Netgate pfSense Plus Firewall/VPN/Router

The main use case for Netgate pfSense is to set up VPN servers in the cloud. I set up VPN servers in the cloud for clients, and then connect the clients' NAS devices and employees' PCs to those servers. We can use a static IP address, so we can provide static-IP access for customers who need access restrictions.

Netgate pfSense has had a significant impact on my company as we mainly used it to build VPN environments for our customers, and it made it very easy to understand each employee's VPN usage status.

The specific metrics and results I obtained include data transfer volume, and since we can see traffic per individual, it became easier to identify issues such as whether someone might be watching videos.

The best feature of Netgate pfSense is that it supports almost all VPN protocols, and it can issue certificates to each user.

A situation where the certificate issuing and protocol support were particularly convenient is that recently we often switch from OpenVPN to WireGuard, and since we can issue certificates to each individual user at that time, it is very easy to use.

Regarding Netgate pfSense's governance features, we can see everyone's traffic volume, so we can set rules to limit excessive use by imposing transfer limits, and I think that part is valuable.

One area where Netgate pfSense could be improved is that there are not many plugins for two-factor authentication.

Although plugins for two-factor authentication exist, the problem is that we have to use external services such as Deffsense, Tailscale, or Headscale.

Regarding processing robustness and reliability, I think it is still not as advanced as Claude, so for now I am still using Claude to configure Netgate pfSense.

I have been using Netgate pfSense for approximately one year.

Netgate pfSense has very high stability; the server has never gone down, and there are not many updates, so the level of completeness is quite high.

Regarding the scalability of Netgate pfSense, we have not tested scalability yet. For now, one unit is sufficient, so I cannot provide detailed information about scalability.

Before Netgate pfSense, we used SoftEther, but with SoftEther alone there were various failures, so we switched to Netgate pfSense.

I evaluate specific metrics and ROI by noting that our clients have become almost fully remote, so in the sense that they would not have been able to go fully remote without this investment, the ROI is almost close to 100%, definitely over 90%.

My experience with pricing, implementation costs, and licensing is that the implementation cost was difficult at first and was a bit high. However, by using AI support such as Claude, we were able to implement it relatively easily.

We also considered OPNsense before choosing Netgate pfSense, but the implementation cost was a bit high at the time of deployment, so we used Netgate pfSense instead.

My advice to others considering implementing Netgate pfSense is that if you want to implement two-factor authentication, OPNsense has more plugins available, so that might be easier, but it is possible to implement two-factor authentication with Netgate pfSense as well.

I would rate Netgate pfSense about 7 out of 10. The reasons I give it that score are first, ease of use, and also the richness of features; the reason the score is not higher is that two-factor authentication is difficult.

I use Netgate pfSense as a gateway device, where I manage network security, routing, VPN, and traffic management. I'm using the firewall for user authentication as a multi-WAN, or SD-WAN, and all those things are mainly used by the firewall only.

Netgate pfSense has positively impacted my organization because before Netgate pfSense, we were using a router for NATting and various tools for security management. Now, I can do all those things via the firewall only, which has helped me considerably, and all things are shown on a single dashboard.

The best features Netgate pfSense offers in my experience are its firewalling and NAT. In firewalling, stateful packet inspection as well as advanced NAT are used. VPN support is also excellent, with IPsec, OpenVPN, and WireGuard all supported. For load balancing, failover, and SD-WAN, it is being used, and the best aspect is about its security services, for example, IDS, IPS, DNS filtering, and GeoIP blocking.

Vendor backend support must be improved and customer support can be improved. I would like to see improvements in VPN for Netgate pfSense because sometimes the CPU shows heavy load, configuration is a little bit complex for OpenVPN, and troubleshooting is the main concern.

You could add AI for troubleshooting with Netgate pfSense because it will be easier for new engineers.

I have been using Netgate pfSense for the last two years.

Netgate pfSense is stable in my experience.

Netgate pfSense's scalability is strong but conditionally for stability models. It has no hard-coded limits.

The customer support for Netgate pfSense can be improved. I do not say it is bad, but it can be better.

I was not satisfied with the firewall I previously used before Netgate pfSense.

My experience with pricing, setup cost, and licensing for Netgate pfSense is that the pricing is good compared to other vendors, but licensing can be improved as it is a little bit confusing.

We work as a partner with this vendor, not just as a customer.

I have seen a return on investment with Netgate pfSense because it helped me in all these areas.

