TrustRadius: an HG Insights company

Cisco Catalyst Switches vs. Cisco Secure Firewall vs. pfSense

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    Cisco Catalyst Switches

    Score9.1 out of 10
    N/ACisco's Catalyst is one of that company's brand of network switches.N/A

    Cisco Secure Firewall

    Score8.4 out of 10
    N/ACisco Secure Firewall delivers comprehensive threat protection for modern, distributed networks. Built to support hybrid workforces and multicloud environments, it enables Zero Trust access, application visibility, and secure remote connectivity. With integration across the Cisco Secure portfolio, including SecureX and Talos threat intelligence, the firewall powers organizations to detect and stop more sophisticated threats. Centralized management simplifies policy enforcement, orchestration,…N/A

    pfSense

    Score8.5 out of 10
    N/ApfSense is a firewall and load management product available through the open source pfSense Community Edition, as well as a the licensed edition, pfSense Plus (formerly known as pfSense Enterprise). The solution provides combined firewall, VPN, and router functionality, and can be deployed through the cloud (AWS or Azure), or on-premises with a Netgate appliance. It as scalable capacities, with functionality for SMBs. As a firewall, pfSense offers Stateful packet inspection, concurrent…

    $179

    per appliance

    Pricing
    Cisco Catalyst SwitchesCisco Secure FirewallpfSense
    Editions & Modules
    No answers on this topic
    No answers on this topic
    SG-1100
    $179
    per appliance
    SG-2100
    $229
    per appliance
    SG-3100
    $399
    per appliance
    SG-5100
    $699
    per appliance
    XG-7100-DT
    $899
    per appliance
    XG-7100-1U
    $999
    per appliance
    XG-1537
    $1,949
    per appliance
    XG-1541
    $2,649
    per appliance
    Offerings
    Pricing Offerings
    Cisco Catalyst SwitchesCisco Secure FirewallpfSense
    Free Trial
    NoYesNo
    Free/Freemium Version
    NoNoNo
    Premium Consulting/Integration Services
    NoNoNo
    Entry-level Setup FeeNo setup feeNo setup feeNo setup fee
    Additional Details———
    More Pricing Information
    Community Pulse
    Cisco Catalyst SwitchesCisco Secure FirewallpfSense
    Considered Multiple Products
    Cisco
    Chose Cisco Catalyst Switches
    fewer bugs
    Incentivized
    Cisco
    Chose Cisco Secure Firewall
    The Cisco Secure Firewall is more advanced and provides more visibility into possible issues across the network.
    Incentivized
    Chose Cisco Secure Firewall
    The other products do well with simplifying some of the tasks such as rule creation where it would create rules based on a zone.
    Incentivized
    Chose Cisco Secure Firewall
    It's more reliable and the level of Cisco support can not be compared.
    Incentivized
    Chose Cisco Secure Firewall
    pfsence is a very complicated firewall and there is lots of documentation available on Cisco website for help. The configuration is very difficult and less documentation available. Cisco Secure Firewall provides us all the security features in low cost and this is very easy to …
    Incentivized
    Netgate (Rubicon Communications, LLC)
    No answer on this topic
    Key User Insights
    Would buy again
    98%
    Would buy again
    600 Answers
    93%
    Would buy again
    193 Answers
    94%
    Would buy again
    16 Answers
    Delivers good value for the price
    96%
    Delivers good value for the price
    531 Answers
    90%
    Delivers good value for the price
    160 Answers
    100%
    Delivers good value for the price
    17 Answers
    Happy with the feature set
    98%
    Happy with the feature set
    600 Answers
    92%
    Happy with the feature set
    191 Answers
    94%
    Happy with the feature set
    16 Answers
    Lived up to sales and marketing promises
    97%
    Lived up to sales and marketing promises
    490 Answers
    86%
    Lived up to sales and marketing promises
    140 Answers
    100%
    Lived up to sales and marketing promises
    14 Answers
    Implementation went as expected
    98%
    Implementation went as expected
    568 Answers
    86%
    Implementation went as expected
    164 Answers
    94%
    Implementation went as expected
    16 Answers
    Features
    Cisco Catalyst SwitchesCisco Secure FirewallpfSense
    Firewall
    Comparison of Firewall features of Cisco Catalyst Switches and Cisco Secure Firewall and pfSense
    Feature
    Cisco Catalyst Switches
    -
    Ratings
    Cisco Secure Firewall
    8.2
    196 Ratings
    5% below category average
    pfSense
    8.9
    17 Ratings
    4% above category average
    Identification Technologies00 Ratings8.1177 Ratings8.714 Ratings
    Visualization Tools00 Ratings7.8175 Ratings8.714 Ratings
    Content Inspection00 Ratings8.3175 Ratings9.216 Ratings
    Policy-based Controls00 Ratings8.5183 Ratings8.717 Ratings
    Active Directory and LDAP00 Ratings7.9156 Ratings7.913 Ratings
