IPFire vs Murus
IPFire
ipfire.orgMurus
murusfirewall.comSide by side
| Figure | IPFire | Murus |
|---|---|---|
| Price from | $91.58/mo | $10/mo |
| Free plan | Yes | Yes |
| Free trial | Yes | Yes |
| Open source | Yes | — |
| Web | Yes | — |
| macOS | — | Yes |
| Linux | Yes | — |
| API | Yes | — |
| Self-hosted | Yes | — |
| Plans published | 6 | 11 |
| Spec score · Firewall Software | 9.3 (#2) | 8.5 (#16) |
| Free plan | Yes | Yes |
| Support | Lightning Wire Labs offers professional support, and the project points users to documentation, community forums, mailing lists, and a bug tracker. | Support is free for customers and users, with assistance provided directly by the developers at [email protected]. |
| What it does | IPFire is a hardened Linux operating system functioning as a stateful firewall, VPN gateway, intrusion-prevention platform and extensible network appliance. | Murus is a graphical front end for macOS's built-in PF (Packet Filter) network firewall. |
Plans
IPFire
- IPFireFree
- IPFire softwareFree
- IPFire Nano Appliance$749, paid once
- IPFire Mini Appliance (US)$979, paid once
- IPFire Standard Support$1,099 a year
- IPFire Enterprise Appliance (US)$4,299, paid once
Murus
- Murus Basic — Single License$10 a month
- Murus Basic — Five Licenses Family Pack$15 a month
- Murus Pro — Single License$25 a month
- Pro Bundle — Single License$40 a month
- Pro Bundle — Five Licenses Family Pack$55 a month
- Murus LiteFree
- Murus Basic - Single License$10, paid once
- Murus Basic - Five Licenses Family Pack$15, paid once
- Murus Pro - Single License$25, paid once
- Pro Bundle - Single License$40, paid once
In their own words
IPFire
IPFire is a free, open-source firewall and security platform for networks from home offices to global enterprises. Its Linux Netfilter-based firewall supports network zones, port forwarding, NAT, and stateful packet inspection. VPN options include IPsec, WireGuard, and OpenVPN for site-to-site or remote access. A Suricata-powered intrusion prevention system detects and blocks malicious traffic using updated rule sets. IPFire includes a Squid web proxy with optional URL filtering through URLFilter or SquidGuard, and uses Red, Green, Blue, and Orange zones for roles such as trusted networks, DMZs, and Wi-Fi. Its web interface monitors bandwidth, connections, and intrusion attempts. Proxy authentication can use Microsoft Windows Active Directory, LDAP, or RADIUS. The download page offers x86_64 and aarch64 images for bare metal, virtual machines, embedded hardware, USB sticks, and SD cards; cloud images are available for AWS, Exoscale, and other providers. The project says it releases frequent security updates. Documentation, forums, mailing lists, and a bug tracker are available, and Lightning Wire Labs offers professional support.