pfSense firewall/router is a lightweight and supported alternative to hardware-based options.
Roger Mialkowski | TrustRadius Reviewer
December 22, 2018

pfSense firewall/router is a lightweight and supported alternative to hardware-based options.

Score 9 out of 10
Vetted Review
Verified User
Review Source

Overall Satisfaction with pfSense

pfSense is being used as the primary edge firewall for the internet connection. As many hardware-based firewalls/routers do not receive timely security updates, it was time to implement something with more granular control over updates and patches. pfSense has exceeded expectations in terms of flexibility. We are also using the Snort add-on to perform IDS/IPS functionality.
  • Since it is based on FreeBSD, rock-solid stability is a given. Platform hardware requirements were quite modest.
  • The firewall and NAT configuration was straightforward and works well.
  • A good amount of add-ons permit the administrator to extend functionality to meet the needs and requirements of the organization.
  • Perhaps there can be more wizards put in for simpler turn-key configurations.
  • Would be a good bonus to have disk mirroring for the main volume to prevent unexpected downtime due to disk failures. I'm currently using as SSD so that should help avoid any mechanical breakdowns.
  • Include more choices for remote access VPN configurations.
  • The Snort IPS add-on has blocked many attacks that would otherwise cripple other hardware-based firewalls/routers. This greatly reduces downtime and system administration costs.
  • The optional add-ons can remove the need for secondary servers/services to be running on other devices behind it.
  • The community-based support is large to the point where a small business isn't necessarily needing to purchase a standard support contract.
pfSense requires a much smaller footprint than the heavier options out there. It is slim enough to get the job done while the optional add-ons can extend its overall functionality on an as-needed basis. It also does not limit/cripple functionality and features like the bigger solutions available out there that would otherwise require an upgrade to operate.
pfSense is perfectly suited for small businesses as a firewall/router. Their hardware product line can scale with business size while the downloadable ISO can be installed directly on low-power devices. Many small businesses would be on DHCP for their internet connection so the built-in Dynamic DNS feature can keep track of the current IP address for easy access by remote/field workers.