We performed a comparison between pfSense and SonicWall TZ based on our users’ reviews in five categories. After reading all of the collected data, you can find our conclusion below.
Features: pfSense offers valuable features such as IP address blocking, user-friendly dashboards, scanning and filtering capabilities, stability, customization abilities, and cost-effectiveness. SonicWall TZ provides unified threat management, VPN capabilities, web security, a user-friendly interface, simplicity, stability, performance, content filtering, and additional features.
pfSense users have suggested the need for instructional videos for beginners, a clearer web interface, improved stability, a mobile application, enhanced reporting, and better integration with other solutions. Users of SonicWall TZ have pointed out improvements that are needed in rated throughput, secondary DNS hosting, cloud management, user interface, integration and flexibility, marketing and branding, reporting and licensing, additional ports, affordability and competition, UI application and policy synchronization, technical support and VPN connections, and pricing.
Service and Support: Some users of pfSense have appreciated the technical support, while others have sought help from the online community. SonicWall TZ has garnered both positive and negative feedback. While some customers have found the support to be satisfactory, others have encountered delays and language barriers.
Ease of Deployment: Users generally find the initial setup of pfSense to be straightforward and easy, with a simple installation process. However, they express the need for clearer guidance or a configuration wizard. The initial setup for SonicWall TZ is considered intuitive and not overly complex, with a smooth out-of-the-box process.
Pricing: The cost of setting up pfSense is affordable and requires no extra charges for firmware updates. Opinions on SonicWall TZ's pricing are divided, with some deeming it cost-effective for medium-sized businesses, while others perceive it as pricey and lacking competitiveness.
ROI: pfSense provides a budget-friendly option with a low yearly cost and substantial hardware savings, leading to a considerable ROI. SonicWall TZ is suggested for improved efficacy and is seen as an essential element for safeguarding the network.
Comparison Results: pfSense is the preferred option when comparing it to SonicWall TZ. Users appreciate pfSense's easy-to-use dashboards, its open-source nature, and its capability to block IP addresses. They find it affordable, customizable, and effective in preventing attacks.
"The most valuable feature is the VDOM, which allows the customer to have multiple firewalls in a single campus."
"From the firewall perspective, the rules and policies are very sufficient and easy to use."
"The most valuable features are the enterprise modeling and the simple interface."
"Advanced routing (RIP, OSPF, BGP, PBR). It gives you a seamless and simple integration into a large network."
"The IPS is good. It protect my network from attackers."
"Whenever I need something, Fortinet improves and updates the software for me."
"You can create multiple Virtual Domains (VDOMs), which are treated as separate firewall instances."
"Some of the valuable features are the firewall, IPS, web filter, and gateway capabilities. Additionally, it is easy to use and flexible."
"There is good documentation with a fantastic community and enterprise support."
"The plugins or add-ons are most valuable. Sometimes, they are free of charge, and sometimes, you have to pay for them, but you can purchase or download very valuable plugins or add-ons to perform internal testing of your network and simulate a denial-of-service attack or whichever attack you want to simulate. You can also remote and monitor your network and see where the gap is. Did you forget a printer port? Most attacks at the moment are happening through printers, and they can tell you immediately that you forgot to close the port of the printer. There are more than one million printers that are in danger, and everybody knows that hackers are using them to enter the network. So, you can download plugins to protect your network."
"Super easy to manage. Anyone who has been working with firewalls can handle it."
"I use pfSense because it gives me the flexibility to greatly expand basic firewall features."
"Improved service performance and availability through redundancy."
"The concurrent users are perfect for us."
"Its scalability is a strong point."
"We like the fact that the product is open-source. It's free to use. There are no costs associated with it."
"User-friendly firewall solution which scales well, is stable, and has high availability."
"Technical support is good."
"The general feature is the antivirus policy, followed by the ransomware protection, and these are the features I was looking at."
"The scalability of SonicWall TZ is good and easy to add users."
"The network security is great."
"We are very much happy with the support."
"Its user interface and simplicity are the most favorite parts for our clients. They find it stable and easy to use. Its performance is also good."
"Access restriction and IP whitelisting are the most valuable features."
"We would like to have the ability to disable some of the security functionalities."
"In the next release, maybe the documentation on how to use this solution could be improved."
