pfSense vs. Ubuntu

I believe PFSense is well suited for both home lab environments as well as up to small to mid-size business environments on a tight budget. However, I would implore that anything in production requires the use of the authorized hardware that PFSense sells to receive support. However, in my experience, PFSense is a solid set-and-forget firewall solution.

If somebody whishes to be an IT professional, learning the basics of Linux is amust. Ubuntu [Linux] is one of the most beginner-friendly, widely supported, easy-to-use-relative-to-the-fact-that-its-still-linux OS on the market. As somebody who learned the basics of UNIX/LINUX on Ubuntu, it was a very good experience. It is customizable, has a lot of improvements over the years, and live up to be a viable alternative to any modern OS in 2021 as well.

Incentivized

• Easy to use. Good user interface design! Easy to understand and easy to set up.
• Lower hardware requirement. 3 years ago, we used an old PC to run it. Now, we have changed to a router device with Celeron CPU and 8GB RAM. It runs smoothly with a 1000G commercial broadband.

Incentivized

• PACKAGE MANAGEMENT. You can update everything - OS installed software, you name it with either a few clicks in a GUI or a single command.
• No bloatware.
• No need for antivirus software.
• Certainly the price is right.
• My 83 year old grandmother has been using it - and because of this I rarely need to provide tech support. But I still visit my grandmother.
• You can choose from a variety of user interfaces or rock it in the terminal.
• Generally speaking, Ubuntu is as polished an OS as any you might pay for.

Incentivized

• I did kind of mention a Con in the Pro section with OpenVPN.
• When I create a config for an employee other employees are able to login to that config.
• I could be doing something wrong when I am making it - I am not afraid to admit that as I am pretty new to all of this, but it seems like it builds a key and I would think the key would be unique in some way to each employee, but I could be wrong.
• I actually do not have a lot of Con's for this software - I did not get to set this up on our work network so I am not sure of any downfalls when installing.
• I installed this on my personal machine in a Hyper-V environment to get a feel for it before I started working on it at work and it seemed pretty smooth. I didn't run into any issues.

Incentivized

• The repository system could be a little better, as some of the software needed is not easily available there.
• Ubuntu sometimes does not play nicely or easily with some modern firmwares.
• Some people report slow responses with newer versions of Ubuntu, although we have not experienced any.

Incentivized

While it works, we're finding that SNAP is getting more and more annoying, so we're probably going to migrate to Debian.

Incentivized

The pfSense UI is easy to navigate and pretty go look at. It is much better than some high dollar firewalls that just throw menus you you. The pfSense UI is quick and responsive and makes sense 99% of the time. Changes are committed quickly and the hardware rarely requires a reboot. It just runs.

Incentivized

I gave it 10 out of 10 because it allows me to do the work I need on a server, such as running a website and database, and making developments. In addition, thanks to its easy and useful interface during installation, it can be easily installed. In addition, thanks to its easily accessible documents, when a problem occurs, it can be solved easily and quickly.

Incentivized

pfSense+ basic provides "As Available" email support. pfSense+ Pro offers 24 hr turn around email support. pfSense+ Enterprise offers 24/7 phone support.

Incentivized

We did not use the managed commercial support, but instead relied on community forums and official documentation. Ubuntu is very well documented across both instructional documentation from the developers themselves as well as informal support forums [ServerFault, YCombinator, Reddit]. It's easy enough to find an answer to any question you may have

Incentivized

It was all pretty much automatic for our use cases. It integrates nicely with Laravel Forge, which is our primary use case.

Incentivized

Meraki has a unified management login for all devices, which is nice. It also has decent content filtering, both areas where pfSense is weaker. Where pfSense far ouclasses Meraki is in the ease of use and the other width of features. These include features such as better VPN interoperability, non-subscription based pricing, auditability, not relying on the infrastructure of a third party, more transparency of what's actually going on, easier to deploy replacements if hardware fails. Additionally, the NAT management for pfSense seems to be a bit better, as you can NAT between any network segment and not just the LAN segments out the WAN interfaces.

Windows 10: Expensive, with more security problems, more difficult to keep updated and less variety of free / open source applications. Its use encourages bad information security practices. OpenSuse Linux: A different distribution at source (Suse Linux), use of rpm packages (with fewer repositories and incompatible with Ubuntu Linux dpkg packages), and whose main objective is to be a "testing ground" for its paid version / professional, SUSE enterprise Linux.

Incentivized

• pfSense can be installed on commodity hardware with no licensing fees. With a simple less than 10 minute restore time, on most hardware, it's an extremely inexpensive way to achieve the same results that some of the more expensive vendors provide.
• The easy to use interface has allowed configuration management to be preformed by lower level technicians with quick and easy training.

Incentivized

• Systems administration with Ubuntu is easy with little deep knowledge about it. Docs and community publications are great resources for any task you need to perform on any Ubuntu server and the organization can save several salaries of specialized sys admins in favor of more active roles.
• Having been an Ubuntu user for many years personally, setting up new Ubuntu servers on my organization came with zero cost for me. I just deployed one instance from my hosting/cloud provider and started working right after it was running, no need to ask support or hire new staff for these tasks.
• Replacing paid options with Ubuntu have also saved thousands of dollars on Windows Server licenses. I've migrated Windows/SQL Server based systems to Ubuntu/MySQL/PostgreSQL several times during my career and saved about USD 5000/year in licenses to many of them.

Incentivized