Arista NG Firewall vs pfSense

Arista NG Firewall is network security software for managing and protecting traffic in hybrid deployments. Its software packages list firewall, intrusion prevention, web filtering, VPN, reporting and other apps. Listed VPN options include IPsec VPN, OpenVPN, Tunnel VPN and WireGuard VPN, and SSL Inspector is a featured capability. NG Firewall Complete provides control and visibility into network traffic and events. The free package offers basic security and connectivity, but limits Virus Blocker, Application Control, Spam Blocker and Reports, and does not provide centralized management for policies, alerts, reports or Networks. ETM Dashboard centrally manages network appliances and can deploy hardware appliances remotely. Other listed capabilities include configuration backup, directory integration, application rules, network discovery, policy automation, and wired and wireless access control. NG Firewall Complete is listed at $270 for a 12-month term, with licensed-device choices from 12 through unlimited. Monthly billing is available as a licensed-term option; annual billing advertises 10% savings, and the three-year option advertises 20% savings. A free plan and 30-day trial are listed.

pfSense is a free, open-source FreeBSD distribution for firewall and router functions, managed through a web interface. Its source code is distributed under the Apache 2.0 license, and a package system lets users add functionality. Documented network features include firewalling, routing, VLANs, multiple WAN connections, high availability, traffic shaping, and captive portal. VPN options include IPsec, OpenVPN, and WireGuard; OpenVPN documentation lists authentication through local users, LDAP, or RADIUS servers. Deployment options include hardware, virtual machines, and public cloud. The software is available in the AWS and Azure marketplaces, including their US GovCloud regions. Netgate publishes security advisories, accepts vulnerability reports through its Security Team, and sells global support for self-installed software and virtual deployments. The Community Edition is a free download; listed Plus support plans offer either a limited number of tickets or unlimited tickets. One installation constraint: the USB memstick installer overwrites the entire hard drive and does not support dual booting with another OS.