"With the addition of some features, it is possible that FortiGate can be used in all verticals."
"The solution is very expensive."
"My only complaint about FortiGate is a lack of QinQ VLAN tunneling. I haven't found this feature in any Fortinet product. You can do this on all Cisco routers, including the smaller models. However, QinQ isn't available on the biggest, most expensive Fortinet units. They still don't have that. I think now we're on software version 6.0, and they still haven't found a solution for QinQ. It isn't a dealbreaker, but that's my main complaint."
"There aren't really any negative aspects to discuss."
"The captive portal could be improved."
"It can be a little bit more user-friendly in terms of policy definition and implementation. It seems a little bit complicated, and it could be simplified."
"There could be a way to remote to it through a mobile app. You can always browse through your browser on your mobile phone or tablet, but it would be good to have a dedicated app. I understand that iOS and Android developers are expensive, but there should be a mobile app."
"The integration of pfSense with EPS and EDS could be better. Also, it should be easier to get reports on how many users are connecting simultaneously and how sections connect in real-time."
"For the third-party packages, I'd rather have it built-in, like a core feature of pfSense, part of the core model."
"I'd like to find something in pfSense that is more specific to URL filtering. We have customers who would like to filter their web traffic. They would like to be able to say to their employees, "You can surf the web, but you cannot get access to Facebook or other social media," or "You can surf the web, but you're not allowed to gamble or watch porn on the web." My technicians say that doing this kind of stuff with pfSense nowadays is not easy. They can implement some filters using IP addresses but not by using the names of the domains and categories. So, we are not able to exclude some categories from the allowed traffic, such as porn, gambling, etc. To do that, we have to use another product and another web filter that uses DNS. I know that there are some third-party products that could work with pfSense, but I'd like the native pfSense solution to do that."
"Lacks instructional videos."
"I have been using WireGuard VPN because it is a lot faster and more secure than an open VPN. However, in the latest version of pfSense, they have removed this feature, which is one of the main features that I need. They should include this feature."
"I believe improving integration with various antivirus vendors could be beneficial."
"Web interface could be enhanced and more user friendly."
"The solution's cost needs improvement."
"The cost of the solution has room for improvement."
"It would be good if Analyzer would be part of the stock license, so even if a layperson is getting the device, he or she doesn't forgets about ordering the Analyzer because it's already there."
"I would like to see a SonicWall integration with the DLP tool, this would be interesting. Data Loss Prevention integration."
"There is a point I don't like about SonicWall in the past and now. Most of the destinations we look at when we're detecting some user using too much bandwidth or something like that, SonicWall just gave us destination IP address, instead of the full qualified domain name. I think that's the most important part that is still missing. I think that's the most important for us."
"I would like the solution to build in more redundancy. I"
"We would like to improve the rules configuration in SonicWall TZ. Sometimes the rules don't work."
"It could probably be more user-friendly, and it could be more scalable with releases and subscriptions."
Netgate pfSense is ranked 1st in Firewalls with 128 reviews while SonicWall TZ is ranked 12th in Firewalls with 78 reviews. Netgate pfSense is rated 8.6, while SonicWall TZ is rated 8.0. The top reviewer of Netgate pfSense writes "User-friendly, easy to manage the firewall, rule-wise and interface-wise". On the other hand, the top reviewer of SonicWall TZ writes "Has efficient user access control feature and good technical support services ". Netgate pfSense is most compared with OPNsense, Sophos XG, KerioControl, Sophos UTM and Untangle NG Firewall, whereas SonicWall TZ is most compared with Sophos XG, Meraki MX, SonicWall NSa, WatchGuard Firebox and Cisco Secure Firewall. See our Netgate pfSense vs. SonicWall TZ report.
See our list of best Firewalls vendors.
We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
Just purchase an anti-spam license and activate it at the SonicWall license portal.
I would like to recommend you SONICWALL HOSTED EMAIL SECURITY ADVANCED. It is more helpful and if you are using Office365 or GSuite, go for SonicWall Cloud App Security.
It is more powerful.
Hi, for SonicWall you buy a license and on the same firewall you can activate the antispam only in the ingress mode.
But there is a catch, at the moment they don't support TLS for SMTP so I would recommend their other solution, that has email security for appliance and virtualized on VMware or Hyper-V.