fSense

Prepare hardware

• Select compatible hardware or a virtual machine.

• Download the pfSense installation image and create a bootable USB or ISO.

Install pfSense

• Boot from the installation media.

• Accept license terms, choose filesystem/partition settings, and install the base system.

• Reboot into pfSense.

Initial configuration

• Assign WAN and LAN interfaces.

• Configure IP addressing (DHCP, static IP, PPPoE, VLAN if needed).

• Run the setup wizard to define hostname, domain, DNS servers.

On-premises Deployment: For organizations with strict data security or regulatory requirements, fSense can be installed on the company’s own servers rather than using the cloud-based version.

Custom Feature Development: Businesses can request specific features or integrations with other software tools to better fit their workflows.

Flexible Licensing: Options include both subscription-based and lifetime licenses, allowing organizations to choose a payment model that suits their budget and long-term plans.

Tailored Reporting and Dashboards: Reports and analytics can be customized to highlight the metrics most relevant to the organization.

Role-Based Access and Permissions: The system can be configured to match the company’s internal structure, ensuring the right people have access to the right information.

Setup Fees: For standard cloud deployments, there are typically no additional setup fees beyond the subscription cost. However, for customized or on-premises implementations, setup fees may apply. These are determined based on the complexity of the deployment and are outlined during the quoting process.

Maintenance Costs: For cloud-based solutions, maintenance is generally included in the subscription or license fee. For on-premises deployments, there may be additional maintenance agreements or fees, especially if ongoing updates or support are required.

Support Charges: Basic support is typically included with all plans. Enterprise clients or those with customized implementations may receive priority or enhanced support, which could be factored into the overall pricing. Details about support levels and any extra charges are provided during the consultation and quoting phase.

Licensing Costs: fSense offers both monthly/annual subscription models and a one-time payment for a lifetime license (mainly for the Enterprise plan). The choice of licensing model can affect the total cost of ownership.

Additional Services: Services such as advanced training, data migration, or integration with other business systems may incur extra charges, depending on the scope of work required.

Onboarding Sessions: New clients often receive guided onboarding sessions, which may be conducted remotely or on-site, depending on the agreement. These sessions cover installation, initial configuration, and an overview of core features.

User Manuals and Documentation: Comprehensive user guides and technical documentation are provided, covering everything from basic setup to advanced features and troubleshooting.

Online Training: Self-paced online tutorials and video walkthroughs are available, allowing users to learn at their own pace and revisit material as needed.

Instructor-Led Training: For larger organizations or those requiring deeper technical expertise, fSense can arrange live, instructor-led training sessions. These may be delivered virtually or in person and can be tailored to specific business processes or IT environments.

Certification Programs: Some clients may have access to certification programs, validating their proficiency with the system and best practices.

Ongoing Support: fSense offers ongoing technical support via email, phone, or a dedicated support portal. Support levels may vary depending on the chosen plan, with enterprise clients typically receiving priority response times and access to specialized support teams.

Access Controls: Role-based access ensures that only authorized users can view or modify sensitive information. Permissions can be finely tuned according to organizational roles.

Authentication: Multi-factor authentication (MFA) is available to add an extra layer of security to user logins, reducing the risk of unauthorized access.

Data Encryption: Data is encrypted both in transit and at rest, using industry-standard encryption protocols to prevent interception or unauthorized retrieval.

Monitoring and Auditing: Continuous monitoring of system activity, including access logs and security events, helps detect and respond to suspicious behavior promptly.

Regular Security Audits: Routine security assessments, including vulnerability scans and penetration testing, are conducted to identify and address potential weaknesses.

Patch Management: The system includes tools for timely application of security patches and updates, minimizing exposure to known threats.

Backup and Recovery: Automated backup procedures and disaster recovery plans are in place to ensure data can be restored in the event of loss or corruption.

Major Updates: Significant new features and improvements are typically released several times a year. These updates may introduce new capabilities, performance enhancements, and expanded integrations.

Security Patches: Critical security updates and bug fixes are issued as needed, often in response to emerging threats or vulnerabilities.

Update Management: Administrators have access to a user-friendly interface for managing updates. They can schedule updates, apply them automatically, or review changes before deployment. For organizations with strict change management policies, updates can be tested in a staging environment before being rolled out to production systems.

Communication: Clients are notified in advance of upcoming updates, with detailed release notes provided to explain new features and any actions required.

Data Ownership: Clients retain full ownership of their data at all times. fSense acts as a data processor, handling information only as necessary to provide services and support.

Data Portability: Clients have the right to request a copy of their data in a structured, commonly-used, and machine-readable format, making it easy to transfer information to another provider if needed.

Data Access and Control: Users can request corrections to their data, restrict processing, or request deletion in accordance with applicable data protection regulations.

Compliance: fSense adheres to relevant data protection laws, such as the General Data Protection Regulation (GDPR), ensuring that data is handled securely and lawfully, including when transferred across borders.

Data Deletion: Upon termination of service or at the client’s request, data is securely deleted from fSense systems, following established protocols to prevent unauthorized recovery.

No artificial limits: pfSense does not impose arbitrary restrictions on VPN tunnels, firewall rules, or throughput.

Horizontal scaling: Organizations can deploy multiple firewalls or VPN servers to handle increased load.

Hardware acceleration: Scaling performance by enabling AES-NI or other cryptographic acceleration features.

Split tunneling: Reduces bandwidth usage and scales VPN performance efficiently.

Concurrent connections: Supports large numbers of simultaneous VPN connections depending on hardware capacity.

Flexible deployment: Can run on physical appliances, virtual machines, or cloud environments, making scaling easier

Standard Plan: Clients can cancel their subscription at any time by notifying fSense support, typically via email. There are no penalties or cancellation fees, and the process is designed to be hassle-free. The first month is free, giving organizations a risk-free period to evaluate the platform before committing to ongoing payments.

Enterprise Plan: Enterprise clients also have the flexibility to cancel at any time, but the cancellation request should be made through their assigned account manager. This ensures that any customizations, integrations, or special terms are properly addressed during the cancellation process.

Renewal: While specific renewal procedures may vary, fSense generally operates on an automatic renewal basis, meaning subscriptions will continue unless the client provides notice of cancellation. Clients are encouraged to review their service agreement for any required notice periods to avoid automatic renewal if they do not wish to continue.

No Lock-In: There are no long-term commitments or lock-in periods for standard subscriptions. Clients retain the freedom to adjust, renew, or cancel their service according to their organizational needs.

Custom Agreements: For organizations with highly customized implementations or unique requirements, additional terms may be outlined in a separate contract. These should be reviewed carefully to understand any specific renewal or cancellation provisions.

PCI DSS: Used in financial institutions to meet Payment Card Industry standards.

SOX (Sarbanes-Oxley Act): Supports compliance for publicly traded companies.

GLBA (Gramm-Leach-Bliley Act): Meets requirements for financial data protection.

HIPAA: Widely used in healthcare environments for patient data security.

CIS Benchmarks: pfSense has official Center for Internet Security benchmarks for secure configuration.

Other regulatory audits: Many organizations in regulated industries (finance, healthcare, government) successfully pass audits using pfSense