| Firewall | Yes, with stateful packet inspection and zone-based firewalling | Yes, with stateful packet inspection, aliasing, and virtual IPs |
| Routing | Yes, with dynamic routing protocols (OSPF, BGP, RIP) | Yes, with dynamic routing protocols (OSPF, BGP, RIP) |
| VPN | Yes, with IPsec, OpenVPN, L2TP, PPTP, and GRE support | Yes, with IPsec, OpenVPN, WireGuard, L2TP, and PPTP support |
| NAT | Yes, with Port Forwarding, 1:1 NAT, and Outbound NAT | Yes, with Port Forwarding, 1:1 NAT, and Outbound NAT |
| Intrusion Detection/Prevention | Yes, with Snort and Suricata integration | Yes, with Suricata integration |
| Load Balancing | Yes, with support for multiple algorithms (round-robin, least connections, etc.) | Yes, with support for multiple algorithms (round-robin, least connections, etc.) |
| DNS/DHCP Server | Yes, with DNS Forwarder/Resolver and DHCP Server/Relay | Yes, with DNS Forwarder/Resolver and DHCP Server/Relay |
| Web Filtering | Yes, with Squid Proxy integration | Yes, with Squid Proxy integration |
| High Availability | Yes, with CARP (requires paid version) | Yes, with CARP |
| Traffic Shaping | Yes, with support for multiple queuing disciplines (HFSC, CBQ, etc.) (requires paid version) | Yes, with support for multiple queuing disciplines (HFSC, CBQ, etc.) |
| Captive Portal | Yes, with support for RADIUS authentication (requires paid version) | Yes, with support for RADIUS authentication |
