Untangle Firewall Review

Рет қаралды 46,697

Күн бұрын

Connecting With Us
---------------------------------------------------
+ Hire Us For A Project: lawrencesystems.com/hire-us/
+ Tom Twitter 🐦 / tomlawrencetech
+ Our Web Site www.lawrencesystems.com/
+ Our Forums forums.lawrencesystems.com/
+ Instagram / lawrencesystems
+ Facebook / lawrencesystems
+ GitHub github.com/lawrencesystems/
+ Discord / discord
Lawrence Systems Shirts and Swag
---------------------------------------------------
►👕 lawrence.video/swag
AFFILIATES & REFERRAL LINKS
---------------------------------------------------
Amazon Affiliate Store
🛒 www.amazon.com/shop/lawrences...
UniFi Affiliate Link
🛒 store.ui.com?a_aid=LTS
All Of Our Affiliates that help us out and can get you discounts!
🛒 lawrencesystems.com/partners-...
Gear we use on Kit
🛒 kit.co/lawrencesystems
Use OfferCode LTSERVICES to get 5% off your order at
🛒 lawrence.video/techsupplydirect
Digital Ocean Offer Code
🛒 m.do.co/c/85de8d181725
HostiFi UniFi Cloud Hosting Service
🛒 hostifi.net/?via=lawrencesystems
Protect you privacy with a VPN from Private Internet Access
🛒 www.privateinternetaccess.com...
Patreon
💰 / lawrencesystems
Untangle Firewall Web Filtering & SSL Inspection
• Untangle Firewall Web ...
How to Setup Untangle With PIA Tunnel Routing With Policies in Less Than 10 Minutes
• How to Setup Untangle ...
⏱️ Timestamps ⏱️
0:00 Untangle Intro and use cases
2:05 Untangle Free Version Comparison
3:00 Untangle Feautres
5:23 Untangle Pricing and Licensing
8:01 Untangle Dashboard Interface
8:01 Untangle Reporting, Filtering & DPI Data
9:50 Untangle Web Filtering
10:38 Untangle filter rule interface
12:45 Untangle application filtering controls
15:03 Untagnle Interfaces, VLANS And Firewall Rules
16:43 Untagnle OpenVPN & Active Directory
17:40 Untagnle final thoughts
#Untangle #Firewall #Firewallreview

Пікірлер: 139

@DanielStinebaugh 3 жыл бұрын

Still an untangle user and have been for many years, love it's ease of adminstration, and the dashboard's a nice overview as well. As a power user their home user license is what's sold me on this as a solution for so long. The value for the offering is yet to be beat by anyone else I'd consider.

@Aastan 3 жыл бұрын

Thanks for the review. I am a paid home user for the past year and I love it. The price is amazing and as you stated feature-rich. I also use it for one of my customers. Management and interconnectivity are seamless.

@kittysreview9055 3 жыл бұрын

Great video, as always. Thank you, Lawrence!

@Banner1986 3 жыл бұрын

R.I.P. FarmVille - you had a great run. May 2020 be your greatest (thanks to being final!) year.

@LAWRENCESYSTEMS 3 жыл бұрын

🚜🌽😂🚜🌽

@tesfataitt1696 3 жыл бұрын

I've been using untangle home version in my home network for 3 yrs now. And it's fantastic.

@alpachino468 3 жыл бұрын

Out of all the reviewers on KZfaq who are affiliated in some way with the product manufacturers, you are one of the rare few I totally trust to give an unbiased, objective, and impartial review of their product.

@-iIIiiiiiIiiiiIIIiiIi- Ай бұрын

Trust no one. Verify always.

@j0hnny_R3db34rd 19 күн бұрын

Get a room.

@paulgarvey7863 3 жыл бұрын

Thank you, Lawrence, fantastic video! For a complete home use end point security, that would give highest protection, what you recommend for this? This is my number one priority and main requirement

@vincentguidi8997 3 жыл бұрын

Been interested in this as a Home licence for a while. Doesn’t seem to be quite as straightforward to order a physical unit for the UK though.

