ExpressVPN vs. pfSense vs. Sophos UTM

ExpressVPN is well suited to access APIs or web pages which are restricted to certain locations. This enables teams in other locations to connect using a VPN and access these resources for testing purposes. ExpressVPN is also supported on mobile so you can access these resources from a mobile when you are away from your desk.

Incentivized

pfSense is incredibly budget friendly and capable for organizations of all sizes. My specific scenario, working for a non-profit organization, requires budget consciences decisions without compromising security and function. pfSense has helped tremendously in accomplishing this. It specifically tackles advanced routing, static routing, remote access, intrusion prevention, in a single platform, mostly available for free.

Incentivized

Sophos is a very powerful anti-virus program that can be used in small and big businesses. Sophos has multiple features that can be customized to fit IT and business needs. Sophos would be less appropriate for IT personnel that do not have the time or knowledge of implementing the problem. The setup of its policies can be very complex.

Incentivized

• ExpressVPN was easy to install, and simple to connect to a VPN network.
• ExpressVPN is available for multiple platforms and multiple browsers.
• The price is reasonable for the added level of security it provides.

Incentivized

• Easy to use. Good user interface design! Easy to understand and easy to set up.
• Lower hardware requirement. 3 years ago, we used an old PC to run it. Now, we have changed to a router device with Celeron CPU and 8GB RAM. It runs smoothly with a 1000G commercial broadband.

Incentivized

• Firewall Protection. The protection is unmatched, setup it a little daunting, but once set up it pretty much runs itself.
• Site-to-site VPN. Super easy to deploy so we are able to network all our sites together.
• The DHCP server function is actually really nice, I prefer using it over the traditional way of using a DC for DHCP.

Incentivized

• I would like the disconnect to be instantaneous. It is not.

Incentivized

• There is no API for making changes. This can be a hindrance in environments where auto-deploying something needs firewall rules or HAProxy configs updated. Since all settings are stored in an XML file and then configs are generated from that, even manually updating config files cannot be done.
• Beware that some network cards can have issues. pfSense is based on FreeBSD, so it's best to look on their compatibility list before deploying.

Incentivized

• Better standard support, it used to be great, now, not so much (for paying customers, that only aquired the Hardware)
• Better wireless solution, there is always room for that, now that everybody needs robust wifi, even at home!
• Faster and more robust wireless Access Points, or different vendor-like compatibility.

Incentivized

It's efficient and useful at what it does.

Incentivized

Engineering team members can work from remote locations which helps companies to reduce their operational costs. It is easy to use so team members don't have to spend any extra time to use this. It helps team members access web pages which are otherwise not available due to location restrictions.

Incentivized

pfSense can be a very elementary firewall but can also be as comples as you want, according your needs. I'd always reccomend a HA solution when used in a company and, for bigger companies, commercial license is recommended. It's also very adptable to everyone's needs.

Incentivized

The interface is no non-sense and easy to understand. No need for any consultants to help implement this solution. The performance is consistent and solid. Paired with a good amount of firmware and definitions, it's hard to find any fault in this product. It's interoperability with other Sophos products make a compelling argument to invest in more Sophos products.

Incentivized

pfSense+ basic provides "As Available" email support. pfSense+ Pro offers 24 hr turn around email support. pfSense+ Enterprise offers 24/7 phone support.

Incentivized

I find the support fair. The wait can be frustrating when dealing with fire. The pandemic has not helped with this. Although the wait can be long, the support reps are knowledgeable and was able to resolve the issues I was facing.

Incentivized

I took a look at NordVPN, but the ratings for ExpressVPN were higher. More servers and faster transfer times made it a simple decision. I am glad I made the right choice.

Incentivized

PFSense is not a fully featured and supported enterprise-grade solution; however, it does offer a lot of similar functionality at a fraction of the cost for more minor requirements.

The Linksys was a router, so the comparison isn't quite the same, but I previously worked on a SonicWall firewall. The setup is by far easier on the Sophos UTM device. That alone makes it enticing, but thrown multiple services options such as email and web filtering, endpoint support, seamless WAP and RED device integration and it wasn't a very hard decision to make.

Incentivized

• My customers are happy that I am using every security measure available. Increased sales.
• Productivity has not decreased, while security level has increased.
• The initial cost was reasonable.

Incentivized

• pfSense has only had positive impacts on our company. We are not a huge company so not having to buy licenses to get all these features have been excellent.
• I was not around when our current sysadmin decided to use pfSense, but I am assuming from day one it was probably a 100% return on investment since it does everything we need it to and it was open source software.

Incentivized

• Sophos has provided a secure Firewall for us.
• Integration with Sophos Central makes it easier to manage both.
• Site to site VPN Failover groups has caused more trouble than it's worth.
• High availability doesn't recognize when you are restarting for an update.

Incentivized