World’s leading price-performance, commercial-grade
Edge Firewall, Router, and VPN solution

Full secure networking software functionality for a fraction of the cost of proprietary alternatives.

What can pfSense® Plus do?

pfSense Plus software addresses virtually every firewall, router and VPN use case, including:

  • Ad blocker (pfBlockerNG)
  • Captive Portal
  • CARP / HA
  • DNS Server
  • DHCP Server
  • HTTP Transparent / Web / Reverse Proxy (Squid)
  • IP / Country block list (pfBlockerNG)
  • IDS / IPS
  • Packet Capture / Inspection
  • Port Forwarding
  • QoS / Rate Limiting
  • Software Load Balancer (HA Proxy)
  • Traffic Monitoring
  • Traffic Logging, Statistics, and Graphs
  • Traffic Shaping
  • VLAN
  • Wake-on-LAN (WOL)
  • Website Blocker (pfBlockerNG)

Why pfSense® Plus Software?

Thousands of businesses, educational institutions, government agencies and non-profits - on all seven continents, and for years - have come to rely upon pfSense software for their secure networking needs. For organizations in search of sub-10 Gbps performance, flexible 3rd-party application options, traditional management mechanisms, proven reliability, and access to business assurance support options, pfSense Plus software is the perfect answer.

And, where business assurance is required, Netgate provides professional and enterprise-class technical support arrangements that give you access to guidance and problem solving expertise from a seasoned and skilled support organization.


3x-5x lower total cost of ownership than traditional solutions

Eliminates vendor lock-in

Increases flexibility and efficiency

deployment flexibility

Cloud Ready - AWS or Azure

Remote office, Multi-WAN headquarters, data centers

Easy and intuitive administration

Proven Success

125,000+ organizations across every continent

Business, Government, Higher Education

Wide variety of 3rd party add-ons

Business Ready

24/7 support coverage

Tiered subscriptions for any budget

Professional service consultations

Known and loved on premises.
Also in the cloud starting at $0.08/hr

  • Proven firewall, VPN, routing functionality
  • Everything in one price - No hidden charges
  • Pricing can be done hourly or annually
  • Rapidly updating cyber attack protections
  • Support available whenever needed

Looking for something more specific?

See our list of leading features and administrative capabilities below.


Firewall and Router

  • Stateful Packet Inspection (SPI)
  • GeoIP blocking
  • Anti-Spoofing
  • Time based rules
  • Connection limits
  • Dynamic DNS
  • Reverse proxy
  • Captive portal guest network
  • Supports concurrent IPv4 and IPv6
  • NAT mapping (inbound/outbound)
  • VLAN support (802.1q)
  • Configurable static routing
  • IPv6 network prefix translation
  • IPv6 router advertisements
  • Multiple IP addresses per interface
  • DHCP server
  • DNS forwarding
  • Wake-on-LAN
  • PPPoE Server


  • IPsec
  • OpenVPN
  • WireGuard
  • Site-to-site and remote access VPN support
  • SSL encryption
  • VPN client for multiple operating systems
  • L2TP/IPsec for mobile devices
  • Multi-WAN for failover
  • IPv6 support
  • Split tunneling
  • Multiple tunnels
  • VPN tunnel failover
  • NAT support
  • Automatic or custom routing
  • Local user authentication or RADIUS/LDAP

Intrusion Prevention System

  • Snort-based packet analyzer
  • Layer 7 application detection
  • Multiple rules sources and categories
  • Emerging threats database
  • IP blacklist database
  • Pre-set rule profiles
  • Per-interface configuration
  • Suppressing false positive alerts
  • Deep Packet Inspection (DPI)
  • Optional open-source packages for application blocking

Enterprise Reliability

  • Optional multi-node High Availability Clustering
  • Multi-WAN load balancing
  • Automatic connection failover
  • Bandwidth throttling
  • Traffic shaping wizard
  • Reserve or restrict bandwidth based on traffic priority
  • Fair sharing bandwidth
  • User data transfer quotas

User Authentication

  • Local user and group database
  • User and group-based privileges
  • Optional automatic account expiration
  • External RADIUS authentication
  • Automatic lockout after repeated attempts

Proxy and Content Filtering

  • HTTP and HTTPS proxy
  • Non Transparent or Transparent caching proxy
  • Domain/URL filtering
  • Anti-virus filtering
  • SafeSearch for search engines
  • HTTPS URL and content screening
  • Website access reporting
  • Domain Name blacklisting (DNSBL)
  • Usage reporting for daily, monthly, etc.



  • Web-based configuration
  • Setup wizard for initial configuration
  • Remote web-based administration
  • Customizable dashboard
  • Easy configuration backup/restore
  • Configuration export/import
  • Encrypted automatic backup to Netgate server
  • Variable level administrative rights
  • Multi-language support
  • Simple updates
  • Forward-compatible configuration
  • Serial console for shell access and recovery options

System Security

  • Web interface security protection
  • CSRF protection
  • HTTP Referer enforcement
  • DNS Rebinding protection
  • HTTP Strict Transport Security
  • Frame protection
  • Optional key-based SSH access

Reporting & Monitoring

  • Dashboard with configurable widgets
  • Local logging
  • Remote logging
  • Local monitoring graphs
  • Real-time interface traffic graphs
  • SNMP monitoring
  • Notifications via web interface, SMTP, or Growl
  • Hardware monitoring
  • Networking diagnostic tools

Get pfSense Plus Now

Choose the right deployment for your needs