@logan594 3 жыл бұрын

I’ve been using untangle for years, it scales up incredibly well as a VM compared to other software I’ve tried.

@staceybruner605 3 жыл бұрын

I would like to know if you can install the untangle software on the Netgate Applicance.

@brutosja 3 жыл бұрын

Switched to untangle December 2019 after years of using pfsense and I wondered how I didn't switch earlier. Everything is just much simpler and I get great insight into network activity I don't get in pfsense.

@plopeye1 3 жыл бұрын

The funny thing is that I switched from untangle to pfsense a few years ago. Untangle didn’t give me the insight I wanted and the ipsec vpn is a paid option. I can understand this choice if you are not a professional.

@EzzenzDK 3 жыл бұрын

Great video - I cannot find the link to the video about the UT Home product that you mention - please provide a link. Thanks :-)

@johnmarkzimm Жыл бұрын

Hello, Were do you phisicaly install the untangle box? Before or after my ATT modem/router?

@michaelsims7728 3 жыл бұрын

Tom, thank you for the video do you know when you will go over the stuff for a person wanting to use this on the home network

@LAWRENCESYSTEMS 3 жыл бұрын

I am not good and sticking to schedules when it comes to creating content.

@VESKOSTOEV 3 жыл бұрын

Hi,how is the Adblocker performing in Untangle last year i test it and was very bad almost like without Adblocker i had ads in all websites. Using Pfsence still because of this problem. Can someone compare both firewalls, please in adblocking performance. Also slower opening web pages than Pfsence because inspect all,Openvpn buggy was buggy for me.Slow interface. Thank you.Support was very good helped me with all questions.Need to ad option di ad custom Blocklist like Pfsence very important the ads getting everywhere.

@Nnyan 3 жыл бұрын

Nice review! I've heard of Untangle over the years but never was motivated to give it a try. This review gave me that motivation to install it on my ESXI server, It's a nice easy install. I don't mind paying for good software and I almost bit the bullet on this one. But I ended up not buying this b/c of the way they license this. Sure $50/year is reasonable but look at the details and you see that they separate some features into a Home Plus sub and that one is $150/year. For that extra you get Bitdefender AV, WAN balance/failover, Threat Prevention, Wireguard, and IPsec VPN, Web Cache, and a Captive portal. Now that's NOT worth an extra $100/year IMHO. Bitdefender I understand an extra charge and maybe for the WAN features (though I can get those on a number of products). But the rest of those seems a bit of a stretch to charge that much for.

@deepinder27 3 жыл бұрын

Great video, as always! Thank you :)

@LAWRENCESYSTEMS 3 жыл бұрын

Glad you enjoyed it!

@scottritchey7492 3 жыл бұрын

Do you have any opinion on Firewalla? I installed one at my church to prevent abuse of the open guest SSID; it seems to do the job. OpenDNS was not an option because the Spectrum-provided (business account) gateway would not let me change DNS server. Firewalla has many interesting features but I find VPN host particularly useful for remote access (like access to router settings).

@LAWRENCESYSTEMS 3 жыл бұрын

Never used it, don't really plan to either

@therealb888 3 жыл бұрын

Tom what's your opinion on 2.5GbE and 5GbE nics? I was seeing the IC prices for i225 and i210 are almost the same. With wifi 6 and 2gbps FTTH in EU or asia are becoming more common these hardware appliances are becoming an outdated bottleneck.

@LAWRENCESYSTEMS 3 жыл бұрын

Why not 10g? And internet connections are the bottleneck, not the devices.

@rkhanso 3 жыл бұрын

Tom, first- - your videos are great. I've seen many of them. Question: what about using both a Ubiquiti Dream Machine Pro AND a Untangle firewall for home with DSL and an Actiontec modem? Does that make sense? I think the Firewall in the Dream Machine Pro isn't that great, right? So just don't use it and use Untangle instead? Obviously the modem connects to the two DSL lines, then the Firewall (since it does PPPoE Authentication) and then the Dream Machine Pro? Or, connect in a different order? I also have Unifi APs at home. Or ditch the Dream Machine Pro idea and go with something else for the UniFi controller? (I currently have the controller running on my main PC at home). Or, I could keep running the controller on my PC, or use a Google VM in the Google Cloud, I suppose. Or, other suggestions?