    Firewall Management Console00 Ratings8.0182 Ratings9.516 Ratings
    Reporting and Logging00 Ratings7.7184 Ratings8.417 Ratings
    VPN00 Ratings8.8164 Ratings9.117 Ratings
    High Availability00 Ratings8.9177 Ratings9.416 Ratings
    Stateful Inspection00 Ratings8.8171 Ratings10.015 Ratings
    Proxy Server00 Ratings7.793 Ratings8.415 Ratings
    Best Alternatives
    Cisco Catalyst SwitchesCisco Secure FirewallpfSense
    Small Businesses
    No answers on this topic
    SonicWall NSA Series
    Score8.3 out of 10
    SonicWall NSA Series
    Score8.3 out of 10
    Medium-sized Companies
    RUCKUS Ethernet Switches
    Score1 out of 10
    Barracuda CloudGen Firewall
    Score9.6 out of 10
    Barracuda CloudGen Firewall
    Score9.6 out of 10
    Enterprises
    Cisco Ethernet Switches
    Score9.1 out of 10
    Cisco Adaptive Security Appliance (ASA) Software
    Score9 out of 10
    Cisco Adaptive Security Appliance (ASA) Software
    Score9 out of 10
    All AlternativesView all alternativesView all alternativesView all alternatives
    User Ratings
    Cisco Catalyst SwitchesCisco Secure FirewallpfSense
    Likelihood to Recommend
    9.0
    (774 ratings)
    8.3
    (203 ratings)
    9.3
    (30 ratings)
    Likelihood to Renew
    8.9
    (40 ratings)
    9.5
    (6 ratings)
    -
    (0 ratings)
    Usability
    8.6
    (46 ratings)
    7.3
    (6 ratings)
    9.7
    (8 ratings)
    Availability
    8.8
    (14 ratings)
    9.5
    (6 ratings)
    -
    (0 ratings)
    Performance
    9.3
    (14 ratings)
    10.0
    (3 ratings)
    -
    (0 ratings)
    Support Rating
    8.5
    (38 ratings)
    7.7
    (131 ratings)
    10.0
    (1 ratings)
    In-Person Training
    9.0
    (5 ratings)
    10.0
    (1 ratings)
    -
    (0 ratings)
    Online Training
    9.0
    (2 ratings)
    -
    (0 ratings)
    -
    (0 ratings)
    Implementation Rating
    8.0
    (12 ratings)
    8.7
    (6 ratings)
    -
    (0 ratings)
    Configurability
    8.8
    (10 ratings)
    10.0
    (1 ratings)
    -
    (0 ratings)
    Contract Terms and Pricing Model
    -
    (0 ratings)
    8.0
    (1 ratings)
    -
    (0 ratings)
    Ease of integration
    8.1
    (9 ratings)
    8.4
    (5 ratings)
    -
    (0 ratings)
    Product Scalability
    9.2
    (14 ratings)
    9.5
    (3 ratings)
    -
    (0 ratings)
    Vendor post-sale
    7.9
    (36 ratings)
    10.0
    (1 ratings)
    -
    (0 ratings)
    Vendor pre-sale
    8.2
    (37 ratings)
    10.0
    (1 ratings)
    -
    (0 ratings)
    User Testimonials
    Cisco Catalyst SwitchesCisco Secure FirewallpfSense
    Likelihood to Recommend
    Cisco
    Well-suited for big companies like mine, where we have a lot of users that we have to connect together. Getting all the switches into one big stack that you can just manage all at one time is fantastic for ease of use. Not suited for maybe smaller mom and pop shops or smaller companies that don’t have as many. They could probably go with something much easier to manage.
    Incentivized
    Read full review
    Cisco
    I can't think of scenarios where it is less appropriate, unless we are talking about real tiny businesses. More businesses will find Cisco Secure Firewall an outstanding tool to use, love, and trust from a reputable Network giant vendor. It is a must for businesses that want to focus on what they are doing, and leaving the network security for the pros.
    Incentivized
    Read full review
    Netgate (Rubicon Communications, LLC)
    I believe PFSense is well suited for both home lab environments as well as up to small to mid-size business environments on a tight budget. However, I would implore that anything in production requires the use of the authorized hardware that PFSense sells to receive support. However, in my experience, PFSense is a solid set-and-forget firewall solution.
    Read full review
    Pros
    Cisco
    • Easy-to-use management interfaces. The CLI commands go across the whole Cisco Catalyst Switches 9000 series, so it makes it easy, the code being the same on the 9000 series. Just being able to do port channels, trunks, and connecting up edge switches to it with the Cisco Catalyst Switches 9000 Series.
    Incentivized
    Read full review
    Cisco
    • Cisco's firewall actually does its job of blocking what it is supposed to block. We had an old Firewall that led to slippages. Cisco catches 97% of malware and vulnerabilities during testing. For Coitiar, that means an engineer who clicks a link with malware is handled quickly.
    • We actually tested if failovers would affect running sessions. We pulled our primary unit during a certification submission period. The firewall just switched, and the connection kept running.
    • The AI assistant in policy management is excellent, and for our lean team, it makes the whole process easy and efficient. I don't have to audit 200 policies manually; the AI steps in and does its thing.
    Incentivized
    Read full review
    Netgate (Rubicon Communications, LLC)
