pfSense and Netgate enterprise firewalls
We deploy and manage pfSense / Netgate firewalls — routing, VPN, VLAN segmentation, secure configuration and documentation. Part of the wider Network and Firewall service.
pfSense and Netgate appliances are among the most flexible enterprise firewalls. They enable serious segmentation, VPN, multi-directional routing and configuration transparency. At VitalIT, we consider them and document them in such a way that they are not a 'black box' for anyone. This page describes pfSense / Netgate in more detail as part of a wider networking and firewall service.
Problem
Many companies use a home router or an older firewall that does not support segmentation, modern VPN protocols, or meaningful logging. When the environment expands (multiple offices, IoT, cameras, working from home), it just doesn't keep up.
How VitalIT helps
Depending on the size and needs of your environment, we suggest an appropriate Netgate appliance (or virtualized pfSense). We prepare a configuration with a clear structure of VLANs, VPN accesses and rules that make sense and are documented. After establishment, the environment is maintained as part of regular maintenance.
What's included
- Selection of an appropriate Netgate appliance or virtualized pfSense solution
- Initial configuration and migration from an existing partition
- VLAN segmentation (users, servers, guests, IoT, cameras)
- Site-to-site and remote-access VPN (WireGuard, OpenVPN, IPsec)
- Clear-structure fire barrier rules
- Logging and basic traffic control
- Updates and long-term maintenance
- Configuration and access documentation
The collaborative process
- 1
Review of Needs
We review the existing network, VPN needs and planned growth.
- 2
Selection and procurement
We suggest a suitable Netgate model or solution on existing virtualization.
- 3
Configuration
Let's prepare the structure of VLANs, VPNs and rules.
- 4
Moving
The move from the existing barrier is carried out in the agreed time with minimal interruption.
- 5
Handover and maintenance
We hand over the documentation and take over long-term maintenance.
Business benefits
Serious segmentation
VLANs and rules limit damage in the event of an incident.
Modern VPN
WireGuard and OpenVPN for stable remote access.
Transparency
The configuration is visible and documented — no 'black box'.
Scalability
From a small office to multiple locations with site-to-site VPN connections.
How much does it cost
We don't have a fixed price list because environments vary greatly between companies. We formulate the price according to the scope of the work and the state of the environment — after the initial inspection, you receive a clear offer with detailed items, without hidden costs.
- Number of users, workstations and servers
- Scope of service — one-time project or monthly cooperation
- State of the environment upon acceptance (documentation, age of equipment, risks)
- Agreed responsiveness and support working hours
- Number of sites and need for field visits
Frequently asked questions
Is pfSense suitable for a small business?
Yes. Netgate offers models suitable for small offices and scales up to larger environments. The choice of device depends on the number of users, the connection speed and the features you need (e.g. VPN with high throughput).
Can we migrate from an existing router without major disruption?
Generally yes. We prepare the move in advance and carry it out at the agreed time (mostly outside working hours) with minimal interruption.
Who can operate the device once it is placed?
You, us, or both. Accesses are documented and yours. Many customers choose long-term maintenance with VitalIT, where we take care of updates, policy changes and upgrades.