@robRobblah 3 жыл бұрын

I would love to see an answer to this question. I am wondering the same thing, but have a UDM (not pro).

@bryanarnold8543 3 жыл бұрын

Tom - I'm thinking of switching a client from a Pfsense I setup to Untangle. I'm a novice with Pfsense and can't figure out why it's blocking VoIP endpoints (1 phone & 1 FAX ATA out of 12) or how to fix it. I of course googled it and see others have had this same issue BUT the fix looks overly complex unless you're into command line and know Pfsense very very well. Have you ever seen this issue with your clients?

@LAWRENCESYSTEMS 3 жыл бұрын

Nope, and we use sip with pfsense all the time

@bryanarnold8543 3 жыл бұрын

@@LAWRENCESYSTEMS Thank you for the reply 👍

@KeithHeinrich 3 жыл бұрын

Been a home user since about V7 on all sorts of hardware. I found an inexpensive 1RU small server to run it on in my rack and its been happy days hardware wise since then. It's set and forget and inexpensive to license for the home user. Compared to the current UniFi fad, its going to get the job done without the expense. And yeah I know some people like to fiddle and setup insanely complex home networks... more power to them. But for everyone else @ home, this will get the job done without fuss or considerable expense. If you cannot get untangle hardware where you live, download the software and buy a generic fanless mini PC off ebay. QOTOM is a brand often mentioned as a suitable host.

@pingpt 3 жыл бұрын

Hi Tom, can’t seem to find any review or recommendation regarding the integrations untangle offer on bitdefender, malwarebytes and webroot I’m a homepro license user but I have no idea which of the above should I subscribe and which products can be linked (and how that process works) Would be nice if you could do a video reviewing these things

@LAWRENCESYSTEMS 3 жыл бұрын

We don't use them do I don't plan on doing a video to cover it.

@pingpt 3 жыл бұрын

Fair enough, it’s just that I’ve been hearing lots of good things about webroot, I was really keen on hearing your thoughts on it. I’ll keep digging Thanks for replying and keep providing honest reviews, it’s a rare treat this days 💪

@marcesw35 3 жыл бұрын

how well does this integrate with the unifi network?

@LAWRENCESYSTEMS 3 жыл бұрын

No issues

@garethsnaim8174 3 жыл бұрын

Is it free anymore, all I can find is a 14 day trial?

@globaldisaster1988 3 жыл бұрын

thanks for the review. i like untangle. one of the reasons because it is based on linux, so better hardware/driver support and a working qemu-guest-agent (fsfreeze/fsthaw). but it is far from being reasonably priced for _startup_ businesses. big established companies can afford it, but they probably will go with some enterprise vendors as fortinet or cisco. there are so many expenses especially at begining. we went with opnsense for now. untangle is not fitting our budget, because we have a lot of vlans, testing containers and vms (for our software development) that we can't bypass the firewall rules so, they all count as devices. ofc. we keep monitoring the market of available firewalls and will see what future brings.

@jvierinen 3 жыл бұрын

Untangle home pro does not include the threat prevention app it is only in the complete version

@garethsnaim8174 3 жыл бұрын

I loved untangle, particularly the ability to set up different policies, so for instance at 9.00pm device with MAC address xxx disconnect from internet etc. Great for the kids. However as a home gamer I noted over a year that ad block stopped, virus blocker did not work etc and it turns out its because most traffic is now encrypted and the only way to make it work was DPI, which meant adding specific certs to each device or something. It was certainly not easy at all. In the end I went to unifi DM pro, thats a whole other crock, I miss untangle such a shame the modules all stopped working

@views40 3 жыл бұрын

Hey Gareth, this was helpful to read. Do you know if it's possible to have an Untangle firewall in front of the Udm Pro?

