Barracuda CloudGen Firewall vs. pfSense vs. Sophos UTM

I would say a small business with a basic firewall and security needs would be a perfect fit for the Barracuda CloudGen firewall. I know that they soon end up leaving the NG models and are moving forward with the F series firewall. I think the F series is a much more difficult to manage device and doesn’t offer simplistic configuration or use and lacks cloud control so I don’t understand the move on Barracuda’s part to nix a great easy to manage the firewall. I do think that the NG line is maybe too simple for bigger businesses and would lack some main features that they would require.

Incentivized

I believe PFSense is well suited for both home lab environments as well as up to small to mid-size business environments on a tight budget. However, I would implore that anything in production requires the use of the authorized hardware that PFSense sells to receive support. However, in my experience, PFSense is a solid set-and-forget firewall solution.

UTM works great if you want a solid, obvious firewall. There's not a lot of second-guessing as to what you are about to do with every change you make. If you incorporate their wireless access points and RED (remote ethernet device) for remote users or small offices, it's considerably much easier to set up than other comparable solutions. If you are looking to manage your firewalls via the cloud, you are out of luck.

Incentivized

• The management software is excellent. It make it much easier to manage the firewalls than some of the other vendors.
• Watching real-time traffic is easy to do when trying to troubleshoot a users issues getting to a particular service.
• Support from Barracuda has been excellent. We rate their phone and online remote support as being the best in the business.
• We like the QoS and Traffic shaping of the NG Firewalls. They help is manage our limited bandwidth, so that business critical resources are available over lesser critical resources.
• Integration with Active Directory makes it easy to identify users activities in logs.

Incentivized

• Easy to use. Good user interface design! Easy to understand and easy to set up.
• Lower hardware requirement. 3 years ago, we used an old PC to run it. Now, we have changed to a router device with Celeron CPU and 8GB RAM. It runs smoothly with a 1000G commercial broadband.

Incentivized

• Firewall Protection. The protection is unmatched, setup it a little daunting, but once set up it pretty much runs itself.
• Site-to-site VPN. Super easy to deploy so we are able to network all our sites together.
• The DHCP server function is actually really nice, I prefer using it over the traditional way of using a DC for DHCP.

Incentivized

• Very complex and steep learning curve to get up to speed.
• Multiple ways to configure for the same service or feature. Takes time to determine "your" customized build.
• Interface can sometimes be clunky when trying to determine how it's organized or arranged. Again, steep learning curve.

• I did kind of mention a Con in the Pro section with OpenVPN.
• When I create a config for an employee other employees are able to login to that config.
• I could be doing something wrong when I am making it - I am not afraid to admit that as I am pretty new to all of this, but it seems like it builds a key and I would think the key would be unique in some way to each employee, but I could be wrong.
• I actually do not have a lot of Con's for this software - I did not get to set this up on our work network so I am not sure of any downfalls when installing.
• I installed this on my personal machine in a Hyper-V environment to get a feel for it before I started working on it at work and it seemed pretty smooth. I didn't run into any issues.

Incentivized

• Better standard support, it used to be great, now, not so much (for paying customers, that only aquired the Hardware)
• Better wireless solution, there is always room for that, now that everybody needs robust wifi, even at home!
• Faster and more robust wireless Access Points, or different vendor-like compatibility.

Incentivized

Easy enough to use and configure using the management UI. Reporting from the web filter is a little clunky, and not very user friendly. To be perfectly honest, once it's set up and running, there isn't a lot to do from the day-to-day side of things, which is not a bad thing.

The pfSense UI is easy to navigate and pretty go look at. It is much better than some high dollar firewalls that just throw menus you you. The pfSense UI is quick and responsive and makes sense 99% of the time. Changes are committed quickly and the hardware rarely requires a reboot. It just runs.

Incentivized

The interface is no non-sense and easy to understand. No need for any consultants to help implement this solution. The performance is consistent and solid. Paired with a good amount of firmware and definitions, it's hard to find any fault in this product. It's interoperability with other Sophos products make a compelling argument to invest in more Sophos products.

Incentivized

I could go on and on about how good Barracuda's support really is. I have yet to have a problem they didn't help me fix and I always learn something when talking with them. The story that best describes my overall experience with Barracuda's support is this: When I first put in the xSeries they had a problem with a policy route. There was a bug in the code and in the one situation I was it, it just would not work. I went up the levels of support and they couldn't fix it. Well, next thing I know I am on the phone with 2 of the guys that programmed the thing and they work out the solution in no time and get me going. That is support. That is what I have come to expect from Barracuda. If the tech on the phone doesn't know the answer, they do not stop until they find it. Grant it, I also have to admit I do not call support with every problem, I try to work it out on my own first as that is how I learn best, so when I do call support it is going to be complicated.

Incentivized

pfSense+ basic provides "As Available" email support. pfSense+ Pro offers 24 hr turn around email support. pfSense+ Enterprise offers 24/7 phone support.

Incentivized

I find the support fair. The wait can be frustrating when dealing with fire. The pandemic has not helped with this. Although the wait can be long, the support reps are knowledgeable and was able to resolve the issues I was facing.

Incentivized

Our Cisco firewall was always difficult to make any changes against. It had no user-friendly GUI interface. We were calling technical support most of the time whenever we needed to make any changes. The Barracuda CloudGen Firewall has a GUI interface which we are looking forward to getting better acquainted with as we move off of our old Cisco. Of course, Barracuda's technical support is always there and is top notch!

Meraki has a unified management login for all devices, which is nice. It also has decent content filtering, both areas where pfSense is weaker. Where pfSense far ouclasses Meraki is in the ease of use and the other width of features. These include features such as better VPN interoperability, non-subscription based pricing, auditability, not relying on the infrastructure of a third party, more transparency of what's actually going on, easier to deploy replacements if hardware fails. Additionally, the NAT management for pfSense seems to be a bit better, as you can NAT between any network segment and not just the LAN segments out the WAN interfaces.

I would rate Sophos second on this list right below Webroot. Webroot has an easier user interface and policy builder. However, Sophos would be on top of its UI would be improved. I would rank CrowStrike third and McAfee last. Sophos is great for complex environments that have multiple needs.

Incentivized

• We saved multiple thousands of dollars the first year out with the firewall in maintenance fees. We paid for the firewall and 3 years of service and still saved money.
• The ease of management allows me to do my job more efficiently. I save a lot of time when doing my day to day job because I can get to my firewall virtually anywhere.
• I feel a lot safer and my business more secure knowing that I have configured things the way they need to be and it was simple and not overly complicated.

Incentivized

• pfSense can be installed on commodity hardware with no licensing fees. With a simple less than 10 minute restore time, on most hardware, it's an extremely inexpensive way to achieve the same results that some of the more expensive vendors provide.
• The easy to use interface has allowed configuration management to be preformed by lower level technicians with quick and easy training.

Incentivized

• Sophos has provided a secure Firewall for us.
• Integration with Sophos Central makes it easier to manage both.
• Site to site VPN Failover groups has caused more trouble than it's worth.
• High availability doesn't recognize when you are restarting for an update.

Incentivized