
We are a customer and an end-user. We don't have any business relationship with the solution.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Head of information Techenology at a real estate/law firm with 201-500 employees
Secure protection, superior for small business, and support helpful
Pros and Cons
- "I have found the most valuable features to be antivirus and malware protection."
- "This solution is good for small businesses but it is not as stable as other competitors such as Fortinet."
What is our primary use case?
We use the solution for blocking websites, banking, and malware.
What is most valuable?
I have found the most valuable features to be antivirus and malware protection.
For how long have I used the solution?
I have been using the solution for approximately four months.
What do I think about the stability of the solution?
This solution is good for small businesses but it is not as stable as other competitors such as Fortinet.
What do I think about the scalability of the solution?
We currently have approximately 45 people using the solution.
How are customer service and technical support?
The support is good when comparing to other solutions.
Which solution did I use previously and why did I switch?
We have used FortiGate in the past and they tend to be more stable, but lacking in other areas.
How was the initial setup?
The installation was not too complicated. We did have some issues with the port forwarding, some of the server application were not getting through the firewall but we managed to get it to work.
What about the implementation team?
The whole network deployment took approximately three days.
What's my experience with pricing, setup cost, and licensing?
We are using the open-source version which is free. We are testing the solution to see if we are going to go to the enterprise version which requires a license and is not free.
What other advice do I have?
For those who want to implement this solution I would advise it is great for a small enterprise, it is best to get started without having any harm getting to their networks.
I rate pfSense an eight out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Buyer's Guide
Netgate pfSense
November 2024
Learn what your peers think about Netgate pfSense. Get advice and tips from experienced pros sharing their opinions. Updated: November 2024.
816,406 professionals have used our research since 2012.
CEO at In.sist d.o.o.
Excellent content protection, content inspection, and application level firewall features
Pros and Cons
- "Content protection, content inspection, and the application level firewall."
- "Could be simplified for new users."
What is our primary use case?
We are a solution provider and deploy this product for our customers. We also use it in our organization. We use both Cisco and pfSense but for our customers we mainly use Sophos and pfSense. I'm the CEO of our company.
How has it helped my organization?
The solution has assisted us by preventing unwanted access. If the solution is configured properly, then you'll be protected to some degree, although you may also need other products.
What is most valuable?
Content protection, content inspection, and the application level firewall are all good features.
What needs improvement?
There's always room for improvement. In general terms, for someone who is not familiar with the product I think ease of use could be improved. When you're connecting, the interface is very difficult for an inexperienced user in the sense of setting everything up, as it all has to be set manually. I've also found that the more features you use influences performance and the drop can be drastic when you use advanced features. I want to achieve a certain level of security and at the same time maintain good performance.
The solution is feature rich enough, but one of the things usually outside the UTM system or gateway system is SIEM. It's an advanced system for managing the possibilities and it would be nice to have a kind of interface in the UTM, to enable connectivity with most SIEM systems.
What do I think about the stability of the solution?
pfSense is rated as one of the good solutions in it's field and stability is good.
What do I think about the scalability of the solution?
The solution is scalable to a degree but we never use it for big companies. We use it for mid-range companies. Our company has a data center and we have companies that are hooked to our data center. We're doing this on-premise for our customers so if the customer has an on-prem information system, we will implement the firewall and UTM at their location. We have plans to increase use because we have good feedback for the product and we have good experience with it. So we are increasing use of pfSense. Actually we are moving away from Sophos and more towards pfSense.
How are customer service and technical support?
Technical support is well organized. Most of it is in-house, but in the case there's also a we have access to a second level if necessary.
Which solution did I use previously and why did I switch?
We were one of the first companies here making UTMs (before they were known as UTMs). We were the first partner of Cobalt, the first appliance creator. When Cobalt was bought from Sun, we made our first network defender line. It was the first appliance that had a firewall, content inspection, constant protection, intrusion prevention, intrusion detection, antivirus, and mail and web server in one box. Our line was mainly distributed all over the Middle East, Asia, and some parts of Europe. We expanded and worked with companies such as Palo Alto, Cisco, Sophos and pfSense. In some areas pfSense is better than Sophos which didn't make the advances they should have. They now have XG, so they have two totally different products in the same area which is one of the reasons I prefer pfSense.
