Arista NG Firewall vs IPFire

Arista NG Firewall is network security software for managing and protecting traffic in hybrid deployments. Its software packages list firewall, intrusion prevention, web filtering, VPN, reporting and other apps. Listed VPN options include IPsec VPN, OpenVPN, Tunnel VPN and WireGuard VPN, and SSL Inspector is a featured capability. NG Firewall Complete provides control and visibility into network traffic and events. The free package offers basic security and connectivity, but limits Virus Blocker, Application Control, Spam Blocker and Reports, and does not provide centralized management for policies, alerts, reports or Networks. ETM Dashboard centrally manages network appliances and can deploy hardware appliances remotely. Other listed capabilities include configuration backup, directory integration, application rules, network discovery, policy automation, and wired and wireless access control. NG Firewall Complete is listed at $270 for a 12-month term, with licensed-device choices from 12 through unlimited. Monthly billing is available as a licensed-term option; annual billing advertises 10% savings, and the three-year option advertises 20% savings. A free plan and 30-day trial are listed.

IPFire is a free, open-source firewall and security platform for networks from home offices to global enterprises. Its Linux Netfilter-based firewall supports network zones, port forwarding, NAT, and stateful packet inspection. VPN options include IPsec, WireGuard, and OpenVPN for site-to-site or remote access. A Suricata-powered intrusion prevention system detects and blocks malicious traffic using updated rule sets. IPFire includes a Squid web proxy with optional URL filtering through URLFilter or SquidGuard, and uses Red, Green, Blue, and Orange zones for roles such as trusted networks, DMZs, and Wi-Fi. Its web interface monitors bandwidth, connections, and intrusion attempts. Proxy authentication can use Microsoft Windows Active Directory, LDAP, or RADIUS. The download page offers x86_64 and aarch64 images for bare metal, virtual machines, embedded hardware, USB sticks, and SD cards; cloud images are available for AWS, Exoscale, and other providers. The project says it releases frequent security updates. Documentation, forums, mailing lists, and a bug tracker are available, and Lightning Wire Labs offers professional support.