NetVallum vs Netgate Nexus: an MSP platform vs the vendor's own tool
Netgate Nexus is Netgate's official multi-instance management for pfSense Plus: manage many Plus instances from one console over a zero-trust mesh VPN, with remote console/GUI access and boot-configuration management. It's tightly integrated with pfSense Plus — and that is also its main constraint.
NetVallum takes a different starting point: the MSP. It manages pfSense CE and Plus, on any hardware, in a true multitenant, white-label hierarchy (distributor → partner → customer), and adds collective threat protection, managed TLS and fleet-wide alerting on top.
Where Netgate Nexus is strong
Being honest about the first-party option:
- First-party integration with pfSense Plus, from the vendor itself.
- Zero-trust mesh VPN between controller and instances; your data stays on your own infrastructure.
- Boot-configuration selection and updates, remote console/GUI access.
Where NetVallum is different
| Netgate Nexus | NetVallum | |
|---|---|---|
| pfSense Plus support | ✓ (25.11+ required) | ✓ |
| pfSense CE support | — | ✓ |
| Third-party / non-Netgate hardware | — (Plus estate) | ✓ (any pfSense CE/Plus) |
| Multi-instance, single pane of glass | ✓ | ✓ |
| Remote console / GUI access | ✓ | GUI + full REST management |
| Boot-environment management | ✓ | ✓ |
| Firmware upgrades (incl. scheduled) | Updates | ✓ + scheduled with pre-flight |
| Multitenant white-label (distributor / partner / customer) | — (single-org, many seats) | ✓ |
| Collective threat protection (NetVallum Shield) | — | ✓ |
| Managed TLS (browser-trusted Let's Encrypt) | — | ✓ |
| Alert policy per tier/device + routing | — | ✓ |
| NOC wall-display | — | ✓ |
| Encrypted, tamper-proof config backups + offline cache | — | ✓ |
| Zero-touch / no-touch onboarding | Remote config after first connect | ✓ Seed-token |
| Standard-config templates per partner/customer | — | ✓ |
| European, hardware-vendor independent | — | ✓ |
Feature comparison based on publicly documented Netgate Nexus capabilities, verified August 2026. We only list differences we can verify — and we never compare on price.
The short version
Nexus is a strong first-party tool for managing a single organisation's pfSense Plus instances. NetVallum is a multitenant MSP platform that works across both pfSense CE and Plus, on any hardware, and lets distributors and partners resell under their own brand — with collective threat protection, managed TLS and fleet-wide alerting the vendor tool doesn't provide.