The UXG-Pro & UXG-Enterprise do not have the UniFi network server software built in and you can use a self hosted instance or a cloudkey to manage them. The other models such as UDM Pro Max and Enterprise Fortress Gateway do have the controller built in.
Features | pfsense Plus | UDM Pro Max / SE / EFG & UXG-Enterprise |
---|---|---|
Can Run on Your Own Hardware | Yes | No |
Can Be Virtualized | Yes | No |
Centralized Management | Yes & Self Hosted on pfsense (beta) | Yes Via UI Site |
Web interface | Yes | Via Built in UniFi Network Server |
License Fees | Free With Netgate Hardware | No |
Operating System | FreeBSD | Linux |
Automated Updates | No | Yes |
Granular change & rollbacks | Yes & ZFS OS rollbacks | No |
High availability | Yes | Yes (Shadow Mode*) |
Multi-WAN support | Yes | Yes |
VLAN Support | Yes | Yes |
VXLAN | No | No |
BGP / OSPF | Yes | Yes |
Captive Portal | Yes | Via UniFi Controller |
Let’s Encrypt Certificates (ACME) | Yes | No, can be done manually |
Identity Provider Intergrations | Yes Radius or LDAP | Radius, LDAP, AD, MS Entra, Google & Jumpcloud |
OpenVPN | Yes | Yes (very basic) |
IPSec | Yes | Yes |
WireGuard | Yes | Yes (No site to site yet) |
L2TP VPN | Yes | Yes |
Automatic Site to Site | no | Site Magic SD WAN |
Automated VPN or Overlay | Tailscale | Teleport VPN |
Policy routing | Yes | Yes |
IDS/IPS | Yes (Suricata or Snort) | Yes & Proofpoint CyberSecure |
Content filtering & Controls | No (squid is depricated) | Yes ( SSL on EFG & UXG-Enterprise) |
Traffic Monitoring & Reporting | Yes (NTOPNG) | Yes |
DNS filtering | Yes (pfblocker) | Yes (No custom Feeds) |
DNS Management | Yes | Yes |
DHCP Server | Yes advanced | Yes |
GeoIP filtering | Yes (pfblocker) | Yes |
Traffic shaping & QoS | Yes | Yes |
Packet Capture & Diag Tools interface | Yes | Yes |
SNMP monitoring | Yes | Yes |
Netflow Export | Yes | Yes |
Logging and Alerting | Yes | Yes |
Time Based Firewall Rules | Yes | Yes |
Reverse proxy or WAF | Yes HAProxy | No |