pfSense Firewall/VPN/Router
Netgate | 2.3.4Linux/Unix, Other FreeBSD pfSense 2.3.4/FreeBSD 10.12 - 64-bit Amazon Machine Image (AMI)
External reviews
External reviews are not included in the AWS star rating for the product.
Great option of perimeter firewall
What do you like best about the product?
The pfSense is an Open Source project that is being supported by Netgate and offers great perimeter security for small businesses that do not have the money for an ASA, FortiGate or other similar device. The application of traffic policies is very easy to do and personalization of these is very useful with the tools available to the system. It is great the system of packages that extend the functions, for example the package for IDS / IPS Snort is great, the OpenVPN for VPN is very easy to use and so other options that can be incorporated for free.
What do you dislike about the product?
In the last version the support to the unofficial packages was removed, this decision is very annoying because there are many very good packages that are not included in the pfSense library. Another point not so remarkable is the traffic monitoring options that pfSense has, however it fulfills its function for non-demanding users.
What problems is the product solving and how is that benefiting you?
The main advantage of pfSense is the cost, which is 0 and thanks to this, contracts were obtained with external clients that did not have enough funds for a commercial perimeter firewall. The function of VPN with OpenVPN and the application of Snort are the best features that have significantly improved the performance and productivity of our customers' networks.
Recommendations to others considering the product:
Consider the pfSense in case your network needs port security and minimal protection from the outside. If an active and more granular management of the threats and the traffic that passes through it is required, think about accumulating more resources to acquire another superior product.
- Leave a Comment |
- Mark review as helpful
Great open source firewall
What do you like best about the product?
Open source professional level firewall. Particularly features like multi-wan and how that is implemented into standard features like NAT etc.
What do you dislike about the product?
Many of the services I would like to run are add on packages not truly part of the system. Those have non-standard configs and interfaces because of it. They can be broken or unstable because of it.
What problems is the product solving and how is that benefiting you?
Multi-wan internet supplied by multiple ISP's and used directly without most staff even knowing it. Provides various switching and failover methods for bandwidth or times when an ISP is unreliable.
Recommendations to others considering the product:
While I really like this product, I have moved on to a fork of it called OPNSense that I would recommend over pfSense. pfSense a is good product but much has changed with the project and the company behind it. I put them in second place because that is where there software falls based on most usage. Hope their next release release with all the drastic changes announced a couple of years ago will change my mind.
License cost increased by 476% from July 2017 without notice!!!
We decided to use pfSense with 100,80$ of licence per month.
Then I realized that from July, the license cost is 476,16$ per month.
No advice received in advance.
Very easy to install out of the gate and a robust routing platform.
What do you like best about the product?
Can't believe how easy it is to set up out of the box. Fire up the server, install the platform and then you assign a LAN/WAN interface... DONE!
What do you dislike about the product?
I would like to see more analytics or an easier way to get to client based data from the dashboard.
What problems is the product solving and how is that benefiting you?
I am looking for a secure, but easy and highly configurable platform that just plain WORKS. This seems to fit the bill.
So powerful
What do you like best about the product?
With this product being open source it amazing how powerful the features you get with it and the ability to configure to your needs is great!
What do you dislike about the product?
It can be hard to get the configuration you want at the start but you get there in the end!
What problems is the product solving and how is that benefiting you?
Free open source protection for your network what more could you want!
Pfsense a worth while firewall
What do you like best about the product?
The best things of this product is how modular it can be and the community support it offers.
pfsense has a range of modules/plugins that can be added in order to shape pfsense to your needs, there is a wide selection and you are sure to find something to do the job. If for any reason you are unable to find a module to do what needs to be done, more than likely a question has been asked on the subject and an answer is easily found, if not you can pose a question on the forums and you will be met with a very patient community.
One of the main benefits is the capability for multiple WANs, allowing you to route traffic how you see fit or even load balance.
You can add squid guard and block/allow websites on a whitelist/blacklist.
Aliasing allows you to add multiple IP's/networks/hosts under a single alias and make firewall rules based on this, so rather than creating 250 firewall rules for 250 nodes, simply alias all 250 and make a single rule for that alias.
There are pages devoted to graphs so you can monitor your network traffic, your physical NICs and the server itself.
There are a ton of features and all the basic/advanced networking needs are met.
pfsense has a range of modules/plugins that can be added in order to shape pfsense to your needs, there is a wide selection and you are sure to find something to do the job. If for any reason you are unable to find a module to do what needs to be done, more than likely a question has been asked on the subject and an answer is easily found, if not you can pose a question on the forums and you will be met with a very patient community.
One of the main benefits is the capability for multiple WANs, allowing you to route traffic how you see fit or even load balance.
You can add squid guard and block/allow websites on a whitelist/blacklist.
Aliasing allows you to add multiple IP's/networks/hosts under a single alias and make firewall rules based on this, so rather than creating 250 firewall rules for 250 nodes, simply alias all 250 and make a single rule for that alias.
