Owner and business consultant at networks srl
Real User
A firewall or router computer software distribution solution with a useful VPN feature
Pros and Cons
  • "I especially like the VPN part. It works like a charm."
  • "I tried pfSense, and it has a big issue with file system consistency, and this is what drove me to OPNsense. The file system stability is quite a big issue for us. We have a lot of outages related to power issues, and OPNsense is much more stable on this side."

What is our primary use case?

I tested it for firewall, networks, and network stability and as a VPN access point.

What is most valuable?

I especially like the VPN part. It works like a charm.

What needs improvement?

I tried pfSense, and it has a big issue with file system consistency, and this is what drove me to OPNsense. The file system stability is quite a big issue for us. We have a lot of outages related to power issues, and OPNsense is much more stable on this side.

I would like it to be more stable on the file system part. It also has an issue with the ARP publishing, but it's common to BSD, and some providers experience issues with Layer 2 connectivity.

For how long have I used the solution?

I tested pfSense for six months, but it had quite a lot of networking issues related to latency and ARP publishing. So, I immediately switched to OPNsense.

Buyer's Guide
Netgate pfSense
April 2024
Learn what your peers think about Netgate pfSense. Get advice and tips from experienced pros sharing their opinions. Updated: April 2024.
769,065 professionals have used our research since 2012.

What do I think about the stability of the solution?

I'd like to see its stability improved. I know the BSD Kernel is more capable than what pfSense provides at this time.

What do I think about the scalability of the solution?

It's scalable. It implements specific protocols for scalability.

How was the initial setup?

The initial setup is straightforward. It took me about ten to 15 minutes to install it and maybe half an hour for configuration.

What about the implementation team?

I implemented this solution.

What other advice do I have?

I would recommend this solution if there are no power issues. It's stable and performs well, even on older hardware.

On a scale from one to ten, I would give pfSense a nine.

Which deployment model are you using for this solution?

On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer: Partner
PeerSpot user
Senior Systems Administrator at a non-tech company with 51-200 employees
Real User
I have not had one issue with it at all, which is amazing
Pros and Cons
  • "Stability has been excellent. We have experienced no issues; it never fails."
  • "It is not centrally managed, where you log into the website and can see all your services there. We would like to be able to see is all the configurations from a central interface on all our pfSenses."

What is our primary use case?

We have mainly been using for our internet workstations.

How has it helped my organization?

After we started with testing with it a bit, it showed that it can be utilized in a way that we wanted to utilize it.

What is most valuable?

I have not had one issue with pfSense at all, which is amazing.

What needs improvement?

Layer 7 filtering has been taken away from pfSense. They would like us to use Snort, which is a good thing, but I would like them to make the Layer 7 thing easier.

The one reason that we did not go with pfSense is that it is not centrally managed like Meraki, where you log into the website and can see all your services there. This is the only reason why we are going with Meraki.

We would like to be able to see is all the configurations from a central interface on all our pfSenses.

For how long have I used the solution?

One to three years.

What do I think about the stability of the solution?

Stability has been excellent. We have experienced no issues; it never fails.

What do I think about the scalability of the solution?

There is a lot of stuff that you can add-on. You can actually write your own APIs to connect to it and so on. So, there is a lot of scalability in pfSense that other products do not have.

How are customer service and technical support?

We have not using technical support. We have only been using the community version.

Which solution did I use previously and why did I switch?

We used to use Empalis. We actually started to replace our Empalis with pfSense first to do testing, and see if it would actually work for us. This was just a test phase, before we went over to Meraki. So far, pfSenses outperform Merakis.

How was the initial setup?

I setup all of it. I set it up for our country, and I did it all remotely. I learned from the community how to do it. The process to install and configure is very straightforward.

What's my experience with pricing, setup cost, and licensing?

It is a free solution.

Which other solutions did I evaluate?

We originally looked at SonicWall, but we chose pfSense because of pricing (since it is free) and it has issues that pfSense does not have. 

We are currently migrating over to Meraki and are having a lot of issue with it. Also, with Meraki, you pay through your neck for it.

I would not have made the decision to move away from pfSense. pfSense has been giving us better options than what Meraki is giving us at the moment. I have got login problems with Meraki which takes about two days for them to sort out. If I was on pfSense, I would sort it out myself.

What other advice do I have?

They need to look at all the communities, comparisons, etc. and read up about the issues and problems people are having with some of the solutions, then see if those problems might be related to what they may be experiencing.

Main criteria when selecting a vendor: 

  • How easy is it to learn.
  • How easy is it to implement.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
Buyer's Guide
Netgate pfSense
April 2024
Learn what your peers think about Netgate pfSense. Get advice and tips from experienced pros sharing their opinions. Updated: April 2024.
769,065 professionals have used our research since 2012.
Defensive Security & BlueTeam at Global Research CO
Real User
Offers a nice interface and good technical support and has a nice load balancer
Pros and Cons
  • "It's a good solution for end-users. It's pretty easy to work with."
  • "The solution could use better reporting. They need to offer more of it in general. Right now, the graphics aren't the best. If you need to provide a report to a manager, for example, it doesn't look great. They need to make it easier to understand and give users the ability to customize them."

