We use this at all of our locations as our edge device, IPSec site-to-site VPN functionality between our offices and our AWS EC2. No matter what is thrown at this, the system handles it like a champ. We have both dedicated hardware and virtualized versions running in our infrastructure. So far we haven't found a reason why we need to spend thousands for an appliance like Cisco ASA when this handles all of our needs.
IT Manager & Sr. Application Programmer with 11-50 employees
It allows for both v1 and v2 IPSec configurations to secure your connections
What is our primary use case?
How has it helped my organization?
We're a small business growing rapidly. We recently overhauled the IT infrastructure, and after looking at a number of other competitors, pfSense has been a lifesaver, allowing us to scale up and provide compliance without the need to purchase additional licenses to offer services to our employees.
What is most valuable?
There are so many packages you can install which extends pfSense's capabilities including consuming from lists such as FireHOL, Pi-Hole, etc. Here are a few packages we use:
- IPSec: pfSense allows for both v1 and v2 IPSec configurations to secure your connections.
- IPS: You can use Snort or Suricata along with Snort packages, even subscribe to commercial packages if you wish. This alone starts making pfSense on par with Cisco.
- Proxy/content filtering: You can install Squid and SquidGuard to act as a proxy and content filter. Yes, it does filter HTTPS, and there's a number of ways you can do it out of the box.
pfSense also reformatted their logs so that they're compliant and standardized. We have our logs shipped to our SIEM and Logstash servers.
What needs improvement?
While I agree spam filtering is not included or an option with the system, I don't necessarily hold that against the product as there are a number of other services that do it far better than a firewall could. If you use Office 365, Microsoft's implementations are likely to be far superior to what you'll get from a firewall. However, with that said, the one item I wish it included, even if it was a subscription-based service, is the inclusion of an AV and/or threat intelligence. This would elevate the solution well above other alternatives.
Buyer's Guide
Netgate pfSense
August 2025

Learn what your peers think about Netgate pfSense. Get advice and tips from experienced pros sharing their opinions. Updated: August 2025.
865,384 professionals have used our research since 2012.
For how long have I used the solution?
Three to five years.
What do I think about the stability of the solution?
We have not encountered any stability issues and have upgraded to each version over the years. They've really made a rock solid solution.
What do I think about the scalability of the solution?
Extremely high. We tested it on VMs running different configurations from extremely lightweight to overkill. It will run on anything and maintain it's high performance. Obviously the more you give it, the more amazing the solution becomes.
How are customer service and support?
I had one question, and they got back to me extremely quick. Not only are they knowledgeable about their product, but they're kind and courteous.
Which solution did I use previously and why did I switch?
Old and outdated infrastructure procured before I joined the company.
How was the initial setup?
Not only was it straightforward, but if you know nothing about firewalls, you can install this. Especially since they recently made their entire guidebook free to use. Not to mention the countless blogs and how to's. Low to intermediate level IT pros should be able to handle this baby.
What about the implementation team?
In-house.
What was our ROI?
From day one you get a 100% ROI. If all you have is an older server you recently decommissioned, with multiple NICs, I strongly recommend installing this software on it and giving it a shot. Doing that alone will beat out any competitor hands down.
What's my experience with pricing, setup cost, and licensing?
For the cost and what's included, you can't beat it, no way no how. If you're worried about enterprise solutions, the only thing you need to do then is to purchase a support contract, and you have an enterprise solution. You can even purchase hardware from the vendor if you choose.
Which other solutions did I evaluate?
Cisco, WatchGuard, Sophos, Fortinet, Untangle, Juniper.
What other advice do I have?
I strongly recommend giving pfSense a hard look. I've been in IT for 20+ years, and I've run the gambit on other firewalls. pfSense definitely can hold it's own against any of them.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Network and Office Manager at Belgo Metal CW n.v.
The performance and functionality are good. I can manage it easily by myself.
Pros and Cons
- "The initial setup was straightforward, therefore I wanted to continue using the product."
- "I can manage it easily by myself."
- "The performance and functionality are good."
- "A malware blocker should be included. I do not know if it is included yet. However, until now, we have not experienced a large malware invasion."
What is our primary use case?
In the past, we had different locations in different countries, and in every location, we had the same pfSense firewall. Therefore, the connection between our different locations was good and manageable. However, in the last two years, we have had only one location here in Belgium, thus the performance of the pfSense has been good, and we can manage great with the open ports and the closed ports, but now a firewall has to be a little bit more than just that.
How has it helped my organization?
I do not have any big malware in my network, partly because of pfSense. The firewall blocks every malfunctioning malware or virus. Also, the access from outside our network has to be blocked, and I know by experience that our pfSense is very closed. You have to open every port in order to make sure that there can be a connection from outside our network.
What is most valuable?
- I can manage it easily by myself.
- The interaction between the same firewalls is good. We can connect VPNs over the same firewall easily.
- It is an open source solution. Therefore, the price is good.
- OPNsense.
- The performance and functionality are good.
What needs improvement?