@garethsnaim8174 3 жыл бұрын

I am not sure why you would do this unless you need Access, in your case and assuming you have cameras just get the cloud key gen 2@@views40

@views40 3 жыл бұрын

@@garethsnaim8174 - I see. Thanks Gareth, that's very helpful.

@colt1596 3 жыл бұрын

I'd personally (as a long time watcher) always like to know best use cases over another product you use. For instance when Would you use untangle over pfsense. I know you have the 1year old video dedicated to this type of question also. But would be cool to hear a quick use case vs, on your reviews

@LAWRENCESYSTEMS 3 жыл бұрын

Customers that want in depth reporting, simple policy routing, web filtering, easy Active Directory integration with the firewall.

@colt1596 3 жыл бұрын

@@LAWRENCESYSTEMS understood. Thank you

@sturmbreakers7817 3 жыл бұрын

I use to use both. Pfsense for firewall and untangle for filtering and works well.

@nephets2878 3 жыл бұрын

You convinced me to use pfsense, now you are saying UNtangle

@TheRealAnthony_real 3 жыл бұрын

Hahaha .. don't take their word for it ;)

@jada1173 3 жыл бұрын

Yes, wtf.. we are confused now..

@nelsonmaranonjr.537 3 жыл бұрын

I'm just noticed on Tom's laptop that there's no pfsense logo anymore.🤔😂

@therealb888 3 жыл бұрын

Stop being subby and use your own mind 😂.

@therealb888 3 жыл бұрын

@@nelsonmaranonjr.537 Lol he probably had a rub with someone at netgate 😂

@cbremer83 3 жыл бұрын

Been toying with dumping of sense. Been looking at untangled or getting a Unifi UDM Pro. Not sure the direction I will go in the end.

@TheRealAnthony_real 3 жыл бұрын

Same here .. I'm with edge at the minute .. was using untangle however I've noticed a huge drop in download perhaps due to low processing power with all aps running .. I thought is defective and chucked the device in a drawer but thinking to pull it out and see if that was the culprit indeed

@views40 3 жыл бұрын

Hey Chad, I'm thinking something similar. Do you know if it's possible to have Untangle AND a UDM Pro?... Or would you just choose a UDM Pro?

@cbremer83 3 жыл бұрын

@@TheRealAnthony_real I have a pretty strong quad core Xeon in my pfsense box. I guess it is a tad old, Haswell generation I think. But should be more than enough for most any firewall used for home use. But part of me wants to go full Unifi.

@cbremer83 3 жыл бұрын

@@views40 I see no reason to run both UDM Pro and Untangle. You would be double NAT by having two firewalls. You can do it, but it would cause some headaches for some things. I know games for example can be a problem when double NAT. Not impossible to fix by any means, just added crap for no real gain.

@views40 3 жыл бұрын

@@cbremer83 - Thanks Chad!! Since I'm still on the beginner side, I'll stick with the UDM Pro since all other gear is Unifi. Thanks for your help :-)

@snowdemon14 3 жыл бұрын

I switched from pfsense to Untangle 6 months ago and haven't looked back. Should have made the switch a long time ago

@jlficken 3 жыл бұрын

I absolutely LOVE Tunnel VPN.

@eagleknight2701 3 жыл бұрын

I feel like I am going to make a full circle. Ran Untangle for awhile a few years back and then went to Unifi USG. Switched to UDM this year and haven't been too happy with traffic reporting and no SNMP support. Now I was looking to move to pfsense or opnsense, but maybe I should come back to Untangle. I just didn't like the yearly cost.

@views40 3 жыл бұрын

Hello, Do you have the UDM or the UDM Pro?

@eagleknight2701 3 жыл бұрын

@@views40 UDM

@views40 3 жыл бұрын

@@eagleknight2701 - Thanks!

