Real-time fleet monitoring
Live health, CPU, memory, disk, temperature and uptime across every managed pfSense — one pane of glass, multi-tenant from the ground up.
Features
Everything you need to run a pfSense fleet
NetVallum brings monitoring, management and collective security for pfSense® CE and Plus together in one multi-tenant platform. From live health to VPN orchestration, from Shield threat protection to encrypted backups and recovery — here is the full feature set, grouped by what it does for you.
NetVallum Shield
Collective defence. Every firewall makes the network safer.
Shield turns your fleet into a shared immune system: a malicious source seen anywhere in the network helps protect everyone. Confirmed threats are blocked across the collective automatically — and the more firewalls take part, the stronger the shield.
- Crowdsourced intelligence Threats seen by one protect all — a real network effect.
- Confirmed, not noisy Only vetted threats are enforced, so legitimate traffic keeps flowing.
- Automatic enforcement Blocked at the firewall the moment it's confirmed.
- You stay in control Per-tier settings, exemptions and self-service whitelisting.
Fleet monitoring & health
Disk-space & SSD-life monitoring
Drive-fill alerts with growth drill-down, plus SSD wear tracking — so storage never fills up or wears out unnoticed.
WAN provider & outage detection
Record the provider per WAN and correlate outages across the fleet and geographically — spot a provider incident before the tickets arrive.
Reboot & availability tracking
Restart detection with a recovery countdown and notification, so an unexpected reboot is never a surprise.
Multi-tenant & white-label
Unlimited tenant tree
Distributors, partners and customers in one hierarchy, with strict data isolation and control at every tier.
White-label branding
Distributors and partners put their own brand on top — customers never see prices or tiers above them.
Granular per-user permissions
Per-user capability overrides on top of role defaults, so everyone gets exactly the access they need.
Standard-config templates
Baseline configuration per partner and customer — extend or replace defaults and roll them out with a clear diff.
Security & NetVallum Shield
NetVallum Shield
A collective, crowdsourced threat blocklist: a malicious source seen anywhere in the network helps protect everyone, with confirmed threats blocked automatically.
Shield Plus (add-on)
Optional DNS category content filtering — malware, adult, gambling and more — enforced locally on the firewall itself.
Managed TLS
Browser-trusted Let's Encrypt certificates issued and renewed automatically on a managed domain — no inbound ports, no DNS hassle. Or pin the firewall's own certificate.
VPN & remote access
- Multi-site VPN orchestration Pick the firewalls, choose WireGuard, IPsec or OpenVPN, and NetVallum builds the tunnels — with a free topology editor and per-tunnel strength insight.
- Remote access VPN for remote workers Road-warrior client VPN over OpenVPN or WireGuard via a guided wizard; each user gets a ready-made profile or QR code.
- User & session control Disconnect an active session, disable a user, and enforce logon hours — full control over who can connect and when.
- Remote-access session statistics Per session: who connected, when, for how long and how much data — for OpenVPN and WireGuard — with org-wide reporting over 3, 6 or 12 months.
- VPN tunnel monitoring LAN-to-LAN tunnel alarms and connection history, so a dropped site-to-site link is caught immediately.
Firewall management
Full configuration control
Firewall rules, NAT, DHCP/DNS, interfaces and services — managed remotely in a familiar pfSense-style interface.
Remote firmware upgrades
Upgrade pfSense from the portal with a live log, branch selection and cross-major safeguards.
Scheduled upgrades with pre-flight checks
Defer upgrades and tasks to a chosen moment, with pre-flight risk checks that catch problems before they run.
Boot-environment management
Activate, boot-once and snapshot boot environments, with a disk-space check — a clean fallback for every upgrade.
Firewall replacement & hardware swap
Swap or upgrade hardware with guided NIC-remapping and automatic rollback if anything goes wrong.
Fleet config search
Search the whole fleet for where an IP, network or alias name still appears — in rules, aliases, users and SSH keys — without loading the firewalls live.
Netgate support at a glance
Model, serial number, Netgate Device ID (NDI) and TAC support-contract status per firewall, with reminders before a paid contract expires.
Backups, offline & recovery
Encrypted config backups
Per-firewall configuration backups, encrypted at rest, with tamper-proof restore and a revision changelog — a bad change is never a disaster.
Offline config cache
An encrypted copy of each configuration stays readable when a firewall is unreachable, with a clear offline banner.
One-click reconnect & recovery
Restore the link to a firewall that dropped off after a reinstall or restore — keeping the same identity, settings and history.
Zero-touch onboarding
Enrol a new firewall with a one-time seed token — or fully zero-touch through an authorized distributor.
Alerting & SLA
Smart alerting
Per-tier and per-device alert policies for offline, CPU, memory, disk, temperature and link saturation — routed to the channels you choose.
Availability & SLA reporting
Uptime detail with a configurable SLA target and breach alerts to the right people — proof your fleet meets its promises.
Privacy-aware notifications
Alerts reach the firewall owner and their partner — never the tiers above them — with a notification hierarchy you control.
NOC & dashboards
NOC wall screen
A configurable /tv view for the network operations centre: every device at a glance, with map focus and live status — readable across the room.
Dynamic dashboard
Turn widgets on or off and reorder them, so each user sees the fleet the way they work.
Location map
See your whole fleet on a map, with status and outage overlays for fast situational awareness.
See it all on your own fleet.
Request a demo and we'll walk you through every feature that fits your setup.
Request a demo