Best firewalls (2026)
Firewall appliances and security gateways for homelabs and small offices, from pfSense and OPNsense boxes to UniFi and Firewalla. Ranked on throughput with inspection on, ports, software and update record. Compare all firewalls side by side
Researched, not hands-on tested.How we review ›
updated 24 Oct 2026 · ranked by score; ties by value and ageNew to firewalls? What they are and what to look for
A firewall is a box that sits between your internet connection and your network and controls what traffic can come in and out. Most home routers already include a simple one.
Do you need a firewall? Most homes don't need a separate firewall. It's for people who run services from home, want to separate smart-home devices from their computers, or want detailed control and logs.
What to look for
- Enough speed for your broadband with security features switched on
- Whether core features need a paid subscription
- A good record of security updates
Unsure about a word? Jargon explained
Our picks
- #1
Ubiquiti UniFi Cloud Gateway Max
7.3/10verdict: buyThe UniFi Cloud Gateway Max is for people who want a compact router, firewall and IDS/IPS box running Ubiquiti's UniFi software. It suits a UK gigabit line or faster, thanks to a 2.5GbE WAN port and a vendor IDS/IPS figure of 2.3 Gbps. It is a better fit for existing or planned UniFi users than for anyone who wants non-proprietary software.
2.3 Gbps IDS/IPSFive 2.5G/1G/100M/10M RJ45 portsUniFi Application SuiteNo live price yetSearch Amazon UK (opens in a new tab, affiliate link)
Affiliate link. As an Amazon Associate I earn from qualifying purchases. Details
- #2
Ubiquiti Dream Machine Pro (UDM-Pro)
7.1/10verdict: good, not the bestThe UDM-Pro suits homelabbers and small offices that want routing, firewalling, IDS/IPS and VPN in one UniFi OS device. It is a good fit if you already run, or plan to run, other UniFi products. Buyers who need proven stability or quick support should read the owner complaints first.
3.5 Gbps IDS/IPS throughput9 RJ45 GbEUniFi OS with the UniFi Application Suite…No live price yetSearch Amazon UK (opens in a new tab, affiliate link)
Affiliate link. As an Amazon Associate I earn from qualifying purchases. Details
- #3
Netgate 4200 pfSense+ Security Gateway
7.1/10verdict: buyThe Netgate 4200 is a desktop pfSense Plus firewall with four 2.5GbE ports and published multi-gig firewall and VPN throughput. It suits anyone with a gigabit or faster line who wants four 2.5GbE ports and a firewall platform they can configure in depth. It is less clear-cut for buyers who need published IPS throughput, SFP+ ports or a documented advisory history.
Four 2.5GbE RJ-45 portspfSense PlusIPsec AES-GCM-128 3.2 GbpsNo live price yetSearch Amazon UK (opens in a new tab, affiliate link)
Affiliate link. As an Amazon Associate I earn from qualifying purchases. Details
- #4
Firewalla Gold Plus
6.8/10verdict: buyThe Firewalla Gold Plus is for buyers who want a dedicated firewall with four 2.5GbE ports and IDS/IPS. It suits people who are happy to run Firewalla's own Linux-based OS. It is a poor match for anyone who needs built-in Wi-Fi, SFP+ or a low upfront cost.
5 Gbit software packet processing4 x 2.5 Gbit RJ45 plus a console portFirewalla's own Linux-based OSWireGuard 500 MbpsNo live price yetSearch Amazon UK (opens in a new tab, affiliate link)
Affiliate link. As an Amazon Associate I earn from qualifying purchases. Details
- #5
Ubiquiti Cloud Gateway Ultra (UCG-Ultra)
6.6/10verdict: good, not the bestThe Ubiquiti Cloud Gateway Ultra suits home, homelab and small-office networks that already use or plan to use UniFi. It lists 1 Gbps of IDS/IPS throughput, so it matches a gigabit line with inspection switched on. Buyers who need SFP+, several multi-gig LAN ports or a published firewall throughput figure should look at the details first.
1x 2.5GbE RJ45 WAN, 4x GbE RJ45 LANUniFi NetworkNo live price yetSearch Amazon UK (opens in a new tab, affiliate link)
Affiliate link. As an Amazon Associate I earn from qualifying purchases. Details
- #6
Protectli Vault Pro VP2420
6.1/10verdict: good, not the bestThe Protectli Vault Pro VP2420 suits homelabbers and small offices who want a four-port 2.5GbE box to run pfSense or OPNsense themselves. It fits people who care more about VPN speed, build quality and low power draw than heavy intrusion prevention. Buyers should check stock first, because the manufacturer says the VP2420e has replaced it.
4x Intel I226-V 2.5G Ethernet RJ-45Not a fixed OSpfSense WireGuard ~2250MbpsNo live price yetSearch Amazon UK (opens in a new tab, affiliate link)
Affiliate link. As an Amazon Associate I earn from qualifying purchases. Details
- #7
Netgate 2100 pfSense+ Security Gateway
5.9/10verdict: good, not the bestThe Netgate 2100 is for people who want a supported, fanless pfSense Plus firewall for a small office or home network. It suits those who value low running costs and a no-subscription core over inspection headroom. Buyers planning IPS on a full gigabit line should check the throughput evidence first.
One 1 GbE WANpfSense Plus with lifetime upgradesIPsec VPN, 254 Mbps iPerf3No live price yetSearch Amazon UK (opens in a new tab, affiliate link)
Affiliate link. As an Amazon Associate I earn from qualifying purchases. Details
- #8
Firewalla Purple
5.7/10verdict: good, not the bestFirewalla Purple is for home and small-office users who want an app-managed firewall on a gigabit connection. It suits people who want to avoid a monthly fee and keep power use low. The manufacturer's page says sales are paused, so availability needs checking first.
1 Gbps software packet processing2x 1 Gbit EthernetFirewalla OSWireGuard 500 MbpsNo live price yetSearch Amazon UK (opens in a new tab, affiliate link)
Affiliate link. As an Amazon Associate I earn from qualifying purchases. Details
Questions
Do I need a firewall if my router has one?
Not for most homes. A separate firewall makes sense if you run services from home, want VLANs for IoT devices, or want intrusion detection and detailed logs.
pfSense or OPNsense?
Both are free, open firewall software that runs on small x86 boxes. OPNsense updates more often and has a friendlier interface; pfSense has the larger community.