Try our new research platform with insights from 80,000+ expert users
Director at Pixels IoT Ltd
Real User
Excellent at blocking problematic IP addresses
Pros and Cons
  • "Is good at blocking IP addresses."
  • "Lacks instructional videos."

What is our primary use case?

My primary use case is for controlling incoming traffic from various countries and blocking IP addresses if necessary. I'm the company director and a user of pfSense.

What is most valuable?

A key feature is being able to block IP addresses. This is a good product and I have no issues with it.

What needs improvement?

I'd like to see some instructional videos as opposed to documentation. It would be helpful for beginners and start-up companies. 

For how long have I used the solution?

I've been using this solution for a couple of months. 

Buyer's Guide
Netgate pfSense
January 2025
Learn what your peers think about Netgate pfSense. Get advice and tips from experienced pros sharing their opinions. Updated: January 2025.
831,265 professionals have used our research since 2012.

What do I think about the stability of the solution?

This solution is stable.

What other advice do I have?

It's worth giving this product a shot and testing it out because it's free and community based.

I would rate the community version a 10 out of 10. 

Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
User
A good firewall with good performance
Pros and Cons
  • "It is a good firewall with good performance."

    What is our primary use case?

    For security testing in network functions virtualization (NFV). 

    How has it helped my organization?

    It is a good firewall with good performance.

    What is most valuable?

    Stateful packet inspection. It works quite well for an open source product. 

    What needs improvement?

    More regular patch updates, because this is very important for a firewall.

    For how long have I used the solution?

    Still implementing.
    Disclosure: I am a real user, and this review is based on my own experience and opinions.
    PeerSpot user
    it_user607749 - PeerSpot reviewer
    it_user607749Manager, Live Production at a computer software company with 1,001-5,000 employees
    Real User

    Thanks for the information!

    Buyer's Guide
    Netgate pfSense
    January 2025
    Learn what your peers think about Netgate pfSense. Get advice and tips from experienced pros sharing their opinions. Updated: January 2025.
    831,265 professionals have used our research since 2012.
    it_user222801 - PeerSpot reviewer
    Technical Program Manager at a healthcare company with 51-200 employees
    Vendor
    Straightforward set-up but it does require some technical expertise to do it.

    What is most valuable?

    • Free
    • Open source
    • Robust
    • Strong community support
    • Strong author support

    How has it helped my organization?

    Critical network infrastructure has improved.

    For how long have I used the solution?

    I've used it for two years.

    Which solution did I use previously and why did I switch?

    I've also used Untangle and Sophos firewalls

    How was the initial setup?

    Straightforward, but it requires some technical expertise and tweaking.

    What about the implementation team?

    We implemented it entirely in-house.

    What other advice do I have?

    Make sure the implementer has programming experience.

    Disclosure: I am a real user, and this review is based on my own experience and opinions.
    PeerSpot user
    it_user149982 - PeerSpot reviewer
    it_user149982Project Manager at a tech vendor with 1,001-5,000 employees
    Vendor

    Indeed this is a very powerful opensource solution but as you say it requires some technical expertise and tweaking (but actually which firewall technology does not require some now?). Fortunately the community and project documentation are rich and very helpful. Extra packages availability is also rich, it goes from the simple CLI tool like bmon to fully graphically managed RADIUS, SQUID, SNORT servers for instance (see : doc.pfsense.org). It also support natively High Availability Sync thanks to CARP and pfsync protocols (see: doc.pfsense.org). Few days ago I set up VPN SSL configuration with OpenVpn in TAP mode, all done through the GUI (no need to edit any files through CLI) what quite impressed me (usually bridge creation is done through CLI).
    To conclude I really invite people looking for a free firewall solution to give a try with pfsense :-)
    Just keep in mind such a solution is devoted to projects requiring "not so much speed", I mean 40G or even 100G firewalling and either not UTM inspection.

    PeerSpot user
    Network Admin at a tech consulting company with 51-200 employees
    Consultant
    The product is missing a graphic report implementation tool but performance, scalability and customization are valuable

    What is most valuable?

    Performance, cost effective, scalable, customizable

    How has it helped my organization?

    After switching from Cisco, Juniper, Astaro and Microsoft network response improved and more control of packet (for me, pfpacket technology is better than packet filter.)

    What needs improvement?

    Graphic report implementation tool (now possible with extra software)

    For how long have I used the solution?

    5+ years.

    What do I think about the scalability of the solution?

    No, perfect scalability from 20 to 500 users

    Which solution did I use previously and why did I switch?

    Cisco, Microsoft and when TMG progressively died it was necessary to switch to unix technology, many corporations require low budget and high performance.

    How was the initial setup?

    The initial approach is very complex because of the multiple functions, but after a short learning curve it is able to handle the standard functions.

    What about the implementation team?

    In my case, I buy network appliance from Lanner Inc. ltd (watchguard supplier) and deploy the image depending on the desired size and functionality required by the customer.

    What's my experience with pricing, setup cost, and licensing?

    Identify the most suitable hardware for the required size.

    Which other solutions did I evaluate?

    Yes, Astaro and PaloAlto plus Juniper, but the renewal planes (AV, UTM, etc.) are very expensive.
    Disclosure: I am a real user, and this review is based on my own experience and opinions.
    PeerSpot user
    reviewer1614375 - PeerSpot reviewer
    Owner with 11-50 employees
    Real User
    An open source firewall solution with many valuable features, but there are some bias and network intrusion issues
    Pros and Cons
    • "I mostly like all of it. Whatever we use is valuable."
    • "There are some bias issues and some intrusions in our network that have to be addressed. So, we're thinking of changing this firewall to something like a professional hardware-enabled firewall."