What is our primary use case?

Typically, we implement this solution on an enterprise-level for our clients and set it up for them as required.

What is most valuable?

The solution offers good value.

The captive portal on the product is excellent.

The solution has a very nice load balancer.

It's a good solution for end-users. It's pretty easy to work with. 

The user interface is very nice. It's easy to navigate around the solution.

Technical support is very helpful.

What needs improvement?

The solution could use better reporting. They need to offer more of it in general. Right now, the graphics aren't the best. If you need to provide a report to a manager, for example, it doesn't look great. They need to make it easier to understand and give users the ability to customize them.

For how long have I used the solution?

I've been working with the solution for enterprise-level organizations for four or five years at this point.

What do I think about the scalability of the solution?

Our clients use the solution across 100-200 computers. Some of the implementations are sizeable.

How are customer service and technical support?

I've dealt with technical support in the past and have found them to be helpful and responsive. we have been satisfied so far with the level of support provided. They are easy to work with.

How was the initial setup?

We implement the solution for our clients, so we have a good sense of what is expected.

What about the implementation team?

As an implementer, our company can handle the initial setup for our clients.

What other advice do I have?

We implement the solution for our clients. I've personally implemented the solution on five projects so far.

We work with the latest version of the solution, typically.

Our companies are typically mid-level enterprises. 

This product is the very best. Overall, I would give it a rating of ten out of ten.

Disclosure: My company has a business relationship with this vendor other than being a customer: Implementer
PeerSpot user
PeerSpot user
Systems Administrator at AB Edsbyverken
Real User
It has good documentation with a fantastic community and enterprise support
Pros and Cons
  • "Super easy to manage. Anyone who has been working with firewalls can handle it."
  • "There is good documentation with a fantastic community and enterprise support."
  • "It needs better parsing of logs. At the moment, you have to use an external server for this if you want a deeper analysis."

What is our primary use case?

  • Firewalling
  • Routing
  • DHCP
  • Transparent proxy
  • DNS cache
  • VPN, etc.

How has it helped my organization?

  • Outstanding support
  • Great packages to expand the solution to your needs
  • The same config can easily be migrated to better hardware when you need it.

What is most valuable?

  • Super easy to manage. Anyone who has been working with firewalls can handle it.
  • There is good documentation with a fantastic community and enterprise support.
  • The strongSwan IPSec is a great implementation.
  • Proxy features are excellent (except MITM).

What needs improvement?

  • The central point of management, like the long-rumored pfCenter.
  • Better parsing of logs: At the moment, you have to use an external server for this if you want a deeper analysis. 

For how long have I used the solution?

More than five years.

What do I think about the stability of the solution?

Our appliance is under constant heavy load by several services, and it's rock solid stable.

I had stability issues only with a GUI that used to hang. It didn't affect any services, but it was a little annoying that we needed to restart the PHP often.

What do I think about the scalability of the solution?

pfSense scales well.

How are customer service and technical support?

They are just fantastic. They usually respond super fast, and usually with a solution if you describe the problem correctly. In more complex situations, they will set up a personal lab environment based on the customer's case.

Which solution did I use previously and why did I switch?

We used to use a lot of different solutions.

After comparing a lot of solutions, the choice was Netgate pfSense.

How was the initial setup?

It is very straightforward and much easier than the previous Clavister FW. Config is easy. 

What about the implementation team?

99 percent in-house implementation and 1 percent Netgate implementation. Netgate has the highest level of expertise you can get.

What was our ROI?

This solution was about $150,000 cheaper than the closest competitor over a three year period. 

What's my experience with pricing, setup cost, and licensing?

All costs are low compared to other solutions. The hardware is stable and cheap.

There is no licensing fee except for the enterprise support, if you want it.

Which other solutions did I evaluate?

We evaluated Cisco, Fortinet, and Sophos.

What other advice do I have?

If you don't have a policy that says "only proprietary software" in your company, there is no reason not to go for pfSense. If you are still in doubt, take the cheap (and excellent) Netgate academy course. It's only for two days, and you will learn how to manage pfSense at a comprehensive level.

Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
Infrastructure Administrator at CFA-INSTA
Real User
Top 20
Customizable, easy to use, and reliable
Pros and Cons
  • "The main features of this solution are customization and ease to use."
  • "The configuration of the solution is a bit difficult."

What is our primary use case?

This solution can be used for a firewall, VPN, and VLAN.

What is most valuable?

The main features of this solution are customization and ease to use.

What needs improvement?

The configuration of the solution is a bit difficult.

For how long have I used the solution?

I have been using the solution for one year.

What do I think about the stability of the solution?

The solution is stable.

What do I think about the scalability of the solution?

I have found this solution to be scalable.

How are customer service and technical support?

The technical support was good in my experience.

How was the initial setup?

The installation is easy and can take approximately one day.

What about the implementation team?

We did the implementation of the solution and we have five technicians available for implementation and maintenance.