A malware blocker should be included. I do not know if it is included yet. However, until now, we have not experienced a large malware invasion.
There are a few features not included, and when you have to use those features, you have to pay for them.
I know that I should change the current pfSense solution. I should change it because we have only one key port on it. Our internet access also has a key port now, I should have two key ports, one to the LAN and one to the WAN.
Therefore, I want to change it, because it gives us less speed. I could provide the speed, but there are not two key ports on it. Therefore, I now have to choose a new pfSense solution, or I could look at another vendor similar to what we have.
For how long have I used the solution?
More than five years.
What do I think about the stability of the solution?
I am satisfied with the stability.
What do I think about the scalability of the solution?
Scalability was less important. When we started, we did not have to scale the pfSense. In the seven years that I have used the pfSense, once I had to renew it because the hardware was broken or was defective. The second one was a little bit faster and had more memory, so I did not have to scale it again. Therefore, the scalability has not been so important to us until now.
Which solution did I use previously and why did I switch?
We came from OneStart. OneStart was out of data and at end of life. Thus, we had to switch. pfSense was originally proposed to us by the dealer and our external IT help.
How was the initial setup?
The initial setup was straightforward, therefore I wanted to continue using the product.
What about the implementation team?
I did not do it alone. I had help from the dealer. Once installed, I can manage now to change little things. For the initial setup, I was involved with it, but I did not do it myself.
What's my experience with pricing, setup cost, and licensing?
It was straightforward to buy from pfSense.
Which other solutions did I evaluate?
From Sonic Wall, their price is much higher, because for every feature that you want to add, you have to pay. I can do the same things with pfSense, but everything is included in one price.
We originally evaluated Cisco, WatchGuard, and Barracuda. We chose pfSense because of the price and it was open source software. At the time, our team was called OpenERP (now called Odoo), so open source software was an advantage.
What other advice do I have?
I would recommend it. It is manageable and straightforward. It is not so complex. You have to know the different rules, but you can manage it easily. The performance is good.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Buyer's Guide
Netgate pfSense
August 2025

Learn what your peers think about Netgate pfSense. Get advice and tips from experienced pros sharing their opinions. Updated: August 2025.
865,384 professionals have used our research since 2012.
IT Support Specialist at SWATX
A load balancing solution that needs to improve VPN configuration
Pros and Cons
- "The tools' most valuable feature is load balancing."
- "Netgate pfSense needs to improve the configuration for a VPN."
What is our primary use case?
We use Netgate pfSense for load balancing.
What is most valuable?
The tools' most valuable feature is load balancing.
What needs improvement?
Netgate pfSense needs to improve the configuration for a VPN.
For how long have I used the solution?
I have been working with the product for three months.
What do I think about the stability of the solution?
I rate the product's stability a nine out of ten.
What do I think about the scalability of the solution?
I rate Netgate pfSense's scalability a seven out of ten.
How are customer service and support?
I have used online documentation and hence haven't contacted the support yet.
How was the initial setup?
I rate the tool's deployment a nine out of ten. Its deployment takes only a few hours to complete.
What about the implementation team?
We did the deployment in-house.
What's my experience with pricing, setup cost, and licensing?
I use the product's free version.
What other advice do I have?
I rate the solution a nine out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
IT Manager at a consultancy with 1-10 employees
Simple installation, easy to use, and the performance is good
Pros and Cons
- "It is much simpler than other solutions such as Fortinet."
- "I expect a better interface with more log analysis because I create my own interface."
What is our primary use case?
pfSense is used as our firewall and router.
What is most valuable?
The performance is good.
It is easy to use.
I have been working with this solution for so long now that it has become easy. It is much simpler than other solutions such as Fortinet.
What needs improvement?
I expect a better interface with more log analysis because I create my own interface.
For how long have I used the solution?
I have been using pfSense for a long time. Since the beginning.
I have the latest version.
What do I think about the stability of the solution?
pfSense is a stable product.
What do I think about the scalability of the solution?
pfSense is a scalable solution.
How are customer service and support?
I have not contacted technical support.
Which solution did I use previously and why did I switch?
Previously, I worked with Fortinet FortiGate, Linux, and OPNsense.
I have tested all that are available on the market and pfSense is more.
How was the initial setup?
The initial setup is easy.
The first installation took an hour to complete, but the configuration is another part. It's about the complexity of my network because I have provided services from a firm and every company has a different setup.
What about the implementation team?
I was able to complete the installation myself.
What's my experience with pricing, setup cost, and licensing?
I am not aware of the licensing costs.
What other advice do I have?
I would recommend pfSense to others who are interested in using it.
I would rate pfSense an eight out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
System Implementer at a tech vendor with 201-500 employees
Highly scalable, open source solution, fast and simple to set up
Pros and Cons
- "The initial setup was simple and fast."
- "ClamAV AntiVirus can cause some crashes. That service should be improved."
What is our primary use case?
At a custom company with several locations.
How has it helped my organization?
It has improve my organization through the services that can be added, which makes it highly scalable, from graphic monitoring services to load balancing or captive portal.
