Cisco 900 Series Integrated Services Routers (ISR) vs. pfSense

No problems with any of the Cisco 900 Series [Integrated Services Routers] (ISR) platform features within the enterprise environment. Because these devices are running a version of IOS-XE as opposed to traditional IOS, some of the more 'basic' configurations can become more complex. In the end, the 900 Series is still able to provide the required functionality, but there is a learning curve.

Incentivized

pfSense is incredibly budget friendly and capable for organizations of all sizes. My specific scenario, working for a non-profit organization, requires budget consciences decisions without compromising security and function. pfSense has helped tremendously in accomplishing this. It specifically tackles advanced routing, static routing, remote access, intrusion prevention, in a single platform, mostly available for free.

Incentivized

• [It] works great full-featured, but [I recommend a] small router for remote sites.
• [It] can handle more traffic than it even advertises!
• [It has a] well-priced option for smaller or less critical sites.

Incentivized

• Easy to use. Good user interface design! Easy to understand and easy to set up.
• Lower hardware requirement. 3 years ago, we used an old PC to run it. Now, we have changed to a router device with Celeron CPU and 8GB RAM. It runs smoothly with a 1000G commercial broadband.

Incentivized

• [It has a] pay as you grow model of licensing, but, [in my opinion, is] a pain to implement.
• [The] service impacting license application [could be improved].
• Configuration complexity [could be improved].

Incentivized

• I did kind of mention a Con in the Pro section with OpenVPN.
• When I create a config for an employee other employees are able to login to that config.
• I could be doing something wrong when I am making it - I am not afraid to admit that as I am pretty new to all of this, but it seems like it builds a key and I would think the key would be unique in some way to each employee, but I could be wrong.
• I actually do not have a lot of Con's for this software - I did not get to set this up on our work network so I am not sure of any downfalls when installing.
• I installed this on my personal machine in a Hyper-V environment to get a feel for it before I started working on it at work and it seemed pretty smooth. I didn't run into any issues.

Incentivized

The pfSense UI is easy to navigate and pretty go look at. It is much better than some high dollar firewalls that just throw menus you you. The pfSense UI is quick and responsive and makes sense 99% of the time. Changes are committed quickly and the hardware rarely requires a reboot. It just runs.

Incentivized

I have similar feelings about the NCS 5500 Series Router. IOS-XR is great, but the need to upgrade components to support newer features seems like a planning oversight. 400G Linecards are great and needed.... but they need all new power supplies? Really? Also, the ability to use lags across multiple linecards would be nice. I'm pretty sure that's not available, but that is more understandable.

Incentivized

Meraki has a unified management login for all devices, which is nice. It also has decent content filtering, both areas where pfSense is weaker. Where pfSense far ouclasses Meraki is in the ease of use and the other width of features. These include features such as better VPN interoperability, non-subscription based pricing, auditability, not relying on the infrastructure of a third party, more transparency of what's actually going on, easier to deploy replacements if hardware fails. Additionally, the NAT management for pfSense seems to be a bit better, as you can NAT between any network segment and not just the LAN segments out the WAN interfaces.

• Lots of money saved in downgrading from less useful and older full-sized routers at small sites
• Time saved having to learn new commands (web GUI works great)
• Saves time training staff to manage them

Incentivized

• pfSense can be installed on commodity hardware with no licensing fees. With a simple less than 10 minute restore time, on most hardware, it's an extremely inexpensive way to achieve the same results that some of the more expensive vendors provide.
• The easy to use interface has allowed configuration management to be preformed by lower level technicians with quick and easy training.

Incentivized