My experience with pricing, setup cost, and licensing for Netgate pfSense is that the pricing is good compared to other vendors, but licensing can be improved as it is a little bit confusing.

I have not evaluated other options before choosing Netgate pfSense.

I rely on VPN the most in my daily operations because many of my users are working from home, so I provide the RA VPN to the users for remotely accessing my servers that are placed inside my internal network.

I definitely advise others to use this firewall device, as it is truly useful, time-saving, and money-saving. My overall rating for Netgate pfSense is eight out of ten.

We work with Netgate products. We are a reseller and consultant. We have been working with Netgate and Fortinet for around two years.

The primary thing I find valuable in Netgate pfSense Plus Firewall/VPN/Router is that it is license-free software. Unlike FortiGate, you do not have to do yearly subscription renewals. In pfSense, there is no need for any license renewal. This represents a one-time cost, so customers feel that there is no OPEX, only CAPEX.

For VPN, we primarily recommend Netgate pfSense Plus Firewall/VPN/Router to our customers. More packages are available, including IDS and IPS. Whatever features you want, there will be a package readily available. You just have to install it and do the configuration.

VLAN is a basic feature and it is available. Traffic shaping is good enough. Generally, pfSense's traffic shaper is very effective for this. You can prioritize traffic for voice and data.

Load balancing and load failover are valuable. You can have multiple ISPs and do the load balancing effectively. Many customers use load balancing by default and ask for load balancing, VLAN, VPN, and everything.

We have multiple VPN options for our customers' remote access strategy. We have WireGuard, OpenVPN, and IPsec. Usually for customers needing site-to-site VPN, we recommend IPsec. If they want remote VPN access, we recommend OpenVPN.

Multi-WAN allows you to do load balancing and failover.

Netgate pfSense Plus Firewall/VPN/Router regularly provides updates. One aspect they can improve is that most people ask whether an antivirus scanning system is available in pfSense. Other companies, such as FortiGate or Cisco, market their product as a next-generation firewall with built-in antivirus applications and zero trust, with everything available in their ecosystem. This needs to be better communicated for pfSense, because the capability already exists, but we have to explain to customers which package to install and configure for those features to be used effectively. If Netgate can pitch their product with antivirus as a clearly available option, it will be more useful.

Their support is good. I would rate their support as nine out of ten.

Netgate could learn more from FortiGate in terms of product marketing. Customers are more satisfied wherever we have delivered the product. For example, one customer previously used SonicWall and replaced it with Netgate pfSense Plus Firewall/VPN/Router. They are more satisfied with Netgate pfSense Plus Firewall/VPN/Router in terms of its flexibility and customer support.

For metrics to measure its impact, we do not measure in a formal way. We use bandwidth monitoring to check how effective the solution is.

I have not encountered customers asking for additional features beyond the antivirus system. That is the only topic that comes up.

I do not find anything to be improved when it comes to VPN or routing in pfSense.

I would give Netgate pfSense Plus Firewall/VPN/Router a rating of eight out of ten.

We are using this solution mainly in the education sector, including universities or engineering colleges.

I have used Netgate pfSense Plus Firewall_VPN_Router VLAN support, and I find VLAN support is good. VLAN support provides unlimited VLANs and is well-implemented.

VPN tunneling has also been good, as it provides unlimited VPN tunneling capabilities.

The load balancing capabilities of Netgate pfSense Plus Firewall_VPN_Router are good.

Regarding the drawbacks or weak points I have noticed, I reviewed all current firewalls and it seems all are on an equal level, including Netgate pfSense Plus Firewall_VPN_Router. There are no major differences or drawbacks. You can customize this product and choose your own hardware.

In future releases and updates of Netgate pfSense Plus Firewall_VPN_Router, the basic feature I would like to see is that it remains open-source with no recurring cost, which is a big feature in a country like India. A captive portal would be an additional feature that would be good to have.

I have been working with this product for nearly 15 to 17 years.

My experience with the product is that it is a stable and good product that is easy to use. It is an open source product.

I would rate stability from one to ten as a nine in comparison to all other firewalls because it is a cheaper option for deployment and price.

I would rate the scalability of the solution from one to ten as an eight. There is another open-source software, OPNSense, where there is major development compared to Netgate pfSense Plus Firewall_VPN_Router.

The approximate time deployment for Netgate pfSense Plus Firewall_VPN_Router requires only one hour or a maximum of two hours. It is user-friendly.