What is most valuable?
It is very difficult to decide one, as they all complement each other, from the DHCP administration to the captive portal. in my case, I would say OpenVPN has helped me to interconnect the company network in a secure and manageable way.
What needs improvement?
ClamAV AntiVirus can cause some crashes. That service should be improved.
For how long have I used the solution?
For two years.
What do I think about the stability of the solution?
I consider it very stable.
What do I think about the scalability of the solution?
It is highly scalable. All services are free.
Which solution did I use previously and why did I switch?
No, there was no firewall implemented.
How was the initial setup?
The initial setup was simple and fast.
What's my experience with pricing, setup cost, and licensing?
It is an open source firewall.
Which other solutions did I evaluate?
Yes, OPNsense. It is very similar and better than PfSense.
What other advice do I have?
You should try it.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Sans emploi at a pharma/biotech company with 51-200 employees
Simple no-cost solution
Pros and Cons
- "pfSense allows us to spread the hours of connection and do the filtering on the pfSense site."
- "The integration could be improved."
How has it helped my organization?
pfSense allows us to spread the hours of connection and do the filtering on the pfSense site.
What is most valuable?
The most valuable feature of this solution is its simplicity.
What needs improvement?
The integration could be improved.
For how long have I used the solution?
I have been using this solution for more than ten years.
What do I think about the stability of the solution?
This is a very stable solution.
What do I think about the scalability of the solution?
This solution is scalable.
How was the initial setup?
The initial setup was easy and took about 50 minutes.
What's my experience with pricing, setup cost, and licensing?
This is a no-cost solution.
What other advice do I have?
I would rate this solution as eight out of ten because it's a central solution.
Which deployment model are you using for this solution?
Private Cloud
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
System Administrator at a tech services company with 51-200 employees
Affordable and scalable but some features are difficult to configure and enable
Pros and Cons
- "Sophos Intercept X is scalable. Currently, we have almost 30 people using it in our company."
- "It would be great to add more to security."
What is our primary use case?
Our primary use case for this solution is Endpoint Advanced. I have set it up for the firewall and the open VPN connections.
What needs improvement?
It would be great to add more to security.
I know that pfSense has a lot of features, but I don't know how to configure and enable them. That is why I am looking into my support options. I am looking for better security and performance.
For how long have I used the solution?
I have been using this solution for almost two years.
What do I think about the scalability of the solution?
pfSense is scalable. Currently, we have almost 30 people using it in our company.
How are customer service and support?
I'm currently struggling with deploying pfSense more extensively. Right now, we are not getting much support on their end.
What's my experience with pricing, setup cost, and licensing?
My opinion about pfSense's pricing is good. They are open source.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Full Stack Developer at Infrassist Technologies Pvt. Ltd.
A scalable solution with an easy setup
Pros and Cons
- "A valuable feature is that the solution is open source."
- "The stability could be improved."
What is most valuable?
While it is difficult for me to point to any one specific advantage of the solution in respect of the firewall, I do know that it has many benefits. For one, it is open source.
What needs improvement?
The stability could be improved. Whenever there is an update, in spite of developments I may have made, I am required to make certain changes to the coding.
For how long have I used the solution?
I have been using pfSense for perhaps two or three years.
What do I think about the stability of the solution?
The stability could be better.
What do I think about the scalability of the solution?
The solution seems to be scalable.
How was the initial setup?
The solution is easy to set up.
What other advice do I have?
I develop the solution on behalf of my company.
With my scant knowledge of networking and the firewall I would rate pfSense as an eight out of ten.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.

Buyer's Guide
Download our free Netgate pfSense Report and get advice and tips from experienced pros
sharing their opinions.
Updated: August 2025
Product Categories
FirewallsPopular Comparisons
Fortinet FortiGate
OPNsense
Sophos XG
Cisco Secure Firewall
Palo Alto Networks NG Firewalls
WatchGuard Firebox
Check Point Quantum Force (NGFW)
Azure Firewall
SonicWall TZ
Sophos XGS
Juniper SRX Series Firewall
Fortinet FortiGate-VM
SonicWall NSa
KerioControl
Check Point Harmony SASE (formerly Perimeter 81)
Buyer's Guide
Download our free Netgate pfSense Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- What Is The Biggest Difference Between Sophos and pfSense?
- How do I choose between Fortinet FortiGate and pfSense?
- How do I deploy anti-spam in pfSense or SonicWall TZ?
- What are the differences between Fortinet FortiGate and pfSense?
- Comparison between Sophos XG and pfSense as firewalls
- What is the difference between PfSense and OPNsense?
- Why is pfSense's firewall better than OPNsense's?
- Which solution do you prefer: pfSense or KerioControl?
- What do you recommend for a corporate firewall implementation?
- Comparison of Barracuda F800, SonicWall 5600 and Fortinet
Yes you can use Squid and SquidGuard to act as your web/content filter. We have it running and are able to filter out HTTP and HTTPS. As far as App Filtering, you can setup Snort to filter out applications. See Netgate's blog for more information: www.netgate.com