How was the initial setup?
If you carry out a straightforward setup, then you will have straightforward, basic protection, nothing else. It's more complex if you want other things included. We usually start with some research, carry out a basic setup and make the initial monitoring. From there we make additions based on the results of the complete monitoring. Then it's ongoing monitoring all the time and setting or adjusting to the situation.
What was our ROI?
For any compnay, ROI can be seen even if they look at the basic possibility of a crypto virus or the like. The savings on that would be at least two days of lost work and the cost would be more than the cost of the whole system plus maintenance.
What's my experience with pricing, setup cost, and licensing?
Licensing costs depend on company size. pfSense is an open source solution, so there's a charge for support. We offer a first line of support and a second line if required. Payment depends on the contract, because usually it's only covers the firewall. We offer a contract for the network which includes UTM. There's a hardware cost for HP servers and, again, depending on the size of the company, installation cost is about 500-800 Euro. There's an annual maintenance fee included in the networking agreement.
What other advice do I have?
I recommend this product, it's well-balanced, has a longer history than other solutions so it's not lacking in maturity. There is a lot of online support available via YouTube or blogs but professional support is available if required. I highly recommend taking the support because usually people look at the UTM as something which should be set up in the system and left, but that's not the case with these devices. I strongly suggest making an external agreement with a specialized company to deal with security. Users need to have decent protection, not just protection.
I would rate this solution a nine out of 10.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
CEO and Founder at Indicrypt Systems
Stable, scalable with great extensibility
Pros and Cons
- "Great extensibility of the platform."
- "User interface is a little clumsy."
What is our primary use case?
We mainly use pfSense at client locations where the client is looking for a free alternative for paid/subscription based Network gateway with enterprise grade features
How has it helped my organization?
Being free and open source, we replaced our network gateway with it. Works well on an old Pentium 4 PC with 1 GB of memory. Failover, URL Filtering, Proxy server, traffic monitoring features inbuilt with SNORT IDS/IPS is all we use and have never faced any problem for over 5 years now.
What is most valuable?
The most valuable feature for our company has been the extensibility of the platform which is great. It's a great solution and I have regularly been supplying it to my clients.
What needs improvement?
The user interface could be improved, it's a bit clumsy and clunky.
For how long have I used the solution?
I've been using this solution for more than seven years.
What do I think about the stability of the solution?
This solution is absolutely stable. With some systems there's a necessity to regularly redo the configurations inside the system. With Pfsense that's not the case. I have no issues with it at all.
What do I think about the scalability of the solution?
The solution is very scalable. It has a failover feature so it's highly skilled.
How are customer service and technical support?
Given that the solution is a free and open source product, it doesn't have any technical support center. We just have the online documentation which is not one of the best, but it's good.
Which solution did I use previously and why did I switch?
I previously used a solution from Cyberoam but we had issues with the licensing. That's the reason we mainly stick to Pfsense open source.
How was the initial setup?
The initial setup is a little complex, of intermediate difficulty. It takes about a day.
In terms of deployment, the entire system has been installed and configured to basically take care of a network of roughly around 35 to 40 computers. We have a dedicated physical machine which has been configured and installed throughout.
What other advice do I have?
My only comment would be to suggest that if you wish to implement the solution read the documentation very carefully.
I would rate this solution a nine out of 10.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
CEO at netison
Reliable, easy to use, and allows us to deploy OpenVPN clients
Pros and Cons
- "My technicians find the pfSense's web interface very useful. It is very easy to use. pfSense is very reliable and stable. We like the OpenVPN clients that can be deployed using pfSense very much."
- "I'd like to find something in pfSense that is more specific to URL filtering. We have customers who would like to filter their web traffic. They would like to be able to say to their employees, "You can surf the web, but you cannot get access to Facebook or other social media," or "You can surf the web, but you're not allowed to gamble or watch porn on the web." My technicians say that doing this kind of stuff with pfSense nowadays is not easy. They can implement some filters using IP addresses but not by using the names of the domains and categories. So, we are not able to exclude some categories from the allowed traffic, such as porn, gambling, etc. To do that, we have to use another product and another web filter that uses DNS. I know that there are some third-party products that could work with pfSense, but I'd like the native pfSense solution to do that."