I am not currently working only with Netgate pfSense Plus Firewall_VPN_Router, as we work with other firewalls also. However, it is a good choice for users.

The other firewalls I am using include Fortinet and Sophos.

I would assess the effectiveness of Netgate pfSense Plus Firewall_VPN_Router's traffic shaping as good, but I would give a six marks only for that compared to others because in the past few years, there has been a stop of improvement or lack of improvement showing in Netgate pfSense Plus Firewall_VPN_Router. That is why OPNSense is quite good now.

The benefits of Netgate pfSense Plus Firewall_VPN_Router VPN services to my remote access strategy are comparatively the same with all others. The basic thing is that all these modules or VPN tunneling or others are unlimited use in Netgate pfSense Plus Firewall_VPN_Router, and in other firewalls, you need to purchase additionally.

I do use Netgate pfSense Plus Firewall_VPN_Router Multi-WAN capabilities. Basically, it is customized, so you can choose your own hardware. It is scalable, depending on your requirements.

My job position is that I am an owner of a company that is involved in managed networks. I rate this product overall as a nine out of ten.

I have used the VLAN support of Netgate pfSense Plus Firewall_VPN_Router. We actually use two types of VPN, OpenVPN and WireGuard, and both of them are working perfectly fine; it is great.

The load balancing capabilities have helped my IT infrastructure. It has helped our network management, as we have a couple of LAN networks and WAN networks.

The effectiveness of Netgate pfSense Plus Firewall_VPN_Router traffic shaping is quite good, but I am not very satisfied with the interface for control. It needs some upgrading in speed, so I would not say it is too complicated or obsolete.

As a firm, we have been using Netgate pfSense Plus Firewall_VPN_Router for a couple of years, and for me, it has been around one year, as long as I have been here.

I do not use the multi-WAN capability of Netgate pfSense Plus Firewall_VPN_Router.

I do not have complaints about Netgate pfSense Plus Firewall_VPN_Router with Firewall, VPN, and Router; it is really comfortable for use, and it does a pretty good job.

I would rate my experience with Netgate pfSense Plus Firewall_VPN_Router as eight out of ten. Mostly the interface is the reason I rate it eight out of ten, but I do not have anything else I would alter or improve. My overall review rating for this product is eight out of ten.

I primarily use this for a small single-site, multi-source setup with multi-WAN inputs. I have a main fiber connection and a couple of failovers, and I manage different networks across different segments.

I really enjoy the flexibility of the interface setup configuration for my network VLANs. It is very easy to configure and set, and when I am doing multi-inputs with internet providers coming in, it is very easy to manage and set up with very little effort.

I think the package management and the updating process in Netgate pfSense could be better. Whenever there is a release, knowing that you cannot update any of the packages until you have done the actual operating system update can be confusing. Beyond that, I do not have any major issues. There are generally some user interface updates and tweaks here and there, but this is a lower priority.

They come out about every 12 months, and I know that is one criticism against Netgate pfSense that they are a little slower on development, but honestly, that is probably preferable because it is not constantly updating.

I have been using Netgate pfSense for about eight years in my career.

Netgate pfSense rates a 10 for stability, and I have experienced no issues there.

Scalability works well. I would say it is probably going to be a nine.

They are very responsive. Within an hour, two hours, or three hours, I generally get a response. I have only had to contact them maybe two or three times for very minor issues, but there is no issue there. I think they are very responsive.

I have used UniFi primarily in the last couple of years, probably three years now, and I have it as a separate site. It is nice, but it is not nearly as configurable. The biggest differentiator is the Netgate pfSense software, particularly the ability to do VPN with regard to Tailscale and OpenVPN, which is very easy to use, whereas UniFi is not ideal. Additionally, the security in UniFi is open by default versus Netgate pfSense, which is closed, and closed is always going to be preferable.

For an entirely new site, it would take some time to configure and set up. If you are coming from an existing setup or configuration, you effectively export the configuration, upload it, and make some minor updates. Even with a booting environment, it is easy to go back or revert to an existing configuration if you make a mistake, so it might take some time, but it is not overly complicated. I would say it requires minimal effort, especially if there is a plan in place ahead of what the structure will be.

One person can do it, but you are going to need to be testing. Honestly, it is not anywhere near as complicated as a larger, more legacy offering, so I think it is very easy.

You are going to have manual updates in terms of the releases, checking those out, doing some testing, and confirming in non-prod environments. It is not that complicated. Even if you have the boot states, you can pretty easily do an operating system update and it is easy to manage.