Firewall Comparison: Untangle VS pfsense

Подписаться 334 тыс.

Просмотров 63 тыс.

50% 1

Connecting With Us
---------------------------------------------------
+ Hire Us For A Project: lawrencesystems.com/hire-us/
+ Tom Twitter 🐦 / tomlawrencetech
+ Our Web Site www.lawrencesystems.com/
+ Our Forums forums.lawrencesystems.com/
+ Instagram / lawrencesystems
+ Facebook / lawrencesystems
+ GitHub github.com/lawrencesystems/
+ Discord / discord
Lawrence Systems Shirts and Swag
---------------------------------------------------
►👕 lawrence.video/swag
AFFILIATES & REFERRAL LINKS
---------------------------------------------------
Amazon Affiliate Store
🛒 www.amazon.com/shop/lawrences...
UniFi Affiliate Link
🛒 store.ui.com?a_aid=LTS
All Of Our Affiliates that help us out and can get you discounts!
🛒 lawrencesystems.com/partners-...
Gear we use on Kit
🛒 kit.co/lawrencesystems
Use OfferCode LTSERVICES to get 5% off your order at
🛒 lawrence.video/techsupplydirect
Digital Ocean Offer Code
🛒 m.do.co/c/85de8d181725
HostiFi UniFi Cloud Hosting Service
🛒 hostifi.net/?via=lawrencesystems
Protect you privacy with a VPN from Private Internet Access
🛒 www.privateinternetaccess.com...
Patreon
💰 / lawrencesystems
Firewall Feature Comparison 2020: pfsense, Untangle, USG, Dream Machine, UDM Pro, & EdgeRouter chart
• Firewall Feature Compa...
2020 Getting started with pfsense 2.4 Tutorial: Network Setup, VLANs, Features & Packages
• 2020 Getting started w...
Untangle Firewall Review 2020
• Untangle Firewall Review
⏱️ Timestamps ⏱️
0:00 Untangle VS pfsense Intro
1:46 Why Not UniFi and USG
2:20 Untangle VS pfsense Licence Comparison
4:20 Untangle VS pfsense features comparison
5:11 Untangle VS pfsense central management system
5:40 Untangle VS pfsense policy routing
7:44 Untangle VS pfsense Let's Encrypt & HA Proxy
8:18 Untangle VS pfsense Firewall Objects & ALiases
10:45 Untangle VS pfsense Firewall final thoughts
#pfsense #Firewalls

Наука

Опубликовано:

27 июл 2024

Ссылка:

Скачать:

Готовим ссылку...

Добавить в:

Мой плейлист

Посмотреть позже

Комментарии : 129

@Techie4life 3 года назад

would love to see a complete Untangle homepro setup tutorial just like pfsense with vlans and firewall rules

@JasonLeaman 3 года назад

It's very easy, not hard at all, infact setting up vlans & rules IMO is easier on untangle than Pfsense.

@dadude2k213 3 года назад

Mr Dashpuppy True.

@rlwoodlief 2 года назад

Hi Tom. Love your videos. I went FULL blown UniFi about two years ago but since they have continued to have issues, I'm now running Untangle on a U150 appliance with Grand Stream APs. Keep the videos coming!

@geoffhalsey2184 3 года назад

A very fair comparison. I always recommend Untangle for home use, when asked, for the same reasons you gave. Saying that, pfsense is an amazing product, if you're knowledgable enough to know how use it.

@maxd7228 3 года назад

This is why I’m around. Unbiased reviews.

@LAWRENCESYSTEMS 3 года назад

Thanks

@KeithTingle 3 года назад

love this content, so much knowledge

@leifhanson8900 2 года назад

Thanks Tom great review!

@enragedbacon470 3 года назад

I've been using Untangle for over 3 years now, rebooted maybe half a dozen times for updates. It was the easiest "advanced" firewall to get what I wanted to do up and running. I really like the simplistic nature of the UI, its easy for anyone to figure out, even if all you have is experience with home routers, it's dead simple.

@EmilePolka 3 года назад

you still need a more background about computers to make able sense on the GUI with Untangle. I once recommended it to a friend since that's what internet tells me and its cheap, this is a person who only know how to setup routers by plugging in the wires and going to this IP address, unfortunately for him he wasnt able to make sense of any what the UI, well at least he was able to get the internet up and running but after that, he basically called Untangle for assistance, like setting up router level VPN tunneling, policy based (routing to VPN), filtering things etc.... I'll call this "home editions" of their firewall user friendly enough if they are the same level as other service offered that have nice mobile app with easy to understand UI. unfortunately none of the enterprise grade firewalls get to this level yet. At least Ubiquity is getting there.

