Try our new research platform with insights from 80,000+ expert users
PeerSpot user
System Administrator at a tech services company with 1-10 employees
Real User
The load-balancer function support multiple servers, load balancing two gateways on the same tier. However, the firewall could be improved.

What is most valuable?

The features I've found most valuable are--

  • Proxy server (to filter traffic, act as intermediary between our server and our client, and analyze and load-balance traffic)
  • Load balancer (support multiple servers, load balances two gateways on the same tier)
  • Hot spot (with captive portal, forces authentication or click-through for network access)

How has it helped my organization?

It's provided us with a fair internet speed for all users. We're also able to control web contents of our users.

What needs improvement?

The firewall feature could be improved.

What was my experience with deployment of the solution?

We had no issues with deployment.

Buyer's Guide
Netgate pfSense
May 2025
Learn what your peers think about Netgate pfSense. Get advice and tips from experienced pros sharing their opinions. Updated: May 2025.
857,028 professionals have used our research since 2012.

What do I think about the stability of the solution?

We had no issues with instability.

What do I think about the scalability of the solution?

We were able to scale just fine.

Disclosure: My company does not have a business relationship with this vendor other than being a customer.
PeerSpot user
PeerSpot user
IT Specialist at a tech services company with 501-1,000 employees
Consultant
Installation is relatively simple and acts as our main firewall and router with professional functions, but you need to have the right hardware setup as well.

What is most valuable?

- Firewall/router

- OpenVPN server

- DHCP server

- High availability cluster

- It's for FREE!

How has it helped my organization?

Before I started working for my present company, they used to use a small (for home use :) ) Linksys router. The main problem of Linksys was the limitation of firewall rules of up to 50 entries. I suggested using a main firewall/router because it has professional functions, has no limitation, and it's for free.

What needs improvement?

So far, from my point of view everything is working perfect!

For how long have I used the solution?

I started working with pfSense in 2009.

What was my experience with deployment of the solution?

Deployment is very easy and quite intuitive. Installation is very simple.

What do I think about the stability of the solution?

No, I didn't have any issues. Every issue I had with pfSense was with hardware (not caused by pfSense).

What do I think about the scalability of the solution?

Never.

How are customer service and technical support?

Customer Service:

I never use customer service.

Technical Support:

I never use technical support.

Which solution did I use previously and why did I switch?

Before pfSense I had in the company an old Cisco router, but it had problems with stability so I was looking for an alternative and I found pfSense.

How was the initial setup?

If you have some knowledge about router and firewall, initial setup won't be a problem for you. Ask google about it and you will find a lot of documentation, instructions and video.

What about the implementation team?

I implemented pfSense by myself, so I can't rate the vendor team level of expertise.

What was our ROI?

System is totally free. I spent two days to implement it.
As hardware, I used old workstations which were prepared to scrap.
So ROI = use some cheap hardware with 2 NICs and you will get a professional firewall/router.

What's my experience with pricing, setup cost, and licensing?

It's absolutly free, no pricing and no licensing.

Which other solutions did I evaluate?

I was checking some other alternatives (right now I don't remember which) but pfSense had the best documentation, so the choice was simple.

What other advice do I have?

For professional use, I advise using two computers with three NICs

Why 2 computers???
To create a HA cluster.

You will need 3 WAN IP addresses, 3 LAN IP addresses, and a quite simple NIC configuration:

1st NIC use to WAN connection (CARP)

2nd NIC use to heartbeat and sync between two pfSense

3rd NIC use to LAN connection (CARP)

For more details ask Google :)

Disclosure: My company does not have a business relationship with this vendor other than being a customer.
PeerSpot user
Buyer's Guide
Netgate pfSense
May 2025
Learn what your peers think about Netgate pfSense. Get advice and tips from experienced pros sharing their opinions. Updated: May 2025.
857,028 professionals have used our research since 2012.
it_user284163 - PeerSpot reviewer
System Administrator at a media company with 1,001-5,000 employees
Vendor
It's stable and features load balancing, although we've rebooted once in six months.

What is most valuable?

  • Snort
  • CARP
  • Load balancing
  • VPN

How has it helped my organization?

  • Reduced the cost of our firewall solution
  • Enhanced throughput compared with similar priced devices
  • Stability
  • Reliability

What needs improvement?

I'm no expert on this subject, and the OS performs all that is required.

For how long have I used the solution?

I've used it for over one year.

What was my experience with deployment of the solution?

No issues encountered.

What do I think about the stability of the solution?

We've only had to do one reboot in six months.

What do I think about the scalability of the solution?

None as yet, because the solution hasn't reached capacity yet.

How are customer service and technical support?

I'm yet to use the official tech support as the community provides all that I have required.

Which solution did I use previously and why did I switch?

  • Sonicwall
  • Cisco ASA

We switched due to licensing costs and scalability.

