Cisco Firepower 1000 Series vs. pfSense vs. UniFi WiFi Access Points

I think it is well suited for smaller companies or (as in our case) extension to a central system with higher performance. My personal guess is, that it can be quite annoying with those delays in bigger environments, when 20 or more devices needed to be managed. From the point of security, support and updates it works quite good and seem to have no downsides.

Incentivized

I believe PFSense is well suited for both home lab environments as well as up to small to mid-size business environments on a tight budget. However, I would implore that anything in production requires the use of the authorized hardware that PFSense sells to receive support. However, in my experience, PFSense is a solid set-and-forget firewall solution.

I love the equipment for small-scale commercial solutions and quality without the price tag. I might not recommend their products for a large organization with multiple locations and servers. However, the GUI interface will allow remote access and setup across the network. I think this is a great solution for small businesses and families or home office solutions, provided there is some IT knowledge for setup and maintenance.

Incentivized

• My organization is all Cisco and wants to stay in the Cisco life cycle, Firepower 1000 series is great for small to medium-size office.
• Very robust enterprise-grade security solution with updated threat features to handle any current and upcoming threats. The solution is backed by Cisco to ensure constant security updates. Integrated AnyConnect remote client VPN is a big plus to allow for secure remote workers access. Easier to set up a site to site VPN due to the large user base and case studies published on integrating to other manufacturer solutions.

Incentivized

• Easy to use. Good user interface design! Easy to understand and easy to set up.
• Lower hardware requirement. 3 years ago, we used an old PC to run it. Now, we have changed to a router device with Celeron CPU and 8GB RAM. It runs smoothly with a 1000G commercial broadband.

Incentivized

• Ubiquti WLAN is very easy on setup for fast deployment.
• The monitoring software is offered at different level. Cloudkey, or just throwing up their free controller on a PC somewhere.
• It also does a great job of publishing timely updates to firmware, and addressing bug issues.
• The ease of the interface, without adding a bunch of fluff, makes this literally the best out there in my opinion.

Incentivized

• ACLS in gui are PIA cant see object details
• Objects in ACLs dont show IP addresses
• Have to renames every object to name+ip to make acl GUI useable
• Speed to data can use improvement.
• Health warnings should allow you to resolve you have to dig n search in some cases.

• I did kind of mention a Con in the Pro section with OpenVPN.
• When I create a config for an employee other employees are able to login to that config.
• I could be doing something wrong when I am making it - I am not afraid to admit that as I am pretty new to all of this, but it seems like it builds a key and I would think the key would be unique in some way to each employee, but I could be wrong.
• I actually do not have a lot of Con's for this software - I did not get to set this up on our work network so I am not sure of any downfalls when installing.
• I installed this on my personal machine in a Hyper-V environment to get a feel for it before I started working on it at work and it seemed pretty smooth. I didn't run into any issues.

Incentivized

• Initial configuration of access points can be rather tricky. Each one I have installed was a complete pain to get setup and connected with the UniFi Controller software. I never worked out what causes me problems, but thankfully once I've stumbled through the correct procedure, it does work completely reliably after that, for years on end.
• The UniFi Controller software will nag you to share usage data. When offered to opt-in, I choose not to do so, but you'll eventually be nagged again on a future login.
• Some of the 'tooltips' within the Controller software could be more informative.

Incentivized

It is quite good, robust and reliable but not always so easy to manage and configure. The tools could be improved and the price is not low for an entry level firewall

Incentivized

Firepowers are secure, reliable, central management and configuration is easy and they fit in well with our existing Cisco infrastructure. Good feature set and support. Good management and control with chassis manager and central control with additional Firepower Management Centre.

Incentivized

The pfSense UI is easy to navigate and pretty go look at. It is much better than some high dollar firewalls that just throw menus you you. The pfSense UI is quick and responsive and makes sense 99% of the time. Changes are committed quickly and the hardware rarely requires a reboot. It just runs.

Incentivized

Ubiquiti makes great Access points at various tiers provided far better coverage and throughput than consumer-grade wireless repeaters and routers. We have not had any performance complaints from guests or from the administration who use the wifi on a daily basis.

Incentivized

Has not let me down yet.

Incentivized

Great performance even on the lower end model of the series. You can push a lot of traffic through these devices without much performance impact. If you decide you want to inspect encrypted traffic however, you may take a big hit on the cpu and memory of the box, but they still manage to keep up even with all the bells and whistles turned on.

Incentivized

I have had troubles with Firepower Management Center and the FTD's in the past. Sticking to a Gold Star image and upgrading when the "bugs" are fixed is great. That still doesn't mean you are left vulnerable though. The extra features are just not enabled yet. Great product and calling support is readily available for any issue.

Incentivized

pfSense+ basic provides "As Available" email support. pfSense+ Pro offers 24 hr turn around email support. pfSense+ Enterprise offers 24/7 phone support.

Incentivized

Ubiquiti support is minimal, which is said to help decrease the cost of the equipment. However, with many reports of emails going directly to the Ubiquiti support line taking days to hear a response, you're better off either engaging with the community forums for help from fellow UniFi users or reaching out to a reseller that has training on the equipment that can assist.

Incentivized

Utilize the new FMC cloud which is available in Cisco Defense Orchestrator.

Incentivized

Cisco Firepower 1000 series are security systems that can be deployed through throughout the network quickly and easily without a lot of initial setup in contrast with other systems. maintaining them can be done from a single management. Interface and maintenance can be isolated to localized sites instead of being widespread.

Incentivized

Meraki has a unified management login for all devices, which is nice. It also has decent content filtering, both areas where pfSense is weaker. Where pfSense far ouclasses Meraki is in the ease of use and the other width of features. These include features such as better VPN interoperability, non-subscription based pricing, auditability, not relying on the infrastructure of a third party, more transparency of what's actually going on, easier to deploy replacements if hardware fails. Additionally, the NAT management for pfSense seems to be a bit better, as you can NAT between any network segment and not just the LAN segments out the WAN interfaces.

Ubiquiti is overall easier to work with. There is no special training needed to accomplish many of the things required with a Cisco product. Since my time is stretched thin, I need something that I can manage without being weighed down by command-line communications. Also, I am able to use my wireless devices to maintain every Ubiquiti device on my network.

Incentivized

• We have seen improved throughput on our internet.
• It took several attempts with Cisco engineers to configure the device; it requires a deep set of knowledge to set up in a more complicated environment.
• This will allow us to move forward with a more stable and configurable environment with security available we didn't have before.

Incentivized

• pfSense can be installed on commodity hardware with no licensing fees. With a simple less than 10 minute restore time, on most hardware, it's an extremely inexpensive way to achieve the same results that some of the more expensive vendors provide.
• The easy to use interface has allowed configuration management to be preformed by lower level technicians with quick and easy training.

Incentivized

• Can't say it enough, prices are awesome, so ROI is very high IMHO.
• Remote cloud management allows me to service more clients at greater distances.
• Project estimates become much more attractive when you can show the savings vs more expensive solutions.

Incentivized