What is our primary use case?
We are an MSP. We have some customers who have on-prem networks, and they want to have their networks protected by a firewall. They are quite small customers with 10 to 50 users. We use pfSense in order to protect our customers' network, to make some network automation, and especially to make VPNs to some remote branches to enable remote users to get access to the enterprise network.
It is deployed on a private cloud and on-prem.
What is most valuable?
My technicians find the pfSense's web interface very useful. It is very easy to use.
pfSense is very reliable and stable. We like the OpenVPN clients that can be deployed using pfSense very much.
What needs improvement?
I'd like to find something in pfSense that is more specific to URL filtering. We have customers who would like to filter their web traffic. They would like to be able to say to their employees, "You can surf the web, but you cannot get access to Facebook or other social media," or "You can surf the web, but you're not allowed to gamble or watch porn on the web." My technicians say that doing this kind of stuff with pfSense nowadays is not easy. They can implement some filters using IP addresses but not by using the names of the domains and categories. So, we are not able to exclude some categories from the allowed traffic, such as porn, gambling, etc. To do that, we have to use another product and another web filter that uses DNS. I know that there are some third-party products that could work with pfSense, but I'd like the native pfSense solution to do that.
For how long have I used the solution?
I have been using this solution for five years.
What other advice do I have?
I would rate pfSense a nine out of 10. It is a very good product.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
National IT Coordenator at a government with 51-200 employees
Stable open-source solution for a small company or a startup with a tight budget
Pros and Cons
- "I like pfSense's reports and how I can control access to the policies on the firewall."
- "The user interface can be improved to make it easier to add more features. And pfSense could be better integrated with other solutions, like antivirus."
What is our primary use case?
I use pfSense as a proxy and a firewall to monitor all the traffic to my network. It allows me to shape the traffic and eliminate bottlenecks that cause the network to slow down. You can use pfSense to catch some websites or make the network faster because we have applications connected remotely all over the country. We need to have a network with a reliable speed and no hiccups on the way because all our applications are on-premise, and the entire country goes to the same data center to get information.
What is most valuable?
I like pfSense's reports and how I can control access to the policies on the firewall.
What needs improvement?
The user interface can be improved to make it easier to add more features. And pfSense could be better integrated with other solutions, like antivirus. For example, pfSense could add templates with firewall policies that a user can customize. I haven't tried to integrate pfSense with Microsoft Active Directory, but in Mozambique, we use many Kaspersky antivirus solutions. If pfSense integrated with these antivirus solutions, everything would be much more stable because most of the companies here have a different kind of security solution. Within a single company, you might find two or three different antivirus suites. So, for example, there could be an open-source solution that you get for free, but you can pay for the support if you want it. So for solutions like that, it would be great.
What do I think about the stability of the solution?
Companies in Africa have issues with budgeting for IT. An open-source solution like pfSense gives us stability and provides us with good reports. It's amazing. It makes the solution reliable.
What do I think about the scalability of the solution?
I haven't tried yet scaling up pfSense. But my setup is Windows based, and I have some Windows-based applications, so I want it to integrate with the Microsoft Active Directory. I haven't done it yet, but I think it would be good to have that integration.
How are customer service and support?
I contacted pfSense support only once when I was installing it and had only configured one network tab. I had to get in touch with them, and the support was terrific. I was impressed. I can't complain about their support.
How was the initial setup?
I have some experience with Linux distributions, so setting up pfSense was a bit easier for me, and I have been working with security for quite some time. It was fast for me, but part of my team is not used to a Linux environment, so it was tricky for them to implement add-ons to the appliance.
What other advice do I have?
I rate pfSense eight out of 10. I would recommend it for a small business or a startup as a starting point. It's also good for companies that are on a tight budget.
Which deployment model are you using for this solution?
On-premises
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Founder and MD at Smart Solution
The intrusion detection capabilities work well
Pros and Cons
- "My company mainly works in the health and educational domain, schools and universities. I prevent the improper use of content from schools and universities. I defend the medical records for the patients in our hospitals. That is the main use case for me for the firewall."
- "pfSense is not user-friendly. I hope to have something to make the interfaces more user-friendly."
What is our primary use case?
