My primary use case is for controlling incoming traffic from various countries and blocking IP addresses if necessary. I'm the company director and a user of pfSense.
Director at Pixels IoT Ltd
Excellent at blocking problematic IP addresses
Pros and Cons
- "Is good at blocking IP addresses."
- "Lacks instructional videos."
What is our primary use case?
What is most valuable?
A key feature is being able to block IP addresses. This is a good product and I have no issues with it.
What needs improvement?
I'd like to see some instructional videos as opposed to documentation. It would be helpful for beginners and start-up companies.
For how long have I used the solution?
I've been using this solution for a couple of months.
Buyer's Guide
Netgate pfSense
January 2025
Learn what your peers think about Netgate pfSense. Get advice and tips from experienced pros sharing their opinions. Updated: January 2025.
831,265 professionals have used our research since 2012.
What do I think about the stability of the solution?
This solution is stable.
What other advice do I have?
It's worth giving this product a shot and testing it out because it's free and community based.
I would rate the community version a 10 out of 10.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Student
A good firewall with good performance
Pros and Cons
- "It is a good firewall with good performance."
What is our primary use case?
For security testing in network functions virtualization (NFV).
How has it helped my organization?
It is a good firewall with good performance.
What is most valuable?
Stateful packet inspection. It works quite well for an open source product.
What needs improvement?
More regular patch updates, because this is very important for a firewall.
For how long have I used the solution?
Still implementing.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Buyer's Guide
Netgate pfSense
January 2025
Learn what your peers think about Netgate pfSense. Get advice and tips from experienced pros sharing their opinions. Updated: January 2025.
831,265 professionals have used our research since 2012.
Technical Program Manager at a healthcare company with 51-200 employees
Straightforward set-up but it does require some technical expertise to do it.
What is most valuable?
- Free
- Open source
- Robust
- Strong community support
- Strong author support
How has it helped my organization?
Critical network infrastructure has improved.
For how long have I used the solution?
I've used it for two years.
Which solution did I use previously and why did I switch?
I've also used Untangle and Sophos firewalls
How was the initial setup?
Straightforward, but it requires some technical expertise and tweaking.
What about the implementation team?
We implemented it entirely in-house.
What other advice do I have?
Make sure the implementer has programming experience.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Indeed this is a very powerful opensource solution but as you say it requires some technical expertise and tweaking (but actually which firewall technology does not require some now?). Fortunately the community and project documentation are rich and very helpful. Extra packages availability is also rich, it goes from the simple CLI tool like bmon to fully graphically managed RADIUS, SQUID, SNORT servers for instance (see : doc.pfsense.org). It also support natively High Availability Sync thanks to CARP and pfsync protocols (see: doc.pfsense.org). Few days ago I set up VPN SSL configuration with OpenVpn in TAP mode, all done through the GUI (no need to edit any files through CLI) what quite impressed me (usually bridge creation is done through CLI).
To conclude I really invite people looking for a free firewall solution to give a try with pfsense :-)
Just keep in mind such a solution is devoted to projects requiring "not so much speed", I mean 40G or even 100G firewalling and either not UTM inspection.
Network Admin at a tech consulting company with 51-200 employees
The product is missing a graphic report implementation tool but performance, scalability and customization are valuable
What is most valuable?
Performance, cost effective, scalable, customizable
How has it helped my organization?
After switching from Cisco, Juniper, Astaro and Microsoft network response improved and more control of packet (for me, pfpacket technology is better than packet filter.)
What needs improvement?
Graphic report implementation tool (now possible with extra software)
For how long have I used the solution?
5+ years.
What do I think about the scalability of the solution?
No, perfect scalability from 20 to 500 users
Which solution did I use previously and why did I switch?
Cisco, Microsoft and when TMG progressively died it was necessary to switch to unix technology, many corporations require low budget and high performance.
How was the initial setup?
The initial approach is very complex because of the multiple functions, but after a short learning curve it is able to handle the standard functions.
What about the implementation team?
In my case, I buy network appliance from Lanner Inc. ltd (watchguard supplier) and deploy the image depending on the desired size and functionality required by the customer.
What's my experience with pricing, setup cost, and licensing?
Identify the most suitable hardware for the required size.
Which other solutions did I evaluate?
Yes, Astaro and PaloAlto plus Juniper, but the renewal planes (AV, UTM, etc.) are very expensive.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Owner with 11-50 employees
An open source firewall solution with many valuable features, but there are some bias and network intrusion issues
Pros and Cons
- "I mostly like all of it. Whatever we use is valuable."
- "There are some bias issues and some intrusions in our network that have to be addressed. So, we're thinking of changing this firewall to something like a professional hardware-enabled firewall."
What is our primary use case?
We use pfSense as a firewall and proxy server. We use it to apply different restrictions for different users from some data locations.
What is most valuable?
I mostly like all of it. Whatever we use is valuable.
What needs improvement?
There are some bias issues and some intrusions in our network that have to be addressed. So, we're thinking of changing this firewall to something like a professional hardware-enabled firewall.
For how long have I used the solution?
I have been working with pfSense for many years now.
