Changes

Jump to: navigation, search

Comparison

1,867 bytes added, 14:36, 10 April 2016
no edit summary
This is a '''biased''' comparison page, that highlights the strengths of the ''security router''. We don't revise this page very often, and the information might be out of date. Please contact us, if you find any errors.
 
{| class="wikitable"
! !! Halon securityrouter 3.0-p17 7 !! pfSense 2.0.1 !! m0n0wall 1.33 !! Vyatta 6.4 <ref>Bought by Brocade, terminated open source edition, forked</ref> !! Mikrotik 5.20!! Smoothwall 3.0sp3
|-
| Cost || Free/paid || Free || Free || Free/paid || Paid || Free/paid|- | Platform || OpenBSD 5.0 9 || FreeBSD 8.1 3 || FreeBSD 6.4 || Linux 3|| Linux 2.0.23 6 || Linux 2.6|-| Firewall || PF || Forked PF<ref>pfSense uses a modified version of FreeBSD's PF, forked from OpenBSD 4.1's PF (but improved and updated in some areas)</ref> || ipfilter || iptables || iptables || iptables|-| Architecture || Intel 32/64-bit || Intel 32/64-bit || Intel 32-bit || Intel 32-bit || Intel 32-bit || Intel 32/64-bit|-! Management !! !! !! !! !! !!|-| Config format || [[Configuration_file|Clear-text]] || XML || XML || Clear-text || Semi-clear-text || Binary (floppy)|-| Restore/rollback without reboot || [[Backend|Yes]] || No || No || No || No || No|-| Test/confirm without reboot || Yes || No || No || No || No || No|-| Revision-managed config || Yes (Subversion) || Yes (files) || No || Yes (file rotation) || No || No
|-
| Firewall Commit multiple changes || PF (2011) Yes || PF (2007) No || No || ipfilter Yes || iptables No || iptablesNo
|-
| Architecture CLI config editor || Intel 32/64-bit [[Configure|Yes]] | Intel 32/64-bit | No || No || Intel 32-bit Yes || Intel 32-bit Yes || Intel 32-bitNo
|-
! Management !! !! !! !! !!| API || [[SOAP]] || No || No || REST || Custom || No
|-
| Config format || Clear-text || XML || XML || Clear-text || Semi-clear-text! VPN and encapsulation !! !! !! !! !! !!
|-
| Restore/rollback without reboot VXLAN || Yes || No || No || No || No || No
|-
| Test/confirm without reboot L2TP || Yes || Yes || No || No Yes|| No Yes || No
|-
| Revision-managed config PPTP NAT passthrough || [[Proxies#PPTP_proxy| Yes (SVN) ]] || No<ref>The package Frickin is sometimes mentioned, but it supposedly doesn't work in latest version</ref> || No || Yes (filesiptables) || No || Yes (iptables) || No
|-
| Commit multiple changes DNS suffix in PPTP/L2TP || [[VPN_server#Search_domain| Yes ]] || No || No || No || Yes No || No
|-
| CLI config editor Client routes in PPTP/L2TP || [[VPN_server#Routing| Yes ]] || No || No || No || Yes No || YesNo
|-
! VPN server !! !! !! !! !!| Filter-ID for RADIUS || [[VPN_server#Groups|Yes]] || No || No || No || Yes || No
|-
| L2TP || Yes || Yes || No || Yes|| Yes! Routing !! !! !! !! !! !!
|-
| PPTP NAT passthrough MPLS || Yes (PE/VPN) ||No | ? (Fricking) | No || No || Yes (iptables) || Yes (iptables)No
|-
| DNS suffix in PPTPOSPF/L2TP BGP || [[BGP| Yes ]] || Package<ref>OpenBGPD and friends are available as a package</ref> || No || No Yes (Quagga) || No Yes || No
|-
| FilterBGP TCP-ID for RADIUS MD5 || Yes || No <ref>Last time we checked, it could be configured manually with <tt>setkey</tt>, but inbound TCP-MD5 was not verified</ref> || No || No Yes || Yes|| No
|-
! Routing IPv6 !! !! !! !! !! !!
|-
| MPLS Firewall rules || Yes (PE/VPN) [[IPv6|Dual-stack]] | No | Rule duplication || Rule duplication || No Rule duplication || No Rule duplication || YesNo
|-
| BuiltLayer-in OSPF/BGP 3 translation (eg. NAT64) ||[[IPv6| Yes (OpenBGP/OSPFD) ]] || No || No || No || Yes (Quagga) No || YesNo
|-
! IPv6 Others !! !! !! !! !! !!
|-
| Firewall rules SIP proxy || [[IPv6Yes |Dual-stack]] |Package<ref>The siproxd package is available, but it typically requires a bit of configuration as the traffic from the phones needs to be directed to the proxy</ref> | Rule duplication |No | Rule duplication |Yes | Rule duplication |Yes | Rule duplication| Yes
|-
! Others !! !! !! !! !!| VMware image ||Yes (OVA) || No<ref>Discontinued and is no longer offered for pfSense 2.1 and later</ref> || No || Yes || No || No<ref>Found no VMware release of latest version (3.0sp3)</ref>
|-
| Layer 7 load balancing || [[Load balancing| Yes ]] || No || No || No|| ?|| No
|}
 
<references />

Navigation menu