What other advice do I have?

My advice to those wanting to implement this solution is that if you are new to configuring this solution I would seek assistance. You most likely will have problems if you have not done it before.

I rate pfSense an eight out of ten.

Which deployment model are you using for this solution?

On-premises
Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
PeerSpot user
Owner / Principle Engineer at Cogito Innovations
Real User
Powerful, flexible, and intuitive with features that rival many high cost solutions
Pros and Cons
  • "Its features rival many of the high cost solutions out there."
  • "The GUI could use improvements, though it is manageable."

pfSense has been a perfect fit for my small business needs. It is economical (i.e., free), yet powerful, flexible, and intuitive. Its features rival many of the high cost solutions out there.

The GUI could use improvements, though it is manageable.

Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
it_user240036 - PeerSpot reviewer
Senior IT Architect at a university with 5,001-10,000 employees
Vendor
Unfortunately, my experience with pfSense hasn’t been so good. Operational-wise it's fine but I've had issues with firmware upgrades.

I must be getting quite comfortable with upgrading pfSense. I just finished an upgrade from 2.2 to 2.2.1, and only midway remembered that I hadn’t done a config export and backup. Just the last upgrade exercise, I was still very paranoid about something that might go wrong. I would set aside time for the upgrade, make backups, and cross my fingers.

This should have been the way, always, that firmware, or device software, get upgraded. You just do it, and it should just work. The upgrade process should test that everything is good to go, and let you know if anything is amiss, before commencing the upgrade.

In the unlikely event that something does go wrong after starting the upgrade, there should be some automatic rollback, returning the system to its original state, leaving the user with no more than a small annoyance that the upgrade did not happen.

Unfortunately, my experience with pfSense hasn’t been so good. By and large, everything about pfSense has been good, operational-wise. It’s just that I’ve not been very lucky with the firmware upgrades.

Version 2.2.1 is a minor upgrade. There are a number of security fixes, but none terribly critical. The recent SSL FREAK vulnerability doesn’t affect version 2.2. However, there’s no reason why you should skip this version either. If you’re running pfSense, just do the upgrade. I’m beginning to have more faith in the pfSense upgrade process!

Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
Principal at a tech services company with 1-10 employees
Real User
A great solution that just works and is fast and affordable
Pros and Cons
  • "It works. I put pfSense in, and it works. I can't think of any trouble I ever had with it. It runs on heat-sensitive appliances. They don't need a fan, so they don't overheat. It is affordable, fast, and very high-speed. It is built on BSD Unix, and it pretty much runs on any Intel processor."
  • "I've never tried it in large environments. All my clients are small businesses with a handful of employees, so I am not sure how it works in large environments. I keep up with recent versions, and there's nothing I'm waiting for, and nothing breaks when I get a new version."

What is our primary use case?

We use it for small businesses, and most of my clients are using pfSense.

What is most valuable?

It works. I put pfSense in, and it works. I can't think of any trouble I ever had with it. It runs on heat-sensitive appliances. They don't need a fan, so they don't overheat. 

It is affordable, fast, and very high-speed. It is built on BSD Unix, and it pretty much runs on any Intel processor. 

What needs improvement?

I've never tried it in large environments. All my clients are small businesses with a handful of employees, so I am not sure how it works in large environments. I keep up with recent versions, and there's nothing I'm waiting for, and nothing breaks when I get a new version.

For how long have I used the solution?

I have been using this solution for maybe five years.

What do I think about the stability of the solution?

It just works.

What do I think about the scalability of the solution?

I've never challenged it. All of my clients are small businesses. It is open-source software, and it runs on whatever appliance you run it on, so whatever computer you run it on, it'll scale up pretty high.

How are customer service and technical support?

Their technical support is excellent. They do have good support service. I don't use it because I've never had any problems with it, but the people I know who use it in bigger environments love it. You can even search their knowledge base and learn anything you want to know pretty quickly. 

Which solution did I use previously and why did I switch?

Some of my businesses just use the built-in firewall in the ISP modem. I replaced an old SonicWall that couldn't keep up with a faster internet service. I've replaced a couple of Cisco solutions that were just getting old to run modern software, but the hardware was working. They just died of old age, and I replaced them with pfSense. It has been great. I'm sure a lot of people know how to configure Cisco solutions, but I don't. pfSense is very easy to configure.

How was the initial setup?

It was very simple. You download and boot a USB stick or a CD to install it. From then on, it is managed by its own webpage. The deployment takes a few minutes.

What's my experience with pricing, setup cost, and licensing?

It has almost zero cost, and it is open to us. It runs on a small appliance just for a couple of 100 bucks, and I've never had an appliance burn out on me yet. 

What other advice do I have?

It is just great. Give it a try. It just works.

I would rate pfSense a ten out of ten.

Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
Buyer's Guide
Download our free Netgate pfSense Report and get advice and tips from experienced pros sharing their opinions.
Updated: April 2024
Product Categories
Firewalls
Buyer's Guide
Download our free Netgate pfSense Report and get advice and tips from experienced pros sharing their opinions.