Debian OS vs. pfSense

My favorite way to use Debian OS is to run shared, hosted, network applications for easy segmentation of apps so that when doing work on one you don't have to effect or take down others. I would not use it is for a daily use desktop style OS. For that I would stick to Windows, macOS, or a distribution of Linux that is already geared towards a daily use desktop OS.

Incentivized

I believe PFSense is well suited for both home lab environments as well as up to small to mid-size business environments on a tight budget. However, I would implore that anything in production requires the use of the authorized hardware that PFSense sells to receive support. However, in my experience, PFSense is a solid set-and-forget firewall solution.

• The APT package manager is dead simple to use, and the APT repositories contain pretty much every package you can think of. If there's something missing from the standard repositories, there's a good chance a third-party repository can be added to fill the gap.
• Debian OS releases are often considered, "boring". But that's a good thing! The Debian developers do not make changes for change's sake and this means new releases are very predictable and intended to cause as little drama as possible.
• Debian is such a widely used and popular Linux distribution, that practically all Linux software vendors officially support it.
• The Debian community is huge, especially when you consider Ubuntu is derived from it. If you need help with anything, you'll usually find it has been asked before and already has a resolution.

Incentivized

• Easy to use. Good user interface design! Easy to understand and easy to set up.
• Lower hardware requirement. 3 years ago, we used an old PC to run it. Now, we have changed to a router device with Celeron CPU and 8GB RAM. It runs smoothly with a 1000G commercial broadband.

Incentivized

• The installation could include suggested partitioning schemes for those beginning users or those who have their first approach with Debian OS
• offer encryption of the home partition or the entire hard drive by default
• an improved visual package manager and if it could be native it would be very well received

Incentivized

• I did kind of mention a Con in the Pro section with OpenVPN.
• When I create a config for an employee other employees are able to login to that config.
• I could be doing something wrong when I am making it - I am not afraid to admit that as I am pretty new to all of this, but it seems like it builds a key and I would think the key would be unique in some way to each employee, but I could be wrong.
• I actually do not have a lot of Con's for this software - I did not get to set this up on our work network so I am not sure of any downfalls when installing.
• I installed this on my personal machine in a Hyper-V environment to get a feel for it before I started working on it at work and it seemed pretty smooth. I didn't run into any issues.

Incentivized

Debian is one of the most well-thought-out, logical, and intuitive Linux operating systems you can use. Configuration, package management, file system layouts, etc, are all based on many years of usage, and it's very rare to find anything surprising or confusing in everyday usage. Package management and updates are handled by APT in such a way that once configured, you can almost guarantee your system will behave as expected for the lifetime of its service. Top-notch system integration provides all the tools you'd expect from a modern Linux system, with all the stability you demand from a demanding server OS.

Incentivized

The pfSense UI is easy to navigate and pretty go look at. It is much better than some high dollar firewalls that just throw menus you you. The pfSense UI is quick and responsive and makes sense 99% of the time. Changes are committed quickly and the hardware rarely requires a reboot. It just runs.

Incentivized

pfSense+ basic provides "As Available" email support. pfSense+ Pro offers 24 hr turn around email support. pfSense+ Enterprise offers 24/7 phone support.

Incentivized

Its has all the needy features that we are looking for plus the support and updates for the OS as well. This means we get all the support and updates in the mean time. Also comparing to others, Debian OS helps us with more security features in built which is also updated over time.

Incentivized

Meraki has a unified management login for all devices, which is nice. It also has decent content filtering, both areas where pfSense is weaker. Where pfSense far ouclasses Meraki is in the ease of use and the other width of features. These include features such as better VPN interoperability, non-subscription based pricing, auditability, not relying on the infrastructure of a third party, more transparency of what's actually going on, easier to deploy replacements if hardware fails. Additionally, the NAT management for pfSense seems to be a bit better, as you can NAT between any network segment and not just the LAN segments out the WAN interfaces.

• Having no software cost for my business has made me much more profitable, and I never need to worry about a license expiring and crippling features.

Incentivized

• pfSense can be installed on commodity hardware with no licensing fees. With a simple less than 10 minute restore time, on most hardware, it's an extremely inexpensive way to achieve the same results that some of the more expensive vendors provide.
• The easy to use interface has allowed configuration management to be preformed by lower level technicians with quick and easy training.

Incentivized