There are pages devoted to graphs so you can monitor your network traffic, your physical NICs and the server itself.
There are a ton of features and all the basic/advanced networking needs are met.
What do you dislike about the product?
There is very little I have found I do not like about pfsense, although I have not tested every single possible feature, my experience has certainly been very positive. There are two things however that do spring to mind.
I was unable to achieve port forwarding for a VPN. The VPN was PPTP (admittedly I never tried any other methods) on a Windows server. Despite countless hours searching and reading the results and numerous attempts of changing settings, I was unable to use the VPN (had worked previously with a paid firewall solution), whether this issue still stands or was entirely my fault still remains unsolved.
After approximately three years I have found pfsense to become slightly flaky. I have only experienced this with one box (the longest running). Whether this issue boils down to the physical server and/or components or whether this is due to changes over the course of time/corruption of configuration files, is again undetermined.
In reality I have not experienced any real downsides of the solution I cannot link back to me.
I was unable to achieve port forwarding for a VPN. The VPN was PPTP (admittedly I never tried any other methods) on a Windows server. Despite countless hours searching and reading the results and numerous attempts of changing settings, I was unable to use the VPN (had worked previously with a paid firewall solution), whether this issue still stands or was entirely my fault still remains unsolved.
After approximately three years I have found pfsense to become slightly flaky. I have only experienced this with one box (the longest running). Whether this issue boils down to the physical server and/or components or whether this is due to changes over the course of time/corruption of configuration files, is again undetermined.
In reality I have not experienced any real downsides of the solution I cannot link back to me.
What problems is the product solving and how is that benefiting you?
The product has personally helped to act as a firewall protecting and controlling both internal and external traffic on the network.
It has allowed me multiple WAN connections. With aliasing I can quickly group servers, computers, security equipment etc. Using the aliasing I have been able to dedicate WAN connections for specific purposes ensuring the bandwidth is distributed as necessary with a single firewall rule.
Modules like bandwidthd help me check the hosts consuming the most traffic, squid to help me monitor traffic and squid guard to help me block or allow traffic, make this a great solution.
After moving from one paid licensed solution to another I have found pfsense to not only be free, but completely wipe the floor with anything paid for previously.
My experience with this product is extremely positive and I would definitely recommend it as a great solution.
It has allowed me multiple WAN connections. With aliasing I can quickly group servers, computers, security equipment etc. Using the aliasing I have been able to dedicate WAN connections for specific purposes ensuring the bandwidth is distributed as necessary with a single firewall rule.
Modules like bandwidthd help me check the hosts consuming the most traffic, squid to help me monitor traffic and squid guard to help me block or allow traffic, make this a great solution.
After moving from one paid licensed solution to another I have found pfsense to not only be free, but completely wipe the floor with anything paid for previously.
My experience with this product is extremely positive and I would definitely recommend it as a great solution.
Recommendations to others considering the product:
It's got a great fully fledged gui and it's linux for shell users. Install it, try it, any problems the docs or community will come through.
Easy to setup and checking Software Router
What do you like best about the product?
Resource utilization is really lower.
Have a good user interface that I can easily understand and learn how to use it.
Have a good user interface that I can easily understand and learn how to use it.
What do you dislike about the product?
No much user know this product that I can only access their forum for searching solution
What problems is the product solving and how is that benefiting you?
Main Network Router and VPN gateway.
I can use an old server to serve 50 peoples without lagging.
I can use an old server to serve 50 peoples without lagging.
pfSense is a capable and configurable software firewall solution
What do you like best about the product?
pfSense is relatively simple to configure and very powerful.
What do you dislike about the product?
Some features are only available with paid pfSense Gold.
What problems is the product solving and how is that benefiting you?
Many smaller clients need a firewall but don't necessarily need a full hardware firewall solution. pfSense on a VM is the perfect solution for this situation. pfSense has all the necessary features such as iptables filters, vpn tunnels, etc.
Recommendations to others considering the product:
pfSense may not be as featureful as a SonicWALL but if the advanced features aren't necessary then pfSense can save a lot of time and money. Keep it on its own VM or machine, however.
POSTROUTING and PREROUTING not possible
It seems to be a nice appliance for VPN NAT-T IPSEC tunnels, but there is not any possibility to use POSTROUTING and PREROUTING rules from iptables, and for me they are essential.
It just a simple firewall, I will keep my Openswan
Fantastic as always
At the last minute, I needed to move part of my AWS solution to multiple external dedicated server providers (bandwidth costs!). So, machines that used to live in the private cloud with all their friends suddenly had to live in a faraway place. How could they talk to their friends? Netgate pfsense to the rescue. It was easy to set up a VPN on pfsense, and easy to configure the remote hosts with openvpn. It just worked. It was easier than setting up AWS's Virtual Private Gateway, and can handle multiple clients! I am a huge pfsense fan, so no surprise that this solution was perfect for me.
showing 301 - 310