Cisco Meraki SD-WAN vs. pfSense

At our level, we had to optimize our 3 internet links (MPLS and LTE) with applications like O365, SAP, Microsoft CRM Dynamics and our collaborative work tools like Teams. We also had to ensure that both client workstations and servers could communicate with minimal latency with our Microsoft Intune infrastructure.

Incentivized

pfSense is incredibly budget friendly and capable for organizations of all sizes. My specific scenario, working for a non-profit organization, requires budget consciences decisions without compromising security and function. pfSense has helped tremendously in accomplishing this. It specifically tackles advanced routing, static routing, remote access, intrusion prevention, in a single platform, mostly available for free.

Incentivized

• Give insights in ALL what is happening on the network
• Trouble shoot in case of a problem
• Once in the Meraki family, you can expand with for example Cisco Spaces / Thousandeyes / Umbrella, and all that within one dashboard
• API possibilities are huge

Incentivized

• Easy to use. Good user interface design! Easy to understand and easy to set up.
• Lower hardware requirement. 3 years ago, we used an old PC to run it. Now, we have changed to a router device with Celeron CPU and 8GB RAM. It runs smoothly with a 1000G commercial broadband.

Incentivized

• AutoVPN sites to site firewall rules needs to be improved
• there is no logging or any insights which would be able to tell you what are the hit counts or actual usage for site to site firewall rules
• SD-WAN plus license includes Smart breakout which has only few applications and those do not work properly, so it is quite useless
• VPN exclusions (local internet breakout) for TCP/UDP type of traffic can not be specified with port ranges
• VPN exclusions (local internet breakout) can be defined only for destinations, but not the sources. It is policy based routing which should support also Source definition

Incentivized

• There is no API for making changes. This can be a hindrance in environments where auto-deploying something needs firewall rules or HAProxy configs updated. Since all settings are stored in an XML file and then configs are generated from that, even manually updating config files cannot be done.
• Beware that some network cards can have issues. pfSense is based on FreeBSD, so it's best to look on their compatibility list before deploying.

Incentivized

We implemented Meraki in most of our organization sites, so we are always looking for ways of improving its usage, add more features and discover characteristics that we do not know we already have. As it is an easy to use tool and we are growing, hiring new employees, it is really simple to onboard the new joiners.

Incentivized

Its usable very well

Incentivized

pfSense can be a very elementary firewall but can also be as comples as you want, according your needs. I'd always reccomend a HA solution when used in a company and, for bigger companies, commercial license is recommended. It's also very adptable to everyone's needs.

Incentivized

Fast and efficient. The only issue currently is that the support is only overseas support and not in South Africa, which causes delays in resolution for some cases. Escalating issues is quite simple and the opening of new cases from the dashboard is easy. I have never had a support issue that could not be resolved.

Incentivized

pfSense+ basic provides "As Available" email support. pfSense+ Pro offers 24 hr turn around email support. pfSense+ Enterprise offers 24/7 phone support.

Incentivized

We did a very stringent valuation a few years ago. And we evaluated probably about a dozen suppliers on paper that we evaluate just by capabilities. And, we of some other business criteria, and we whittled that down to a list of five. And out of those five, we brought four of those into our lab environment where we ran approximately 350 different test cases on, we really beat on it pretty heavily. And some of those other suppliers would've been companies like Fortinet Versa Networks Silver Peak, which is now owned by Hewlett Packard.

Incentivized

PFSense is not a fully featured and supported enterprise-grade solution; however, it does offer a lot of similar functionality at a fraction of the cost for more minor requirements.

Being a cloud-first solution, Meraki Dashboard will scale as needed without any effort for the client. The Meraki cloud will provision (upscale and downscale) the resources as you grow or shrink in size. You only have to physically install the MX on your site, all the management is one through the Internet via Meraki Dashboard. Worth noting that you can fully-configure the MX prior to the physical installation on site.

Incentivized

• It was mostly around logs. I mean I understand because the aim is to provide the simplified solution to the people as an end user, be it an IT manager or the oil team. So I understand where you don't have lots of tools assigned where you can actually take help from the track. But in terms of having that logging information, I think that's where it's been a bit of a kind of journey where struggling, we have been struggling there.

Incentivized

• pfSense has only had positive impacts on our company. We are not a huge company so not having to buy licenses to get all these features have been excellent.
• I was not around when our current sysadmin decided to use pfSense, but I am assuming from day one it was probably a 100% return on investment since it does everything we need it to and it was open source software.

Incentivized