We performed a comparison between pfSense and Untangle NG Firewall based on our users’ reviews in five categories. After reading all of the collected data, you can find our conclusion below.
Comparison Results: Both products received high marks from reviewers, but Untangle NG Firewall ultimately won out in this comparison. It is easy to set up, user-friendly and secure. In addition it has excellent customer support and is fairly priced.
"The management console is pretty simple, so anyone who understands networking can initially deploy the solution."
"From the firewall perspective, the rules and policies are very sufficient and easy to use."
"FortiGate's web and URL filtering are unlike any other firewall I've used. The functionality of URL filtering in those solutions is problematic because everything is encrypted, and firewalls can't break that encryption protocol. Fortinet has an SSL proxy, so the encryption is done before the packet ever leaves the FortiGate. The URL filter is definitely one of the most helpful features."
"FortiGate has a very strong unified threat management system."
"Fortinet FortiGate is a scalable solution."
"FortiGate improved our security. It's one of the best hardware firewalls."
"Fortigate's most valuable feature is that it doesn't need a push policy when writing rules."
"Security solution with a straightforward and quick setup. It's a stable and scalable product."
"I have found pfSense to be stable."
"The plugins or add-ons are most valuable. Sometimes, they are free of charge, and sometimes, you have to pay for them, but you can purchase or download very valuable plugins or add-ons to perform internal testing of your network and simulate a denial-of-service attack or whichever attack you want to simulate. You can also remote and monitor your network and see where the gap is. Did you forget a printer port? Most attacks at the moment are happening through printers, and they can tell you immediately that you forgot to close the port of the printer. There are more than one million printers that are in danger, and everybody knows that hackers are using them to enter the network. So, you can download plugins to protect your network."
"pfSense allows us to spread the hours of connection and do the filtering on the pfSense site."
"The initial setup was simple and fast."
"The classic features such as content inspection, content protection, and the application-level firewall, are the most important."
"Sophos Intercept X is scalable. Currently, we have almost 30 people using it in our company."
"It is a very good solution for enterprises that need a VPN for their employees. It is the best way to provide a remote work facility to employees at a very low cost. Other solutions that I have had in the past were very expensive. Enterprises don't always have that kind of money to invest."
"The initial setup is not complex."
"We find the web filter very valuable."
"The web blocking for my clients and the application control are valuable."
"NG Firewalls allow us to permit or deny applications we don't want to run. We also use content filtering, SSL inspection, and all the other things we run on the firewall to keep our clients protected and ensure they're not going where they shouldn't. It's a great firewall that works as intended."
"The majority of our clients are very small businesses, and Untangle devices have been fantastic for these small clients. We've basically standardized our stack to just simply use Untangle. We include the hardware and the service option, which makes it very easy and affordable for us to just simply push that into the monthly per-user costing that we provide as a managed services provider. It's really a no-brainer. They're easy to use, and they're easy to set up and configure. Support is generally good about resolving any issues that we have. We haven't had any real complaints."
"The product’s most valuable features are endpoint protection management, load balancing, and connectivity with Active Directory."
"What I like about this product, which is the reason that we continue to use it, is that you can install the software version on your own hardware. In case there is a problem with the hardware, we can just install the firewall in another machine and restore the configuration."
"The product is easy to implement."
"Fortigate's hardware capacities could be improved."
"They have to just improve its performance when we enable all UTM features. When you enable all the features, the performance of FortiGate, as well as of Sophos and SonicWall, goes down."
"I would like to see improvements with the antivirus and IPS as they are not working properly all the time."
"The solution's framework needs to be frequently updated in order to have a stable solution."
"The stability could be a bit better."
"Fortinet FortiGate is a firewall solution and once it's deployed, you can rest assured that your system is secure."
"The logging details need to be improved."
"The improvement is related to logs. Instead of the CLI, we should be able to have more insights into the logs of the firewall in the GUI."
"More documentation would be great, especially on new features because sometimes, when new features come out, you don't get to understand them right off the bat. You have to really spend a lot of time understanding them. So, more documentation would be awesome."
"The solution could be more user-friendly, and the graphical interface needs some work so that someone without an IT background can use the application. I would like the ability to manage the on-premise appliance from the cloud. When I'm not in the office, it would be great to connect to the pfSense server and administer the network remotely."
"There could be a way to remote to it through a mobile app. You can always browse through your browser on your mobile phone or tablet, but it would be good to have a dedicated app. I understand that iOS and Android developers are expensive, but there should be a mobile app."
"Other solutions provide more scope for growth. For instance, we can have only 10 to 20 employees on VPN, but other solutions can support more users. We also have more capabilities to increase the performance of the solution."
"pfSense could improve by having a sandboxing feature that I have seen in SonicWall. However, maybe it is available I am not aware of it."
"I'd like to find something in pfSense that is more specific to URL filtering. We have customers who would like to filter their web traffic. They would like to be able to say to their employees, "You can surf the web, but you cannot get access to Facebook or other social media," or "You can surf the web, but you're not allowed to gamble or watch porn on the web." My technicians say that doing this kind of stuff with pfSense nowadays is not easy. They can implement some filters using IP addresses but not by using the names of the domains and categories. So, we are not able to exclude some categories from the allowed traffic, such as porn, gambling, etc. To do that, we have to use another product and another web filter that uses DNS. I know that there are some third-party products that could work with pfSense, but I'd like the native pfSense solution to do that."
"The integration of pfSense with EPS and EDS could be better. Also, it should be easier to get reports on how many users are connecting simultaneously and how sections connect in real-time."
"I would like to see pfSense integrate WireGuard. Currently, pfSense uses OpenVPN, and there's nothing wrong with it, but WireGuard is a lot leaner and meaner."
"The biggest challenge that we have with this solution is local support. The local support is a problem in our area."
"The storage is minimal, so we have to set the system to delete data after seven days."
"On their low-end appliance, they could have more memory and the largest storage space. The low-end appliance comes with a too-small hard drive, and it could use a little extra room. It only comes with about 4 gigs or 8 gigs of memory, and the hardware space is only 40 gigs, which is really small."
"We have a minor issue when assigning IP addresses in the ARP tables. You should be able to go into the ARP tables, look at the IP address and say, "Nope, they need to be on this side on this IP address." The ability to set a DHP reservation from the ARP tables would be great. It's no big deal, but it would be nice to have."
"It does have multi-factor authentication in some areas, but I would love to see a more widely implemented version of that on the devices themselves."
"The product should improve reporting."
"Whenever there are a large number of endpoint VPN clients, connectivity becomes slow."
Netgate pfSense is ranked 2nd in Firewalls with 22 reviews while Untangle NG Firewall is ranked 24th in Firewalls with 7 reviews. Netgate pfSense is rated 8.6, while Untangle NG Firewall is rated 8.0. The top reviewer of Netgate pfSense writes "Feature-rich, well documented, and there is good support available online". On the other hand, the top reviewer of Untangle NG Firewall writes "Its simplicity, variety of features, and low pricing have enabled us to improve the security for our small business clients at a price that they are happy to pay for". Netgate pfSense is most compared with OPNsense, Sophos XG, Sophos UTM, Cisco Secure Firewall and WatchGuard Firebox, whereas Untangle NG Firewall is most compared with OPNsense, Sophos XG, Sophos UTM, SonicWall TZ and Cisco Secure Firewall. See our Netgate pfSense vs. Untangle NG Firewall report.
See our list of best Firewalls vendors.
We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