    • Easy to use. Good user interface design! Easy to understand and easy to set up.
    • Lower hardware requirement. 3 years ago, we used an old PC to run it. Now, we have changed to a router device with Celeron CPU and 8GB RAM. It runs smoothly with a 1000G commercial broadband.
    Incentivized
    Read full review
    Cons
    Cisco
    • One thing is that these, every time Cisco gets a new switch, they just make an amendment to the power supply, so they'll just put a knob on it. So let's say if you lose any power supply unit, you'll have to purchase another one, which costs a lot of extra money because we have a lot of another power supply units from the redundant, which we can use, but we can't now because they have just tweaked the modeling of that. Which makes no sense, particularly to me because it's an extra money making machine kind of a thing. But that's fine.
    • Another thing is these ports, I believe they are a bit less of, if I can say the quality of the oldest switches, they were quite sturdy. As I said earlier, the new switches, they're very light and when you lift them you feel it. So that's one thing, which I think the quality or the material which we are using has gone down.
    Incentivized
    Read full review
    Cisco
    • I mean I think a lot of the technology with managing them is getting better. There's a few cons to the new firewall management console. You can't sort through routes or I think you can with interfaces now, but there's a few caveats that they haven't really worked out yet, but they're implementing AI into it, so it's getting to be a lot easier to use.
    Incentivized
    Read full review
    Netgate (Rubicon Communications, LLC)
    • I did kind of mention a Con in the Pro section with OpenVPN.
    • When I create a config for an employee other employees are able to login to that config.
    • I could be doing something wrong when I am making it - I am not afraid to admit that as I am pretty new to all of this, but it seems like it builds a key and I would think the key would be unique in some way to each employee, but I could be wrong.
    • I actually do not have a lot of Con's for this software - I did not get to set this up on our work network so I am not sure of any downfalls when installing.
    • I installed this on my personal machine in a Hyper-V environment to get a feel for it before I started working on it at work and it seemed pretty smooth. I didn't run into any issues.
    Incentivized
    Read full review
    Likelihood to Renew
    Cisco
    They are consistently reliable and this switch in particular is a very affordable solution. We can place the Cisco Catalyst 1000 Series Switches gear in areas that we normally would not place a switch because it is affordable enough to make it justifiable. And because it is a reliable solution, we are confident it will continue to provide service over the long haul.
    Incentivized
    Read full review
    Cisco
    It works really well. We can do most anything we want or need to with it, and you don’t have to have a doctorate or multiple certs to necessarily figure it out. The thing that would probably have to happen to make us switch would be if we just got priced out - Cisco’s more powerful and higher bandwidth models cost a pretty penny.
    Incentivized
    Read full review
    Netgate (Rubicon Communications, LLC)
    No answers on this topic
    Usability
    Cisco
    Cisco by and far does a great job with the Catalyst line. From a layer 2 dumb switch all the way up to ISP carrier grade switching within the Catalyst portfolio. The best part about it is command parity among the various tiers of product. The only differences are going to lie in what features are available per switch.
    Incentivized
    Read full review
    Cisco
    i think overall after ALOT of tac cases it works allright now. But still have alot of issues if you use cloud based mangement. fx, if you open 2 windows of access policys, both of the pages, rules starte to jump form side to side. if you then open one more list, its start to jump even faster. if you close the 2 of them, its back to normal. ALSO the extended access lists for VPN, SUCKS. Its the tiniest window when opening the editor, and you are not able to give the rules names, Which means finding and editing rules SUCKS, its a horrible experience, and eveytime we have to we want to yell :P
    Incentivized
    Read full review
    Netgate (Rubicon Communications, LLC)
    The pfSense UI is easy to navigate and pretty go look at. It is much better than some high dollar firewalls that just throw menus you you. The pfSense UI is quick and responsive and makes sense 99% of the time. Changes are committed quickly and the hardware rarely requires a reboot. It just runs.
    Incentivized
    Read full review
    Reliability and Availability
    Cisco
    We have very few is any outages due to a Cisco hardware failure. Some of our gear is exposed to some pretty harsh environments, and they keep on ticking!
    Incentivized
    Read full review
    Cisco
    Rationale:


    Strengths:


    High availability (HA) and failover configurations ensure continuous operation during hardware or network issues.


    Minimal unplanned outages reported; system remains responsive under full inspection load.


    Centralized monitoring and proactive alerts help prevent downtime.




    Minor Considerations:


    Occasional maintenance windows or updates may require brief service interruptions.


    Complex integrations with other systems may sometimes require extra attention to maintain uptime.




    Overall, Cisco Secure Firewall is highly available and dependable, supporting business continuity and operational resilience.
    Incentivized
    Read full review
    Netgate (Rubicon Communications, LLC)
    No answers on this topic
    Performance
    Cisco
    No, the packets flow. Sometimes you will see collisions and broadcast storms can happen which will slow performance but that can be fixed and the packets will flow.
    Incentivized
    Read full review
    Cisco
    We have not had any performance issues with Cisco Secure Firewall, even with DPI and IPS enabled, we have not seen a performance hit. Emoployes have not complained about any slow network speeds that could have been attributed to the secure firewall it has always been something else within the office network.
    Incentivized
    Read full review
    Netgate (Rubicon Communications, LLC)
    No answers on this topic
    Support Rating
    Cisco
    We rarely have issues with the product. I have only had to contact support one time since we put it in and that was to see if another vendor was giving me accurate information on an issue I was having.
    Incentivized
    Read full review
    Cisco
    I rarely get the support I need in the time I need it. Often, while they are "looking at packet captures and going to get back to me" I fix the problem on my own. If you were to look at my TAC cases over the past year, you would see some very lengthy cases that usually ended with me contacting the TAC person and telling them to just close the case
    Incentivized
    Read full review
    Netgate (Rubicon Communications, LLC)
    pfSense+ basic provides "As Available" email support. pfSense+ Pro offers 24 hr turn around email support. pfSense+ Enterprise offers 24/7 phone support.
    Incentivized
    Read full review
    In-Person Training
    Cisco
    Cisco Networking Academy partners with many local Colleges and High Schools to provide great hands-on training. You do need to drive to learn the topic. The in-class session only go so far. You really need to apply this to the real world. Cisco makes it easy for business to connect via CLC or Cisco Learning Credits.
    Incentivized
    Read full review
    Cisco
    very good
    Incentivized
    Read full review
    Netgate (Rubicon Communications, LLC)
    No answers on this topic
    Online Training
    Cisco
    My own personal research to get the information I want is very handy and helped me many times
    Incentivized
    Read full review
    Cisco
    was a good training but questions was answered not so good. Training was "Fundamentals of Cisco Firewall Threat Defense and Intrusion Prevention (SFWIPF)".
    Incentivized
    Read full review
    Netgate (Rubicon Communications, LLC)
    No answers on this topic
    Implementation Rating
    Cisco
    The implementation of the Cisco Catalyst 1000 Series Switches is fairly seamless, especially if you are familiar with Cisco products. We have had Brocade switch gear in place too, and the differences between the manufacturers [are] not a major issue.
    Incentivized
    Read full review
    Cisco
    Our initial implementation was aided by Cisco's professional services and was excellent. The engineer was very knowledgeable and helped us work through issues while building out our new internet security edge Part of this involved tools to migrate the firewall configuration from old to new.
    Incentivized
    Read full review
    Netgate (Rubicon Communications, LLC)
    No answers on this topic
    Alternatives Considered
    Cisco
    2960s, 9200s, 9400s, 3650s, 3800s. I think that this product is a lot better. I know I just complained about the noise, but it’s still much quieter than our other ones. So we do have a couple of public deployments, and once we swap these out, they complained less. Sometimes we have small offices that get the gear in with them, and these sound less like a jet engine. And yeah, these are a lot easier to manage as well. Everything in the same family. It’s a lot.