@rxang9759 3 жыл бұрын

Untangle is the easiest to use and it comes with a beautiful ui. Fantastic for a non IT person like me. I love it and have been using it for 6 months.

@therealb888 3 жыл бұрын

@@Traumatree lol just like you are willing to pay to fix a light bulb coz u can't climb a ladder or pay for a program that you can code yourself or build your arduino irrigation controller or raspberrypi home automation. Everyone has their own field of expertise and may not have the time to learn another field. Stop acting like IT is the only field out there.

@n3m3f3 3 жыл бұрын

I would love to get your thoughts on Sophos XG.

@LAWRENCESYSTEMS 3 жыл бұрын

No thought as I don't use it

@abepeterson 3 жыл бұрын

It's garbage...untangle is 50 bucks for home for a year and a million times better

@n3m3f3 3 жыл бұрын

Abe Peterson really? I’m looking at both systems and Sophos XG seems more in line with a corporate firewall then Untangle. It’s object based and each firewall rule can be configured to use the packet inspection when needed. Untangle seems to have their configuration spread out all over the place, and requires policy’s to divide things up. I personally like all of these options within rules. It reminds me more of Cisco Firepower in that nature.

@KonstantinMoll 3 жыл бұрын

@@n3m3f3 Sophos UTM (and XG) is amazing. Especially for home users because it's free including (almost) all features. In my opinion it's a much better (more professional) solution than Untangle Home and again it's free for home use.

@breakingcustombc2925 3 жыл бұрын

@@KonstantinMoll Remember the free is only good for 50 internal IPs.

@SmedleyButler1 3 жыл бұрын

Is free untangle truly FOSS? I don't see it on fsf.org s approved list

@LAWRENCESYSTEMS 3 жыл бұрын

They don't list full distros or appliances, but it is open source.

@andibiront2316 3 жыл бұрын

Just migrated from my Ubiquiti EdgeRouter Lite (that couldn't handle QoS with my 500mbps fiber connection) to Untangle (with an i5-8500, 16GB DDR4, 256GB NVMe, kinda overkill I know). I like it, it works really well.

@maxbroomfield5392 3 жыл бұрын

For the price of an i5 8400 you could buy an EdgeRouter 4 for less money, (but admittedly less features and a less sexy dashboard)

@andibiront2316 3 жыл бұрын

@@maxbroomfield5392 Yeah, and would just use a couple of watts also. But Im now routing at 10gbps with that box. Very satisfied with it

@augurseer 3 жыл бұрын

A QOTOM running untangle and rebadged. Neat.

@chrismallia29 3 жыл бұрын

The application control really miss categorizes some apps, this created problems in bandwidth control, for example, we gave low priority to file transfer like one drive but untangle categorized one drive as only Microsoft, so it was giving it highest priority, same for we transfer it was giving it a high priority as it categorized it as Amazon. without SSL inspection most of its functions aren't so useful. and SSL inspection is another nightmare.

@LAWRENCESYSTEMS 3 жыл бұрын

yup, there is just not good way to do that.

@KeithHeinrich 3 жыл бұрын

SSL inspection is an issue of the modern age yet to be properly resolved. Have experience with Netronome/Bluecoat/Symantec/Broadcom devices and they definitely come with issues. Given how much traffic is now SSL, its a case of doing the best you can and dealing with the issues that arise as you find them. No system is substantially better than another in this respect.

@travisaugustine7264 3 жыл бұрын

Well until Untangle supports IPv6 through Spectrum (and numerous other providers) through prefix delegation (SLAAC, DHCP6, etc) I won't use it as cool looking as it is.

@Jinkle 11 ай бұрын

Those prices are crazy lol

@Hartley94 3 жыл бұрын

❤️️❤️️❤️️

@lukascpu 3 жыл бұрын

I was considering switch to Untangle Home from Unifi but well recent changes are really wierd - Home Basic = 50 devices limit - there was no limit at the time when you done this video? Home Plus = 100 $ extra for Wireguard and web cache ... I can buy 3 x RPi that can host Wireguard in network and do few other extra things at same time....