@enragedbacon470 3 года назад

@@EmilePolka The only problem with untangle is most of the advanced features have to be installed with the app manager(tunnel VPN, firewall rules, filtering) and most of the basic router features aren't in an obvious menu, you have to go 3 layers deep just to get to port forwarding. Once you get there it's very easy though. Its set up more like an operating system interface, rather than a router interface, with each function behind a button instead of in a drop down menu.

@piercemooney8978 3 года назад

Just the video we needed!!

@pierrepaniagua 2 года назад

I just got me a protectli appliance. I'm probably going to give pfsense a try first and see how that goes for my home. Untangle seems like a great option as well.

@TheWebstaff 3 года назад

I've used both but just never got the love for untangle. PFSense though.. LOVE IT! over 10 years and counting..

@nephets2878 3 года назад

Thank you Sir Lawrence

@assgex 3 года назад

Thank you for another nice video!

@mansharker8 3 года назад

Btw, this channel and its videos is why I chose to try out Untangle! :D

@Trevor_Green 3 года назад

Was hoping you were going to do a new update on this comparison. Thanks!

@keifer39 3 года назад

I've used both at the same time with Untangle in bridge mode and was really happy with that combo. Untangle's reporting is superior IMO. I did eventually stop using Untangle to simplify my setup but I'm considering going full Untangle for a while to see if that works for me. I've just been using Pfsense so long...

@JasonLeaman 3 года назад

Home pro is 50$ and well worth it IMO

@richardharvey9495 3 года назад

Hey Tom Great videos. We moving from Sophos to Untangle

@LAWRENCESYSTEMS 3 года назад

😎

@andreavergani7414 3 года назад

awesome content Tom. Support

@LAWRENCESYSTEMS 3 года назад

You rock!

@marklowe7431 3 года назад

I've come from Fortinet / Sophos (Astaro) and pfSense is very impressive. It's great to work with a device that you don't have to translate bullshit marketing terms back to a correct term. e.g. "Business Rule" vs inbound NAT Agree on the one device thing. Hence UTM.

@ctbfalcon 3 года назад

looking forward to the untangled videos.

@colt1596 3 года назад

Thank you

@JuanLopez-db4cc 3 года назад

Excellent

@ne0dam 3 года назад

Hi Tom, Since the question about web filtering comes a lot and your response to that is the use of Solarwinds Endpoint Management, could you do a video on that, if I may ask ? Thanks. ^^

@Duder_abides 3 года назад

I really wanted to use Untangle but I couldn't get it to install correctly on a QOTOM setup, so I stayed with PFSense.

@SB-qm5wg 3 года назад

I love my little cheapo edge router for my IoTs networks.

@zee116 3 года назад

Thanks Lawrence for all these videos. Does using DNS filtering on pfsense (for web/application filtering) has slower responses in general? Secondly, @14:12 are you still using/suggesting Solarwinds for end point management? Specially after the recent breach?

@LAWRENCESYSTEMS 3 года назад

no, yes

@dennisdoherty1133 3 года назад

I've been running Untangle at home for over 10 years now in layer 2 mode with another device in L3, currently I'm running a Unifi Dream Machine Pro in layer 3 with multiple VLANs all passing through Untangle with tagged aggregate virtual interfaces. Runs great for my needs since the UDM Pro firewall logging is awful and I like the features of the home pro license. Their TLS/SSL inspection engine does suck and needs a rewrite, at work i get to play with real firewalls like Palo Alto and Checkpoint but for home use I think untangle a good option.

@sharkzor 3 года назад

Get a pa220 lab unit. They are cheap and fully licensed!

@augurseer 3 года назад

you are reviewing my fav FW PFSense though i used to sell and setup Untangle

@mansharker8 3 года назад

Untangle has been awesome for me at home as well as other places I have installed it, Pfsense is good too, but the learning curve for it makes my brain turn to mush....even just for virus scanning and proper setup of a Squid cache lol. Pfsense is VERY command line driven, while Untangle needs a subscription for a lot of features...but makes their implementation so much simpler to do and adjust settings on. Though this isn't me saying that one product is better than the other, they both have their best uses :)