    Incentivized
    Read full review
    Cisco
    Cisco Secure Firewall works better with the Cisco ecosystem when we can utilize it and feels beefy enough when we utilize it in the data center. The Fortinet we have found are great, small cost boxes for remote offices with a better UI then Cisco Secure Firewalls. The feature set included with the firewalls feels similar from a security point of view.
    Incentivized
    Read full review
    Netgate (Rubicon Communications, LLC)
    Meraki has a unified management login for all devices, which is nice. It also has decent content filtering, both areas where pfSense is weaker. Where pfSense far ouclasses Meraki is in the ease of use and the other width of features. These include features such as better VPN interoperability, non-subscription based pricing, auditability, not relying on the infrastructure of a third party, more transparency of what's actually going on, easier to deploy replacements if hardware fails. Additionally, the NAT management for pfSense seems to be a bit better, as you can NAT between any network segment and not just the LAN segments out the WAN interfaces.
    Read full review
    Contract Terms and Pricing Model
    Cisco
    No answers on this topic
    Cisco
    A solid, realistic rating most people give for Cisco Secure Firewall pricing is 7 or 8 out of 10 (because the product is strong but licensing can be a bit complex)
    Incentivized
    Read full review
    Netgate (Rubicon Communications, LLC)
    No answers on this topic
    Scalability
    Cisco
    We are exclusive Cisco at our organization. In truth part of the reason is, with one type of switch and one manufacturer, it is easier to support. It is also easier to give consistent training to our staff in our tech department
    Incentivized
    Read full review
    Cisco
    Cisco Secure Firewall has never given us any trouble, it has stayed up at all times, upgrading the appliance has also become much simpler. We operate the appliance in a HA pair, so 0% downtime within our organisation. During switchover while upgrading, not a single packet seems to get lost, so this has been a very valuable asset to our company.
    Incentivized
    Read full review
    Netgate (Rubicon Communications, LLC)
    No answers on this topic
    Professional Services
    Cisco
    No answers on this topic
    Cisco
    was not involved
    Incentivized
    Read full review
    Netgate (Rubicon Communications, LLC)
    No answers on this topic
    Return on Investment
    Cisco
    • energy costs dropped by around 11 per cent on the access layer
    • management has become easier with DNA Center
    • ISSU software upgrades and fabric deployments have significantly reduced "planned" down times
    • network speed has increased, latency is at an all-time best within our own LAN
    Incentivized
    Read full review
    Cisco
    • Cisco Secure Firewalls help with our segmentation policies and protect our company assets
    • Cisco Secure Firewalls help identify when our policies have changed on or network and troubleshoot network outages
    • Cisco Secure Firewalls help identify threats through Cisco Talos and other threat feeds that they ingest
    Incentivized
    Read full review
    Netgate (Rubicon Communications, LLC)
    • pfSense can be installed on commodity hardware with no licensing fees. With a simple less than 10 minute restore time, on most hardware, it's an extremely inexpensive way to achieve the same results that some of the more expensive vendors provide.
    • The easy to use interface has allowed configuration management to be preformed by lower level technicians with quick and easy training.
    Incentivized
    Read full review
    ScreenShots

    Cisco Catalyst Switches Screenshots

    Product screenshotScreenshot of Catalyst 9200 SeriesScreenshot of Catalyst 9300 SeriesScreenshot of Catalyst 9400 SeriesScreenshot of Catalyst 9400 Series Additional ViewScreenshot of Catalyst 9500 Series

    Cisco Secure Firewall Screenshots

    Screenshot of Cisco Secure 1200 Series Firewall FamilyScreenshot of Cisco Secure 4200 SeriesScreenshot of Cisco Secure 4200 SeriesScreenshot of Cisco Secure Firewall 1200 Stack FamilyScreenshot of Cisco Secure Firewall 200 SeriesScreenshot of Cisco Secure Firewall 200 Series