@LAWRENCESYSTEMS 3 жыл бұрын

They did recently change their licence www.untangle.com/solutions/untangle-at-home/

@lukascpu 3 жыл бұрын

@@LAWRENCESYSTEMS Do you know by any chance how those 50 devices in Home Basic works? As there was no limit before, now I need to count my devices? Or do I need to bypass the rest like IoT stuff? I've got medium size house and just by adding relays and few ESP32/ESP8266 boards I've got 30+ devices not to mention kids laptops/tablets/phones, guests, consoles ehh it's hard :-)

@quebirt 2 жыл бұрын

Lost me at "licensed per device" Nope. I found this because people mention it a lot as a direct competitor with pfsense. This definitely isn't a direct competitor. They overlap, but so does Palo Alto. Is there a direct competitor to pfsense that isn't just a fork with minor differences?

@matijasemenic3543 3 жыл бұрын

Using Untangle for over a year now, before pFsense.

@muhammadaamir566 3 жыл бұрын

Hardware or Just software?

@LAWRENCESYSTEMS 3 жыл бұрын

Both

@PowerUsr1 2 жыл бұрын

This is somewhat similar to Sensei but this is more polished

@AriDoucette 2 жыл бұрын

In the video he implies Untangle is what he's using at home. That's a significant endorsement.

@LAWRENCESYSTEMS 2 жыл бұрын

I go back and forth between Untangle and pfsense.

@jlficken 3 жыл бұрын

Also, after using Untangle with Policy Manager I will never use a firewall that doesn't support them.

@nabilel-saheli7339 2 жыл бұрын

Hello ! Please as you are a reseller, are licences less expensive if we buy it through you ? do you propose online training ? thanx !

@alonzosmith6189 3 жыл бұрын

I was an Untangle user for years at home , then I switch to all Unifi gear

@Trident_Euclid 3 жыл бұрын

Which one would you suggest for home users?

@davidg4512 3 жыл бұрын

If you didn't miss anything when switching to Unifi, then you probably should have not been using untangle in the first place.

@alonzosmith6189 3 жыл бұрын

@@davidg4512 I went with the Unifi ecosystem, switches, APs, etc. Made it simple for me to support my home network remotely.

@davidg4512 3 жыл бұрын

@@alonzosmith6189 I mean I get it that it's fun looking at your network remotely, but what do you have to manage? Unifi is a set it and forget it product line. I have an access point with a unifi controller for 3 devices, but I don't "manage it" remotely because there is literally no need. Do you have 50+ people at your house and you just watch the graphs all day? What do you exactly "manage" remotely?

@alonzosmith6189 3 жыл бұрын

@@davidg4512 my previous network was all fiber store switches (CISCO like). I have kids and wife at home. I had issues in the past that required me to be at home to resolve. I may go back to Untangle if Unifi does not allow a local account for the UDM-Pro. Only allowing a cloud account only is an issue for me.

@samadams4582 3 жыл бұрын

At 15:30 you exposed your public ip. Just letting you know!

@LAWRENCESYSTEMS 3 жыл бұрын

thanks, but that's why I do this with my home computer where I don't really care.;)

@chipped 2 жыл бұрын

The home version is overpriced IMO. Should be unlimited devices and feature limited only. Also the $150 USD price for UTM is ridiculous. Plus UTM’s don’t find anything, basically a URL filter from my experience. You’re better off using a good antivirus and updating all your devices which these days is mostly automated.

@RogueGamerPlays 3 жыл бұрын

H_stuff huh ... I wonder ...

@Alex-un5tl 2 жыл бұрын

it's probably a nice firewall solution, but the interfaces looks very dated

@j0hnny_R3db34rd 19 күн бұрын

Imagine not being able to spell Suricata right...

@DustinSCline 3 жыл бұрын

Untangle is fantastic except for their licensing structure and the way the implement firewall rules is the worst I have ever seen not to mention they don’t even have implicit deny rules.