@michaelperugini4199 2 года назад

I agree Untangle is awesome I have a home version and a paid subscription and I love it. I tried to setup pfsense but just could not get it to work, on the same PC that I fought pfsense on, i installed untangle on and it was flawless install, The support is great and features are rich. we have moronicwall at work and I despise it and its support. 2021 and you cannot even export something as simple as ip addresses no they want you to manually enter every single IP that you punched into one firewall, do it again in another and another.. I hate it. so we are looking for a replacement , i am trying pfsense again but so far i have had to factory default the virtual twice, the GEOIP is now a paid option, so i cannot even test that feature. it fails to detect the nics on the physical box i dedicated , (*no they are not intel nics ) the documentation is all over the place, took me a week to figure out how to get a client to pass through the pfsense firewall to get out on the internet.. then twice more on factory resets, though it was a few days. From a business standpoint pfsense is much like sonicwall you need to have a dedicated person all day every day that just does the firewall. and I am terrified of putting something like pfsense in to replace sonicwall that causes me grief now in a virtual test world. I really dont see pfsense being the answer

@jackporteous 3 года назад

Would be great to hear what you think about opnsense and vyos etc

@LAWRENCESYSTEMS 3 года назад

Opensense is a fork of PFsense and I don't use it. I don't use vyos either

@ezi0n 3 года назад

good review Tom as always but I'd like to see a comparison between pfsense and opnsense

@LAWRENCESYSTEMS 3 года назад

I don't have any compelling reason to use opensense.

@ezi0n 3 года назад

Lawrence Systems too bad from what I could see OPNsense seems to be a tad better hence a comparison from someone with more experience with pfsense would have been good

@TimothySmithii 3 года назад

@@LAWRENCESYSTEMS I love this reply so much. Considering who it is coming from, it speaks volumes about OPNSense. Don't get me wrong, I love the concept of community managed software like OPNSense, just not for a firewall. You'd never deploy OPNSense in a commercial/enterprise environment, so why use it in your home lab? Great content as always. Pertinent info, super professional, and well-produced to boot.

@user-mp5qt7st6j 3 года назад

Wtf? Are you stalking me? I’ve googled it two days ago! I should to subscribe)

@DustinSCline 3 года назад

A few things missing from the chart. Untangle has Gateway AV via BitDefender and a they roll their own “Cloud Sandboxing”. Edit: just realized you showed my post on the Untangle Forums regarding their aliases.

@ForestNorgrove 3 года назад

Does untangle do vlan tagging yet? Do they do network bonding yet? These basic features were lacking in untangle last I tried it.

@LAWRENCESYSTEMS 3 года назад

Vlan yes, lagg no

@MrWaste 3 года назад

Do you think Pfsense will add something close to what untangle has to web filtering instead of SquidGuard? I love Pfsense, I wish that it was there and would be a 100% sale for me. I use Pfsense on many different networks and love it!

@LAWRENCESYSTEMS 3 года назад

@plopeye1 3 года назад

Try OPNsense...

@MrWaste 3 года назад

@@plopeye1 I have already Looked into that. I'm good. Thanks Tho

@falazarte 3 года назад

I was not mentioned in this video but pfSense has a superb HA (High Availability) option. I am not sure about Untangle, can someone confirm?

@michaelperugini4199 2 года назад

untangle uses VRRP which provides network level redundancy

@martincerveny2284 3 года назад

Once I want to see real firewall comparation. Not GUI, UX or functions only, but deep backend (how packets are handled, how secure are handled, SYN flood toughness, integration into OS, etc.), frontend (GUI, UX) and the main thing - to tell that firewall is not just ON or OFF but almost everything is about defining right rules for every single specific case (and therefore enduser/BFU can't deploy it anyway).

@davidsomething4867 3 года назад

I've worked on different firewalls that are both Zone/object/port/application based (PaloAlto) and Interface/object/port based (Cisco ASA 5505s and 5510s). I prefer zone based firewalls to be honest as they seem more flexible. I have sitting use a couple of PaloAltos (Virtual) in HA. I like the application based firewalls do either the pfsense or untangle do application based firewall rules? As I run an AD/LDAP environment would either have advantage for user based rules as well?

@LAWRENCESYSTEMS 3 года назад

Untangle does application filtering not so much with pfsense.

@davidsomething4867 3 года назад

@@LAWRENCESYSTEMS Thanks :-)

@awalkingbomb 2 года назад

@@LAWRENCESYSTEMS Jjj

@awalkingbomb 2 года назад

@@LAWRENCESYSTEMS Jjjj

@awalkingbomb 2 года назад

@@LAWRENCESYSTEMS J. J

@shannon1872 3 года назад

Tom , any plans to do a vlan setup and web filter policy’s on untangle ? I know you have a hand full of pfsense ones but could not find any untangle videos. Thanks !!

@LAWRENCESYSTEMS 3 года назад

I am working on some new Untangle videos

@shannon1872 3 года назад

@@LAWRENCESYSTEMS thanks Tom!!