My primary use case for pfSense is as a firewall. We also use it for intrusion detection, intrusion prevention, website filtering, and quality of service (QoS).
How has it helped my organization?
My company mainly works in the health and educational domain, schools and universities. I prevent the improper use of content from schools and universities. I defend the medical records for the patients in our hospitals. That is the main use case for me for the firewall.
What is most valuable?
One of the most valuable features of this solution is that it's almost entirely free and I can do everything with it.
What needs improvement?
It has everything I need, but the main drawback of pfSense is that it's not user-friendly. I hope to have something to make the interfaces more user-friendly. I would also like to see some documentation that can help with use cases or that has advice and tips. I have found some documentation available but it's usually from an earlier version. If they develop this, pfSense will be the best. The only thing that Fortigate is better than pfSense is that they have 24/7 support. pfSense also needs improvements in the intrusion detection area.
For how long have I used the solution?
Three to five years.
What do I think about the stability of the solution?
I depend on and use VMware ESXi with vSphere in my deployment, virtualization. pfSense is more stable and reliable if you install it directly on the server, i.e. not being installed as a virtual machine. That makes it very stable.
What do I think about the scalability of the solution?
The scalability is good. You can integrate some nodes of pfSense but it's not very user friendly.
How are customer service and technical support?
I would be more relieved and more happy to have support. You need to have some people who can help you in any use case.
How was the initial setup?
Lots of reading and trial and error. It's tough for the network engineer, but it is magnificent in performance from my point of view.
What about the implementation team?
We implemented in-house. Not user friendly, but if you want to do anything you can do it with pfSense.
What was our ROI?
Free. Would purchase for better customer support.
What's my experience with pricing, setup cost, and licensing?
It is completely free.
Which other solutions did I evaluate?
We also evaluated Fortigate.
What other advice do I have?
I would rate this solution an eight out of ten. I give it this rating because of the rich features available. pfSense is free and I can do everything with it. It works as a firewall for servers also.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
IT Support Specialist at SWATX
A load balancing solution that needs to improve VPN configuration
Pros and Cons
- "The tools' most valuable feature is load balancing."
- "Netgate pfSense needs to improve the configuration for a VPN."
What is our primary use case?
We use Netgate pfSense for load balancing.
What is most valuable?
The tools' most valuable feature is load balancing.
What needs improvement?
Netgate pfSense needs to improve the configuration for a VPN.
For how long have I used the solution?
I have been working with the product for three months.
What do I think about the stability of the solution?
I rate the product's stability a nine out of ten.
What do I think about the scalability of the solution?
I rate Netgate pfSense's scalability a seven out of ten.
How are customer service and support?
I have used online documentation and hence haven't contacted the support yet.
How was the initial setup?
I rate the tool's deployment a nine out of ten. Its deployment takes only a few hours to complete.
What about the implementation team?
We did the deployment in-house.
What's my experience with pricing, setup cost, and licensing?
I use the product's free version.
What other advice do I have?
I rate the solution a nine out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Buyer's Guide
Download our free Netgate pfSense Report and get advice and tips from experienced pros
sharing their opinions.
Updated: November 2024
Product Categories
FirewallsPopular Comparisons
Fortinet FortiGate
OPNsense
Cisco Secure Firewall
Sophos XG
Palo Alto Networks NG Firewalls
Azure Firewall
Check Point NGFW
WatchGuard Firebox
SonicWall TZ
Juniper SRX Series Firewall
Untangle NG Firewall
Fortinet FortiGate-VM
SonicWall NSa
Sophos XGS
Fortinet FortiOS
Buyer's Guide
Download our free Netgate pfSense Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- What Is The Biggest Difference Between Sophos and pfSense?
- How do I choose between Fortinet FortiGate and pfSense?
- How do I deploy anti-spam in pfSense or SonicWall TZ?
- What are the differences between Fortinet FortiGate and pfSense?
- Comparison between Sophos XG and pfSense as firewalls
- What is the difference between PfSense and OPNsense?
- Why is pfSense's firewall better than OPNsense's?
- Which solution do you prefer: pfSense or KerioControl?
- What do you recommend for a corporate firewall implementation?
- Comparison of Barracuda F800, SonicWall 5600 and Fortinet