Firewall Feature Comparison 2020: pfsense, Untangle, USG, Dream Machine, UDM Pro, & EdgeRouter chart

For the UDM, everything that you have as “via command line”, to my understand should be “No”. While there are some things you can do via command line on the UDM, almost everything is wiped on restart. I am even less interested in doing anything outside the SDN on the UDM than I ever was with USG.

I think the Load Balancing WAN for the USG should be “via command line” - at least every time I see someone setting up load balancing on the USG they’re doing it from there. Also on the UDM Pro, Load Balancing isn’t yet available, since it isn’t in the UI. You also can’t select the SFP+ as WAN1/Primary, it is always Secondary.

Maybe this isn’t something you deal with, but I would personally have put into this spreadsheet “Able to disable NAT”. The answers would be:
Yes
(I don’t personally know, assuming yes)
Yes (via command line)
No
(I don’t personally know, assuming yes)
Edit: The reason I would personally include this is that many people would like to have a USG or UDM in the network, but use something above it for the routing functionality. Personally I would have a Mikrotik above it. In a real-world scenario, I can show you hundreds of large, big-name hotels that have a Nomadix gateway with NAT disabled, and the NAT/routing being done by a Watchguard firewall. It is the preferred deployment of a certain industry leading MSP :wink:

EDIT2: Would you accept additions from trusted/vetted individuals? I understand fully that you might want to only have your and your company’s name attached to information you have determined yourself.