    What is our primary use case?

    We use pfSense as a firewall and proxy server. We use it to apply different restrictions for different users from some data locations.

    What is most valuable?

    I mostly like all of it. Whatever we use is valuable.

    What needs improvement?

    There are some bias issues and some intrusions in our network that have to be addressed. So, we're thinking of changing this firewall to something like a professional hardware-enabled firewall.

    For how long have I used the solution?

    I have been working with pfSense for many years now.

    What do I think about the stability of the solution?

    pfSense is a stable solution.

    What do I think about the scalability of the solution?

    pfSense is a scalable solution. We have about 200 users in our company.

    What other advice do I have?

    On a scale from one to ten, I would give pfSense a seven.

    Which deployment model are you using for this solution?

    On-premises
    Disclosure: I am a real user, and this review is based on my own experience and opinions.
    PeerSpot user
    PeerSpot user
    Sócio at a tech services company with 1-10 employees
    Consultant
    Helps us maintain internet access for the company we support.

    What is most valuable?

    Outbound Load Balance for internet links work great. It's very good to keep internet access for the company we support.

    How has it helped my organization?

    I could keep my customers working even if they lose one internet link. Most of them have at least two links.

    For how long have I used the solution?

    We have been using this for 10 years.

    What was my experience with deployment of the solution?

    There was a problem when I ran a version update, then the server just stopped working. This was because pfSense (in this case FreeBSD) was no longer supporting the hardware of the server (HPE).

    What do I think about the stability of the solution?

    There were no stability issues. If there are issues, they usually stem from a hardware fault.

    What do I think about the scalability of the solution?

    There were no scalability issues.

    How are customer service and technical support?

    Customer Service:

    It is usually easy to find answers in the forum.

    Technical Support:

    Technical support is good.

    Which solution did I use previously and why did I switch?

    I used Kerio and Microsoft. I switched because I was looking for something with better security and for someone who could fix bugs faster.

    How was the initial setup?

    The setup was easy. You can install it in two minutes. It takes more than five minutes to put it to work with a single internet link plus NAT.

    What's my experience with pricing, setup cost, and licensing?

    It is free.

    Disclosure: I am a real user, and this review is based on my own experience and opinions.
    PeerSpot user
    it_user245433 - PeerSpot reviewer
    Professional Internship - System Engineer at a tech services company with 51-200 employees
    Consultant
    It's simple and easy to understand to begin using.

    Valuable Features:

    It's easy to access and configure in general.  As for features, the firewall and security  options were valuable.  These are valuable because I like simple things that are easy to work with, as too much difficulty or too much constraint is not good, and boring.

    Improvements to My Organization:

    It provided us with better security.

    Use of Solution:

    I used it for two months.

    Deployment Issues:

    There were no issues during the time I used it.

    Stability Issues:

    There were no issues during the time I used it.

    Scalability Issues:

    There were no issues during the time I used it.

    Customer Service:

    It was straightforward because it's simple and easy to understand to begin using.

    Implementation Team:

    We used a vendor team who had a good amount of knowledge,

    Disclosure: I am a real user, and this review is based on my own experience and opinions.
    PeerSpot user
    it_user179136 - PeerSpot reviewer
    it_user179136Network Engineer at a tech services company with 501-1,000 employees
    Real User

    I find PfSense to be just what it claims to be. An enterprise class firewall for the world to enjoy for free! It has all the features and none of the costs. If you understand network engineering concepts, PfSense is your "Swiss-Army-Knife"
    Need a firewall? PfSense
    Need to do static routing? PfSense
    Need to route with RIPv2, RIPng, BGP or OSPF? PfSense
    Need VPNs? PfSense Yes that includes GRE tunnels over IPSEC
    Need Dynamic DNS Clients? PfSense
    Need enhanced object tracking for static routing? PfSense
    Need multiple WAN connections load balanced? PfSense
    Need traffic shaping? PfSense
    Need a proxy server? PfSense
    Need IDS? PfSense... install the snort package

    I've only listed a few of the things it can do. It's been my home router firewall for 10 years.
    I recommend it to SOHO owners and home IT enthusiasts alike whom are on a tight budget. It's got a great interface and it's rock stable. It'll run like a dream on an Intel P3 Processor with 640 Megabytes of RAM installed. It works great on a multitude of used / outdated hardware and offers paid support if you can't do the research/reading yourself. What else could you possibly ask for?

    it_user429552 - PeerSpot reviewer
    Works with 51-200 employees
    Vendor
    VPN has allowed me to deploy applications just for the organization and not to public servers.
    Pros and Cons
    • "The ability to create a VPN allows me to monitor branch offices from a central location."
    • "A way to clean squid cache from the GUI."

    How has it helped my organization?

    VPN has allowed me to deploy applications just for the organization and not to public servers.

    What is most valuable?

    The ability to create a VPN allows me to monitor branch offices from a central location.

    What needs improvement?

    A way to clean squid cache from the GUI.

    What do I think about the stability of the solution?

    Not at all.

    Disclosure: I am a real user, and this review is based on my own experience and opinions.
    PeerSpot user
    Buyer's Guide
    Download our free Netgate pfSense Report and get advice and tips from experienced pros sharing their opinions.
    Updated: January 2025
    Product Categories
    Firewalls
    Buyer's Guide
    Download our free Netgate pfSense Report and get advice and tips from experienced pros sharing their opinions.