pfSense

What pfSense is

pfSense is a free, open-source FreeBSD distribution that provides firewall and router functions through a web interface. Its project source code is distributed under the Apache 2.0 license, and a package system lets users add functionality to the base system. Network features covered in its documentation include firewalling, routing, VLANs, multiple WAN connections, high availability, traffic shaping, and captive portal.

The maker describes installation on hardware or virtual machines, as well as deployment in public cloud environments. pfSense software is available through AWS and Azure marketplaces, including their US GovCloud regions. VPN options include IPsec, OpenVPN, and WireGuard; OpenVPN can authenticate against local users, LDAP, or RADIUS servers. Netgate publishes security advisories and accepts vulnerability reports through its Security Team. It also sells global support for self-installed software and virtual deployments. The Community Edition is a free download, while pfSense Plus support plans offer ticket access, from a limited number of tickets to unlimited tickets. The maker lists home and remote workers, businesses, government, education, and service providers among pfSense Plus users. The USB memstick installer overwrites the entire hard drive and does not support dual booting with another operating system.

Who it suits

pfSense suits people and organizations that need firewall and router functions and can deploy a FreeBSD distribution on hardware, a virtual machine, or in a public cloud. The maker lists home and remote workers, businesses, government, education, and service providers among pfSense Plus users.

Getting started

1. Visit the pfSense website and choose the Community Edition free download or a Plus option.
2. Choose a hardware, virtual machine, or public cloud deployment.
3. If using the USB memstick installer, account for its drive overwrite and lack of dual boot support.
4. Install pfSense and manage it through the web interface.
5. Consider purchasable Netgate support for self-installed software or virtual deployments.

Verdict

Choose pfSense if you want an open-source firewall and router distribution with a web interface, package extensions, and several deployment options. Consider another installation route if you need to preserve an existing drive setup or dual boot, since the USB installer overwrites the drive.