Changes

Jump to: navigation, search

Comparison

1,628 bytes added, 14:36, 10 April 2016
no edit summary
This is a '''biased''' comparison page, that highlights the strengths of the ''security router''. We don't revise this page very often, and the information might be out of date. Please contact us, if you find any errors.
 
{| class="wikitable"
! !! Halon securityrouter 3.0-p17 7 !! pfSense 2.0.1 !! m0n0wall 1.33 !! Vyatta 6.4 <ref>Bought by Brocade, terminated open source edition, forked</ref> !! Mikrotik 5.20!! Smoothwall 3.0sp3
|-
| Cost || Free/paid || Free || Free || Free/paid || Paid || Free/paid|- | Platform || OpenBSD 5.0 9 || FreeBSD 8.1 3 || FreeBSD 6.4 || Linux 3|| Linux 2.0.23 6 || Linux 2.6|-| Firewall || PF || Forked PF<ref>pfSense uses a modified version of FreeBSD's PF, forked from OpenBSD 4.1's PF (but improved and updated in some areas)</ref> || ipfilter || iptables || iptables || iptables|-| Architecture || Intel 32/64-bit || Intel 32/64-bit || Intel 32-bit || Intel 32-bit || Intel 32-bit || Intel 32/64-bit|-! Management !! !! !! !! !! !!|-| Config format || [[Configuration_file|Clear-text]] || XML || XML || Clear-text || Semi-clear-text || Binary (floppy)|-| Restore/rollback without reboot || [[Backend|Yes]] || No || No || No || No || No
|-
| Firewall Test/confirm without reboot || PF (2011) Yes || PF (2007) No || No || ipfilter No || iptables No || iptablesNo
|-
| Architecture Revision-managed config || Intel 32/64-bit Yes (Subversion) || Yes (files) || Intel 32/64-bit No || Intel 32-bit Yes (file rotation) || Intel 32-bit No || Intel 32-bitNo
|-
! Management !! !! !! !! !!| Commit multiple changes || Yes || No || No || Yes || No || No
|-
| Config format CLI config editor || Clear-text [[Configure|Yes]] | XML |No | XML | No || Yes || Clear-text Yes || Semi-clear-textNo
|-
| Restore/rollback without reboot API || Yes [[SOAP]] || No || No || No REST || Custom || No
|-
| Test/confirm without reboot || Yes || No || No || No || No! VPN and encapsulation !! !! !! !! !! !!
|-
| Revision-managed config VXLAN || Yes (Subversion) || Yes (files) No || No || No || Yes (file rotation) No || No
|-
| Commit multiple changes L2TP || Yes || Yes || No || No Yes|| Yes || No
|-
| CLI config editor PPTP NAT passthrough || [[ConfigureProxies#PPTP_proxy|Yes]] || No <ref>The package Frickin is sometimes mentioned, but it supposedly doesn't work in latest version</ref> || No || Yes (iptables) || Yes(iptables) || No
|-
| API DNS suffix in PPTP/L2TP || [[SOAPVPN_server#Search_domain|Yes]] || No || No || REST No || No || CustomNo
|-
! VPN server !! !! !! !! !!| Client routes in PPTP/L2TP || [[VPN_server#Routing|Yes]] || No || No || No || No || No
|-
| L2TP Filter-ID for RADIUS || [[VPN_server#Groups| Yes ]] || No || Yes No || No || Yes|| YesNo
|-
| PPTP NAT passthrough || [[Proxies#PPTP_proxy|Yes]] || No || No || Yes (iptables) || Yes (iptables)! Routing !! !! !! !! !! !!
|-
| DNS suffix in PPTP/L2TP MPLS || [[VPN_server#Search_domain|Yes]] (PE/VPN) || No || No || No || Yes || No
|-
| Client routes in PPTPOSPF/L2TP BGP || [[VPN_server#RoutingBGP|Yes]] || Package<ref>OpenBGPD and friends are available as a package</ref> || No || No Yes (Quagga) || No Yes || No
|-
| FilterBGP TCP-ID for RADIUS MD5 || [[VPN_server#Groups|Yes]] || No <ref>Last time we checked, it could be configured manually with <tt>setkey</tt>, but inbound TCP-MD5 was not verified</ref> || No || No Yes || Yes|| No
|-
! Routing IPv6 !! !! !! !! !! !!
|-
| MPLS Firewall rules || Yes (PE/VPN) [[IPv6|Dual-stack]] | No | Rule duplication || Rule duplication || No Rule duplication || No Rule duplication || YesNo
|-
| BuiltLayer-in OSPF/BGP 3 translation (eg. NAT64) ||[[IPv6| Yes (OpenBGP/OSPFD) ]] || No || No || No || Yes (Quagga) No || YesNo
|-
! IPv6 Others !! !! !! !! !! !!
|-
| Firewall rules SIP proxy || [[IPv6Yes |Dual-stack]] |Package<ref>The siproxd package is available, but it typically requires a bit of configuration as the traffic from the phones needs to be directed to the proxy</ref> | Rule duplication |No | Rule duplication |Yes | Rule duplication |Yes | Rule duplication| Yes
|-
! Others !! !! !! !! !!| VMware image ||Yes (OVA) || No<ref>Discontinued and is no longer offered for pfSense 2.1 and later</ref> || No || Yes || No || No<ref>Found no VMware release of latest version (3.0sp3)</ref>
|-
| Layer 7 load balancing || [[Load balancing| Yes ]] || No || No || No || ?|| No
|}
 
<references />

Navigation menu