What do I think about the stability of the solution?
pfSense is a stable solution.
What do I think about the scalability of the solution?
pfSense is a scalable solution. We have about 200 users in our company.
What other advice do I have?
On a scale from one to ten, I would give pfSense a seven.
Which deployment model are you using for this solution?
On-premises
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Sócio at a tech services company with 1-10 employees
Helps us maintain internet access for the company we support.
What is most valuable?
Outbound Load Balance for internet links work great. It's very good to keep internet access for the company we support.
How has it helped my organization?
I could keep my customers working even if they lose one internet link. Most of them have at least two links.
For how long have I used the solution?
We have been using this for 10 years.
What was my experience with deployment of the solution?
There was a problem when I ran a version update, then the server just stopped working. This was because pfSense (in this case FreeBSD) was no longer supporting the hardware of the server (HPE).
What do I think about the stability of the solution?
There were no stability issues. If there are issues, they usually stem from a hardware fault.
What do I think about the scalability of the solution?
There were no scalability issues.
How are customer service and technical support?
Customer Service:
It is usually easy to find answers in the forum.
Technical Support:Technical support is good.
Which solution did I use previously and why did I switch?
I used Kerio and Microsoft. I switched because I was looking for something with better security and for someone who could fix bugs faster.
How was the initial setup?
The setup was easy. You can install it in two minutes. It takes more than five minutes to put it to work with a single internet link plus NAT.
What's my experience with pricing, setup cost, and licensing?
It is free.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Professional Internship - System Engineer at a tech services company with 51-200 employees
It's simple and easy to understand to begin using.
Valuable Features:
It's easy to access and configure in general. As for features, the firewall and security options were valuable. These are valuable because I like simple things that are easy to work with, as too much difficulty or too much constraint is not good, and boring.
Improvements to My Organization:
It provided us with better security.
Use of Solution:
I used it for two months.
Deployment Issues:
There were no issues during the time I used it.
Stability Issues:
There were no issues during the time I used it.
Scalability Issues:
There were no issues during the time I used it.
Customer Service:
It was straightforward because it's simple and easy to understand to begin using.
Implementation Team:
We used a vendor team who had a good amount of knowledge,
Disclosure: I am a real user, and this review is based on my own experience and opinions.
I find PfSense to be just what it claims to be. An enterprise class firewall for the world to enjoy for free! It has all the features and none of the costs. If you understand network engineering concepts, PfSense is your "Swiss-Army-Knife"
Need a firewall? PfSense
Need to do static routing? PfSense
Need to route with RIPv2, RIPng, BGP or OSPF? PfSense
Need VPNs? PfSense Yes that includes GRE tunnels over IPSEC
Need Dynamic DNS Clients? PfSense
Need enhanced object tracking for static routing? PfSense
Need multiple WAN connections load balanced? PfSense
Need traffic shaping? PfSense
Need a proxy server? PfSense
Need IDS? PfSense... install the snort package
I've only listed a few of the things it can do. It's been my home router firewall for 10 years.
I recommend it to SOHO owners and home IT enthusiasts alike whom are on a tight budget. It's got a great interface and it's rock stable. It'll run like a dream on an Intel P3 Processor with 640 Megabytes of RAM installed. It works great on a multitude of used / outdated hardware and offers paid support if you can't do the research/reading yourself. What else could you possibly ask for?
Works with 51-200 employees
VPN has allowed me to deploy applications just for the organization and not to public servers.
Pros and Cons
- "The ability to create a VPN allows me to monitor branch offices from a central location."
- "A way to clean squid cache from the GUI."
How has it helped my organization?
VPN has allowed me to deploy applications just for the organization and not to public servers.
What is most valuable?
The ability to create a VPN allows me to monitor branch offices from a central location.
What needs improvement?
A way to clean squid cache from the GUI.
What do I think about the stability of the solution?
Not at all.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Buyer's Guide
Download our free Netgate pfSense Report and get advice and tips from experienced pros
sharing their opinions.
Updated: January 2025
Product Categories
FirewallsPopular Comparisons
Fortinet FortiGate
OPNsense
Cisco Secure Firewall
Sophos XG
Palo Alto Networks NG Firewalls
Azure Firewall
Check Point NGFW
WatchGuard Firebox
SonicWall TZ
Juniper SRX Series Firewall
Fortinet FortiGate-VM
Untangle NG Firewall
SonicWall NSa
Sophos XGS
Fortinet FortiOS
Buyer's Guide
Download our free Netgate pfSense Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- What Is The Biggest Difference Between Sophos and pfSense?
- How do I choose between Fortinet FortiGate and pfSense?
- How do I deploy anti-spam in pfSense or SonicWall TZ?
- What are the differences between Fortinet FortiGate and pfSense?
- Comparison between Sophos XG and pfSense as firewalls
- What is the difference between PfSense and OPNsense?
- Why is pfSense's firewall better than OPNsense's?
- Which solution do you prefer: pfSense or KerioControl?
- What do you recommend for a corporate firewall implementation?
- Comparison of Barracuda F800, SonicWall 5600 and Fortinet
Thanks for the information!