NetVallum
pfSense monitoring & management

Monitor and manage every pfSense firewall — from one platform.

NetVallum is the central monitoring and management platform for pfSense® CE and Plus. MSPs, distributors and partners run their entire fleet from one multi-tenant console — with real-time monitoring, collective threat protection, managed TLS and deep configuration control. European by design, encrypted end to end.

Encrypted · Hosted in the EU · No direct access to your customers' data.

Key capabilities

Everything you need to run a firewall fleet

Purpose-built for pfSense, multi-tenant to the core, and safe by default.

Fleet monitoring

Real-time health, CPU, memory, disk, temperature and uptime across every managed pfSense — one pane of glass, multi-tenant from the ground up.

Multi-tenant & white-label

An unlimited tenant tree — distributors, partners and customers — with data isolation, per-tier control and your own branding on top.

Managed TLS

Browser-trusted Let's Encrypt certificates issued and renewed automatically on a managed domain — no inbound ports, no DNS hassle. Or pin the firewall's own certificate.

Smart alerting

Per-tier and per-device alert policies for offline, CPU, memory, disk, temperature and link saturation — routed to the channels you choose.

NOC wall screen

A configurable /tv view for the network operations centre: every device at a glance, with map focus and live status — readable across the room.

Encrypted config backups

Per-firewall configuration backups, encrypted at rest, with tamper-proof restore — so a bad change or a dead box is never a disaster.

NetVallum Shield

Collective defence. Every firewall makes the network safer.

Shield turns your fleet into a shared immune system: a malicious source seen anywhere in the network helps protect everyone. Confirmed threats are blocked across the collective automatically — and the more firewalls take part, the stronger the shield.

  • Crowdsourced intelligence Threats seen by one protect all — a real network effect.
  • Confirmed, not noisy Only vetted threats are enforced, so legitimate traffic keeps flowing.
  • Automatic enforcement Blocked at the firewall the moment it's confirmed.
  • You stay in control Per-tier settings, exemptions and self-service whitelisting.
VPN orchestration

Design multi-site VPNs visually — and let NetVallum build them.

Pick the firewalls, choose WireGuard, IPsec or OpenVPN, and NetVallum orchestrates the tunnels for you — including certificate-based authentication through a guided CSR flow. With the free topology editor you can draw any multi-firewall layout: every link is its own tunnel, with a strength badge and concrete upgrade suggestions. Always within the tenant and partner boundaries you manage.

  • Guided wizard WireGuard, IPsec or OpenVPN in a few steps, with certificate authentication.
  • Free topology editor Draw any multi-firewall layout; each link is its own point-to-point tunnel.
  • Strength insight A per-tunnel strength badge and one-click upgrade suggestions.
  • Built for MSPs Respects tenant and partner boundaries while you orchestrate across the fleet.
And more

Additional features

  • VPN tunnel monitoring & session history
  • Remote firmware upgrades with a live log
  • Boot-environment management (activate, boot-once, snapshot)
  • Firewall rules, NAT, DHCP/DNS, interfaces & services
  • Granular per-user permissions
  • White-label for distributors and partners
  • Location map of your fleet
  • Zero-touch onboarding with a seed token
  • Automated firewall replacement & hardware swap (NIC-remap, safe rollback)
  • Availability & SLA reporting with breach alerts
  • Disk-space & SSD-life monitoring
  • Standard-config templates per partner and customer
  • WAN provider & outage detection across the fleet
  • Scheduled upgrades and tasks with pre-flight checks
Getting started

Two ways to onboard a pfSense firewall

Whether you buy a new firewall or already run pfSense, connecting it to NetVallum takes minutes.

  • AZero-touch: buy from an authorized distributor and it enrols itself.
  • BSelf-connect: install the package on your own pfSense and pair with a seed token.
Work with us

A model for every tier

Distributor

Offer NetVallum to your own partners and customers, white-labelled under your brand. Verified by us before activation.

Partner (reseller)

Resell and manage firewalls for your customers, with your own tenants, pricing and branding on top.

Direct customer

Manage your own pfSense fleet directly on the platform, with the full feature set from day one.

See NetVallum on your own fleet.

Request a demo and we'll show you around.

Request a demo