How was the initial setup?

It's relatively simple and straightforward, with enough documentation avalable online for the average user to install and setup.

What was our ROI?

£2000+

Disclosure: My company does not have a business relationship with this vendor other than being a customer.
PeerSpot user
it_user280953 - PeerSpot reviewer
Network Engineer at a tech services company with 51-200 employees
Consultant
It supports multiple ISP's, making it good for implementation, but it doesn't allow FTP.

Valuable Features

This product supports multiple ISP's, so it's good for implementation.

Improvements to My Organization

It's made us more productive.

Room for Improvement

FTP was not allowed, and it didn't indicate during set up whether FTP was to be allowed or disabled.

Use of Solution

I've used it for about one year.

Stability Issues

The stability is good.

Scalability Issues

The stability is good.

Customer Service and Technical Support

The technical support is good.

Pricing, Setup Cost and Licensing

It's free.

Other Advice

All the other features are good, and with it being free, it is very attractive to the users.

Disclosure: My company does not have a business relationship with this vendor other than being a customer.
PeerSpot user
PeerSpot user
Network and Transmission Engineer at a tech services company
Consultant
We've found multiple features, such as multi-WAN capability and dynamic DNS, valuable, but the load balancing of multiple networks could be improved.

What is most valuable?

  • Firewall
  • State Table
  • Network Address Translation (NAT)
  • High Availability
  • Multi-WAN
  • Server Load Balancing
  • Virtual Private Network (VPN)
  • PPPoE Server
  • Reporting and Monitoring Applications
  • Dynamic DNS
  • Captive Portal
  • DHCP Server and Relay

How has it helped my organization?

The reporting and monitoring applications improve our organization.

What needs improvement?

Load balancing of multiple networks

For how long have I used the solution?

3 Year

What was my experience with deployment of the solution?

Compatibility Issues

What do I think about the stability of the solution?

None

What do I think about the scalability of the solution?

None

How are customer service and technical support?

Customer Service:

None

Technical Support:

Excellent

Which solution did I use previously and why did I switch?

Yes

How was the initial setup?

Simplest

What about the implementation team?

Extraordinary

What's my experience with pricing, setup cost, and licensing?

pfSense software has the flexibility to integrate into wide area on a worldwide range of hardware. Among all monitoring and firewalls application. I haven't see powerful tools like PfSense.

Disclosure: My company does not have a business relationship with this vendor other than being a customer.
PeerSpot user
it_user266880 - PeerSpot reviewer
Senior System Administrator at a government with 501-1,000 employees
Vendor
Kernel support for laptop features need to be updated, but it offers true processor power at low energy cost.

What is most valuable?

  • Battery backup
  • True processor power at low energy cost
  • Expansion possibilities
  • Low noise emission

How has it helped my organization?

We like it mostly for being able to use BSD compiled software inside it. It is flexible, fast, powerful and full of features, such as an easy proxy filter, and clustering along with an easy and well developed web based interface.

What needs improvement?

Kernel support for laptop features, USB/Firewire ethernet cards, and specially built in WLAN cards. If the WLAN functions work properly, pfSense makes a perfect "repeater" or controlled and robust accessed point with built in QoS and firewall. Wider support for 3G and 4G USB cards as backup networks would be nice too. It was impossible to get some USB stuff to work.

For how long have I used the solution?

We've used it for two years, with an HP Elitebooks 8350 for battery backup.

What was my experience with deployment of the solution?

No issues encountered.

What do I think about the stability of the solution?

I got terrible kernel crashes on HP laptops while trying to setup WLAN, but it worked better on Fujitsu ones.

What do I think about the scalability of the solution?

It has worked as expected so far.

How are customer service and technical support?

Customer Service:

I have never needed it.

Technical Support:

I have never used it.

Which solution did I use previously and why did I switch?

We have mostly used Cisco products. Their products feels like we are back in the stoneage when compared to pfSense. We switched as we needed more power (as traffic, bandwidth and user accounts grew). pfSense was one good clear substitute, and Cisco is too expensive if you want real throughput power, and it was too hard to administrate when we compared it with pfSense. also, anyone can learn pfSense pretty fast because of the intuitive web interface), and there is never trouble with invalid licenses. The features like IPS (snort/suricata) are well developed and can be used for free or at a small cost for extra security. The most valuable of all though, is that we could recycle old hardware to make our perfect firewalls, reducing the hardware cost.

How was the initial setup?

It was easy.

What about the implementation team?

We implemented these ourselves.

What's my experience with pricing, setup cost, and licensing?

It's hard to say. The setup goes pretty fast and, once you know the hardware to be used, it will work, so there was no significant amount of time there. The laptops used in this project were already recycled and had enough power for us to make a cluster and be happy with them, so it pretty much only cost us the price of some 3G modems and some USB network interfaces. Maybe not more than 200 Euros per machine.