@darkdelta 3 года назад

Just got a SG-1100 today, Currently running pfsense on an Intel based desktop. Can I use the config file backup from the desktop and restore it to the SG-1100? Thanks for any help.

@LAWRENCESYSTEMS 3 года назад

Use selective restore or do a full restore and spend some time aligning the port to match your old setup.

@darkdelta 3 года назад

@@LAWRENCESYSTEMS Many thanks Tom!

@kanes5105 3 года назад

Thanks Tom for your unbiased review. I tried Untangle years ago, but now that I have my pfSense running pretty good with tinkering here and there, I'm not sure if I would change everything out. But.....if I get bored, possibly I'll nuke and pave...lol

@VadimParfaniuc 3 года назад

Thank you for a great video, really nice comparison. Which firewall would you suggest for a small web hosting setup for 1-2 physical servers running approximately 10 VMs serving public content? Thank you

@tonyman1106 3 года назад

been using pfsense for year and I love it. it a bit complex but they very good documentation

@EmilePolka 3 года назад

easy consumer based VPN service deployment and robust (or plainly just works, set and forget) QoS = untangle everything else, ill go pfsense i loved to used untangle but it doesnt work well on router on a stick configuration.

@falazarte 3 года назад

pfSense DOES have LDAP, therefore you can integrate with and AD. I did it and I am currently using it. It is actually very useful, some user have access to just part of pfsense (like some admins only can see VPN logs and connections). It is very handy and I did not use RADIUS.

@zippytechnologies 2 года назад

should work on your audio balance between preroll/channel info roll and your content video

@IamKhoramdin 3 года назад

PFsense for sure

@therealb888 3 года назад

I am surprised you never talk about qos, it's pivotal for a smooth internet experience. Esp for gaming cafes and any latency dependent traffic. How is the support for CAKE on untangle and pfsense?. I've seen use pfsense+openwrt in a vm coz they wanted qos. It would be a shame if pfsense and untangle didn't support it.

@djmcwill1010 3 года назад

fq_codel works on both pfSense and Untangle

@therealb888 3 года назад

@@djmcwill1010 did you even read my comment? I was asking about cake not the outdated fq_codel. Bufferbloat.net has a good article on how CAKE is superior to fq_codel. 2020 and these top of the line look linux and freebsd firewalls don't support CAKE :(.

@arubial1229 3 года назад

b888 2020 and you’re taking about QoS being “pivotal”....

@OldNorsebrewery 3 года назад

I seem to remember a BSD firewall with web interface named YES. way back in late -90s. Sounds familiar to anyone?

@LAWRENCESYSTEMS 3 года назад

I don't recall that one, but pfsense is based on M0n0wall en.wikipedia.org/wiki/M0n0wall

@martincerveny2284 3 года назад

And IMHO it's still perfect secure solution. Imagine Ubiquiti USG still can't set up two IPv4 networks on single interface w/o VLAN - that's the inovation.

@davidg4512 3 года назад

Smash them like buttons

@williamp6800 3 года назад

I smashed the like button so hard I broke it!

@davidg4512 3 года назад

@@williamp6800 yikes!

@jeffm2787 2 года назад

The ntopng packaged with PFSense i.e. via the package manager is garbage as of Dec 2021. Manually installing ntopng using the latest version is like night and day and only takes a couple minutes. Point being you can get pretty good reporting from PFSense, if you don't count on the official packages.

@gustavoossandon2363 3 года назад

what about NetFlow ?!?!?

@joedtjack1105 3 года назад

Is the untangle site down?

@LAWRENCESYSTEMS 3 года назад

works for me

@kai7474 3 года назад

In video you mention Ubiquiti and multiple WAN IPs, That too is false. EdgeOS does support multiple WAN IPs in multiple configuration styles. What it does not support is DHCP + Static on the same interface such as many ISPs provide by default. It gets messy with sub-interfaces.

@LAWRENCESYSTEMS 3 года назад

I did not say that EdgeOS does not have support for multiple WAN ips, I said their UniFi line of USG/UDM does not.

@martincerveny2284 3 года назад

@@LAWRENCESYSTEMS Well it's not whole true too. USG can have multiple WAN IPs and yes, it works. But you can't set it up in GUI - it must be done manually in JSON config which you pass into controller to distribute it back to USG (it sounds like a hell and indeed it is a hell). Same with more LANs on one interface - it's possible but not in GUI. The only hard thing is to forward different WAN IPs to different LANs (it took one week of my life :-( ).

@Matlock69 3 года назад

Solarwinds123 for the win!!!

