pfSense vs. WatchGuard XTM - Discontinued Product

pfSense is incredibly budget friendly and capable for organizations of all sizes. My specific scenario, working for a non-profit organization, requires budget consciences decisions without compromising security and function. pfSense has helped tremendously in accomplishing this. It specifically tackles advanced routing, static routing, remote access, intrusion prevention, in a single platform, mostly available for free.

Incentivized

The web filter is complicated when you don't have a server to log in users.
Companies using static IPs.
They have to be clear about the number of users that the company has in order to obtain the correct model since each one has its resources according to the number of users.

• Easy to use. Good user interface design! Easy to understand and easy to set up.
• Lower hardware requirement. 3 years ago, we used an old PC to run it. Now, we have changed to a router device with Celeron CPU and 8GB RAM. It runs smoothly with a 1000G commercial broadband.

Incentivized

• They are simple to set up and configure. With just a few months of experience you can easily deploy any series of XTM in mid to small environments in minutes. I can deploy clustered M5600 in an enterprise within 30 minutes straight from the box, that's easy.
• They are very reasonably priced and competitive in the market. For small and mid-sized businesses it's hard to beat the bang for the buck.
• After setting them up, it's also very easy to fine tune and manage them. The packet monitor is very useful in troubleshooting and I use it to tighten down rule sets.
• Dimension is a great packet analyzer and I think they still offer it as a free tool.

Incentivized

• There is no API for making changes. This can be a hindrance in environments where auto-deploying something needs firewall rules or HAProxy configs updated. Since all settings are stored in an XML file and then configs are generated from that, even manually updating config files cannot be done.
• Beware that some network cards can have issues. pfSense is based on FreeBSD, so it's best to look on their compatibility list before deploying.

Incentivized

• Obviously discontinued
• Difficult to replace without upgrading
• Security bundle is a yearly commitment

pfSense can be a very elementary firewall but can also be as comples as you want, according your needs. I'd always reccomend a HA solution when used in a company and, for bigger companies, commercial license is recommended. It's also very adptable to everyone's needs.

Incentivized

pfSense+ basic provides "As Available" email support. pfSense+ Pro offers 24 hr turn around email support. pfSense+ Enterprise offers 24/7 phone support.

Incentivized

PFSense is not a fully featured and supported enterprise-grade solution; however, it does offer a lot of similar functionality at a fraction of the cost for more minor requirements.

WatchGuard XTM is easier to use, has more features in one device, can have better and more specific policies, has a much lower cost, and is stable.

Incentivized

• pfSense has only had positive impacts on our company. We are not a huge company so not having to buy licenses to get all these features have been excellent.
• I was not around when our current sysadmin decided to use pfSense, but I am assuming from day one it was probably a 100% return on investment since it does everything we need it to and it was open source software.

Incentivized

• Great value per dollar
• Easy rule management
• Simplifies management of remote boxes

Incentivized