Which other solutions did I evaluate?

We evaluated IPCop and m0n0wall. We took a vote on our team and pfSense won the deal.

What other advice do I have?

If you are unsure, do a labtest before you implement it. If you are still stuck on the traditional "stoneage" products, you may get amazing results.

Disclosure: My company does not have a business relationship with this vendor other than being a customer.
PeerSpot user
it_user299496 - PeerSpot reviewer
it_user299496Cloud Engineer at a tech services company with 1,001-5,000 employees
Consultant

Long time pfSense user here... to counter on your comment about Laptop support, it's not meant to be ran on Laptops, hence the lack of features you were looking for concerning the laptops you had it installed on. Throw it on a NUC, Server, Atom, a Desktop or even a VM and it's going to be perfect. Pushing two servers at work with dual - dual 10G Chelsio cards. (2 10G ports for WAN and 2 10G ports for LAN in LACP each).

See all 2 comments
it_user245433 - PeerSpot reviewer
Professional Internship - System Engineer at a tech services company with 51-200 employees
Consultant
It's simple and easy to understand to begin using.

Valuable Features:

It's easy to access and configure in general.  As for features, the firewall and security  options were valuable.  These are valuable because I like simple things that are easy to work with, as too much difficulty or too much constraint is not good, and boring.

Improvements to My Organization:

It provided us with better security.

Use of Solution:

I used it for two months.

Deployment Issues:

There were no issues during the time I used it.

Stability Issues:

There were no issues during the time I used it.

Scalability Issues:

There were no issues during the time I used it.

Customer Service:

It was straightforward because it's simple and easy to understand to begin using.

Implementation Team:

We used a vendor team who had a good amount of knowledge,

Disclosure: My company does not have a business relationship with this vendor other than being a customer.
PeerSpot user
it_user179136 - PeerSpot reviewer
it_user179136Network Engineer at a tech services company with 501-1,000 employees
Real User

I find PfSense to be just what it claims to be. An enterprise class firewall for the world to enjoy for free! It has all the features and none of the costs. If you understand network engineering concepts, PfSense is your "Swiss-Army-Knife"
Need a firewall? PfSense
Need to do static routing? PfSense
Need to route with RIPv2, RIPng, BGP or OSPF? PfSense
Need VPNs? PfSense Yes that includes GRE tunnels over IPSEC
Need Dynamic DNS Clients? PfSense
Need enhanced object tracking for static routing? PfSense
Need multiple WAN connections load balanced? PfSense
Need traffic shaping? PfSense
Need a proxy server? PfSense
Need IDS? PfSense... install the snort package

I've only listed a few of the things it can do. It's been my home router firewall for 10 years.
I recommend it to SOHO owners and home IT enthusiasts alike whom are on a tight budget. It's got a great interface and it's rock stable. It'll run like a dream on an Intel P3 Processor with 640 Megabytes of RAM installed. It works great on a multitude of used / outdated hardware and offers paid support if you can't do the research/reading yourself. What else could you possibly ask for?

it_user240036 - PeerSpot reviewer
Senior IT Architect at a university with 5,001-10,000 employees
Real User
Unfortunately, my experience with pfSense hasn’t been so good. Operational-wise it's fine but I've had issues with firmware upgrades.

I must be getting quite comfortable with upgrading pfSense. I just finished an upgrade from 2.2 to 2.2.1, and only midway remembered that I hadn’t done a config export and backup. Just the last upgrade exercise, I was still very paranoid about something that might go wrong. I would set aside time for the upgrade, make backups, and cross my fingers.

This should have been the way, always, that firmware, or device software, get upgraded. You just do it, and it should just work. The upgrade process should test that everything is good to go, and let you know if anything is amiss, before commencing the upgrade.

In the unlikely event that something does go wrong after starting the upgrade, there should be some automatic rollback, returning the system to its original state, leaving the user with no more than a small annoyance that the upgrade did not happen.

Unfortunately, my experience with pfSense hasn’t been so good. By and large, everything about pfSense has been good, operational-wise. It’s just that I’ve not been very lucky with the firmware upgrades.

Version 2.2.1 is a minor upgrade. There are a number of security fixes, but none terribly critical. The recent SSL FREAK vulnerability doesn’t affect version 2.2. However, there’s no reason why you should skip this version either. If you’re running pfSense, just do the upgrade. I’m beginning to have more faith in the pfSense upgrade process!

Disclosure: My company does not have a business relationship with this vendor other than being a customer.
PeerSpot user
Buyer's Guide
Download our free Netgate pfSense Report and get advice and tips from experienced pros sharing their opinions.
Updated: May 2025
Product Categories
Firewalls
Buyer's Guide
Download our free Netgate pfSense Report and get advice and tips from experienced pros sharing their opinions.