@MeanE 3 года назад

Home Users, Untagle/pfSense are things I would have though mutually exclusive 😂

@domin0o415 3 года назад

untangle just dropped 16.0 an update to add support for wireguard VPN

@LAWRENCESYSTEMS 3 года назад

yup, but 16 is still beta.

@therealb888 3 года назад

@@LAWRENCESYSTEMS kind of unfortunate that openwrt supports cake and wiregaurd while pfsense and untangle don't.

@jtracy54 3 года назад

I wish untangle supported link aggregation.

@LAWRENCESYSTEMS 3 года назад

I would hardly consider this a deal breaker, that is mostly needed on the switch and less often on the firewall. Another option is to justuse 10GB on the firewall to the switch.

@plopeye1 3 года назад

Just stay at pfsense, untangle is for consumer grade IT noobs who don’t understand how it works.

@morgandechile 3 года назад

Hello What about Netflow !?? Do them support it !??

@vrhb5491 Год назад

untangle is probably better but lacks support. Not everything can be found in forums and such.

@evilmonkeygroup6470 3 года назад

Never mind the features and ease of use, which one is actually more secure? PF sense, untangle, or the ubiquity line?

@davidnickel3949 3 года назад

ok, here's an issue I get told by a friend he states that network hardware is built for networking and speed compared to a software/ho router ala pfsense. and the best way is to if you can flash it onto network hardware to get better performance. while I can concede speed and purpose-built hardware and software will give the best results. pfsense with a quad intel nic should do 500 Mbps up/down with no issue just like a purpose-built device right?

@jamesalles139 3 года назад

There are other issues, but you are on the right track. The purpose built hardware focuses on the PCI bus - speed, number of lanes, etc. CPU can matter too. RAM, HDD, and graphics less so. So a used desktop may not get moving that fast. a used server usually can, but at the ongoing expense of more electrical power consumed.

@mariano3113 3 года назад

For me it is the price for performance ratio. My PFsense box is an i5 7200u 8GB ram 64gb ssd with 6 intel 211 nics ... cost was $215 and I have Cox Fiber gigablast through an Alcatel Lucent ONT. I am switched from an Edgerouter 12 to the PFsense box. I guess technically I moved backwards or downgraded in the sense that I moved to something cheaper and not "Networking Hardware" as your friend stated. I don't feel like I would be able to match the performance for the same price point though. For Switches (especially a PoE+ switch) for me it has definitely been better to just buy actual Network Hardware switches rather than repurpose a computer to be a managed network expansion bridge.

@davidnickel3949 3 года назад

@@mariano3113 cool,was amd dual core-apu (older)mini itx max 8gig ram and realtech extra pci nic(yes, I said pci) but i got a 8core here i could use newer hardware matx . put openmedia vault on the dc then .

@therealb888 3 года назад

Linux>FreeBSD pfsense doesn't support VPP or sch_cake or bgp all of which are reserved for tnsr. A 10gbps pfsense requires a lot more resources than a linux based router like vyos or tnsr (may be even untangle?).

@plopeye1 3 года назад

VPP is on the roadmap for pFSense 3.0. BGP is just a package install, supported for a long time... maybe you should look closer...

@foobar1269 3 года назад

stopped watching after license fee lol

@bapcosystems 3 года назад

Spreadsheet row18 should be spelled INTEGRATION, not Intergration..... sorry, just a stickler for spelling and grammer....

@SteveMasonCanada Год назад

GrammAr. :)

@jimmertzos3967 3 года назад

You seem to have confidence in what you show and you seem to have worked those combos for a while; however you only pop up reviews and no actual showcase from start to finish with a complete guide doing something useful

@LAWRENCESYSTEMS 3 года назад

¯\_(ツ)_/¯ ru-vid.com/video/%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE-ouARr-4chJ8.html

@jimmertzos3967 3 года назад

@@LAWRENCESYSTEMS thanks for replying. Watching right away

@cosmin9641 3 года назад

Intro: "Sponsor free" Video: "We are part of a reseller program" Logic:

@LAWRENCESYSTEMS 3 года назад

You must have misheard me, we are not a reseller go check their site.

@cosmin9641 3 года назад

@@LAWRENCESYSTEMS 14:41

@LAWRENCESYSTEMS 3 года назад

@@cosmin9641 Ah yes, we are an Untangle reseller. On my phone I only noticed Netgate in the title when I replied. Also, being a reseller is not the same as a sponsored post and there is no reason you can't just go direct to purchase from Untangle as they are not a channel partner only company.

@michaelperugini4199 2 года назад

pfsense is a nightmare.. much like sonicwall, and I really dislike sonicwall, trying to find a direct/semi direct replacement, im not seeing pfsense being that.