Third Party Firewall for GCP

PiotrT · 08-25-2022 06:22 AM

Hi,

I’m looking for cost-effective firewall for GCP. I know I can use Checkpoint, Cisco or other but they are quite expensive. In Azure I have PFSense but it is not supported on GCP. Could somebody advise me please?

SebastianG

What's wrong with GCP's own Firewall? I mean why would you add another firewall on top of an existing firewall?

Never tried pfSense on GCP but I see no reason why that wouldn't work... unless I am missing something. I've just Google'd "pfsense on GCP" and I found a few tutorials.

PiotrT

Hi Sebastina,

There is nothing wrong with GCP firewall if you need a really basic one. However, pfSense can do:

1. VPN client

2. VPN site to site, and you don’t have to pay for each one separately

3. Reverse Proxy

4. Geo security

5. IPS

6. and way more with everything in one appliance

I realize, I can install it on GCP, but this is not a point. When I buy pfSense from Azure marketplace:

https://azuremarketplace.microsoft.com/en-us/marketplace/apps/netgate.netgate-pfsense-plus-fw-vpn-ro...

I pay 100-200 (or more) a month for licenses, but I’m getting support, and I’m sure the software is tested on Azure, so it will work correctly in production with updates. I’m looking for something similar in GCP and can’t find anything at reasonable price (unless I missed something). Is really GCP so unpopular?

SebastianG

Indeed if you want IPSec, IPS/IDS etc. / that level of granularity and control then you'll need something like pfSense, ASA etc..

I used to bother in the past with such solutions but I never used it within GCP to be fair. For most of the GCP projects / clients I'm using Twingate, I don't really bother with managing all that - I must admit it can be fun but yeah.

If that ain't on MarketPlace maybe that'll be a question for pfSense itself.

PiotrT

The problem is not only in pfSense, I gave this as an example. It applies also to openSense, Untangle, IPFire, SonicWall and many more, they are available in Azure and AWS but not GCP. This makes me wonder, that is wrong with Google platform?