pfsense

Comparison between Hacom pfSense Appliances and Cisco ASA Firewalls

If performance and technical requirements are known and one is familiar with Cisco ASA Security Appliances, the comparison tables are useful to select a comparable pfSense appliance for a particular application. Updated for 2013! Older editions are here and here.

pfSense 2.0.3 Release

pfSense 2.0.3 Release

Introduction

pfSense  verion 2.0.3 is a maintenance release with some bug and security fixes since 2.0.1 release. It is still based on FreeBSD 8.1.

Please check the following URL for a summary of "New Features and Changes".

http://doc.pfsense.org/index.php/2.0.3_New_Features_and_Changes

Comparison between Hacom pfSense Appliances and Cisco ASA Firewalls 2012

If performance and technical requirements are known and one is familiar with Cisco ASA Security Appliances, the comparison tables are useful to select a comparable pfSense appliance for a particular application.

pfSense 2.0 Release

pfSense 2.0 Release

Introduction

pfSense  verion 2.0 Release is based on FreeBSD 8.1. It is a major revision of the previous version 1.2.3. Besides many updated and new drivers, the Web User Interface has been improved. There are also many advanced functionalities. Please check the following URL for a summary of "New Features and Changes".

http://doc.pfsense.org/index.php/2.0_New_Features_and_Changes

IT-100 Software Images

Introduction

Following are the images that are built specifically for the IT-100:

IPSec Performance of Cisco ASA 5510 as Measured by IPerf

Using iperf, the IPSec site-to-site throughputs of the Cisco ASA 5510 were measured at 66 Mbps for both 3DES and AES-256 encryption. In comparison, the Mercury pfSense appliance's performance was measured at 77 Mbps, and the Mars pfSense appliance's performance at 100 Mbps.

Outdated Comparison between Hacom pfSense Appliances and Cisco ASA Firewalls

Comparison between Hacom Mid-Range pfSense Appliances and Cisco ASA Firewalls

IPSec Performance Gained by VPN Hardware Accelerator

IPSec performance is one of decision factors in choosing a firewall appliance. A previous article, IPSec Performance of pfSense Firewall Appliance, examined the performance of various Hacom pfSense appliances.  In this article, the Soekris VPN1411 hardware encryption/decryption accelrator was used to determine if it is beneficial to increase the IPSec performance.

How do I access the pfSense router from outside?

You will need to add a firewall rule to the WAN interface allowing access from an external source. By design, pfSense is supposed to work correctly with minimal configuration. The WAN interface is protected by firewall rules that are not visible from the WebGUI. Allowing external access is a security risk, which requires the admin to understand before proceeding with the decision.

"acpi_tz0: _TMP value is absurd ignored (-269.7C)"

The error message: "acpi_tz0: _TMP value is absurd ignored (-269.7C)", shows up and clutters the console starting from pfSense version 1.2.1. It is harmless. Current releases of FreeBSD chooses not to ignore some of the ACPI mis-implementation and reports them as such.

There are two ways to stop the error messages:

Syndicate content