2023 Firewall Features Compared: pfsense | Arista | UniFi | Sophos | Fortinet | Meraki & What We Use [YouTube Release]

Youtube Releases
1

Additional Resources:

pfsense tutorials

UniFi Tutorials

Christian Lempa Sohpos XG & other great videoes

Stacey on IOT Firewalla Review

The Network Berg MikroTik & Other Networking videos https://www.youtube.com/@TheNetworkBerg

Connecting With Us

Lawrence Systems Shirts and Swag

►👕 https://teespring.com/stores/lawrence-technology-services

AFFILIATES & REFERRAL LINKS

Amazon Affiliate Store
:shopping_cart: Lawrence Systems's Amazon Page

Ubiquiti Affiliate
:shopping_cart: Ubiquiti Store

All Of Our Affiliates that help us out and can get you discounts!
:shopping_cart: https://www.lawrencesystems.com/partners-and-affiliates/

Gear we use on Kit
:shopping_cart: Kit

Try ITProTV free of charge and get 30% off!
:shopping_cart: https://go.itpro.tv/lts

Use OfferCode LTSERVICES to get 10% off your order at
:shopping_cart: Tech Supply Direct - Premium Refurbished Servers & Workstations at Unbeatable Prices

Digital Ocean Offer Code
:shopping_cart: DigitalOcean: AI-Powered Unified Inference Cloud Infrastructure

HostiFi UniFi Cloud Hosting Service
:shopping_cart: HostiFi - Fast and Reliable UniFi in the Cloud

Protect you privacy with a VPN from Private Internet Access
:shopping_cart: https://www.privateinternetaccess.com/pages/buy-vpn/LRNSYS

Patreon
:money_bag: https://www.patreon.com/lawrencesystems

:stopwatch: Time Stamps :stopwatch:
00:00 :play_button: Firewall Comparison Chart
00:48 :play_button: How We Made The List
02:15 :play_button: pfsense CE VS pfsense plus
03:02 :play_button: What About OPNsense
04:28 :play_button: The Chart of Firewalls, pfsense, Arista Untangle, UniFI, Fortigate, Sophos, Meraki
06:20 :play_button: Virtualization support
06:51 :play_button: Central Management
08:17 :play_button: Web Management Interfaces
08:51 :play_button: License Fees
10:36 :play_button: High Availability
10:56 :play_button: BGP/OSPF
11:37 :play_button: SDWAN
11:54 :play_button: OpenVPN, Wireguard, L2TP, & IPSEC Support
14:38 :play_button: Tailscale
15:15 :play_button: IDS/IPS Traffic Inspection
16:31 :play_button: Web Content Filtering DPI & SSL Inspection
17:24 :play_button: DNS Filtering
18:21 :play_button: Traffic Shaping
18:40 :play_button: Multi WAN
19:22 :play_button: Active Directory Integration
19:44 :play_button: Policy Routing
20:20 :play_button: Firewall Rules Based on Active Directory
20:50 :play_button: Reverse Proxy & Let’s Encrypt
22:52 :play_button: Captive Portal
23:20 :play_button: Traffic Reporting
24:00 :play_button: VLAN Support

#firewall #networking #security

2

Very good video. I have tried pfsense, Unifi, OpnSense, and Untangle (Arista). I finally landed on Untangle over 4 years ago and have been testing each year both pfsense and OpnSense would be a good replacement when my subscription gets close to renewal. After about 8 hours of configuration and testing I always seem to land back to my $50/year plan with Arista.

I would say the ability to create multiple policies and mix and match their “apps” in the polices is my primary reason along with the reporting. I do wish they had aliases like pfsense for some things but you can use the tagging option to replicate some aliases features. Also many of the clients I support can easily be managed via the cloud dashboard. What drives me crazy is that many small businesses will initially balk at the prices for Arista licenses but then I show them price schedules from the others and they will back down.

I will admit I do see an lot of pfsense out there in the field which is a testament to their products. Like you I never ran into OpnSense in a commerical setting but have helped many friends with their OpnSense in their homes.

3

Always enjoy firewall discussions, I think one thing to add to the *sense line of routers is they can be extended to achieve SDWAN using tools like zerotier, Application level monitoring/filters with Zenarmor, and in the case of business OpnSense it can be centrally managed using OpnCentral to sync aliases, firewall rules, settings, etc, and provide central authentication all being self hosted.

All of these options are direct plugins provided from the OpnSense repository, and can be installed using CLI on pfsense.