pfSense, the great software that it already is, can get even better with 'packages' (plugin, extension etc. whatever you want to call it) available straight from the Package Manager menu. pfSense packages include diagnostics, increased network management capabilities, enhanced security or to extend pfSense's range of services.Here are the pfSense packagesthat I use personally plus some highly recommended ones as well!
My pfSense Packages
HAVP
Built-in antivirus. HAVP utilisesClamAV to prevents users from downloading viruses while connected to your network. As soon as a virus is detected, HAVP will display a warning page with the virus or spyware it contains.
A problem I've had with HAVP is that it prevents me from downloading Origin games and downloading Java from Oracle. But the fix is easy, add these three lines into the HAVP whitelist.
*sun.com/**.ea.com/**.origin.com/*
HAVP warning/error pages are also editable to include company logos or just so the message is a bit prettier. x-way has some very nice templates available on GitHub, although they are in a different language.
Squid
Squid is a cache which will reduce bandwidth and increase response times by fetching and reusing data. Squid at best for me has about a total average of 0.63% of requests hit the cache - it's not bad but it sucks for a single user. Squid really shines when you have many users on your network browsing similar sites.
LightSquid
LightSquid is a reporting package for Squid (above). LightSquid simply takes the Squid logs and creates reports for every day of the month of which IP addresses are accessing which sites that are cached.
Snort
Snort is a free and open source IDS/IPS which analyses packets, searching for specific patterns to detect probes and different types of attacks. It does this all in real-time. Snort for me has done nothing but give false-positives when you just start off. Eventually all the false-positives will be white-listed and Snort will simply sit back and wait until there is an attack.It wasn't detected anything for the last two months (which is good right?!).
pfBlocker
pfBlocker islike Ad blocker except it blocks IP addresses. It works similar to ad block where it blocks based on lists provided by the community. If only it could be used to block ads as well. Lists are provided from Spamhaus, DShield, iBlockList and more. It also can update your lists periodically as you set.
OpenVPN Client Export
OpenVPN Client Exportprovides a very easy method to export VPN connectionconfigurationsfor Windows, Mac, Android and iOS. It recognises which hostnames, dynamic dns addresses set in pfSense and which remote access server you wish to use. Overall a pick of the bunch when it comes to pfsense packages, it just works!
Other pfSense Packages
- Sarg: similar to LightSquid but also provides information on Squidguard or Dansguardian (below).
- Suricata: similar to Snort, a IDS IPS engine.
- SquidGuard orDansguardian: a very popular package which filters URLs . Bans sites from being accessed, good for families.
- Darkstat orBandwidthd: network statistics
- Anyterm: terminal inside pfSense
- Avahi: Bonjour-esque service, but requires its own client
FAQs
Squid is the most popular package for pfSense. Squid is a caching proxy server that can improve the performance of your Internet connection. Squid creates a cache of frequently used web pages, images, or other files that clients request from the Internet.
What is better than pfSense? ›
If you want high customizability and a large support community, pfSense is a good option. If you prioritize an easy-to-use interface and frequent updates, instead, OPNsense may be better. Ultimately, pfSense offers more flexibility for seasoned users, but OPNsense provides a more polished out-of-box experience.
What are the best specs for pfSense? ›
pfSense Hardware Requirements and Guidance
| General Requirements: |
|---|
| Minimum | CPU - 500 Mhz RAM - 512 MB |
|---|
| Recommended | CPU - 1 Ghz RAM - 1 GB |
| Requirements Specific to Individual Platforms: |
| Full Install | CD-ROM or USB for initial installation 1 GB hard drive |
Netgate pfSense is the #1 ranked solution in best firewalls. PeerSpot users give Netgate pfSense an average rating of 8.6 out of 10. Netgate pfSense is most commonly compared to Fortinet FortiGate: Netgate pfSense vs Fortinet FortiGate.
What are the disadvantages of pfSense? ›
Challenging web GUI setup and management: Non-expert users may find it challenging to set up and manage the web GUI, particularly when it comes to assigning WAN and LAN interfaces. Limited API and scripting capabilities: Some reviewers have highlighted the lack of an API for making changes in pfSense.
Do companies use pfSense? ›
Around the world in 2024, over 2716 companies have started using pfSense as Perimeter Security And Firewalls tool.
Is OpenWRT faster than pfSense? ›
On APU routers pfSense and OPNsense achieve about 100Mbit/s throughput. OpenWRT achieves about 140Mbit/s. APU delivers more than 600Mbit/s with Wireguard VPN. If you have a choice between OpenVPN and Wigeguard, choose the latter.
Do I need a router if I have pfSense? ›
If you want to connect your home or business LAN to another network or the Internet, you will need at least one router.
Is virtualizing pfSense a good idea? ›
Security. A dedicated server will always exceed a Virtual Machine (VM) from a security standpoint, but that doesn't necessarily go to say that running pfSense on a virtual machine will cause security vulnerabilities, which ultimately comes down to the overall configuration.
How many GB does pfSense need? ›
The hardware requirements for pfSense are as follows: CPU: A 64-bit amd64 (x86-64) compatible CPU is required. RAM: A minimum of 512 MB of RAM is needed. Storage: At least 8 GB of free hard disk space is required.
NordVPN is our top pick for a pfSense VPN. It dwarfs many other VPNs when it comes to network size, with over 5,400 servers to choose from in 60+ countries, and is one of the fastest VPNs we've reviewed.
How much throughput can pfSense handle? ›
Routing throughput: 1Gbit on pfSense using multiple connections. 550Mbit/s using single connection.
What is comparable to pfSense? ›
Best Paid & Free Alternatives to Netgate pfSense
- Check Point Next Generation Firewalls (NGFWs)
- Sophos Firewall.
- WatchGuard Network Security.
- FortiGate NGFW.
- SonicWall.
- Cisco Secure Firewall Threat Defense Virtual (formerly NGFWv)
- CrowdSec.
- Palo Alto Networks Next-Generation Firewall.
Out of the box, pfSense software does not log any passed traffic and logs all dropped traffic. This is the typical default behavior of almost every open source and commercial firewall.
Does pfSense need an OS? ›
pfSense® software is a FreeBSD-based operating system designed to install and configure a firewall that can be easily configured via the web interface and installed on any PC.
What is the difference between pfSense Plus and pfSense Community Edition? ›
What is pfSense Plus software? pfSense® Plus software is a Netgate product, separate and distinct from pfSense Community Edition (CE), which is open-source project software. pfSense Plus software replaced pfSense Factory Edition (FE), and is offered at no charge on Netgate appliances.
Is it better to virtualize pfSense? ›
Efficiency. In terms of efficiency, virtualizing pfSense means utilizing your hardware for maximum efficiency and ultimately saving on energy, power and space. It can be argued that the cost saving benefits far outweigh any potential security risks, which again, if configured correctly, can be avoided.
What is the difference between BandwidthD and Darkstat? ›
BandwidthD provides charts based on subnets and interfaces based on daily, weekly, monthly, and annual intervals. Darkstat is small, portable, and lightweight. It listens on port 666 and analyzes data not only over time but also per hosts receiving or transmitting data.
Is pfSense the best open source firewall? ›
pfSense® - World's Most Trusted Open Source Firewall.
