Mikrotik vs pfsense as firewall



  • Hi,
    we want put a firewall behind our router which protect users from some of DoS attacks,
    one of my friend in his cage use ccr 1036 and protect his network and told me have good throuput and etc with mikrotik but mikrotik does not have anything for real time traffic as like as pfsense (pfsene has pftop)
    also i see mikrotik has some good features for protect dos attack that available at http://wiki.mikrotik.com/wiki/DoS_attack_protection so any idea which one is bette r?
    and also pfsene has some good feature as like as mikrotik but i think pfsene can not put detail things on packet as like as mikrotik,
    if you https://forum.pfsense.org/index.php?topic=1138.0 it seems pfsense has some bug on advanced ip section,
    and also i want run both of them in bridge (transparent mode)
    thanks,



  • You were asking the same questions back in September.

    https://forum.pfsense.org/index.php?topic=99277.msg553184#msg553184

    The answers are the same as before. And nothing - not even a Mikrotick router - will prevent or mitigate a large DDOS attack. Your best line of defense in that instance is to get your ISP to deal with the problem further up the chain. Both systems do what each of them say on the tin. You just have to decide which one is best for your purposes. And the only authority on that subject is yourself.


Log in to reply